Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa
File:                     3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa (raw, json)
Hash identifier:          a250W4nTnYm0qoyLwPQ3INJExUJd18viBZLAqzf7l+o=
Subject key identifier:   B2:AD:2D:2D:24:03:91:06:CF:29:B7:14:67:8F:FC:2B:3B:66:D3:AF
Certificate issuer:       /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial:       010D0C9F4328584D15A26E9123FA6C1B3307ECC0
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     32475
IP address blocks:        107.6.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:6e:91:23:fa:6c:1b:33:07:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=97a256ee-ab08-4f20-aee5-5238df920eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d5:58:45:53:28:26:84:94:a1:30:94:70:d7:
                    d4:d7:e5:07:7f:80:74:b7:d1:c2:60:64:30:ee:ac:
                    52:89:48:b0:d6:e8:24:fc:3e:af:82:1c:91:3f:d8:
                    be:94:dd:b6:91:1e:1c:9a:98:88:17:f7:7e:a4:68:
                    1d:4f:bc:f1:b9:4d:79:46:ab:fa:8c:1f:18:1f:c7:
                    13:f0:42:a7:7d:fd:9c:fa:44:e6:2d:1d:c0:8d:62:
                    81:c0:24:ec:52:e2:95:61:0e:79:49:3c:a5:cd:6e:
                    67:3f:44:e2:a0:dc:f3:8f:05:7a:12:1b:24:bd:9c:
                    a2:13:30:81:0e:58:33:41:1d:7d:41:e2:9c:64:69:
                    5f:11:fe:1e:76:99:57:b2:2a:72:48:5b:0a:e3:4a:
                    54:aa:b9:66:af:e8:28:76:3b:3e:3f:64:18:02:0a:
                    f6:86:98:d4:21:fa:64:06:c3:29:e9:60:b3:40:ca:
                    c5:da:27:39:d0:eb:de:94:6d:8a:82:83:04:47:c1:
                    5e:15:ef:01:ca:6d:db:a4:b7:d8:d6:3b:ab:55:d8:
                    7b:ac:27:0e:6e:86:b0:15:75:85:26:7a:e1:7b:94:
                    34:bc:96:4b:7d:7a:ae:95:ff:9b:ab:c1:02:a8:10:
                    0c:dc:5f:56:87:d0:ba:20:43:2e:f9:31:47:fd:a6:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:2D:2D:24:03:91:06:CF:29:B7:14:67:8F:FC:2B:3B:66:D3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl

            X509v3 Authority Key Identifier:
                keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.6.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:39:36:8d:a2:04:98:89:09:98:4c:d2:4a:8a:6a:0f:3a:3c:
         aa:ed:38:94:02:75:d6:1b:25:42:99:12:36:45:a6:ca:23:10:
         5d:b8:0e:43:ec:df:e5:8c:fa:c6:96:c0:18:90:44:95:a8:2e:
         70:a2:19:b5:fc:79:dd:8e:36:36:b9:fd:fa:a5:03:44:c2:7e:
         fb:ba:1b:b6:3b:e0:63:1a:2a:29:58:ab:e1:26:8d:70:cb:30:
         b1:56:e0:4b:73:1c:c3:f9:cf:d4:12:9a:b3:c8:1b:c7:d1:51:
         22:89:9e:24:4c:b7:5e:74:f6:9d:da:f1:b3:d8:78:ae:54:76:
         6e:48:9a:cf:c2:1b:01:87:f2:e4:22:58:a6:3b:c5:d2:f4:25:
         5f:ce:69:bd:77:21:33:ec:b8:53:34:a8:f1:93:b8:0f:44:45:
         e5:92:62:d0:14:72:c1:fa:21:41:63:79:41:6e:14:82:78:08:
         64:70:53:f9:06:d4:c7:2a:fb:8c:d0:2d:12:ae:b7:d4:0b:c1:
         fe:9f:73:52:5f:d9:15:63:bf:e5:31:28:6c:06:92:c4:e7:e3:
         3c:50:f9:24:5b:e0:4f:2e:3e:cc:28:90:1f:d3:a7:63:da:41:
         50:6a:37:75:a6:3e:cc:49:77:16:e4:47:d1:72:bd:93:79:56:
         f8:9c:b5:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom6RI/psGzMH7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGExM2YyNjMtODRmYi00YTJiLWIxMzYtZDQ0N2VjYzIx
NTA4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
OTdhMjU2ZWUtYWIwOC00ZjIwLWFlZTUtNTIzOGRmOTIwZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9VYRVMoJoSUoTCUcNfU1+UHf4B0t9HCYGQw
7qxSiUiw1ugk/D6vghyRP9i+lN22kR4cmpiIF/d+pGgdT7zxuU15Rqv6jB8YH8cT
8EKnff2c+kTmLR3AjWKBwCTsUuKVYQ55STylzW5nP0TioNzzjwV6EhskvZyiEzCB
DlgzQR19QeKcZGlfEf4edplXsipySFsK40pUqrlmr+godjs+P2QYAgr2hpjUIfpk
BsMp6WCzQMrF2ic50OvelG2KgoMER8FeFe8Bym3bpLfY1jurVdh7rCcOboawFXWF
Jnrhe5Q0vJZLfXqulf+bq8ECqBAM3F9Wh9C6IEMu+TFH/abpUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKtLS0kA5EGzym3FGeP/Cs7ZtOvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEz
ZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3ZWNjMjE1MDgvM2Q5NzU3Y2ItZTlkNy0z
ZWJkLWJlYmMtNWU4ODU4ZTZmZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGExM2YyNjMtODRmYi00YTJiLWIx
MzYtZDQ0N2VjYzIxNTA4LzhhMTNmMjYzLTg0ZmItNGEyYi1iMTM2LWQ0NDdlY2My
MTUwOC5jcmwwHwYDVR0jBBgwFoAUyDfSb8ZRnO+8QbKDkS5zaaOzvqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTEzZjI2My04NGZiLTRhMmItYjEzNi1kNDQ3
ZWNjMjE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCawZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU5No2iBJiJCZhM0kqKag86PKrtOJQCddYbJUKZEjZFpsojEF24DkPs
3+WM+saWwBiQRJWoLnCiGbX8ed2ONja5/fqlA0TCfvu6G7Y74GMaKilYq+EmjXDL
MLFW4EtzHMP5z9QSmrPIG8fRUSKJniRMt1509p3a8bPYeK5Udm5Ims/CGwGH8uQi
WKY7xdL0JV/Oab13ITPsuFM0qPGTuA9EReWSYtAUcsH6IUFjeUFuFIJ4CGRwU/kG
1Mcq+4zQLRKut9QLwf6fc1Jf2RVjv+UxKGwGksTn4zxQ+SRb4E8uPswokB/Tp2Pa
QVBqN3WmPsxJdxbkR9FyvZN5VvictQY=
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:01:52 2026 by rpki-client