Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c3ef9aa7-8b7b-35da-b23d-84e482bc1724.roa
File:                     c3ef9aa7-8b7b-35da-b23d-84e482bc1724.roa (raw, json)
Hash identifier:          ItdKn2waw/PL/yewo8BdLYXtq70kBVYeiWIgmh5Yuk8=
Subject key identifier:   2E:6F:2A:1E:2A:86:E3:9F:A7:E7:14:E9:C9:CF:7A:77:21:C7:5F:CA
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584D2D3F751279939B57FC76AA6C
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c3ef9aa7-8b7b-35da-b23d-84e482bc1724.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     7843
IP address blocks:        134.202.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:75:12:79:93:9b:57:fc:76:aa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=87ac7f4a-2ece-4526-bac7-62ce4296483b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:be:07:f1:90:52:81:fc:a1:5f:90:6a:fb:
                    67:51:a4:de:99:ad:d7:57:dc:c6:d7:ca:dc:63:cb:
                    01:f8:66:d2:95:42:db:6b:11:d6:0d:66:92:d2:86:
                    98:5e:8f:a4:3f:39:dd:2e:5a:53:d8:5a:91:da:71:
                    6c:1e:86:3e:d9:34:44:fe:12:80:2e:92:10:ab:c5:
                    41:b1:55:43:42:9c:4d:4a:d1:7c:a9:0a:9e:f4:7f:
                    15:0b:0a:c8:1e:87:05:42:2d:bf:fb:6c:9a:12:e9:
                    45:cd:47:da:47:ec:be:b8:71:44:f8:a0:83:ac:f8:
                    51:7f:3a:e3:f0:6e:1f:ae:7d:0a:a8:65:5b:35:98:
                    cd:74:bc:bd:ff:f0:ec:ce:60:8e:b6:04:c0:ad:19:
                    af:7d:c6:0f:c6:1d:7a:59:bd:f8:b0:a4:6b:95:04:
                    fd:87:11:3c:34:2a:1e:0e:3b:d0:c8:df:db:d6:c1:
                    5f:d6:07:c8:87:d6:fb:30:f1:c1:cd:f2:c0:91:61:
                    71:b2:0c:3c:a0:4c:32:00:91:ff:8d:e8:27:47:46:
                    da:54:e0:69:0c:cc:f4:bc:50:3e:c6:e3:a1:46:76:
                    2c:69:93:ec:ce:b8:80:98:56:49:61:ba:48:aa:61:
                    99:f3:8e:ee:78:71:ce:d2:bb:8e:c9:aa:2b:ca:62:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:2A:1E:2A:86:E3:9F:A7:E7:14:E9:C9:CF:7A:77:21:C7:5F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c3ef9aa7-8b7b-35da-b23d-84e482bc1724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:cd:a8:44:68:41:1d:24:dc:73:df:8f:83:fe:fe:9e:42:
         c6:7b:ae:e8:42:bf:65:fa:dd:3a:59:9b:06:dd:fe:99:3c:fa:
         4a:43:4d:a9:96:ec:cd:09:cc:10:91:fe:df:b0:3f:48:d0:13:
         ba:86:45:60:a7:c0:84:9c:15:93:85:9c:9a:98:6f:94:1a:58:
         91:6c:00:43:2d:d2:78:10:70:2d:30:6e:3a:ce:bd:89:6e:52:
         bb:65:e2:e8:e9:99:20:0c:df:3c:d5:55:c0:a8:c8:dc:03:56:
         ca:4c:5b:3a:c7:ad:16:2c:e3:a6:16:3a:70:0a:91:71:72:3f:
         e1:36:51:6b:d5:ca:67:76:d3:d8:ba:89:0e:32:57:6b:86:46:
         a3:94:d1:72:7a:d0:eb:c0:b3:36:82:32:6c:60:6c:43:c9:44:
         71:4f:0e:46:a2:54:4a:28:5e:97:9f:59:ff:ee:21:2d:0e:eb:
         a1:45:07:79:4c:09:91:ff:d5:1c:9b:ac:34:f0:40:81:7c:06:
         3c:8a:65:a1:b0:53:ee:15:3c:f7:fb:79:ba:f6:6c:2d:2a:17:
         23:b9:db:d1:4d:a3:33:e7:60:1c:24:08:b6:a0:ea:38:db:8e:
         ae:8b:e8:f2:bb:2c:b7:4c:b0:79:6e:76:91:ab:0f:10:28:21:
         9d:18:d0:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3USeZObV/x2qmwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
ODdhYzdmNGEtMmVjZS00NTI2LWJhYzctNjJjZTQyOTY0ODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23++B/GQUoH8oV+QavtnUaTema3XV9zG18rc
Y8sB+GbSlULbaxHWDWaS0oaYXo+kPzndLlpT2FqR2nFsHoY+2TRE/hKALpIQq8VB
sVVDQpxNStF8qQqe9H8VCwrIHocFQi2/+2yaEulFzUfaR+y+uHFE+KCDrPhRfzrj
8G4frn0KqGVbNZjNdLy9//DszmCOtgTArRmvfcYPxh16Wb34sKRrlQT9hxE8NCoe
DjvQyN/b1sFf1gfIh9b7MPHBzfLAkWFxsgw8oEwyAJH/jegnR0baVOBpDMz0vFA+
xuOhRnYsaZPszriAmFZJYbpIqmGZ847ueHHO0ruOyaorymLaIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5vKh4qhuOfp+cU6cnPenchx1/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvYzNlZjlhYTctOGI3Yi0z
NWRhLWIyM2QtODRlNDgyYmMxNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhsqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+9zahEaEEdJNxz34+D/v6eQsZ7ruhCv2X63TpZmwbd/pk8+kpDTamW
7M0JzBCR/t+wP0jQE7qGRWCnwIScFZOFnJqYb5QaWJFsAEMt0ngQcC0wbjrOvYlu
Urtl4ujpmSAM3zzVVcCoyNwDVspMWzrHrRYs46YWOnAKkXFyP+E2UWvVymd209i6
iQ4yV2uGRqOU0XJ60OvAszaCMmxgbEPJRHFPDkaiVEooXpefWf/uIS0O66FFB3lM
CZH/1RybrDTwQIF8BjyKZaGwU+4VPPf7ebr2bC0qFyO529FNozPnYBwkCLag6jjb
jq6L6PK7LLdMsHludpGrDxAoIZ0Y0LY=
-----END CERTIFICATE-----
Generated at Sun Mar 22 12:57:52 2026 by rpki-client