Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa
File:                     02ab673e-52f9-333e-984a-1c500fa07f2b.roa (raw, json)
Hash identifier:          HDR6cQPlwCnlvo5Cl1Doou2NoXaGO1DFOnLu5VNGZiQ=
Subject key identifier:   0E:05:59:83:3A:48:DD:E5:52:ED:29:02:5C:93:55:30:ED:2C:65:FC
Certificate issuer:       /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
Certificate serial:       010D0C9F4328584D71C2606BEEE31AFF14544E00
Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa
Signing time:             Thu 09 Apr 2026 01:59:34 +0000
ROA not before:           Thu 09 Apr 2026 01:59:34 +0000
ROA not after:            Wed 08 Jul 2026 01:59:34 +0000
asID:                     7029
IP address blocks:        131.143.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:c2:60:6b:ee:e3:1a:ff:14:54:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
        Validity
            Not Before: Apr  9 01:59:34 2026 GMT
            Not After : Jul  8 01:59:34 2026 GMT
        Subject: CN=034fe56d-5891-4e62-909e-1221abb90049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:97:13:03:46:65:83:46:4c:8f:e4:83:60:
                    bc:d7:cd:4b:79:fc:2b:7e:6b:e3:3f:18:7d:88:be:
                    31:53:46:49:22:4d:68:d9:ba:55:4a:76:57:e0:20:
                    50:19:11:09:60:ab:9b:98:88:c3:1d:70:a0:f1:ec:
                    f0:6b:20:6c:a8:c2:2b:c9:7e:8f:9e:1f:29:7d:af:
                    d8:6c:a7:a7:8c:44:60:7b:0f:85:4f:c2:d8:cb:37:
                    47:ca:a3:d3:11:25:0f:e2:a8:29:8e:c3:6a:c2:75:
                    26:24:ff:bf:75:16:cb:35:06:f4:27:07:53:cb:0b:
                    c5:e0:f2:eb:f9:50:5b:e4:7f:e4:2f:e6:51:02:34:
                    30:e3:13:ed:2a:68:bf:f4:51:35:62:6c:32:cd:3a:
                    c8:06:41:fb:d8:63:4e:97:ac:51:f3:f1:7a:11:5d:
                    c3:e6:65:8e:e1:76:7b:26:23:51:76:ae:df:10:d9:
                    1b:60:c9:08:53:3b:72:b6:7d:b7:e9:e4:48:13:5c:
                    d9:9a:63:79:d4:24:cc:66:fe:3a:53:b7:c3:e9:2d:
                    1d:91:3b:7c:04:04:b4:0c:0c:bf:81:4e:6e:b1:bb:
                    c6:b5:8b:7d:29:88:c9:2d:b0:6f:f3:0a:46:83:59:
                    83:91:e0:8c:ca:11:1e:b8:cc:be:62:82:2e:23:b9:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:59:83:3A:48:DD:E5:52:ED:29:02:5C:93:55:30:ED:2C:65:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl

            X509v3 Authority Key Identifier:
                keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:bb:21:cc:18:b8:64:0a:76:3c:df:27:c3:be:1e:f9:4b:
         8f:c6:91:dc:8a:9c:15:8c:42:8c:e0:73:fa:0e:6b:25:dc:a4:
         81:17:b2:29:23:65:07:00:67:b4:57:3a:4e:1c:ee:29:ba:f7:
         8c:78:13:3a:80:22:ed:9f:cf:34:9c:44:ef:a1:a9:29:ba:45:
         a6:d9:ff:6a:02:92:97:33:a5:40:58:c3:8e:65:41:50:87:4e:
         9d:40:20:2d:89:12:78:e6:f9:2f:f7:ad:f3:c6:00:0d:5a:28:
         a6:24:20:fe:9c:8d:7f:ab:51:fd:e0:47:e0:bb:c6:e0:29:71:
         e4:e9:c6:e8:58:f7:12:6b:93:7b:c2:a9:34:48:1f:f7:17:50:
         38:70:ac:28:b0:d5:3d:4b:a8:e8:05:ef:bd:ce:bb:88:2b:0e:
         69:e3:77:3d:6b:ef:d9:fe:19:c6:e5:fc:bb:e9:88:aa:c5:d9:
         0c:45:50:9f:0d:e9:a2:4b:71:92:66:20:44:50:7f:90:76:f9:
         af:3d:03:ad:6b:32:78:99:52:62:ff:11:4a:08:4b:0b:fc:8c:
         d9:1c:51:73:b2:c1:9b:bb:c5:cb:e2:29:94:38:f7:50:15:fe:
         05:99:d1:cd:d1:a5:bb:3c:93:99:49:55:05:d3:c5:b7:da:34:
         99:4f:90:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xwmBr7uMa/xRUTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw
OGYzMB4XDTI2MDQwOTAxNTkzNFoXDTI2MDcwODAxNTkzNFowLzEtMCsGA1UEAxMk
MDM0ZmU1NmQtNTg5MS00ZTYyLTkwOWUtMTIyMWFiYjkwMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeyXEwNGZYNGTI/kg2C8181LefwrfmvjPxh9
iL4xU0ZJIk1o2bpVSnZX4CBQGREJYKubmIjDHXCg8ezwayBsqMIryX6Pnh8pfa/Y
bKenjERgew+FT8LYyzdHyqPTESUP4qgpjsNqwnUmJP+/dRbLNQb0JwdTywvF4PLr
+VBb5H/kL+ZRAjQw4xPtKmi/9FE1YmwyzTrIBkH72GNOl6xR8/F6EV3D5mWO4XZ7
JiNRdq7fENkbYMkIUztytn236eRIE1zZmmN51CTMZv46U7fD6S0dkTt8BAS0DAy/
gU5usbvGtYt9KYjJLbBv8wpGg1mDkeCMyhEeuMy+YoIuI7ngrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4FWYM6SN3lUu0pAlyTVTDtLGX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3
ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvMDJhYjY3M2UtNTJmOS0z
MzNlLTk4NGEtMWM1MDBmYTA3ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw
MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj
MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy
ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL2uyHMGLhkCnY83yfDvh75S4/GkdyKnBWMQozgc/oOayXcpIEXsikj
ZQcAZ7RXOk4c7im694x4EzqAIu2fzzScRO+hqSm6RabZ/2oCkpczpUBYw45lQVCH
Tp1AIC2JEnjm+S/3rfPGAA1aKKYkIP6cjX+rUf3gR+C7xuApceTpxuhY9xJrk3vC
qTRIH/cXUDhwrCiw1T1LqOgF773Ou4grDmnjdz1r79n+Gcbl/LvpiKrF2QxFUJ8N
6aJLcZJmIERQf5B2+a89A61rMniZUmL/EUoISwv8jNkcUXOywZu7xcviKZQ491AV
/gWZ0c3Rpbs8k5lJVQXTxbfaNJlPkDo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:36 2026 by rpki-client