Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa
File:                     939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa (raw, json)
Hash identifier:          p0QAG3XrKCn1ZY9YNLKYg3Gpva8gl1B8whpKhPlc7tM=
Subject key identifier:   EF:8F:6D:2E:F8:24:FD:57:B3:C2:4E:E5:8F:90:D7:00:AE:62:B9:0F
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584E36018F277A7DED2EF022C780
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     14114
IP address blocks:        169.145.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:8f:27:7a:7d:ed:2e:f0:22:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=c2518b96-7435-47c0-8400-989f1ba543bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:3e:aa:1f:c0:e9:e0:fc:90:14:8f:1d:f8:
                    3c:15:90:ee:3e:37:62:a3:c8:8b:ba:76:7f:c0:07:
                    0b:b7:d6:76:15:2d:3f:05:f0:ab:05:2c:64:d3:5d:
                    38:44:0f:f6:1a:93:2a:19:20:9e:ee:df:81:83:f6:
                    d5:04:bf:b8:af:ce:36:59:d1:4f:c3:f5:43:1e:b0:
                    6c:ec:8a:68:00:06:e9:9d:fd:6d:f2:3e:3d:44:0c:
                    c4:76:84:df:da:37:40:65:87:3d:24:3d:7c:f0:a6:
                    f6:6e:5b:e4:ab:40:7d:e0:f5:76:64:0c:9e:23:04:
                    74:41:46:52:3f:0e:9f:5f:1a:26:c8:2b:52:d2:23:
                    40:d9:5e:af:9a:0f:c7:01:ab:b6:78:2e:a6:e6:74:
                    9d:ae:3f:8f:f3:4a:ca:70:20:9f:26:88:22:af:8f:
                    23:02:60:2d:66:50:4b:ae:76:3e:1f:ea:2f:25:a2:
                    03:07:4b:e5:15:07:3e:c9:f6:8c:fd:04:92:7c:a9:
                    c6:80:0d:2b:38:fc:1b:35:26:c8:bb:8d:d1:ea:90:
                    ec:40:ba:c5:b0:57:71:71:c0:cb:00:92:ac:61:31:
                    42:cc:ed:95:29:ef:87:e9:c5:82:15:2e:a7:a4:dd:
                    8a:a8:7c:22:e6:1f:00:9d:40:90:42:7f:b2:21:dc:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:6D:2E:F8:24:FD:57:B3:C2:4E:E5:8F:90:D7:00:AE:62:B9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:52:39:ff:ec:4c:1a:f3:02:52:71:76:92:8c:26:0e:30:e9:
         1c:b4:60:95:3e:5b:b0:22:03:f9:58:e4:ee:7e:a9:bd:c4:2d:
         af:3d:fd:1c:9a:38:f8:1a:86:d4:43:ae:ca:1b:4b:a0:c5:6d:
         04:6a:45:0d:f2:4e:6f:64:98:bb:f4:c7:43:e3:ce:f9:30:49:
         bd:13:c2:83:9e:f5:51:00:99:d1:0f:34:53:37:d9:7f:a2:c1:
         52:15:50:54:7d:2a:80:4f:08:a4:d7:ae:d2:cf:55:c2:5f:41:
         c7:71:a5:7f:07:55:af:cc:ed:1d:1b:de:f5:48:80:70:bf:0b:
         3c:2a:44:99:56:48:d3:b3:a4:2a:1d:fa:79:5c:ad:49:37:00:
         6b:54:b2:f9:08:4e:0d:42:f6:a9:d7:6d:e1:df:01:92:97:c0:
         03:ef:ad:28:ff:fb:fa:d5:7c:1e:1e:9c:75:ba:ce:e8:be:d7:
         12:23:ad:89:45:60:94:99:1d:c8:93:eb:db:c1:45:a5:4d:da:
         78:bc:1d:89:13:50:a0:70:ab:81:15:52:4d:27:b5:5e:7e:fc:
         87:cc:75:05:ef:96:32:ff:6f:99:7c:37:a5:fb:f3:c3:00:58:
         64:62:f2:1b:49:fb:75:42:f5:89:6d:68:b1:f6:13:ab:a2:5d:
         5e:bd:41:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AY8nen3tLvAix4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
YzI1MThiOTYtNzQzNS00N2MwLTg0MDAtOTg5ZjFiYTU0M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJs+qh/A6eD8kBSPHfg8FZDuPjdio8iLunZ/
wAcLt9Z2FS0/BfCrBSxk0104RA/2GpMqGSCe7t+Bg/bVBL+4r842WdFPw/VDHrBs
7IpoAAbpnf1t8j49RAzEdoTf2jdAZYc9JD188Kb2blvkq0B94PV2ZAyeIwR0QUZS
Pw6fXxomyCtS0iNA2V6vmg/HAau2eC6m5nSdrj+P80rKcCCfJogir48jAmAtZlBL
rnY+H+ovJaIDB0vlFQc+yfaM/QSSfKnGgA0rOPwbNSbIu43R6pDsQLrFsFdxccDL
AJKsYTFCzO2VKe+H6cWCFS6npN2KqHwi5h8AnUCQQn+yIdyt/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+PbS74JP1Xs8JO5Y+Q1wCuYrkPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvOTM5ZWU4ZmYtYTQwNi0z
NThlLWJlZTktYzBiMGY3ZDZjNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqZEBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJSOf/sTBrzAlJxdpKMJg4w6Ry0YJU+W7AiA/lY5O5+qb3ELa89/Rya
OPgahtRDrsobS6DFbQRqRQ3yTm9kmLv0x0PjzvkwSb0TwoOe9VEAmdEPNFM32X+i
wVIVUFR9KoBPCKTXrtLPVcJfQcdxpX8HVa/M7R0b3vVIgHC/CzwqRJlWSNOzpCod
+nlcrUk3AGtUsvkITg1C9qnXbeHfAZKXwAPvrSj/+/rVfB4enHW6zui+1xIjrYlF
YJSZHciT69vBRaVN2ni8HYkTUKBwq4EVUk0ntV5+/IfMdQXvljL/b5l8N6X788MA
WGRi8htJ+3VC9YltaLH2E6uiXV69QeU=
-----END CERTIFICATE-----
Generated at Thu Jun 18 20:21:20 2026 by rpki-client