Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
File:                     8aef21de-52d8-31f7-944e-903c3477d4d6.roa (raw, json)
Hash identifier:          9Y2EyidVjLZGKgZ0xwrQ/YsBAQBmwhtRkxAza/pxAM8=
Subject key identifier:   C3:07:7F:30:E6:C4:79:85:41:32:D0:C9:A7:BF:FF:0B:EE:00:FD:5D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D7B6A85509E955FF7429175C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     3131
IP address blocks:        64.184.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:85:50:9e:95:5f:f7:42:91:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=289efb8a-df45-457c-8e10-aca3dee6534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:4f:25:f2:7f:51:13:2b:08:8b:82:fd:85:
                    8a:81:6c:4e:d2:36:01:d7:d5:d4:b3:c5:a8:93:c7:
                    97:c4:5b:3d:d3:79:57:4e:9f:8d:c4:dc:83:ac:5f:
                    62:e9:1c:b6:19:1f:95:71:01:cf:53:56:96:d9:16:
                    4d:3a:55:69:5a:ac:29:e0:7e:64:f3:00:29:75:5a:
                    a4:19:f2:97:42:a0:bd:34:d7:2d:b3:c5:1e:e3:30:
                    f9:b4:0a:a1:15:90:99:80:8a:74:1e:8e:b2:5e:b7:
                    22:42:60:44:bc:a1:4d:e7:64:75:c8:62:e4:8d:20:
                    4a:75:f6:f7:78:be:0b:9d:1d:6c:21:59:1c:42:d3:
                    4d:90:3e:17:4a:79:fa:be:bb:39:1a:e3:44:b6:d3:
                    ef:0c:00:85:84:f0:7d:3f:a1:56:a6:99:5a:25:38:
                    6a:fa:76:3b:b9:5e:d2:53:86:ad:82:6d:96:13:e7:
                    fd:3f:01:5b:2c:78:1a:4c:1c:1c:78:f8:26:9b:d1:
                    63:2b:9b:71:cc:de:8b:0a:73:eb:53:39:b1:8e:d4:
                    60:74:75:cd:65:89:0e:2e:f7:66:93:1b:13:16:ea:
                    2b:cb:3c:00:8a:15:02:98:49:c6:e3:61:0d:d8:45:
                    2b:89:9f:0e:ee:d9:3e:33:82:12:a4:e5:32:ee:f2:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:07:7F:30:E6:C4:79:85:41:32:D0:C9:A7:BF:FF:0B:EE:00:FD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:54:e7:9c:ea:4b:a1:1a:d5:92:80:18:04:6b:1a:a5:09:7d:
         92:4a:54:e3:be:05:69:98:82:51:2b:62:82:4e:eb:68:26:91:
         6e:7e:04:59:0f:3f:6b:e9:c5:32:64:b7:a0:bb:4e:dd:ba:a3:
         29:71:c2:d0:ba:2e:75:b7:10:f3:19:9a:17:1c:1d:bc:ce:1d:
         b6:63:d7:a8:85:52:d6:e9:be:d7:3d:b2:ab:c6:70:b9:bb:8a:
         0d:e9:91:8e:cc:b4:28:7a:57:17:63:61:0d:8c:3a:8b:2a:15:
         7a:42:ba:c5:be:3f:1d:48:f6:36:8f:df:a2:c4:e5:25:08:06:
         dd:d4:a3:bb:78:9c:81:dc:c6:9b:5f:b9:ff:6b:9e:76:34:a3:
         a5:47:36:a4:4c:95:8e:6c:0f:52:55:2a:fa:5f:bf:f3:d7:a7:
         68:24:bc:c1:ba:c0:8e:49:86:92:2d:ce:7c:0d:e2:a3:56:3f:
         63:c4:c5:42:7c:c5:4c:43:ea:48:60:70:3e:16:e2:2b:44:de:
         bd:39:57:04:53:1c:c5:40:c2:e9:29:8f:c3:30:c0:3c:98:63:
         c5:cc:89:85:fb:d7:09:f2:9e:fa:24:26:66:8d:14:c6:3a:85:
         2e:1f:74:99:33:1f:f3:2b:b3:af:f6:53:1b:af:12:4c:a6:2e:
         b4:b2:c8:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoVQnpVf90KRdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
Mjg5ZWZiOGEtZGY0NS00NTdjLThlMTAtYWNhM2RlZTY1MzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgahPJfJ/URMrCIuC/YWKgWxO0jYB19XUs8Wo
k8eXxFs903lXTp+NxNyDrF9i6Ry2GR+VcQHPU1aW2RZNOlVpWqwp4H5k8wApdVqk
GfKXQqC9NNcts8Ue4zD5tAqhFZCZgIp0Ho6yXrciQmBEvKFN52R1yGLkjSBKdfb3
eL4LnR1sIVkcQtNNkD4XSnn6vrs5GuNEttPvDACFhPB9P6FWpplaJThq+nY7uV7S
U4atgm2WE+f9PwFbLHgaTBwcePgmm9FjK5txzN6LCnPrUzmxjtRgdHXNZYkOLvdm
kxsTFuoryzwAihUCmEnG42EN2EUriZ8O7tk+M4ISpOUy7vLomQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMHfzDmxHmFQTLQyae//wvuAP1dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOGFlZjIxZGUtNTJkOC0z
MWY3LTk0NGUtOTAzYzM0NzdkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLhQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFU55zqS6Ea1ZKAGARrGqUJfZJKVOO+BWmYglErYoJO62gmkW5+BFkP
P2vpxTJkt6C7Tt26oylxwtC6LnW3EPMZmhccHbzOHbZj16iFUtbpvtc9sqvGcLm7
ig3pkY7MtCh6VxdjYQ2MOosqFXpCusW+Px1I9jaP36LE5SUIBt3Uo7t4nIHcxptf
uf9rnnY0o6VHNqRMlY5sD1JVKvpfv/PXp2gkvMG6wI5JhpItznwN4qNWP2PExUJ8
xUxD6khgcD4W4itE3r05VwRTHMVAwukpj8MwwDyYY8XMiYX71wnynvokJmaNFMY6
hS4fdJkzH/Mrs6/2UxuvEkymLrSyyDQ=
-----END CERTIFICATE-----
Generated at Mon Apr 13 14:52:09 2026 by rpki-client