Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
File:                     3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa (raw, json)
Hash identifier:          cYGjeCs/Msi6Kcfd0TWucfytMNOXKzysNtnDbEpKG18=
Subject key identifier:   D3:C6:F2:72:DA:13:36:87:CD:50:0D:09:62:D3:3A:DE:2E:32:DE:91
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584EA7879FA81825773ACBFFF180
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15171
IP address blocks:        158.120.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9f:a8:18:25:77:3a:cb:ff:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d760b456-bdbc-46d0-954f-4f2ea1ffa84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:b4:8a:6f:8f:76:94:67:bd:d7:e7:9e:08:
                    30:cc:6d:04:94:1d:c2:9f:d4:8b:d7:b6:f0:f7:e0:
                    21:c5:fa:c7:14:8e:7e:37:9d:6c:9c:f3:88:3f:27:
                    90:ee:a8:e3:cc:c2:32:2c:36:5f:b0:77:0c:85:13:
                    46:1c:bf:03:59:05:b9:dc:56:b8:63:d2:cb:23:91:
                    21:08:29:8c:ff:df:2c:9f:9a:af:40:32:6c:b5:96:
                    f6:92:f2:d7:ad:fa:7f:16:8e:1a:a8:b0:55:cb:46:
                    2a:6b:bb:45:34:0b:27:ea:29:f6:aa:6e:aa:c9:bc:
                    b3:03:40:e2:99:ea:b7:cf:8b:09:5c:9b:0a:e6:4a:
                    50:47:c3:44:4c:0c:5b:90:fe:ac:fc:0f:73:31:a7:
                    34:3a:22:cc:80:27:9b:9b:0d:e9:2d:24:c9:de:29:
                    68:1b:70:f1:81:29:63:a8:5d:57:fd:ba:a9:02:24:
                    fb:53:01:a5:86:78:2d:c6:6b:3c:1d:bf:7d:87:1b:
                    47:ff:7b:c9:37:a9:17:f0:bb:41:3d:82:5b:57:93:
                    d5:08:c1:27:a1:aa:87:89:0b:af:86:c3:95:3a:6b:
                    19:0e:15:9c:a1:e6:78:bf:f5:ae:2a:38:71:2d:4f:
                    18:72:f6:cb:82:09:ee:53:a5:a0:3d:9c:2a:2d:3d:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:F2:72:DA:13:36:87:CD:50:0D:09:62:D3:3A:DE:2E:32:DE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:21:89:ec:a9:22:dd:2f:e7:32:97:60:b8:b2:cf:a1:3f:
         44:d7:3f:dd:eb:fb:73:ae:37:1f:b0:ba:4b:41:33:14:3c:04:
         f8:f1:b9:cf:0f:27:a5:bb:a5:b1:80:d4:9c:a9:d4:fc:43:af:
         7f:9b:98:26:e5:c9:48:32:14:8c:ec:46:10:7d:c7:60:b3:1e:
         0f:09:1d:6f:0b:f3:e9:03:19:07:ae:33:68:c8:62:c1:76:6c:
         ed:cc:c4:73:e0:e8:d3:66:30:f7:e5:2d:72:12:1b:af:72:4f:
         d1:3d:77:53:35:f5:3d:f2:e1:d6:ae:46:16:21:a8:e4:f4:e8:
         fb:49:03:17:65:be:c3:51:dc:d1:39:6c:3e:88:82:8b:be:64:
         38:1a:88:79:15:82:a2:04:7d:b1:53:4a:fa:19:62:97:ac:87:
         a3:41:a6:3a:e9:00:2d:1b:9c:1a:5b:ce:c1:77:30:ae:6e:11:
         2b:04:a2:1c:c8:51:92:14:cd:6e:c8:59:40:ad:be:76:b7:cb:
         e5:51:21:b4:fc:9a:9d:c5:99:86:a7:c3:2d:52:4b:e8:08:89:
         24:e8:f7:92:ae:08:07:0a:97:c8:8a:ff:6d:35:74:fd:fc:be:
         79:89:54:df:83:89:12:07:ca:ad:4c:4f:b9:f4:0f:ef:52:ac:
         7c:d0:55:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5+oGCV3Osv/8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJkMTEwNzUtY2RkNC00Y2M3LTk0N2MtYTk0YzU2MjRh
ZGVkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDc2MGI0NTYtYmRiYy00NmQwLTk1NGYtNGYyZWExZmZhODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr+0im+PdpRnvdfnnggwzG0ElB3Cn9SL17bw
9+AhxfrHFI5+N51snPOIPyeQ7qjjzMIyLDZfsHcMhRNGHL8DWQW53Fa4Y9LLI5Eh
CCmM/98sn5qvQDJstZb2kvLXrfp/Fo4aqLBVy0Yqa7tFNAsn6in2qm6qybyzA0Di
meq3z4sJXJsK5kpQR8NETAxbkP6s/A9zMac0OiLMgCebmw3pLSTJ3iloG3DxgSlj
qF1X/bqpAiT7UwGlhngtxms8Hb99hxtH/3vJN6kX8LtBPYJbV5PVCMEnoaqHiQuv
hsOVOmsZDhWcoeZ4v/WuKjhxLU8YcvbLggnuU6WgPZwqLT0aawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPG8nLaEzaHzVANCWLTOt4uMt6RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YmQx
MTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRjNTYyNGFkZWQvM2E3MzM2NzMtODdkOC0z
MzE4LWI5YWEtOWQzNmMwNGFjMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmJkMTEwNzUtY2RkNC00Y2M3LTk0
N2MtYTk0YzU2MjRhZGVkLzZiZDExMDc1LWNkZDQtNGNjNy05NDdjLWE5NGM1NjI0
YWRlZC5jcmwwHwYDVR0jBBgwFoAUP5ADfwiMLsR8qc08o/FSGtCv/EUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82YmQxMTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRj
NTYyNGFkZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnniAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACppIYnsqSLdL+cyl2C4ss+hP0TXP93r+3OuNx+wuktBMxQ8BPjxuc8P
J6W7pbGA1Jyp1PxDr3+bmCblyUgyFIzsRhB9x2CzHg8JHW8L8+kDGQeuM2jIYsF2
bO3MxHPg6NNmMPflLXISG69yT9E9d1M19T3y4dauRhYhqOT06PtJAxdlvsNR3NE5
bD6Igou+ZDgaiHkVgqIEfbFTSvoZYpesh6NBpjrpAC0bnBpbzsF3MK5uESsEohzI
UZIUzW7IWUCtvna3y+VRIbT8mp3FmYanwy1SS+gIiSTo95KuCAcKl8iK/201dP38
vnmJVN+DiRIHyq1MT7n0D+9SrHzQVUc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:32 2026 by rpki-client