Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
File:                     030641f0-0c4d-36be-9742-c8311f8aac47.roa (raw, json)
Hash identifier:          +8CPpCDMOL91GCIP0FuJqCbAkuyWaKIrU1N2ZVHz0Ok=
Subject key identifier:   B3:93:68:94:83:7B:1D:3D:CC:0E:5D:37:96:A9:26:88:1C:A9:EE:B9
Certificate issuer:       /CN=ede01171-c7fd-4563-acce-6f9c23457a8f
Certificate serial:       010D0C9F4328584D4D5A427637ECE5B106390000
Authority key identifier: 73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     397394
IP address blocks:        204.194.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:42:76:37:ec:e5:b1:06:39:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=7b19b2c9-cf13-4094-844c-a1be5eea9218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:aa:36:64:7a:bb:cc:37:2b:d6:09:a0:d4:
                    17:36:98:0a:20:34:e5:01:6c:b1:8c:d7:73:c9:8d:
                    9e:13:b3:cf:9b:c4:51:ce:82:0e:28:4a:92:09:03:
                    13:ee:f7:a2:11:cd:c0:e0:fc:d5:dd:03:83:cb:e5:
                    bf:e0:73:12:43:bd:62:e6:55:2e:30:a5:28:03:cd:
                    e7:04:62:b8:39:7c:de:00:bb:ae:e5:91:22:52:f1:
                    02:ae:cd:0c:cd:df:1f:fe:1e:2a:ee:e0:83:c1:57:
                    f6:06:dc:56:92:19:1e:78:23:dd:fa:6d:56:a6:c7:
                    8c:22:a8:7f:2a:64:bf:90:6b:56:74:2a:d0:10:0d:
                    b8:76:4e:3a:ba:7a:89:98:76:f2:3b:d6:07:05:2e:
                    24:18:c7:94:ed:25:41:85:5b:1c:d6:c5:cd:91:b3:
                    31:d3:ed:5f:d1:9b:dd:bb:c5:e0:55:b4:e9:a5:3a:
                    25:00:70:d9:9c:a2:98:b8:7d:ea:7c:46:08:68:ad:
                    61:80:4e:8c:84:cf:97:9b:64:2e:f8:b8:7c:5a:fd:
                    4b:53:5b:f7:73:ab:55:d2:16:c4:cc:12:f3:7a:12:
                    ef:05:9f:30:ab:77:77:87:1e:ca:df:c1:4d:82:52:
                    12:6e:23:80:c6:dd:f0:dc:56:5c:7f:84:bc:8b:da:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:68:94:83:7B:1D:3D:CC:0E:5D:37:96:A9:26:88:1C:A9:EE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl

            X509v3 Authority Key Identifier:
                keyid:73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:18:dc:5d:4d:50:ce:ce:8e:08:b2:e2:e6:83:6c:b8:40:
         69:c0:d8:80:12:88:f9:2a:74:c8:58:91:0d:5d:4d:c2:a8:b5:
         bb:e8:2b:b6:1f:4f:2a:2a:3c:74:41:91:b9:22:c9:6e:01:55:
         aa:f8:6e:e0:58:7b:f7:da:19:68:c4:dd:49:79:99:a2:67:f2:
         e2:72:dd:36:85:d9:cf:03:b8:32:f5:e7:a9:01:c5:73:7d:b1:
         eb:18:03:a4:11:42:5b:da:27:c4:1c:99:0c:0e:2e:9a:ee:d5:
         59:8d:e9:b0:c5:7e:50:97:2f:a7:98:59:b0:aa:25:78:ea:5a:
         91:7b:47:b6:b9:24:ad:55:d3:c3:1b:8f:46:2b:ee:be:1a:21:
         4b:4e:f8:3b:87:e1:6e:61:36:59:27:7d:5d:06:5a:58:82:21:
         f9:08:c6:de:1b:3b:d9:4e:62:c5:10:a6:4d:e4:9f:8a:3e:3c:
         0a:28:4a:37:fa:11:75:3e:b2:6a:44:bc:14:24:f4:eb:64:07:
         75:82:65:8f:30:9f:c6:4e:37:f4:24:43:ce:ec:8b:a8:14:12:
         5d:94:f0:72:32:ea:b6:cf:fb:a1:5e:15:11:77:7a:8f:5e:6e:
         dc:82:f8:e1:8a:96:b3:9c:9c:a5:27:3d:bd:21:08:45:f8:c4:
         ac:58:1d:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkJ2N+zlsQY5AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRlMDExNzEtYzdmZC00NTYzLWFjY2UtNmY5YzIzNDU3
YThmMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
N2IxOWIyYzktY2YxMy00MDk0LTg0NGMtYTFiZTVlZWE5MjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+OqNmR6u8w3K9YJoNQXNpgKIDTlAWyxjNdz
yY2eE7PPm8RRzoIOKEqSCQMT7veiEc3A4PzV3QODy+W/4HMSQ71i5lUuMKUoA83n
BGK4OXzeALuu5ZEiUvECrs0Mzd8f/h4q7uCDwVf2BtxWkhkeeCPd+m1WpseMIqh/
KmS/kGtWdCrQEA24dk46unqJmHbyO9YHBS4kGMeU7SVBhVsc1sXNkbMx0+1f0Zvd
u8XgVbTppTolAHDZnKKYuH3qfEYIaK1hgE6MhM+Xm2Qu+Lh8Wv1LU1v3c6tV0hbE
zBLzehLvBZ8wq3d3hx7K38FNglISbiOAxt3w3FZcf4S8i9pC1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOTaJSDex09zA5dN5apJogcqe65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZGUw
MTE3MS1jN2ZkLTQ1NjMtYWNjZS02ZjljMjM0NTdhOGYvMDMwNjQxZjAtMGM0ZC0z
NmJlLTk3NDItYzgzMTFmOGFhYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWRlMDExNzEtYzdmZC00NTYzLWFj
Y2UtNmY5YzIzNDU3YThmL2VkZTAxMTcxLWM3ZmQtNDU2My1hY2NlLTZmOWMyMzQ1
N2E4Zi5jcmwwHwYDVR0jBBgwFoAUc3TqS3svdAqyeKw5uwXF6aSnUr8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZGUwMTE3MS1jN2ZkLTQ1NjMtYWNjZS02Zjlj
MjM0NTdhOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMK4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGw+GNxdTVDOzo4IsuLmg2y4QGnA2IASiPkqdMhYkQ1dTcKotbvoK7Yf
TyoqPHRBkbkiyW4BVar4buBYe/faGWjE3Ul5maJn8uJy3TaF2c8DuDL156kBxXN9
sesYA6QRQlvaJ8QcmQwOLpru1VmN6bDFflCXL6eYWbCqJXjqWpF7R7a5JK1V08Mb
j0Yr7r4aIUtO+DuH4W5hNlknfV0GWliCIfkIxt4bO9lOYsUQpk3kn4o+PAooSjf6
EXU+smpEvBQk9OtkB3WCZY8wn8ZON/QkQ87si6gUEl2U8HIy6rbP+6FeFRF3eo9e
btyC+OGKlrOcnKUnPb0hCEX4xKxYHcc=
-----END CERTIFICATE-----
Generated at Mon Apr 13 19:38:44 2026 by rpki-client