Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
File:                     20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json)
Hash identifier:          zEtqnqIszeBR0IYH75XqxT6gbeMYwfMahD/10taHFxQ=
Subject key identifier:   A3:16:E2:07:B1:93:85:6A:E7:F5:AF:41:A7:26:B3:57:E3:BE:DB:09
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E3A2F388D4AACF6CC3607B278
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     54994
IP address blocks:        157.185.131.0/24 maxlen: 24
                          157.185.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:38:8d:4a:ac:f6:cc:36:07:b2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=b01bdc7d-b6b0-43fa-96ab-e21afa5ebc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:8b:ef:be:65:f7:4f:e3:59:15:7b:85:7c:
                    b2:77:39:1f:5f:f8:69:1b:b5:96:75:fd:a2:ec:01:
                    66:df:5b:cb:51:e1:e7:74:76:96:d8:dc:5d:66:61:
                    ba:f5:86:8b:0d:c6:a0:ef:fe:0f:ff:46:b2:24:78:
                    36:58:d5:21:bd:b9:19:6d:97:8d:9b:65:b9:51:53:
                    f2:88:3a:1d:05:16:1d:02:3c:1b:ae:63:39:13:e8:
                    c7:90:15:4f:8c:7d:1b:d0:82:39:15:d9:ed:2e:34:
                    0e:b2:5b:28:0e:bf:6d:20:ae:55:8e:1e:ed:c5:83:
                    5f:2d:97:b8:59:bd:b3:46:5e:dc:ee:16:b7:9a:22:
                    bb:1a:ef:19:7d:7f:f1:02:1b:78:88:5b:fd:24:64:
                    18:41:57:ca:fe:02:23:28:db:9e:7e:78:fd:55:72:
                    ba:48:3c:65:5a:dd:91:f7:26:b6:79:57:72:57:35:
                    ae:40:ff:7b:02:53:23:40:77:e1:5a:3f:1c:0c:d9:
                    1f:3d:a4:93:0e:44:b5:92:db:5a:4c:89:24:ef:8c:
                    eb:8d:da:b4:05:d4:29:0d:8c:a4:1b:0e:6f:40:b1:
                    57:c1:04:47:5e:a8:6d:f1:71:cf:ca:f2:63:d8:b9:
                    ac:00:96:75:12:f3:d2:26:25:bb:0c:a6:ab:c5:81:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:E2:07:B1:93:85:6A:E7:F5:AF:41:A7:26:B3:57:E3:BE:DB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.131.0-157.185.132.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:60:09:f9:c9:a5:43:2c:aa:12:5c:f2:bc:a6:2f:ab:72:07:
         3a:8d:a6:14:7e:12:4f:34:4d:33:07:e1:05:f7:e6:06:e4:b1:
         ea:66:e8:54:fc:85:0d:1f:a6:6a:67:c5:c0:43:72:89:53:12:
         b6:91:12:83:cb:90:be:30:85:a9:37:cf:bb:d1:0e:e1:fb:46:
         1b:ab:22:0a:af:8e:c8:6a:04:cb:3c:08:92:e9:a5:2a:4a:52:
         d3:30:0d:4e:a4:62:13:de:96:61:a7:fb:05:95:40:1f:13:e0:
         c5:04:69:a1:49:1a:65:5f:39:d3:6b:de:6e:a8:1f:3c:91:78:
         64:b5:10:93:88:ad:75:a7:d7:5d:d8:0c:0b:83:a6:8c:19:5c:
         5c:da:42:52:2f:54:ce:6b:3e:2c:f5:3b:d6:d2:52:bd:6c:9c:
         fe:7d:2d:e7:ad:b9:78:90:55:e8:e1:8a:7f:a8:20:96:60:10:
         ea:9f:02:4f:6c:e4:01:c2:03:bc:e9:b2:3c:ae:af:69:ff:ac:
         4d:0a:6c:84:a8:e0:e3:8b:17:92:be:62:e2:82:7c:81:9d:33:
         66:9f:d6:75:0e:49:8a:d8:b6:4c:05:65:bb:3c:14:e2:a1:38:
         8d:4b:10:0f:e4:77:de:0c:26:50:1f:83:23:ad:e4:bf:5c:62:
         d0:d0:ff:15
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE46LziNSqz2zDYHsngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
YjAxYmRjN2QtYjZiMC00M2ZhLTk2YWItZTIxYWZhNWViYzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqeL775l90/jWRV7hXyydzkfX/hpG7WWdf2i
7AFm31vLUeHndHaW2NxdZmG69YaLDcag7/4P/0ayJHg2WNUhvbkZbZeNm2W5UVPy
iDodBRYdAjwbrmM5E+jHkBVPjH0b0II5FdntLjQOslsoDr9tIK5Vjh7txYNfLZe4
Wb2zRl7c7ha3miK7Gu8ZfX/xAht4iFv9JGQYQVfK/gIjKNuefnj9VXK6SDxlWt2R
9ya2eVdyVzWuQP97AlMjQHfhWj8cDNkfPaSTDkS1kttaTIkk74zrjdq0BdQpDYyk
Gw5vQLFXwQRHXqht8XHPyvJj2LmsAJZ1EvPSJiW7DKarxYE41QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKMW4gexk4Vq5/WvQacms1fjvtsJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjBlYjlhOGQtYmFiNS0z
ZTVjLWEwMzYtNzlhODM0OWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACduYMD
BACduYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfGAJ+cmlQyyqElzyvKYvq3IHOo2mFH4STzRNMwfhBffm
BuSx6mboVPyFDR+mamfFwENyiVMStpESg8uQvjCFqTfPu9EO4ftGG6siCq+OyGoE
yzwIkumlKkpS0zANTqRiE96WYaf7BZVAHxPgxQRpoUkaZV8502vebqgfPJF4ZLUQ
k4itdafXXdgMC4OmjBlcXNpCUi9Uzms+LPU71tJSvWyc/n0t5625eJBV6OGKf6gg
lmAQ6p8CT2zkAcIDvOmyPK6vaf+sTQpshKjg44sXkr5i4oJ8gZ0zZp/WdQ5Jiti2
TAVluzwU4qE4jUsQD+R33gwmUB+DI63kv1xi0ND/FQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:46 2026 by rpki-client