Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa
File:                     941148cd-44d7-351b-9303-cf04b68bb6de.roa (raw, json)
Hash identifier:          Kjm/wnqlFEv42SEa0kfNhB1KMpn9jdRJQkBAVlYOnD4=
Subject key identifier:   90:8C:39:15:01:55:B0:B4:2E:5A:B7:54:67:5C:C1:CF:92:64:C6:6B
Certificate issuer:       /CN=05791d14-11f0-4527-a43c-e6b2425f6d16
Certificate serial:       010D0C9F4328584DD090531B195A8765DECC0200
Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     32738
IP address blocks:        208.70.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:53:1b:19:5a:87:65:de:cc:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=802aa88a-59a4-4edd-8d95-531adb386a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:bd:07:56:5b:4d:1d:12:62:ce:42:ef:bd:
                    7a:60:25:50:2d:d1:5a:fd:9f:0d:52:9a:50:9d:93:
                    c7:5f:3b:b3:61:40:16:bc:0d:00:67:c0:ca:da:c7:
                    b2:7e:34:7b:19:36:56:c2:41:bb:37:a5:e0:11:70:
                    74:ad:c9:a6:38:59:41:ce:81:3c:50:1c:65:e5:d2:
                    b7:b3:f7:10:57:21:23:a4:13:52:26:06:1a:95:5f:
                    6c:6a:62:aa:37:1e:79:ae:0b:ed:09:ec:08:2d:71:
                    63:77:0f:d9:6f:6f:2f:f4:53:34:fe:c3:2f:78:dc:
                    37:85:44:a5:0e:e4:f2:11:62:c3:8a:62:47:0f:31:
                    05:1c:4a:51:8d:a5:d0:b5:9e:3b:a7:60:e5:01:01:
                    02:29:6d:07:74:da:90:92:ad:4a:00:2e:43:bc:6b:
                    84:03:db:71:b9:0e:89:ee:50:d4:0d:bf:13:1d:37:
                    b2:7b:07:b6:32:a4:fc:63:01:27:17:93:21:24:1a:
                    78:af:41:5c:0f:1a:87:7f:c0:69:95:8f:60:12:fa:
                    09:d4:76:39:38:14:59:2f:d7:21:c0:34:94:0c:61:
                    b3:61:08:64:0a:07:45:dc:39:07:c8:2e:e7:63:95:
                    59:37:83:b8:28:19:f4:c4:92:e5:37:fc:25:2b:19:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:39:15:01:55:B0:B4:2E:5A:B7:54:67:5C:C1:CF:92:64:C6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl

            X509v3 Authority Key Identifier:
                keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:df:fa:22:8c:51:50:69:6e:94:a1:65:84:65:d8:90:a4:29:
         71:cf:d2:4c:3e:39:9c:e0:03:10:17:74:e5:62:fd:e6:b4:44:
         82:08:b7:27:8a:32:ee:c8:cc:9a:0e:03:93:9e:3f:ed:83:0b:
         09:82:37:40:f2:bf:a1:1d:73:61:f4:ba:50:5d:27:ee:c3:8c:
         bb:bf:86:19:09:ce:49:a0:01:f4:f3:89:86:19:6a:af:d9:06:
         dd:e2:e2:36:40:ba:fc:72:ce:3b:62:01:11:5d:0b:9d:47:fa:
         10:f0:57:37:33:c6:42:60:af:6a:3e:c4:11:3a:36:f8:92:ba:
         82:c2:c0:e2:28:45:65:87:04:09:5d:2c:96:cd:18:db:9a:ad:
         cb:db:b9:0d:a8:02:37:1f:9d:8e:02:2c:8d:3c:12:20:ce:06:
         0d:b8:cc:29:e6:8b:72:46:96:77:10:85:99:6a:59:dd:76:65:
         fc:e7:0a:36:ae:62:e1:84:62:5d:a7:af:94:d1:de:a7:06:fe:
         03:e3:0e:6c:3e:95:03:a2:a0:10:67:31:eb:60:89:7e:fe:02:
         00:71:7b:fd:50:d2:ea:4d:0f:68:f1:7b:71:2c:2d:d6:35:df:
         ef:c3:1b:8e:0c:29:de:32:7b:80:7c:90:db:ce:6d:e3:6b:fe:
         f3:db:b0:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFMbGVqHZd7MAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU3OTFkMTQtMTFmMC00NTI3LWE0M2MtZTZiMjQyNWY2
ZDE2MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ODAyYWE4OGEtNTlhNC00ZWRkLThkOTUtNTMxYWRiMzg2YTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlui9B1ZbTR0SYs5C7716YCVQLdFa/Z8NUppQ
nZPHXzuzYUAWvA0AZ8DK2seyfjR7GTZWwkG7N6XgEXB0rcmmOFlBzoE8UBxl5dK3
s/cQVyEjpBNSJgYalV9samKqNx55rgvtCewILXFjdw/Zb28v9FM0/sMveNw3hUSl
DuTyEWLDimJHDzEFHEpRjaXQtZ47p2DlAQECKW0HdNqQkq1KAC5DvGuEA9txuQ6J
7lDUDb8THTeyewe2MqT8YwEnF5MhJBp4r0FcDxqHf8BplY9gEvoJ1HY5OBRZL9ch
wDSUDGGzYQhkCgdF3DkHyC7nY5VZN4O4KBn0xJLlN/wlKxlQSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCMORUBVbC0Llq3VGdcwc+SZMZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5
MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIyNDI1ZjZkMTYvOTQxMTQ4Y2QtNDRkNy0z
NTFiLTkzMDMtY2YwNGI2OGJiNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDU3OTFkMTQtMTFmMC00NTI3LWE0
M2MtZTZiMjQyNWY2ZDE2LzA1NzkxZDE0LTExZjAtNDUyNy1hNDNjLWU2YjI0MjVm
NmQxNi5jcmwwHwYDVR0jBBgwFoAUU1FerlRM8hFWsWTHOXKmdsxWLvQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIy
NDI1ZjZkMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EY4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTf+iKMUVBpbpShZYRl2JCkKXHP0kw+OZzgAxAXdOVi/ea0RIIItyeK
Mu7IzJoOA5OeP+2DCwmCN0Dyv6Edc2H0ulBdJ+7DjLu/hhkJzkmgAfTziYYZaq/Z
Bt3i4jZAuvxyzjtiARFdC51H+hDwVzczxkJgr2o+xBE6NviSuoLCwOIoRWWHBAld
LJbNGNuarcvbuQ2oAjcfnY4CLI08EiDOBg24zCnmi3JGlncQhZlqWd12ZfznCjau
YuGEYl2nr5TR3qcG/gPjDmw+lQOioBBnMetgiX7+AgBxe/1Q0upND2jxe3EsLdY1
3+/DG44MKd4ye4B8kNvObeNr/vPbsF0=
-----END CERTIFICATE-----
Generated at Wed May 13 12:20:29 2026 by rpki-client