Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/80baea02-17c1-34a0-b5d1-b3ddfa1ab2f5.roa
File:                     80baea02-17c1-34a0-b5d1-b3ddfa1ab2f5.roa (raw, json)
Hash identifier:          HN8NMagVZFgTp3NRW59RRn0aiZ9g1vksxBtKyOQKA/k=
Subject key identifier:   B5:A2:E1:47:83:90:30:1B:D5:98:01:E9:16:C0:01:C9:0B:AC:64:EF
Certificate issuer:       /CN=2d4a2529-c564-4a61-b1f0-5790a3d00ef9
Certificate serial:       010D0C9F4328584D5234F6C6CB649C2AE942B800
Authority key identifier: AE:C3:3D:E1:E0:EB:5C:38:EE:5B:EA:63:26:87:A8:C4:DD:93:0A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/80baea02-17c1-34a0-b5d1-b3ddfa1ab2f5.roa
Signing time:             Sat 28 Mar 2026 18:44:35 +0000
ROA not before:           Sat 28 Mar 2026 18:44:35 +0000
ROA not after:            Wed 27 May 2026 16:26:29 +0000
asID:                     398750
IP address blocks:        199.71.180.0/24 maxlen: 24
                          199.71.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f6:c6:cb:64:9c:2a:e9:42:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4a2529-c564-4a61-b1f0-5790a3d00ef9
        Validity
            Not Before: Mar 28 18:44:35 2026 GMT
            Not After : May 27 16:26:29 2026 GMT
        Subject: CN=320e8e85-a0c6-4398-9be9-39989f1da40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:cd:7d:73:99:fb:a4:f2:e6:41:32:80:4e:
                    19:c4:8b:25:a3:8f:7e:fa:52:08:1f:5b:a8:d5:91:
                    f5:b6:34:24:6f:1b:1c:d1:6b:cf:6d:fb:cc:d3:09:
                    7a:77:19:2a:ac:d1:3f:62:8c:91:3e:89:0b:9e:bd:
                    f3:23:29:1a:58:73:49:2d:2c:1f:e2:4f:a4:91:85:
                    95:e4:e8:ca:02:fd:51:d2:26:39:f0:14:3d:5f:34:
                    19:21:39:ac:e4:cd:73:71:f1:9e:33:9c:26:c9:f1:
                    85:aa:5d:a7:84:4c:8a:0f:35:61:dd:9c:8c:76:3a:
                    2e:3c:0b:71:31:0f:56:4a:b4:eb:cb:a6:13:ca:72:
                    08:49:21:68:93:a4:ce:65:8d:3b:08:52:d8:71:25:
                    42:9e:d4:99:13:7b:53:65:cb:51:9e:11:dc:a0:9d:
                    f1:54:de:d0:42:e2:95:f5:d6:02:1f:1a:fd:4d:04:
                    b9:63:8e:c2:6d:97:56:ce:98:98:69:10:ed:57:5e:
                    35:c1:d7:ff:bb:8c:f8:a4:a1:6d:14:df:fe:a4:6e:
                    f6:64:73:4d:84:f7:2f:db:30:09:b4:08:9d:b4:73:
                    b0:1b:44:4d:e1:45:ee:31:0c:7c:cc:ab:d7:1b:fc:
                    26:37:34:b6:5a:c9:65:0c:09:43:85:e5:73:28:da:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:E1:47:83:90:30:1B:D5:98:01:E9:16:C0:01:C9:0B:AC:64:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/80baea02-17c1-34a0-b5d1-b3ddfa1ab2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C3:3D:E1:E0:EB:5C:38:EE:5B:EA:63:26:87:A8:C4:DD:93:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:51:1c:7b:dc:64:e0:3c:60:7b:5c:93:78:b6:9c:c4:39:
