Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa
File:                     e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa (raw, json)
Hash identifier:          BOrIjChQ9bLnXLo0jl+zlrEOsh1r5GNCUNKuaBwfUck=
Subject key identifier:   53:C9:4C:F2:09:CE:71:8D:9A:15:94:DE:D6:05:F9:7A:2D:7D:05:80
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584E11B434918A918EA506B75040
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     400110
IP address blocks:        184.169.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:34:91:8a:91:8e:a5:06:b7:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=4e11bea7-1b85-4f9f-ad31-48fa7e42d4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:aa:ed:c3:3c:59:f1:09:db:ae:73:80:94:
                    fc:7f:14:59:6e:0f:02:7c:db:0e:19:5d:e9:6d:38:
                    8e:da:1b:be:6d:19:be:b2:6c:36:32:26:a6:d0:57:
                    ba:33:d6:27:08:d8:7a:10:b3:e9:02:bb:5d:d7:e2:
                    8b:3c:b7:13:5f:69:2d:bd:85:8d:c1:81:25:2c:66:
                    97:6c:8b:6b:a8:d7:19:ca:d6:87:fd:b5:f0:1e:8d:
                    d1:68:3b:99:69:97:44:fa:bc:1e:9a:79:97:42:48:
                    c1:fb:41:a5:dc:2f:d0:0f:1b:08:3d:93:0e:7d:89:
                    53:70:d1:d6:10:d8:11:35:bc:b7:c5:32:14:e0:0a:
                    9d:8c:b9:5f:7c:b3:29:09:db:83:4a:08:53:79:92:
                    44:97:3f:d4:5b:ef:97:4e:86:7b:86:e5:88:e2:34:
                    a9:23:af:82:e9:56:8d:95:91:a4:c3:96:e6:18:00:
                    3a:45:d0:fb:b9:24:0c:ba:41:79:df:de:78:43:9b:
                    6a:44:b1:c5:32:88:c0:d0:99:5d:5c:a9:6b:c6:e6:
                    25:12:e5:5b:5d:95:49:0f:31:15:37:b6:62:59:58:
                    cd:a4:05:9f:65:78:b4:40:12:c6:a4:4c:e8:90:7b:
                    7a:6b:b2:1f:83:52:f9:75:b6:78:66:69:a8:14:64:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C9:4C:F2:09:CE:71:8D:9A:15:94:DE:D6:05:F9:7A:2D:7D:05:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:76:0c:92:f3:4d:a3:f2:55:7e:29:46:f8:16:b2:e4:91:
         87:78:87:dd:6a:10:17:20:32:9e:bb:d9:0b:75:2d:c9:4d:e1:
         22:ca:24:b0:8a:78:46:13:43:53:09:97:da:e2:73:47:c1:9e:
         62:30:f6:37:da:0d:8d:28:7f:2d:8c:cd:5a:5a:8c:d7:c4:e4:
         f4:3b:15:e0:d5:e9:72:aa:81:1c:87:85:9f:19:c6:3d:c3:97:
         2a:78:dd:a8:de:12:d0:81:40:ed:48:d2:71:c9:31:5b:f5:c2:
         9a:2a:37:93:f8:76:69:58:b2:a8:2d:fd:48:8a:b5:48:4d:53:
         58:7f:b3:ae:82:74:f2:93:c7:ec:5d:ca:07:51:c0:d3:6a:7a:
         1a:ce:09:4c:a1:00:63:2a:29:c3:c6:1b:ea:b6:a0:1f:29:15:
         fa:f9:69:e5:d9:49:d6:78:83:8a:4d:6f:5d:bd:84:1a:39:12:
         f6:06:96:ec:65:70:8b:3b:c4:4b:3b:e7:7e:01:fe:05:a7:3b:
         0d:62:40:1c:a7:82:da:c3:37:63:91:33:65:8b:fa:25:79:d0:
         e7:87:ae:6e:04:ae:13:3f:f7:f0:3c:f0:e4:18:d6:92:0f:6b:
         42:59:aa:b6:45:9e:04:d7:9e:ef:aa:a7:6f:43:33:f2:1e:67:
         2b:1a:4f:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtDSRipGOpQa3UEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk
Mjk4MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk
NGUxMWJlYTctMWI4NS00ZjlmLWFkMzEtNDhmYTdlNDJkNGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXaq7cM8WfEJ265zgJT8fxRZbg8CfNsOGV3p
bTiO2hu+bRm+smw2Miam0Fe6M9YnCNh6ELPpArtd1+KLPLcTX2ktvYWNwYElLGaX
bItrqNcZytaH/bXwHo3RaDuZaZdE+rwemnmXQkjB+0Gl3C/QDxsIPZMOfYlTcNHW
ENgRNby3xTIU4AqdjLlffLMpCduDSghTeZJElz/UW++XToZ7huWI4jSpI6+C6VaN
lZGkw5bmGAA6RdD7uSQMukF53954Q5tqRLHFMojA0JldXKlrxuYlEuVbXZVJDzEV
N7ZiWVjNpAWfZXi0QBLGpEzokHt6a7Ifg1L5dbZ4ZmmoFGRJSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPJTPIJznGNmhWU3tYF+XotfQWAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm
ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvZTAzMGVlMTItNzA3My0z
YTM5LTk3YzAtNGE5NmYxOWUyYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz
OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi
ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj
NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXtdgyS802j8lV+KUb4FrLkkYd4h91qEBcgMp672Qt1LclN4SLKJLCK
eEYTQ1MJl9ric0fBnmIw9jfaDY0ofy2MzVpajNfE5PQ7FeDV6XKqgRyHhZ8Zxj3D
lyp43ajeEtCBQO1I0nHJMVv1wpoqN5P4dmlYsqgt/UiKtUhNU1h/s66CdPKTx+xd
ygdRwNNqehrOCUyhAGMqKcPGG+q2oB8pFfr5aeXZSdZ4g4pNb129hBo5EvYGluxl
cIs7xEs7534B/gWnOw1iQByngtrDN2ORM2WL+iV50OeHrm4ErhM/9/A88OQY1pIP
a0JZqrZFngTXnu+qp29DM/IeZysaT60=
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:51 2026 by rpki-client