Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/67a1b0da-68af-3598-9e76-6e32a466f25a.roa
File:                     67a1b0da-68af-3598-9e76-6e32a466f25a.roa (raw, json)
Hash identifier:          UAZzv0QbmpaGNZ+smjCMPoMuhRBhOjXL0ZmnmMHwyTU=
Subject key identifier:   E4:1E:80:41:BF:2E:48:4E:03:6F:27:B5:F1:FA:7F:78:BB:94:96:63
Certificate issuer:       /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
Certificate serial:       010D0C9F4328584DAADE215F3CF246948608ECE0
Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/67a1b0da-68af-3598-9e76-6e32a466f25a.roa
Signing time:             Wed 29 Apr 2026 12:56:34 +0000
ROA not before:           Wed 29 Apr 2026 12:56:34 +0000
ROA not after:            Tue 28 Jul 2026 12:56:34 +0000
asID:                     393669
IP address blocks:        192.234.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:de:21:5f:3c:f2:46:94:86:08:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
        Validity
            Not Before: Apr 29 12:56:34 2026 GMT
            Not After : Jul 28 12:56:34 2026 GMT
        Subject: CN=c4279ca6-696f-408d-b15e-d22044031120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:c9:ca:d9:56:74:83:73:83:87:00:aa:85:
                    95:4c:24:9a:b2:28:ae:8d:3b:04:6b:e2:ab:3b:15:
                    ba:67:94:b0:03:29:22:62:de:93:b0:44:18:03:9c:
                    c1:31:fd:eb:4c:29:de:e0:cf:42:19:aa:72:13:79:
                    ca:5f:5e:51:87:78:e0:be:22:01:c9:ee:c8:6f:eb:
                    21:ed:46:f7:21:32:94:34:c8:5b:45:9a:1b:17:cb:
                    6a:85:dc:a0:b0:b0:59:d5:e1:f8:69:e2:2f:9f:e8:
                    90:d2:40:7e:b0:1a:93:c0:06:e4:62:5d:46:79:27:
                    5f:bb:1a:0d:85:f8:5f:5d:cb:2a:af:fb:17:6d:c9:
                    76:60:82:4d:16:7e:62:c6:1c:21:d2:08:8a:70:9e:
                    94:40:39:b5:c0:77:0a:cb:fa:28:d3:37:55:ed:9b:
                    06:fb:49:23:e6:15:46:a5:74:3e:17:22:70:f8:4a:
                    d5:84:bb:4e:46:d0:52:6a:d8:3d:bb:91:9f:6d:98:
                    35:4f:c7:a8:d8:c1:60:c5:8b:97:b4:1f:8a:75:41:
                    65:03:c0:7c:7d:8b:f6:64:65:93:b8:2f:94:c3:0e:
                    7c:2c:a7:5c:7d:12:ff:51:5e:12:fb:2e:e9:fa:ff:
                    55:9c:5c:ef:de:9b:13:27:5a:0d:88:8a:24:89:e9:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1E:80:41:BF:2E:48:4E:03:6F:27:B5:F1:FA:7F:78:BB:94:96:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/67a1b0da-68af-3598-9e76-6e32a466f25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl

            X509v3 Authority Key Identifier:
                keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:b3:61:bd:25:4e:fd:61:17:61:3a:dc:ab:87:05:5b:85:
         6a:90:39:76:56:65:6a:c0:dd:c3:51:f4:d9:39:24:57:93:9a:
         81:4d:40:60:ed:b4:a0:00:a9:00:86:b6:c8:45:b4:85:11:04:
         43:68:f3:a3:84:ae:39:5d:91:74:2b:1a:09:ba:98:b3:d5:c8:
         88:a2:34:3f:b3:25:a6:3c:25:8f:fe:07:dd:41:1e:ef:eb:51:
         2c:99:8f:b3:22:b4:e7:c1:77:f3:59:8c:87:b5:8a:7f:6d:4c:
         c1:c7:ec:bd:0a:1d:44:7e:89:8e:f1:7a:ef:e8:36:4e:b2:43:
         0f:9a:40:b2:28:0d:08:9a:8c:c6:db:eb:e7:af:56:e1:ee:ed:
         fd:ec:3a:2b:c0:3f:48:da:2b:98:0d:4c:7a:12:ff:a0:d7:a9:
         51:18:62:d0:5c:28:09:04:3b:73:2c:75:de:c7:2e:0e:41:d1:
         04:e7:24:de:85:38:19:02:0f:b9:bf:a6:30:c5:b6:39:a3:70:
         32:4e:a6:5a:ca:1d:0c:ef:3c:ea:ae:9e:b9:34:f9:51:ea:8a:
         15:1f:3b:c0:4c:11:9d:2c:be:10:f0:27:e1:bc:78:ad:ba:7a:
         fd:97:43:e7:37:da:b4:52:fc:df:7f:19:d3:fc:a0:19:bc:44:
         7a:18:b0:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q3iFfPPJGlIYI7OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU4YWI0YzktNjkzMy00OWJmLWI2YjQtZTRkMzkzNWVk
YTIyMB4XDTI2MDQyOTEyNTYzNFoXDTI2MDcyODEyNTYzNFowLzEtMCsGA1UEAxMk
YzQyNzljYTYtNjk2Zi00MDhkLWIxNWUtZDIyMDQ0MDMxMTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVHJytlWdINzg4cAqoWVTCSasiiujTsEa+Kr
OxW6Z5SwAykiYt6TsEQYA5zBMf3rTCne4M9CGapyE3nKX15Rh3jgviIBye7Ib+sh
7Ub3ITKUNMhbRZobF8tqhdygsLBZ1eH4aeIvn+iQ0kB+sBqTwAbkYl1GeSdfuxoN
hfhfXcsqr/sXbcl2YIJNFn5ixhwh0giKcJ6UQDm1wHcKy/oo0zdV7ZsG+0kj5hVG
pXQ+FyJw+ErVhLtORtBSatg9u5GfbZg1T8eo2MFgxYuXtB+KdUFlA8B8fYv2ZGWT
uC+Uww58LKdcfRL/UV4S+y7p+v9VnFzv3psTJ1oNiIokielu2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQegEG/LkhOA28ntfH6f3i7lJZjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThh
YjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQzOTM1ZWRhMjIvNjdhMWIwZGEtNjhhZi0z
NTk4LTllNzYtNmUzMmE0NjZmMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDU4YWI0YzktNjkzMy00OWJmLWI2
YjQtZTRkMzkzNWVkYTIyL2Q1OGFiNGM5LTY5MzMtNDliZi1iNmI0LWU0ZDM5MzVl
ZGEyMi5jcmwwHwYDVR0jBBgwFoAULXN/U+hZd50EmPQizfsac2SEbJ8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThhYjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQz
OTM1ZWRhMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6hs2G9JU79YRdhOtyrhwVbhWqQOXZWZWrA3cNR9Nk5JFeTmoFNQGDt
tKAAqQCGtshFtIURBENo86OErjldkXQrGgm6mLPVyIiiND+zJaY8JY/+B91BHu/r
USyZj7MitOfBd/NZjIe1in9tTMHH7L0KHUR+iY7xeu/oNk6yQw+aQLIoDQiajMbb
6+evVuHu7f3sOivAP0jaK5gNTHoS/6DXqVEYYtBcKAkEO3Msdd7HLg5B0QTnJN6F
OBkCD7m/pjDFtjmjcDJOplrKHQzvPOqunrk0+VHqihUfO8BMEZ0svhDwJ+G8eK26
ev2XQ+c32rRS/N9/GdP8oBm8RHoYsA0=
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:24 2026 by rpki-client