         89:50:05:9e:47:af:95:3a:16:7f:61:da:2f:44:dd:df:a2:40:
         2e:a6:18:3e:70:21:b5:9c:8d:84:8b:6d:a9:ec:92:b9:db:7a:
         b9:e5:40:ff:50:3a:0d:26:68:a8:8c:2a:0b:35:31:b4:85:4d:
         65:ae:63:5c:c8:c8:e8:b5:68:76:11:b9:b8:9c:93:00:0a:73:
         95:64:11:b5:26:a3:2e:09:da:68:50:04:6b:c3:7f:4f:4b:d3:
         ec:e1:74:81:8a:69:04:1a:be:35:69:db:45:b1:dc:e5:bb:3f:
         c9:90:02:0c:91:40:82:0d:5e:8b:66:97:5d:82:2b:26:bb:06:
         33:17:18:2a:ca:5b:79:9e:4c:54:fd:82:37:f6:ee:41:03:61:
         2c:b9:21:a0:ea:7e:e5:38:22:90:c8:f3:95:75:c7:f6:46:a4:
         6e:f6:e4:12:e6:26:a7:be:e9:65:9f:97:2b:e3:57:b0:11:a6:
         f0:e0:74:f6:88:9f:6b:c5:8f:dc:be:60:07:80:87:fd:e4:b2:
         f9:46:74:7f:46:35:4b:5f:d8:3c:39:e2:39:6c:e4:ba:8a:17:
         38:79:84:59:43:1a:f2:f9:0b:7d:46:bd:7d:60:9b:20:f9:e5:
         a8:e6:39:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPbGy2ScKulCuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0YTI1MjktYzU2NC00YTYxLWIxZjAtNTc5MGEzZDAw
ZWY5MB4XDTI2MDMyODE4NDQzNVoXDTI2MDUyNzE2MjYyOVowLzEtMCsGA1UEAxMk
MzIwZThlODUtYTBjNi00Mzk4LTliZTktMzk5ODlmMWRhNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V7NfXOZ+6Ty5kEygE4ZxIslo49++lIIH1uo
1ZH1tjQkbxsc0WvPbfvM0wl6dxkqrNE/YoyRPokLnr3zIykaWHNJLSwf4k+kkYWV
5OjKAv1R0iY58BQ9XzQZITms5M1zcfGeM5wmyfGFql2nhEyKDzVh3ZyMdjouPAtx
MQ9WSrTry6YTynIISSFok6TOZY07CFLYcSVCntSZE3tTZctRnhHcoJ3xVN7QQuKV
9dYCHxr9TQS5Y47CbZdWzpiYaRDtV141wdf/u4z4pKFtFN/+pG72ZHNNhPcv2zAJ
tAidtHOwG0RN4UXuMQx8zKvXG/wmNzS2WsllDAlDheVzKNqtjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWi4UeDkDAb1ZgB6RbAAckLrGTvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZDRh
MjUyOS1jNTY0LTRhNjEtYjFmMC01NzkwYTNkMDBlZjkvODBiYWVhMDItMTdjMS0z
NGEwLWI1ZDEtYjNkZGZhMWFiMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmQ0YTI1MjktYzU2NC00YTYxLWIx
ZjAtNTc5MGEzZDAwZWY5LzJkNGEyNTI5LWM1NjQtNGE2MS1iMWYwLTU3OTBhM2Qw
MGVmOS5jcmwwHwYDVR0jBBgwFoAUrsM94eDrXDjuW+pjJoeoxN2TCsIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZDRhMjUyOS1jNTY0LTRhNjEtYjFmMC01Nzkw
YTNkMDBlZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0e0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuIURx73GTgPGB7XJN4tpzEOYlQBZ5Hr5U6Fn9h2i9E3d+iQC6mGD5w
IbWcjYSLbanskrnbernlQP9QOg0maKiMKgs1MbSFTWWuY1zIyOi1aHYRubickwAK
c5VkEbUmoy4J2mhQBGvDf09L0+zhdIGKaQQavjVp20Wx3OW7P8mQAgyRQIINXotm
l12CKya7BjMXGCrKW3meTFT9gjf27kEDYSy5IaDqfuU4IpDI85V1x/ZGpG725BLm
Jqe+6WWflyvjV7ARpvDgdPaIn2vFj9y+YAeAh/3ksvlGdH9GNUtf2Dw54jls5LqK
Fzh5hFlDGvL5C31GvX1gmyD55ajmOUE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:04 2026 by rpki-client