Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e073bf8-8b84-312e-951c-c70d05b78290.roa
File:                     8e073bf8-8b84-312e-951c-c70d05b78290.roa (raw, json)
Hash identifier:          t+k0TF3kYXd8CBUyn69uOP2qyqjU0y+O95FRuIepTT0=
Subject key identifier:   DC:7D:BD:7B:2F:26:68:C1:99:A3:AD:5B:DB:A2:86:C7:35:29:51:9B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E307741989189303A838FFEE0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e073bf8-8b84-312e-951c-c70d05b78290.roa
Signing time:             Tue 16 Jun 2026 09:27:36 +0000
ROA not before:           Tue 16 Jun 2026 09:27:36 +0000
ROA not after:            Mon 14 Sep 2026 09:27:36 +0000
asID:                     54994
IP address blocks:        153.43.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:77:41:98:91:89:30:3a:83:8f:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun 16 09:27:36 2026 GMT
            Not After : Sep 14 09:27:36 2026 GMT
        Subject: CN=2c7ec380-883a-47c9-b1ee-0b7647ff6d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:1b:6c:36:45:b4:56:99:78:f2:ab:e0:54:
                    29:17:63:7e:61:ec:79:3d:e2:81:30:c4:8a:8a:06:
                    4d:1e:69:d1:70:16:25:03:4a:a6:0e:ca:27:33:7b:
                    27:08:eb:8a:ea:da:57:a6:bc:f7:c2:0f:06:35:24:
                    74:9b:e2:3a:48:3a:44:d3:9a:21:58:b2:33:f9:0e:
                    d9:d5:59:2f:a7:88:0b:c9:9b:16:37:99:0e:9f:7c:
                    22:8c:b5:27:aa:3d:7d:a5:ea:03:16:ce:64:0a:ae:
                    ba:82:1c:d3:8b:8b:51:3f:bb:00:41:fd:5c:ea:f8:
                    db:bc:87:7c:e8:2a:c4:83:b4:64:12:49:b1:81:62:
                    95:cb:3a:f9:09:cd:48:75:ac:bc:f7:c4:32:79:a9:
                    b3:8b:f0:0d:46:28:25:65:d6:8d:ce:3f:17:5f:6c:
                    34:2a:3e:ae:57:ac:e1:b3:e1:6d:13:31:a1:26:9f:
                    6d:b0:86:ad:b0:a4:56:27:22:e4:6e:ee:b4:59:bd:
                    5c:0a:37:6e:48:8c:25:79:ad:29:96:f8:84:28:6d:
                    69:b0:3d:89:3a:e2:fd:6b:3f:9d:0f:ce:6c:ff:15:
                    ed:a3:28:9e:22:66:ac:ff:20:87:34:8a:9e:2c:4c:
                    b4:1a:b6:dd:a3:e8:ba:dd:8d:03:01:96:35:8f:08:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7D:BD:7B:2F:26:68:C1:99:A3:AD:5B:DB:A2:86:C7:35:29:51:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e073bf8-8b84-312e-951c-c70d05b78290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:0a:23:d4:b2:13:80:f3:43:c1:f7:e6:91:d4:95:3f:9d:
         db:b8:cf:45:b3:36:ad:06:82:13:81:5a:a8:8f:04:82:4c:73:
         31:45:c7:d1:81:91:8a:01:f7:e3:42:d3:ef:a2:2a:4b:19:d3:
         80:06:8a:70:6b:89:30:e4:5a:38:9e:e5:90:1b:47:d1:ee:23:
         d4:01:48:44:65:b3:2b:a5:f9:fd:da:cc:e7:03:07:19:8b:cb:
         10:8f:b1:d4:20:9e:03:9e:db:13:2a:70:c7:c7:b2:bf:b6:ad:
         26:6b:e5:5d:25:c3:de:86:c5:69:ab:07:6e:39:83:b2:dd:ef:
         dc:23:30:e3:b6:97:d5:37:01:02:91:20:ef:a4:03:b9:f3:0e:
         b0:73:99:c6:23:30:95:33:b4:55:91:ad:6c:2c:63:51:7e:bf:
         b9:5a:7d:ba:eb:28:f1:26:c1:df:76:e6:4c:76:1b:f9:4f:cd:
         0b:dc:68:a9:14:c4:cf:bb:ed:aa:fe:30:f5:63:b4:9a:ba:3f:
         35:a6:91:ba:46:d2:d2:c2:b2:f7:25:3b:70:39:2a:06:43:14:
         8e:8d:fe:45:28:02:54:6d:69:f8:1f:ad:69:5e:bd:9b:17:8a:
         c1:f0:60:12:a3:c2:8a:3e:db:95:98:a1:0e:83:2d:a1:26:bd:
         50:f1:32:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4wd0GYkYkwOoOP/uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDYxNjA5MjczNloXDTI2MDkxNDA5MjczNlowLzEtMCsGA1UEAxMk
MmM3ZWMzODAtODgzYS00N2M5LWIxZWUtMGI3NjQ3ZmY2ZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyYbbDZFtFaZePKr4FQpF2N+Yex5PeKBMMSK
igZNHmnRcBYlA0qmDsonM3snCOuK6tpXprz3wg8GNSR0m+I6SDpE05ohWLIz+Q7Z
1Vkvp4gLyZsWN5kOn3wijLUnqj19peoDFs5kCq66ghzTi4tRP7sAQf1c6vjbvId8
6CrEg7RkEkmxgWKVyzr5Cc1Iday898Qyeamzi/ANRiglZdaNzj8XX2w0Kj6uV6zh
s+FtEzGhJp9tsIatsKRWJyLkbu60Wb1cCjduSIwlea0plviEKG1psD2JOuL9az+d
D85s/xXtoyieImas/yCHNIqeLEy0Grbdo+i63Y0DAZY1jwjM6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNx9vXsvJmjBmaOtW9uihsc1KVGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGUwNzNiZjgtOGI4NC0z
MTJlLTk1MWMtYzcwZDA1Yjc4MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8nCiPUshOA80PB9+aR1JU/ndu4z0WzNq0GghOBWqiPBIJMczFFx9GB
kYoB9+NC0++iKksZ04AGinBriTDkWjie5ZAbR9HuI9QBSERlsyul+f3azOcDBxmL
yxCPsdQgngOe2xMqcMfHsr+2rSZr5V0lw96GxWmrB245g7Ld79wjMOO2l9U3AQKR
IO+kA7nzDrBzmcYjMJUztFWRrWwsY1F+v7lafbrrKPEmwd925kx2G/lPzQvcaKkU
xM+77ar+MPVjtJq6PzWmkbpG0tLCsvclO3A5KgZDFI6N/kUoAlRtafgfrWlevZsX
isHwYBKjwoo+25WYoQ6DLaEmvVDxMqo=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:17 2026 by rpki-client