Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa
File:                     db04736c-f31c-3c7f-873c-818d9665fd54.roa (raw, json)
Hash identifier:          Hv3HMx45UrheyhOkgp+PBdReazEB5MmfQOV+PV3wrwM=
Subject key identifier:   A6:E6:B9:13:A4:24:4C:C7:D7:8E:6E:B3:BA:26:BF:AB:EE:1F:D8:5E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF182019D064BC94D324458C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     11572
IP address blocks:        131.153.66.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:01:9d:06:4b:c9:4d:32:44:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=a45b4517-4793-4a2e-b3d3-c49b81d52029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:d6:ae:26:f2:06:e6:84:f9:06:39:3d:97:
                    c4:0b:3d:42:00:16:18:1b:bd:8d:f5:69:91:06:87:
                    98:38:c0:4d:83:08:76:70:de:6d:a4:0c:4e:10:91:
                    a8:ff:a6:c1:2d:a7:a6:ab:55:5b:ba:cf:6a:33:a0:
                    55:12:52:8f:3f:c9:58:ce:f8:a3:10:74:da:e7:cf:
                    de:23:af:c9:83:97:2b:01:b1:ac:dc:57:82:fb:dc:
                    e6:b0:3a:03:44:49:a9:e2:17:7d:36:60:7a:13:10:
                    3d:c3:85:da:77:d6:96:48:0c:34:55:93:bd:0a:13:
                    79:b7:82:90:89:ee:03:3c:52:51:3e:60:e5:c4:38:
                    7e:76:42:7d:e4:d2:c7:cb:14:98:97:57:d1:d3:d3:
                    e0:f5:80:c6:a4:3b:64:51:90:88:40:3f:c7:36:dd:
                    32:42:a8:1b:92:d5:e8:97:10:67:7d:59:a5:8c:ac:
                    70:72:59:aa:d4:ce:4c:e8:12:9e:90:5f:c9:54:b7:
                    b4:59:17:98:1d:cb:7c:63:83:0f:b9:8f:48:b1:d8:
                    0d:49:f2:b1:6c:0f:aa:48:2d:73:40:0b:ac:cb:fe:
                    e4:8f:33:8e:9d:96:c8:42:2f:05:c1:69:22:cb:d0:
                    e5:fc:e2:0c:22:1d:00:f7:7c:5e:d3:e1:a4:69:82:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:B9:13:A4:24:4C:C7:D7:8E:6E:B3:BA:26:BF:AB:EE:1F:D8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:b7:79:f5:9d:39:af:cc:d7:4b:53:af:a8:04:fb:0e:79:
         0a:fa:d2:3d:cd:4f:5c:2f:f4:a4:4f:2f:98:78:73:01:3d:40:
         a2:d7:e9:8e:ed:50:ac:c7:9d:fd:0d:6f:d8:42:24:ac:a3:8a:
         9f:aa:b6:d8:b5:e7:27:4a:f9:ce:19:89:00:61:cb:1d:57:34:
         14:26:27:c5:58:4e:b3:36:b5:97:bf:73:a3:7c:5b:cc:09:f1:
         d7:46:f7:cc:c8:e6:1b:b9:f6:d2:7c:74:4e:fb:ea:65:93:48:
         1a:0c:16:36:b2:7e:4b:df:b2:b9:c7:50:ef:79:a3:14:02:0f:
         57:8c:14:e1:f0:14:0b:66:3f:26:29:2a:ed:b7:4d:ee:d8:60:
         f4:59:df:1c:47:af:ed:9f:f7:92:24:fc:d0:1b:f1:50:ac:88:
         f9:17:9d:11:e8:7e:7c:ad:bc:6b:97:78:f5:32:ce:87:6e:ad:
         8c:81:02:9c:b7:52:5a:54:3b:c9:71:60:50:ba:cf:a3:f8:51:
         1b:58:80:b3:cf:5b:bb:ba:32:0c:ff:bf:fd:99:43:56:de:17:
         26:4d:f8:f3:65:3f:62:50:15:53:1d:35:9b:26:49:0e:f6:25:
         0c:21:06:b7:a6:65:9b:a9:86:c4:65:ba:7a:2e:94:88:e7:22:
         ce:5a:8c:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggGdBkvJTTJEWMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
YTQ1YjQ1MTctNDc5My00YTJlLWIzZDMtYzQ5YjgxZDUyMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgjWribyBuaE+QY5PZfECz1CABYYG72N9WmR
BoeYOMBNgwh2cN5tpAxOEJGo/6bBLaemq1Vbus9qM6BVElKPP8lYzvijEHTa58/e
I6/Jg5crAbGs3FeC+9zmsDoDREmp4hd9NmB6ExA9w4Xad9aWSAw0VZO9ChN5t4KQ
ie4DPFJRPmDlxDh+dkJ95NLHyxSYl1fR09Pg9YDGpDtkUZCIQD/HNt0yQqgbktXo
lxBnfVmljKxwclmq1M5M6BKekF/JVLe0WReYHct8Y4MPuY9IsdgNSfKxbA+qSC1z
QAusy/7kjzOOnZbIQi8FwWkiy9Dl/OIMIh0A93xe0+GkaYIPVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbmuROkJEzH145us7omv6vuH9heMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNDczNmMtZjMxYy0z
YzdmLTg3M2MtODE4ZDk2NjVmZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAakt3n1nTmvzNdLU6+oBPsOeQr60j3NT1wv9KRPL5h4cwE9QKLX6Y7t
UKzHnf0Nb9hCJKyjip+qtti15ydK+c4ZiQBhyx1XNBQmJ8VYTrM2tZe/c6N8W8wJ
8ddG98zI5hu59tJ8dE776mWTSBoMFjayfkvfsrnHUO95oxQCD1eMFOHwFAtmPyYp
Ku23Te7YYPRZ3xxHr+2f95Ik/NAb8VCsiPkXnRHofnytvGuXePUyzodurYyBApy3
UlpUO8lxYFC6z6P4URtYgLPPW7u6Mgz/v/2ZQ1beFyZN+PNlP2JQFVMdNZsmSQ72
JQwhBremZZuphsRlunoulIjnIs5ajBM=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:10:31 2026 by rpki-client