Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
File:                     a6e39eee-173b-35b9-ac53-2ff67455d848.roa (raw, json)
Hash identifier:          s9XJj7c3TgivYVMHoyy8sV3cVLEq6OiusjctGT8MMYI=
Subject key identifier:   1D:C7:86:41:93:4B:93:C8:2D:4F:75:E4:A8:46:8F:47:BC:E8:22:3A
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F4328584D09126872CAE17B0B042F4400
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     396871
IP address blocks:        137.83.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:68:72:ca:e1:7b:0b:04:2f:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=3d8ba972-4161-41d9-a22a-ea3745d126a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:81:38:d5:1d:a3:a8:d9:a9:5d:d4:03:50:
                    d1:9a:d5:61:60:52:dd:e1:ba:e3:96:ae:74:e2:7c:
                    d3:e8:df:4f:1c:0a:97:64:ee:58:8c:db:f1:20:77:
                    6d:e3:18:7a:82:de:2a:26:f3:2c:f5:ed:c8:31:74:
                    f0:13:01:77:c5:a5:60:8d:b8:16:47:5f:68:d4:a8:
                    2b:97:f3:8a:6c:6a:d3:d1:56:21:b7:a0:20:c1:95:
                    19:1c:b7:68:a1:20:95:d7:d8:a8:a1:cc:f5:ee:ea:
                    4e:e6:67:e8:f7:b8:dd:6e:ba:3e:c7:b7:11:2e:62:
                    ce:65:18:a8:cc:c7:bc:fb:24:3a:f3:e1:1c:67:38:
                    7c:36:45:a5:61:05:e6:7a:69:a0:1d:bd:e2:e6:e2:
                    15:df:0a:bb:61:3a:42:84:86:ba:bb:7a:e6:0d:4b:
                    48:8d:be:1c:38:06:b8:4f:7e:1f:c8:f9:f2:a3:6b:
                    cf:64:fc:14:e9:9e:9e:26:e9:07:69:9e:0d:91:0b:
                    c0:cb:60:93:71:4b:88:5b:13:0c:13:e2:9b:fe:e4:
                    62:30:7a:a7:7e:68:3d:f7:50:cc:b9:3e:a8:72:ed:
                    bf:03:08:11:89:6c:75:47:d4:fc:d1:e8:d6:29:6c:
                    09:50:d9:fc:27:87:36:d2:6b:65:9d:30:89:6e:b1:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:86:41:93:4B:93:C8:2D:4F:75:E4:A8:46:8F:47:BC:E8:22:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:33:c4:dd:cf:c0:e0:01:67:a5:b4:86:16:4e:ee:7d:fe:a6:
         2e:c1:0c:58:f9:7c:9a:7d:32:06:8d:e9:c4:82:1b:f6:74:77:
         1c:9a:df:14:f2:97:51:ba:62:fc:e2:3a:c6:f9:be:0e:61:c7:
         e7:fb:68:15:0e:d2:97:76:54:95:0a:64:fd:8d:41:bb:04:84:
         37:57:c3:90:5c:1a:cc:cd:d0:67:a1:8f:04:ae:73:58:fb:0d:
         96:48:1e:25:16:d8:60:08:26:00:7f:45:4c:45:2c:87:41:13:
         89:11:d0:51:91:01:f4:35:de:bd:5d:93:cf:02:9f:40:fe:db:
         51:8a:ca:68:74:f7:65:53:24:b7:3d:66:a2:56:42:c3:c4:9e:
         25:67:7b:70:de:17:fe:d5:56:29:2d:a7:3a:72:c4:36:31:1c:
         8d:dc:ea:f3:d2:1b:5b:23:27:d2:48:14:05:07:43:98:85:d9:
         62:40:80:48:22:c3:6c:c7:3d:4c:52:09:5d:e3:ec:a1:d1:b3:
         bc:12:90:01:fe:e5:de:c5:0c:2b:da:27:d2:39:7b:bf:3a:45:
         e7:c1:21:41:b2:b1:05:15:22:d9:a4:ab:77:f2:7c:d0:29:e7:
         44:d4:25:bc:35:11:10:35:48:c1:ef:19:82:48:9c:df:6c:ae:
         6c:7b:16:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmhyyuF7CwQvRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1
MWVjMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
M2Q4YmE5NzItNDE2MS00MWQ5LWEyMmEtZWEzNzQ1ZDEyNmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXuBONUdo6jZqV3UA1DRmtVhYFLd4brjlq50
4nzT6N9PHAqXZO5YjNvxIHdt4xh6gt4qJvMs9e3IMXTwEwF3xaVgjbgWR19o1Kgr
l/OKbGrT0VYht6AgwZUZHLdooSCV19ioocz17upO5mfo97jdbro+x7cRLmLOZRio
zMe8+yQ68+EcZzh8NkWlYQXmemmgHb3i5uIV3wq7YTpChIa6u3rmDUtIjb4cOAa4
T34fyPnyo2vPZPwU6Z6eJukHaZ4NkQvAy2CTcUuIWxMME+Kb/uRiMHqnfmg991DM
uT6ocu2/AwgRiWx1R9T80ejWKWwJUNn8J4c20mtlnTCJbrEkMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3HhkGTS5PILU915KhGj0e86CI6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl
Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvYTZlMzllZWUtMTczYi0z
NWI5LWFjNTMtMmZmNjc0NTVkODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2
MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4
NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3
MmRlODUxZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiVMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEzxN3PwOABZ6W0hhZO7n3+pi7BDFj5fJp9MgaN6cSCG/Z0dxya3xTy
l1G6YvziOsb5vg5hx+f7aBUO0pd2VJUKZP2NQbsEhDdXw5BcGszN0GehjwSuc1j7
DZZIHiUW2GAIJgB/RUxFLIdBE4kR0FGRAfQ13r1dk88Cn0D+21GKymh092VTJLc9
ZqJWQsPEniVne3DeF/7VViktpzpyxDYxHI3c6vPSG1sjJ9JIFAUHQ5iF2WJAgEgi
w2zHPUxSCV3j7KHRs7wSkAH+5d7FDCvaJ9I5e786RefBIUGysQUVItmkq3fyfNAp
50TUJbw1ERA1SMHvGYJInN9srmx7FtA=
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:17 2026 by rpki-client