Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa
File:                     2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa (raw, json)
Hash identifier:          r70gHUA9ZgvdvqmNKGY2J05RseHpy8S2L+xwmz7yKYA=
Subject key identifier:   2C:94:48:77:0D:50:43:77:69:B9:E4:4D:31:BA:AB:4F:78:96:CE:24
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584DBB445B5D2C161DEE50E433C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa
Signing time:             Tue 05 May 2026 09:55:28 +0000
ROA not before:           Tue 05 May 2026 09:55:28 +0000
ROA not after:            Mon 03 Aug 2026 09:55:28 +0000
asID:                     31898
IP address blocks:        158.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:44:5b:5d:2c:16:1d:ee:50:e4:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May  5 09:55:28 2026 GMT
            Not After : Aug  3 09:55:28 2026 GMT
        Subject: CN=d93f7c6f-82c4-4576-9659-f9ca8e080577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:23:97:40:ef:0a:c4:00:0d:ed:96:cd:c3:
                    a3:5c:88:42:77:58:a8:4e:95:89:a9:39:9a:2b:f4:
                    1e:11:36:46:74:50:26:9f:11:56:ec:74:8d:ee:05:
                    5a:a0:2d:0d:9e:2c:b1:28:a5:69:55:f6:cf:72:70:
                    e0:62:77:59:26:a0:38:ac:3f:44:0b:ca:1a:32:a4:
                    22:0e:fe:24:8c:2f:93:87:c9:94:08:35:0e:d5:59:
                    e7:65:63:b1:09:33:94:54:7c:03:7c:9f:d3:66:1b:
                    d8:2e:0a:83:e1:ec:f4:ea:99:70:86:58:33:2d:78:
                    fc:80:53:32:39:60:0d:60:a2:c2:5e:92:18:e6:ca:
                    36:09:6a:19:e2:90:5c:cc:96:a5:ad:ae:ed:76:93:
                    67:26:c6:02:c7:3f:41:f2:44:83:f1:9f:49:f1:05:
                    65:07:50:a0:cc:70:00:8d:5e:0e:d6:d6:13:11:ed:
                    10:3e:aa:2f:f9:53:de:d2:ca:41:1a:1c:9e:ca:38:
                    e9:6b:2c:19:a4:5b:93:63:96:60:df:2f:44:e2:b5:
                    e5:b6:cc:8f:b7:d0:9c:92:29:6b:12:56:3a:96:1c:
                    95:8a:7c:93:48:ab:52:4c:bd:58:cf:88:54:da:7e:
                    81:38:ff:96:63:0e:53:79:90:45:b3:36:d5:d8:7f:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:48:77:0D:50:43:77:69:B9:E4:4D:31:BA:AB:4F:78:96:CE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:23:2f:6b:e5:2d:75:04:1a:6b:b1:07:c4:8a:5c:81:d2:
         25:11:09:11:53:ea:b2:0a:fe:69:e8:e0:5e:30:5c:8e:74:d4:
         f9:6e:de:bc:a0:ae:fe:7e:6d:aa:1f:02:8e:a5:54:7c:f7:c6:
         8e:20:f9:f6:9c:b8:05:1b:99:31:16:51:6a:e2:06:8b:7d:22:
         51:90:b0:12:52:eb:4c:2f:78:8b:5d:ef:92:8b:a0:fb:a3:a9:
         93:eb:f1:7c:98:11:af:e0:98:0d:c5:3b:01:9e:93:a2:21:e8:
         84:72:75:e2:95:4e:76:1b:bd:23:a2:fc:a0:f6:f0:cf:8d:4c:
         67:75:79:35:8c:42:19:20:91:93:4b:9e:f7:4c:dd:e1:a3:6b:
         5e:cb:2a:a7:fe:ce:29:36:8e:13:30:5a:eb:d2:f6:9a:9e:9b:
         cf:4e:ed:9a:0c:55:22:d1:1f:23:0d:dd:e9:34:07:bd:d8:5e:
         90:04:9b:17:6f:89:ca:ea:25:c4:a4:3c:dd:1a:88:23:c1:cd:
         37:b6:1c:a1:46:3b:93:e6:b2:e5:2e:c7:23:e9:28:82:07:50:
         d5:bc:ed:7d:25:c8:2b:97:9c:62:51:20:b6:d9:9f:53:b2:a9:
         45:75:da:8b:7a:50:89:2d:6a:07:28:d5:fa:44:35:41:1a:11:
         cd:bb:f6:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27RFtdLBYd7lDkM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDUwNTA5NTUyOFoXDTI2MDgwMzA5NTUyOFowLzEtMCsGA1UEAxMk
ZDkzZjdjNmYtODJjNC00NTc2LTk2NTktZjljYThlMDgwNTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqQjl0DvCsQADe2WzcOjXIhCd1ioTpWJqTma
K/QeETZGdFAmnxFW7HSN7gVaoC0NniyxKKVpVfbPcnDgYndZJqA4rD9EC8oaMqQi
Dv4kjC+Th8mUCDUO1VnnZWOxCTOUVHwDfJ/TZhvYLgqD4ez06plwhlgzLXj8gFMy
OWANYKLCXpIY5so2CWoZ4pBczJalra7tdpNnJsYCxz9B8kSD8Z9J8QVlB1CgzHAA
jV4O1tYTEe0QPqov+VPe0spBGhyeyjjpaywZpFuTY5Zg3y9E4rXltsyPt9Cckilr
ElY6lhyVinyTSKtSTL1Yz4hU2n6BOP+WYw5TeZBFszbV2H8a2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyUSHcNUEN3abnkTTG6q094ls4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMmYzZGU4N2YtZWJlNS0z
ZWEwLTkzODMtOWNhMjFmMDRhYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDqIy9r5S11BBprsQfEilyB0iURCRFT6rIK/mno4F4wXI501Plu3ryg
rv5+baofAo6lVHz3xo4g+facuAUbmTEWUWriBot9IlGQsBJS60wveItd75KLoPuj
qZPr8XyYEa/gmA3FOwGek6Ih6IRydeKVTnYbvSOi/KD28M+NTGd1eTWMQhkgkZNL
nvdM3eGja17LKqf+zik2jhMwWuvS9pqem89O7ZoMVSLRHyMN3ek0B73YXpAEmxdv
icrqJcSkPN0aiCPBzTe2HKFGO5PmsuUuxyPpKIIHUNW87X0lyCuXnGJRILbZn1Oy
qUV12ot6UIktagco1fpENUEaEc279i0=
-----END CERTIFICATE-----
Generated at Thu May 7 06:02:38 2026 by rpki-client