Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/82b7e9d2-3bf4-34de-a84b-51e944b3dfd7.roa
File:                     82b7e9d2-3bf4-34de-a84b-51e944b3dfd7.roa (raw, json)
Hash identifier:          1+B2kH9jTY61Y7Heyye4DXX1kaWdlNv1ai2wkzu9Muo=
Subject key identifier:   9E:20:DC:69:CD:C1:56:00:0A:E5:C6:21:46:62:D2:DF:E8:5D:DD:72
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E000636C4CA1F348427975480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/82b7e9d2-3bf4-34de-a84b-51e944b3dfd7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     212433
IP address blocks:        154.43.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:36:c4:ca:1f:34:84:27:97:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=590c83da-d154-4f43-9a89-5f0183a61b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:2c:d0:33:4a:2a:02:e2:b8:db:89:67:3d:
                    61:b8:19:0c:23:73:f8:8c:ff:80:d4:7f:7f:4c:dd:
                    20:19:98:56:1c:73:35:4b:d7:9d:64:f6:46:70:7d:
                    8a:0e:c1:db:8b:ec:03:f3:ce:82:a7:39:ce:66:4a:
                    63:c6:e0:ed:81:f7:86:de:6b:05:8a:c8:77:50:e0:
                    70:ce:da:be:25:53:0f:99:6c:ff:05:da:80:04:7d:
                    ff:0a:11:ca:5a:1a:3a:97:7d:d3:50:66:d3:fd:f4:
                    4b:cc:65:44:a8:b1:67:23:e3:f2:1a:a3:b3:d2:94:
                    9f:e2:2f:b4:1a:13:22:f9:73:b5:f6:12:b6:a5:24:
                    91:58:1f:4e:3f:92:c6:12:ed:de:31:a0:a0:fb:71:
                    72:8f:d4:69:08:10:b9:e5:85:d2:03:8a:8f:fe:33:
                    9b:81:cf:38:96:b5:07:f2:c3:6c:28:61:08:27:d6:
                    d7:70:5e:e3:e0:4a:ce:01:e0:f1:3b:fd:54:60:fa:
                    16:b4:d6:0e:3e:12:20:06:7b:b6:67:90:59:c1:5c:
                    fa:6c:8c:03:ac:7d:3d:bb:d1:08:6e:95:3b:fb:44:
                    77:b9:c6:87:49:7e:93:37:30:21:70:bd:c5:a2:e9:
                    79:69:26:18:c4:b6:05:fb:68:fd:80:b2:1a:c9:81:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:DC:69:CD:C1:56:00:0A:E5:C6:21:46:62:D2:DF:E8:5D:DD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/82b7e9d2-3bf4-34de-a84b-51e944b3dfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.43.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:33:dd:c9:8d:e5:5c:60:18:83:55:9c:cb:70:45:9e:aa:
         11:d9:88:8d:78:17:d3:fc:dc:53:94:53:56:d6:11:06:1a:3f:
         2f:2a:a0:a6:ad:3b:1f:4d:62:3e:79:25:ff:2b:a2:f8:31:f4:
         7f:84:70:17:54:8f:cc:3e:53:30:f6:f9:5f:e4:c0:79:91:64:
         d2:41:b1:42:d9:32:88:30:a8:17:08:64:05:45:1c:23:81:9b:
         9d:70:3e:b3:67:b1:4d:6e:6d:95:88:8c:76:8e:73:39:ad:8d:
         9e:0e:78:b8:02:76:89:51:82:01:25:d8:56:51:5b:42:e6:80:
         28:6a:0b:b6:c7:c2:b2:63:6c:22:a3:47:31:35:73:67:ed:4e:
         ac:2a:26:ce:45:3c:a2:55:d5:00:2b:39:34:b3:90:32:40:d0:
         47:e8:8a:c1:13:5e:bf:d1:d2:d1:d2:5c:09:0a:85:02:f7:f2:
         ac:c5:14:9a:a8:34:a8:5d:be:36:f8:cc:38:a5:3b:87:84:35:
         fb:75:52:98:b8:ec:01:06:ae:7b:a8:cf:f7:eb:19:1b:04:ae:
         e9:b0:ed:82:7a:c9:b0:f8:57:bf:b9:41:4f:57:3e:4d:ba:36:
         de:82:43:2d:63:69:d6:79:81:1a:3e:39:17:b9:4e:5a:06:13:
         c9:ae:14:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABjbEyh80hCeXVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NTkwYzgzZGEtZDE1NC00ZjQzLTlhODktNWYwMTgzYTYxYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfcs0DNKKgLiuNuJZz1huBkMI3P4jP+A1H9/
TN0gGZhWHHM1S9edZPZGcH2KDsHbi+wD886CpznOZkpjxuDtgfeG3msFish3UOBw
ztq+JVMPmWz/BdqABH3/ChHKWho6l33TUGbT/fRLzGVEqLFnI+PyGqOz0pSf4i+0
GhMi+XO19hK2pSSRWB9OP5LGEu3eMaCg+3Fyj9RpCBC55YXSA4qP/jObgc84lrUH
8sNsKGEIJ9bXcF7j4ErOAeDxO/1UYPoWtNYOPhIgBnu2Z5BZwVz6bIwDrH09u9EI
bpU7+0R3ucaHSX6TNzAhcL3Foul5aSYYxLYF+2j9gLIayYEsOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4g3GnNwVYACuXGIUZi0t/oXd1yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODJiN2U5ZDItM2JmNC0z
NGRlLWE4NGItNTFlOTQ0YjNkZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmitJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDmM93JjeVcYBiDVZzLcEWeqhHZiI14F9P83FOUU1bWEQYaPy8qoKat
Ox9NYj55Jf8rovgx9H+EcBdUj8w+UzD2+V/kwHmRZNJBsULZMogwqBcIZAVFHCOB
m51wPrNnsU1ubZWIjHaOczmtjZ4OeLgCdolRggEl2FZRW0LmgChqC7bHwrJjbCKj
RzE1c2ftTqwqJs5FPKJV1QArOTSzkDJA0EfoisETXr/R0tHSXAkKhQL38qzFFJqo
NKhdvjb4zDilO4eENft1Upi47AEGrnuoz/frGRsErumw7YJ6ybD4V7+5QU9XPk26
Nt6CQy1jadZ5gRo+ORe5TloGE8muFEY=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:34:54 2026 by rpki-client