Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa
File:                     de83aa8f-9e56-370e-a6a5-a26888403d4b.roa (raw, json)
Hash identifier:          87q74n6yfr6gdOa+TLQ3lx4xpXzIk336zDZH9nMr89E=
Subject key identifier:   89:49:69:D5:F0:7E:B5:39:1F:56:DF:FE:10:88:1C:0B:2C:2E:58:00
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B62E31521E980213C5B00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.161.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:62:e3:15:21:e9:80:21:3c:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=ec68cf42-a3f0-423c-b9e9-c654f2b4adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:8d:52:ea:4d:69:94:11:f4:e9:8c:4d:03:
                    90:a5:15:18:39:9f:33:d0:2b:8e:be:11:1b:aa:23:
                    10:42:4d:fd:b0:b2:34:e5:43:82:fe:1e:25:00:cf:
                    69:c3:a7:cc:a9:be:4b:26:c6:6a:6f:02:47:32:00:
                    21:70:61:5b:34:eb:db:d7:67:8d:8c:65:e6:8a:8e:
                    99:97:52:b8:6b:08:55:23:e5:64:0b:8a:22:9c:04:
                    14:7d:00:95:d1:90:55:fd:13:21:19:e7:54:22:24:
                    b8:24:c6:3e:d7:f5:2b:8a:77:d6:dc:89:8f:7b:d9:
                    3b:95:f3:97:5c:28:9a:3f:45:43:fd:13:2f:77:b3:
                    5d:c2:d6:d2:62:ec:b1:d6:b7:df:2d:93:ef:88:04:
                    59:75:1e:62:61:32:19:d6:f1:a7:86:9c:e3:b7:f3:
                    67:32:68:79:7d:67:5d:e1:ae:b9:11:dd:f5:cd:b0:
                    09:d1:2d:7d:79:c5:61:ee:42:b8:b0:ed:53:74:7d:
                    ff:39:79:4a:71:05:3d:93:96:1a:24:83:53:14:06:
                    c7:8b:5c:09:63:25:14:d3:c9:8c:f2:0e:4c:69:8c:
                    08:17:c1:d8:80:2e:bd:d7:f6:c6:47:6e:a2:fa:ea:
                    5a:21:23:f7:41:4d:b3:44:a5:63:45:4e:32:3a:5d:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:49:69:D5:F0:7E:B5:39:1F:56:DF:FE:10:88:1C:0B:2C:2E:58:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:cb:81:7d:84:85:d2:f6:7d:6d:7f:c4:37:9f:7e:12:b8:
         74:11:0c:f8:e4:94:e3:13:42:83:22:bd:d3:92:8e:42:60:9a:
         c2:a6:ab:3f:12:87:c5:5b:8a:c0:02:39:d0:b5:89:e3:a8:73:
         bb:34:e1:2a:19:db:16:3c:87:5f:f3:ac:da:cb:ae:38:7f:0d:
         e8:da:96:87:14:57:f1:9f:1b:91:11:5a:d3:65:db:53:91:dc:
         77:09:e4:3b:6f:fc:2b:07:91:de:aa:c1:33:fb:bf:6d:7a:50:
         64:33:ca:3f:d2:9f:af:2a:00:6b:37:40:f6:35:e0:24:77:fa:
         71:b5:b0:0f:80:ef:5d:07:eb:8e:da:96:71:29:be:4e:d3:12:
         6d:90:7d:b2:8e:a6:a4:58:d3:e9:ec:32:fa:b7:05:13:fa:d7:
         70:3c:a0:f0:b2:71:84:3e:8a:2d:f7:12:95:17:0f:f6:1d:b3:
         88:cf:f2:72:6c:eb:c2:81:4a:dc:c3:84:1e:ad:47:03:c0:f6:
         34:ba:26:d3:12:9a:3c:7a:ab:37:ae:b1:6d:29:16:41:6c:29:
         de:98:4d:30:e9:6f:1b:3a:cf:cd:67:85:c8:30:7f:aa:e8:d5:
         ce:f6:80:00:9c:db:e7:80:18:8d:fe:32:f4:80:65:86:e4:38:
         b4:38:d1:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2LjFSHpgCE8WwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZWM2OGNmNDItYTNmMC00MjNjLWI5ZTktYzY1NGYyYjRhZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv+NUupNaZQR9OmMTQOQpRUYOZ8z0CuOvhEb
qiMQQk39sLI05UOC/h4lAM9pw6fMqb5LJsZqbwJHMgAhcGFbNOvb12eNjGXmio6Z
l1K4awhVI+VkC4oinAQUfQCV0ZBV/RMhGedUIiS4JMY+1/UrinfW3ImPe9k7lfOX
XCiaP0VD/RMvd7NdwtbSYuyx1rffLZPviARZdR5iYTIZ1vGnhpzjt/NnMmh5fWdd
4a65Ed31zbAJ0S19ecVh7kK4sO1TdH3/OXlKcQU9k5YaJINTFAbHi1wJYyUU08mM
8g5MaYwIF8HYgC691/bGR26i+upaISP3QU2zRKVjRU4yOl08swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlJadXwfrU5H1bf/hCIHAssLlgAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZGU4M2FhOGYtOWU1Ni0z
NzBlLWE2YTUtYTI2ODg4NDAzZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6E0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK23y4F9hIXS9n1tf8Q3n34SuHQRDPjklOMTQoMivdOSjkJgmsKmqz8S
h8VbisACOdC1ieOoc7s04SoZ2xY8h1/zrNrLrjh/DejalocUV/GfG5ERWtNl21OR
3HcJ5Dtv/CsHkd6qwTP7v216UGQzyj/Sn68qAGs3QPY14CR3+nG1sA+A710H647a
lnEpvk7TEm2QfbKOpqRY0+nsMvq3BRP613A8oPCycYQ+ii33EpUXD/Yds4jP8nJs
68KBStzDhB6tRwPA9jS6JtMSmjx6qzeusW0pFkFsKd6YTTDpbxs6z81nhcgwf6ro
1c72gACc2+eAGI3+MvSAZYbkOLQ40fs=
-----END CERTIFICATE-----
Generated at Thu May 21 18:32:07 2026 by rpki-client