Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/d29c5c32-5652-34f4-a08c-610d4b7752b0.roa
File:                     d29c5c32-5652-34f4-a08c-610d4b7752b0.roa (raw, json)
Hash identifier:          5GVssUi7i0V5E3TwxC6mM/9tuiRpr9YCmWiJrDum3SA=
Subject key identifier:   A2:08:75:85:EE:38:F6:68:57:C4:CE:9B:5F:3B:EB:34:F4:0D:6B:DA
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F4328584D924F1C6E650352F92A9B29D0
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/d29c5c32-5652-34f4-a08c-610d4b7752b0.roa
Signing time:             Mon 20 Apr 2026 17:49:00 +0000
ROA not before:           Mon 20 Apr 2026 17:49:00 +0000
ROA not after:            Sun 19 Jul 2026 17:49:00 +0000
asID:                     834
IP address blocks:        169.197.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:4f:1c:6e:65:03:52:f9:2a:9b:29:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Apr 20 17:49:00 2026 GMT
            Not After : Jul 19 17:49:00 2026 GMT
        Subject: CN=d376ba03-60c3-48ed-8ef9-de7e11451257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:57:bc:ef:98:29:a1:6d:82:61:55:76:43:8a:
                    1c:29:58:5e:1d:6a:79:61:d6:6d:0f:49:89:d1:99:
                    08:dd:ec:2b:c2:ab:c4:45:b9:c4:b9:0a:4f:5b:f2:
                    00:35:d7:84:6b:91:4d:69:ee:74:a0:c1:98:6e:97:
                    18:75:d3:01:66:93:87:8c:7d:9f:ec:67:44:3d:30:
                    55:92:63:8e:4c:56:d7:65:54:d0:03:51:be:f6:46:
                    56:3f:0f:79:5e:44:0e:4d:c6:2d:9b:8f:5e:cf:45:
                    ea:43:34:6d:26:db:f8:0e:54:e2:98:79:b2:e9:95:
                    e7:39:da:90:94:79:7b:6b:18:82:f3:91:ee:c3:a7:
                    04:b1:90:25:a4:90:4f:3f:8a:4e:6c:16:c8:43:ed:
                    e2:60:90:fa:ac:23:bd:a8:7e:b6:15:71:71:c4:c8:
                    41:74:ce:5a:95:13:65:6d:30:33:66:44:8e:e6:81:
                    13:76:38:80:5f:57:41:fd:a3:3d:90:8d:d7:64:fe:
                    9b:94:33:ba:8c:a5:c5:ef:a9:9b:0c:a0:77:44:c3:
                    8f:2a:f7:3a:53:d8:45:40:56:41:4e:71:2e:48:8a:
                    8c:a8:67:17:62:0d:9b:b4:d4:01:a0:9d:1e:c4:42:
                    95:68:c1:be:cb:f7:ea:13:e5:3e:83:0c:ce:af:e4:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:08:75:85:EE:38:F6:68:57:C4:CE:9B:5F:3B:EB:34:F4:0D:6B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/d29c5c32-5652-34f4-a08c-610d4b7752b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:16:80:b4:7a:2b:d6:6c:dd:5a:8f:3f:f1:c3:fd:2d:48:b1:
         9e:c8:65:32:90:88:83:c6:f7:b7:c8:7f:9f:f5:4c:58:99:e1:
         5c:88:f7:4b:14:5b:a4:9e:93:dc:b0:9a:1c:ae:6b:c7:8a:55:
         8d:0a:20:39:61:e0:91:60:1b:54:8f:55:ce:84:9b:af:fe:d2:
         1a:82:96:67:ff:78:45:3e:b8:d6:2c:3a:8e:0d:9f:3a:a3:d6:
         b3:b5:34:6d:3a:e2:2c:a8:73:c7:d6:85:1b:7f:a8:0a:bd:4b:
         e8:1d:e1:ba:a2:fc:01:7d:75:cd:ac:27:00:ef:70:af:b6:7e:
         d5:ec:1f:a3:06:a1:a8:21:ac:80:be:b1:a0:11:0a:61:99:96:
         db:f5:bc:92:64:4c:9b:92:53:bc:11:28:b7:b8:65:a2:b1:b7:
         40:bf:61:de:95:7e:5b:96:c8:fa:92:bd:03:a8:5c:27:34:0e:
         a7:2c:8d:27:c5:a9:9b:fc:01:be:bc:22:dd:c1:7d:2f:a6:9d:
         89:96:0c:84:79:3d:02:52:68:10:d5:e0:39:5b:6b:69:16:4e:
         47:01:3f:c6:35:eb:54:60:27:7f:2e:3a:c5:4b:5e:32:9c:d5:
         dd:51:29:66:6a:b0:ec:5f:be:41:c0:51:04:5b:aa:23:20:6a:
         70:5b:3e:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2STxxuZQNS+SqbKdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM4YzdjYTQtM2E0MS00MTM0LWExMjctODFkYzE0MGJj
N2E5MB4XDTI2MDQyMDE3NDkwMFoXDTI2MDcxOTE3NDkwMFowLzEtMCsGA1UEAxMk
ZDM3NmJhMDMtNjBjMy00OGVkLThlZjktZGU3ZTExNDUxMjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkle875gpoW2CYVV2Q4ocKVheHWp5YdZtD0mJ
0ZkI3ewrwqvERbnEuQpPW/IANdeEa5FNae50oMGYbpcYddMBZpOHjH2f7GdEPTBV
kmOOTFbXZVTQA1G+9kZWPw95XkQOTcYtm49ez0XqQzRtJtv4DlTimHmy6ZXnOdqQ
lHl7axiC85Huw6cEsZAlpJBPP4pObBbIQ+3iYJD6rCO9qH62FXFxxMhBdM5alRNl
bTAzZkSO5oETdjiAX1dB/aM9kI3XZP6blDO6jKXF76mbDKB3RMOPKvc6U9hFQFZB
TnEuSIqMqGcXYg2btNQBoJ0exEKVaMG+y/fqE+U+gwzOr+RV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIIdYXuOPZoV8TOm1876zT0DWvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhj
N2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQwYmM3YTkvZDI5YzVjMzItNTY1Mi0z
NGY0LWEwOGMtNjEwZDRiNzc1MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM4YzdjYTQtM2E0MS00MTM0LWEx
MjctODFkYzE0MGJjN2E5L2YzOGM3Y2E0LTNhNDEtNDEzNC1hMTI3LTgxZGMxNDBi
YzdhOS5jcmwwHwYDVR0jBBgwFoAUocfcL5AVBoPAPHxbaIA+jBhWHHkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRj
MTQwYmM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcW4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUWgLR6K9Zs3VqPP/HD/S1IsZ7IZTKQiIPG97fIf5/1TFiZ4VyI90sU
W6Sek9ywmhyua8eKVY0KIDlh4JFgG1SPVc6Em6/+0hqClmf/eEU+uNYsOo4Nnzqj
1rO1NG064iyoc8fWhRt/qAq9S+gd4bqi/AF9dc2sJwDvcK+2ftXsH6MGoaghrIC+
saARCmGZltv1vJJkTJuSU7wRKLe4ZaKxt0C/Yd6VfluWyPqSvQOoXCc0DqcsjSfF
qZv8Ab68It3BfS+mnYmWDIR5PQJSaBDV4Dlba2kWTkcBP8Y161RgJ38uOsVLXjKc
1d1RKWZqsOxfvkHAUQRbqiMganBbPlI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:32:57 2026 by rpki-client