Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa
File:                     f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa (raw, json)
Hash identifier:          RuSdl5oxq+zF4xT9OscngZNgHSIwC7ks/rGM2o37+Iw=
Subject key identifier:   0E:C5:38:DF:2C:EF:69:81:01:B4:35:BF:88:E5:DA:D9:3E:31:52:49
Certificate issuer:       /CN=2aebbca8-597b-4522-9ea6-9c6cdcbcb889
Certificate serial:       010D0C9F4328584E3A3CC3D4A669AEE373E94E80
Authority key identifier: 36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa
Signing time:             Fri 19 Jun 2026 21:27:50 +0000
ROA not before:           Fri 19 Jun 2026 21:27:50 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     3128
IP address blocks:        131.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:3c:c3:d4:a6:69:ae:e3:73:e9:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aebbca8-597b-4522-9ea6-9c6cdcbcb889
        Validity
            Not Before: Jun 19 21:27:50 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=da542e24-52e1-4ff1-ab43-a9b1c8a08ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:c4:29:a1:42:75:40:8d:48:a9:26:70:15:
                    ec:26:87:0a:df:70:fb:2c:0e:25:45:b2:31:8c:87:
                    da:5e:fd:78:ec:1b:7d:ce:b3:97:64:7b:17:74:7b:
                    53:7f:ed:a5:00:04:e4:d8:d8:f1:76:5a:6b:b4:ae:
                    5b:27:b8:4d:ed:74:3a:d5:03:a0:4f:67:91:65:88:
                    2a:1a:bc:be:c9:00:55:58:8f:c3:b9:b4:a8:54:46:
                    f5:d1:96:54:d5:e1:41:7a:25:97:0e:e4:ac:5b:0b:
                    c4:8d:70:6e:9d:08:14:ed:3e:28:3c:64:03:bc:f2:
                    96:57:63:d5:94:81:b3:bd:2d:b0:80:d6:87:36:03:
                    8e:e6:99:dc:c0:e3:27:c9:64:20:2f:d1:83:cb:6c:
                    d1:01:8b:35:60:e3:2d:ef:3a:e7:05:55:f4:2a:65:
                    5b:39:c1:bd:f5:c6:bb:73:51:e7:5b:51:b2:22:0c:
                    2a:b2:4b:b1:bd:2e:91:21:63:3f:cb:7d:7d:65:2a:
                    1f:ad:92:49:9e:38:d4:b2:77:19:01:ec:2f:45:d9:
                    8d:fc:9d:c8:2e:0e:cb:4b:c9:12:0c:42:35:92:91:
                    1d:dd:69:36:ba:87:1d:2b:ed:09:49:4d:72:94:ea:
                    53:7a:61:da:e6:c3:f9:5d:8c:14:e5:34:30:74:5a:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:38:DF:2C:EF:69:81:01:B4:35:BF:88:E5:DA:D9:3E:31:52:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.crl

            X509v3 Authority Key Identifier:
                keyid:36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:4f:bf:4c:26:4b:54:dc:43:85:1e:ab:d2:6c:a9:ed:83:
         f3:63:b6:94:76:06:6f:d3:d5:d1:00:09:e3:3d:ca:8c:aa:e2:
         f0:76:09:12:25:09:74:fa:bf:41:46:79:a6:d1:04:f0:ce:46:
         12:85:c2:83:63:65:d2:3a:c9:d0:68:fd:0b:21:d8:78:4b:3b:
         f5:30:a2:f3:fb:80:df:36:9e:62:ea:a9:0a:af:dc:30:8e:01:
         7f:63:46:ec:c4:d4:3d:a4:5e:53:1e:54:3c:11:4c:6c:be:90:
         80:9d:93:06:78:52:c7:ca:b6:9f:2d:3d:7b:f6:64:57:47:68:
         49:04:89:df:a1:b9:2d:1e:39:b5:80:25:f8:69:f9:ec:6c:fb:
         71:b7:3e:ad:67:c6:c6:e0:55:aa:14:9a:98:5a:71:81:1b:12:
         7d:ca:e0:ab:6f:9b:c3:f9:d7:57:5a:93:69:67:9d:16:0a:9b:
         ae:84:e0:62:0e:e2:d8:c3:5f:d5:2a:a3:22:2a:ee:0f:3e:27:
         91:0e:a2:5e:e0:27:db:d6:70:2f:ff:3c:2a:b3:ff:53:7b:6f:
         af:90:98:e5:d7:11:35:a9:b1:75:bc:fe:6f:f1:c9:c1:f0:ec:
         72:2b:94:8d:a1:2c:c9:33:3a:fd:c9:b9:c9:e6:85:5c:8b:bd:
         01:34:5e:d8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE46PMPUpmmu43PpToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFlYmJjYTgtNTk3Yi00NTIyLTllYTYtOWM2Y2RjYmNi
ODg5MB4XDTI2MDYxOTIxMjc1MFoXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk
ZGE1NDJlMjQtNTJlMS00ZmYxLWFiNDMtYTliMWM4YTA4YWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbfEKaFCdUCNSKkmcBXsJocK33D7LA4lRbIx
jIfaXv147Bt9zrOXZHsXdHtTf+2lAATk2NjxdlprtK5bJ7hN7XQ61QOgT2eRZYgq
Gry+yQBVWI/DubSoVEb10ZZU1eFBeiWXDuSsWwvEjXBunQgU7T4oPGQDvPKWV2PV
lIGzvS2wgNaHNgOO5pncwOMnyWQgL9GDy2zRAYs1YOMt7zrnBVX0KmVbOcG99ca7
c1HnW1GyIgwqskuxvS6RIWM/y319ZSofrZJJnjjUsncZAewvRdmN/J3ILg7LS8kS
DEI1kpEd3Wk2uocdK+0JSU1ylOpTemHa5sP5XYwU5TQwdFry3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA7FON8s72mBAbQ1v4jl2tk+MVJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYWVi
YmNhOC01OTdiLTQ1MjItOWVhNi05YzZjZGNiY2I4ODkvZjdiYjUzYzItNDBiOC0z
NTRiLTg1ZTYtZmY1ZTFjNTFiYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmFlYmJjYTgtNTk3Yi00NTIyLTll
YTYtOWM2Y2RjYmNiODg5LzJhZWJiY2E4LTU5N2ItNDUyMi05ZWE2LTljNmNkY2Jj
Yjg4OS5jcmwwHwYDVR0jBBgwFoAUNsVHQ9kvau5pO7sh8KCW3V8wb3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yYWViYmNhOC01OTdiLTQ1MjItOWVhNi05YzZj
ZGNiY2I4ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg9IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAm3ZPv0wmS1TcQ4Ueq9Jsqe2D82O2lHYGb9PV0QAJ4z3KjKri8HYJEiUJ
dPq/QUZ5ptEE8M5GEoXCg2Nl0jrJ0Gj9CyHYeEs79TCi8/uA3zaeYuqpCq/cMI4B
f2NG7MTUPaReUx5UPBFMbL6QgJ2TBnhSx8q2ny09e/ZkV0doSQSJ36G5LR45tYAl
+Gn57Gz7cbc+rWfGxuBVqhSamFpxgRsSfcrgq2+bw/nXV1qTaWedFgqbroTgYg7i
2MNf1SqjIiruDz4nkQ6iXuAn29ZwL/88KrP/U3tvr5CY5dcRNamxdbz+b/HJwfDs
ciuUjaEsyTM6/cm5yeaFXIu9ATRe2A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 09:26:54 2026 by rpki-client