Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa
File:                     b1f9516f-a7c0-3fed-9947-ad133c893da7.roa (raw, json)
Hash identifier:          WafMEminsyBog/nDysPpNseZh2BrEvNO2ZnKE1OychU=
Subject key identifier:   43:DC:F4:81:DE:F8:DD:B5:AD:6A:1C:17:88:5F:07:52:1A:A1:23:17
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584D6944FD5C37E5C87FC276DBC0
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     21898
IP address blocks:        130.250.153.0/24 maxlen: 24
                          130.250.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:fd:5c:37:e5:c8:7f:c2:76:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=fce88a00-0123-4946-b40b-b3bc772c6a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:56:79:9b:54:93:0e:e2:0a:fe:09:95:1a:
                    e5:05:b9:50:e9:b9:e7:b1:ce:a2:fb:43:51:a4:52:
                    02:c0:be:1b:d9:74:8f:ea:d3:41:d9:60:8c:5e:1a:
                    0f:99:06:02:78:73:06:af:eb:bb:04:ff:87:49:08:
                    06:ba:0f:59:3f:e6:4e:cd:4b:22:cd:f9:46:39:c6:
                    4a:58:f4:68:d6:ff:5e:97:bd:b7:de:f2:cf:eb:f2:
                    60:8f:b2:bb:36:9b:a9:fc:e9:c3:d0:05:e5:85:dd:
                    f2:64:af:ab:8e:e8:a5:f2:13:17:64:da:b0:99:39:
                    bc:14:a3:6d:cc:a1:0e:8b:c7:42:04:20:d1:26:cd:
                    3a:7c:ab:ff:57:dd:a9:4d:b0:42:82:97:db:05:bc:
                    80:7b:de:49:80:6b:a8:b0:d0:51:73:21:21:3a:c1:
                    21:54:2c:12:a0:57:11:44:b4:0b:86:2e:9a:35:a0:
                    33:c8:55:ee:74:b8:ca:08:e3:d7:6b:6e:18:82:81:
                    da:53:cf:92:61:c7:11:35:41:bc:13:fd:6c:0d:8b:
                    fa:b0:95:44:c6:1e:e8:b2:d4:20:93:95:21:5c:51:
                    da:1c:e0:41:c8:92:08:a2:4a:6c:99:9c:8c:5a:54:
                    e6:c9:92:f1:68:a2:c9:3f:f4:39:71:b1:e8:d9:5a:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DC:F4:81:DE:F8:DD:B5:AD:6A:1C:17:88:5F:07:52:1A:A1:23:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.153.0-130.250.155.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:29:8c:19:d1:11:aa:2e:23:b8:98:3c:66:e9:d4:b4:e3:
         b6:69:c2:ac:80:0e:ad:ed:cd:e0:c2:ca:20:47:cb:5a:78:15:
         3e:40:c5:3c:a5:ae:44:d5:d2:50:66:b5:6b:c0:12:1a:52:35:
         09:dc:4f:dc:d0:ef:da:99:ce:7d:9f:6c:f4:2f:03:d5:e3:f3:
         9f:fe:49:31:82:d7:75:0d:14:8e:75:ab:81:43:03:95:77:13:
         ed:0c:10:dc:c8:3c:40:ab:5e:4f:37:d4:0b:c6:06:9a:8c:f3:
         80:7d:83:a7:53:5c:89:35:1b:91:71:22:6f:b7:61:6a:e8:25:
         82:cd:55:90:5b:21:0e:10:e5:33:b9:0a:12:15:69:a0:8e:7c:
         d8:0d:6e:ef:17:dd:40:ea:9e:b6:e5:4b:6d:5c:a6:94:c7:60:
         bd:84:6c:d0:d7:86:65:dc:8b:36:86:c2:93:68:5f:0c:07:82:
         9d:7e:d1:8b:40:b3:6b:73:28:4f:81:1f:2c:f8:4f:3c:f0:fe:
         60:cf:94:4c:41:7e:46:1a:a0:bf:84:3d:9d:3d:88:b7:63:fd:
         d9:48:3f:cf:01:98:41:15:a6:42:d7:d5:63:93:84:69:13:6c:
         7f:80:47:1c:f7:ea:8b:95:11:07:85:50:d5:35:67:52:8c:15:
         24:0c:c4:e3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1pRP1cN+XIf8J228AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3
MDlkMB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk
ZmNlODhhMDAtMDEyMy00OTQ2LWI0MGItYjNiYzc3MmM2YTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKxWeZtUkw7iCv4JlRrlBblQ6bnnsc6i+0NR
pFICwL4b2XSP6tNB2WCMXhoPmQYCeHMGr+u7BP+HSQgGug9ZP+ZOzUsizflGOcZK
WPRo1v9el7233vLP6/Jgj7K7Npup/OnD0AXlhd3yZK+rjuil8hMXZNqwmTm8FKNt
zKEOi8dCBCDRJs06fKv/V92pTbBCgpfbBbyAe95JgGuosNBRcyEhOsEhVCwSoFcR
RLQLhi6aNaAzyFXudLjKCOPXa24YgoHaU8+SYccRNUG8E/1sDYv6sJVExh7ostQg
k5UhXFHaHOBByJIIokpsmZyMWlTmyZLxaKLJP/Q5cbHo2VrV5wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEPc9IHe+N21rWocF4hfB1IaoSMXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl
MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvYjFmOTUxNmYtYTdjMC0z
ZmVkLTk5NDctYWQxMzNjODkzZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll
NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi
NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj
ODdmYjcwOWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACC+pkD
BAKC+pgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAbN4pjBnREaouI7iYPGbp1LTjtmnCrIAOre3N4MLKIEfL
WngVPkDFPKWuRNXSUGa1a8ASGlI1CdxP3NDv2pnOfZ9s9C8D1ePzn/5JMYLXdQ0U
jnWrgUMDlXcT7QwQ3Mg8QKteTzfUC8YGmozzgH2Dp1NciTUbkXEib7dhauglgs1V
kFshDhDlM7kKEhVpoI582A1u7xfdQOqetuVLbVymlMdgvYRs0NeGZdyLNobCk2hf
DAeCnX7Ri0Cza3MoT4EfLPhPPPD+YM+UTEF+Rhqgv4Q9nT2It2P92Ug/zwGYQRWm
QtfVY5OEaRNsf4BHHPfqi5URB4VQ1TVnUowVJAzE4w==
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:00:22 2026 by rpki-client