Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
File:                     b5a50cd5-cd84-3688-aa95-558c12a7c337.roa (raw, json)
Hash identifier:          LrpN1Sy8FIPIxCJT/fL2qEiO+m2RZ+Q0UYH9NpUlUR4=
Subject key identifier:   75:81:5C:9C:70:34:83:8B:E2:78:F8:54:C1:7C:1A:37:41:D1:CC:58
Certificate issuer:       /CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
Certificate serial:       010D0C9F4328584E35FF21D0AE72800536A1A770
Authority key identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     22594
IP address blocks:        134.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:21:d0:ae:72:80:05:36:a1:a7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=0a7dd4bf-8846-4c60-9286-749c034b3977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:38:41:87:82:d4:db:d6:4e:06:ca:3c:1a:
                    f6:6e:da:62:9c:48:b1:26:a8:28:cd:71:e3:7d:71:
                    d7:6c:07:ad:de:67:fd:44:c6:7f:96:0a:41:e9:15:
                    46:03:f6:5b:fc:f3:a6:ef:5d:90:c3:63:71:13:ee:
                    1d:63:48:ac:f1:cd:ec:23:42:ce:d8:f1:a9:9a:18:
                    c7:70:7c:8d:3b:09:a5:3d:6a:a2:76:c1:a4:39:86:
                    02:6f:89:3c:9d:d8:ed:7e:be:46:31:35:d6:2d:ba:
                    0e:c6:d2:34:a5:ee:bf:fd:c8:d3:bb:c8:1e:95:10:
                    31:ee:5c:f7:c3:f8:e6:55:34:47:88:69:01:93:5b:
                    bf:be:77:10:05:09:6c:c9:3c:9d:e2:69:fc:92:13:
                    62:9a:d1:a9:fb:02:a6:dd:d3:1a:02:31:ad:cd:23:
                    e1:de:6b:68:ca:37:bb:6b:6d:fb:65:57:80:f3:37:
                    3c:f5:9c:d0:9e:16:50:25:2d:5a:41:bb:3c:3f:2b:
                    87:08:4c:a6:f6:51:8a:b4:62:05:b2:7a:ae:10:45:
                    d5:93:00:8e:12:f4:85:94:16:1b:ac:b2:40:ec:ce:
                    02:9f:32:95:4f:e3:ca:a1:53:a0:be:82:37:a3:53:
                    a3:ad:14:6d:e0:e5:32:9b:db:93:07:dd:8b:4b:bb:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:5C:9C:70:34:83:8B:E2:78:F8:54:C1:7C:1A:37:41:D1:CC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl

            X509v3 Authority Key Identifier:
                keyid:4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fa:b8:3e:01:57:36:17:17:97:e8:f2:f3:c0:4a:bd:9e:fe:
         b2:0b:f6:10:76:78:60:6c:b6:87:60:47:cc:34:92:ee:7d:fa:
         e2:02:34:73:ba:5f:dc:dd:ae:40:73:a3:6a:20:17:29:6f:e8:
         d9:71:0c:d7:1d:bc:4c:bc:b6:84:c1:0e:48:a4:29:16:e6:31:
         0d:cf:79:51:79:60:f5:54:f6:86:35:35:84:61:03:94:60:57:
         b1:de:e6:09:0e:bb:78:67:3a:81:d6:f9:25:e7:d0:e3:36:83:
         24:f2:6c:73:22:c6:db:53:18:4c:43:e8:3f:ba:49:eb:24:e2:
         75:7a:34:2d:f8:dc:f4:08:93:3d:e1:80:d2:2d:25:d7:7e:1b:
         2c:e9:c1:51:e1:3b:86:51:8c:70:cf:7b:20:3c:48:49:e1:41:
         86:fc:1a:a6:76:71:e6:d7:01:e1:3e:98:bf:02:2e:8f:25:10:
         33:cb:e6:d9:2d:5b:17:83:4e:a6:09:7c:e6:f9:fe:c1:1b:42:
         56:ab:36:2f:1f:fa:72:8f:c5:eb:8e:e7:84:5e:c8:e2:7d:a1:
         62:f2:d4:00:5a:bd:f3:1b:e1:a6:70:87:ef:5f:0c:83:07:28:
         7c:09:e6:69:be:81:15:1f:9b:f6:c1:3f:4c:72:38:a0:85:e3:
         e6:ce:87:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE41/yHQrnKABTahp3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q1Y2FjODctY2YwNS00NGU4LTkxMDMtYzI2OWNmNjdj
MDRiMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MGE3ZGQ0YmYtODg0Ni00YzYwLTkyODYtNzQ5YzAzNGIzOTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgg4QYeC1NvWTgbKPBr2btpinEixJqgozXHj
fXHXbAet3mf9RMZ/lgpB6RVGA/Zb/POm712Qw2NxE+4dY0is8c3sI0LO2PGpmhjH
cHyNOwmlPWqidsGkOYYCb4k8ndjtfr5GMTXWLboOxtI0pe6//cjTu8gelRAx7lz3
w/jmVTRHiGkBk1u/vncQBQlsyTyd4mn8khNimtGp+wKm3dMaAjGtzSPh3mtoyje7
a237ZVeA8zc89ZzQnhZQJS1aQbs8PyuHCEym9lGKtGIFsnquEEXVkwCOEvSFlBYb
rLJA7M4CnzKVT+PKoVOgvoI3o1OjrRRt4OUym9uTB92LS7vjUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHWBXJxwNIOL4nj4VMF8GjdB0cxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZDVj
YWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5Y2Y2N2MwNGIvYjVhNTBjZDUtY2Q4NC0z
Njg4LWFhOTUtNTU4YzEyYTdjMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2Q1Y2FjODctY2YwNS00NGU4LTkx
MDMtYzI2OWNmNjdjMDRiLzdkNWNhYzg3LWNmMDUtNDRlOC05MTAzLWMyNjljZjY3
YzA0Yi5jcmwwHwYDVR0jBBgwFoAUTpXaPKnosYDX5f2SnkB+ZM4Q/q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZDVjYWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5
Y2Y2N2MwNGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhqEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtfq4PgFXNhcXl+jy88BKvZ7+sgv2EHZ4YGy2h2BHzDSS7n364gI0c7pf
3N2uQHOjaiAXKW/o2XEM1x28TLy2hMEOSKQpFuYxDc95UXlg9VT2hjU1hGEDlGBX
sd7mCQ67eGc6gdb5JefQ4zaDJPJscyLG21MYTEPoP7pJ6yTidXo0Lfjc9AiTPeGA
0i0l134bLOnBUeE7hlGMcM97IDxISeFBhvwapnZx5tcB4T6YvwIujyUQM8vm2S1b
F4NOpgl85vn+wRtCVqs2Lx/6co/F647nhF7I4n2hYvLUAFq98xvhpnCH718Mgwco
fAnmab6BFR+b9sE/THI4oIXj5s6H5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 7 21:58:39 2026 by rpki-client