Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa
File:                     2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa (raw, json)
Hash identifier:          Cz8KRN6eNo7NMUZT/JWIWPvdrx2vJbUsKlJuckHSgIU=
Subject key identifier:   F6:34:53:73:BB:4B:DA:0D:BE:59:F0:22:8A:2F:E9:59:74:7A:D0:6C
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584D3DFFAA9A0B1FB1701DC1DA80
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14977
IP address blocks:        137.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:aa:9a:0b:1f:b1:70:1d:c1:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=dfc81862-e3b9-4ea3-bee8-7f39247e2c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:0f:a2:44:1f:8f:d9:43:36:63:bd:64:d5:
                    a9:16:68:3a:0c:0e:b5:5a:50:78:18:99:af:7a:00:
                    3a:99:da:3e:d0:fa:3e:9c:1b:fc:74:03:bc:ab:0b:
                    6d:27:01:60:c8:65:af:92:7e:98:ab:57:5f:66:5d:
                    17:4d:b1:07:01:ad:13:42:86:fe:a8:42:8a:70:e3:
                    60:9c:e6:ec:f5:e9:86:d0:12:5d:54:09:af:02:ec:
                    d6:e6:86:6b:02:3d:83:73:ad:a6:57:85:3c:1c:91:
                    bc:14:0d:e4:43:23:9b:23:3f:e8:98:8d:67:58:46:
                    2b:2e:b0:c5:c3:f6:7d:69:7c:53:45:2c:b7:0c:ab:
                    87:e0:ac:bf:8e:66:7a:5d:62:54:69:8f:ca:51:4e:
                    aa:15:61:3b:a9:83:8d:9f:be:d3:73:05:af:6d:67:
                    c0:82:97:34:41:3c:3d:e5:4f:01:a8:6a:d4:fc:a5:
                    e0:65:2d:2c:f6:5f:d7:37:02:7a:08:a0:4a:94:ca:
                    ce:53:4d:80:f8:bf:aa:e5:f3:4f:78:ac:54:fc:b9:
                    06:f7:eb:9c:14:a3:1b:7a:3e:4f:63:37:d8:7f:55:
                    ed:6a:43:97:87:d8:06:a1:b9:fa:c8:4e:eb:be:ca:
                    98:dd:5c:c1:20:ed:f4:58:08:de:38:2a:e9:ae:07:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:34:53:73:BB:4B:DA:0D:BE:59:F0:22:8A:2F:E9:59:74:7A:D0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:fd:0a:71:09:c1:c0:6c:a5:1a:d1:23:00:f5:44:ce:8e:8d:
         dc:cc:9a:3c:fb:98:e8:fc:21:ce:73:89:2f:7f:9e:7a:ff:0d:
         3c:ca:ac:a9:91:53:dc:ae:b2:9c:30:1a:eb:1c:fd:bd:3f:68:
         05:9f:4e:dd:56:b0:5c:0b:01:cf:df:16:e4:67:62:79:71:0b:
         d9:52:ee:b2:23:c7:5a:31:f6:91:41:65:5d:8f:0e:cc:20:e7:
         33:a1:46:3b:35:d1:83:5c:d7:ad:4e:d3:51:02:41:09:11:93:
         3a:01:83:f0:96:0b:eb:9a:84:cf:dd:0a:b0:c8:b9:de:ca:e1:
         3d:34:1b:9f:03:dc:7d:f8:99:76:e6:66:ae:3e:5a:96:c0:31:
         e6:b7:cb:76:b6:8a:3b:6d:17:ee:a9:18:a0:e8:0c:1a:1c:83:
         1d:2b:17:3f:ac:40:65:63:b4:47:28:46:0b:f8:1b:bf:61:6a:
         5c:79:20:7c:81:b8:86:d1:a3:f0:48:94:b5:1f:ec:8c:65:64:
         4e:1e:b3:f3:4a:b6:84:7f:31:3f:84:a7:40:14:26:52:a1:d7:
         44:0b:78:6a:b4:47:a8:7c:d9:82:5c:f9:0b:7e:ee:64:9f:60:
         b0:8d:45:ab:d4:0d:b3:dc:2e:34:44:1a:ff:bc:a8:d4:95:36:
         dd:41:24:04
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/6qaCx+xcB3B2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZGZjODE4NjItZTNiOS00ZWEzLWJlZTgtN2YzOTI0N2UyYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3YPokQfj9lDNmO9ZNWpFmg6DA61WlB4GJmv
egA6mdo+0Po+nBv8dAO8qwttJwFgyGWvkn6Yq1dfZl0XTbEHAa0TQob+qEKKcONg
nObs9emG0BJdVAmvAuzW5oZrAj2Dc62mV4U8HJG8FA3kQyObIz/omI1nWEYrLrDF
w/Z9aXxTRSy3DKuH4Ky/jmZ6XWJUaY/KUU6qFWE7qYONn77TcwWvbWfAgpc0QTw9
5U8BqGrU/KXgZS0s9l/XNwJ6CKBKlMrOU02A+L+q5fNPeKxU/LkG9+ucFKMbej5P
YzfYf1XtakOXh9gGobn6yE7rvsqY3VzBIO30WAjeOCrprgfSywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPY0U3O7S9oNvlnwIoov6Vl0etBsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMmU2YWUxMzMtNjUzZC0z
YWNhLTkwNTMtOGYzOGVhNDhlZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAxf0KcQnBwGylGtEjAPVEzo6N3MyaPPuY6PwhznOJL3+eev8NPMqsqZFT
3K6ynDAa6xz9vT9oBZ9O3VawXAsBz98W5GdieXEL2VLusiPHWjH2kUFlXY8OzCDn
M6FGOzXRg1zXrU7TUQJBCRGTOgGD8JYL65qEz90KsMi53srhPTQbnwPcffiZduZm
rj5alsAx5rfLdraKO20X7qkYoOgMGhyDHSsXP6xAZWO0RyhGC/gbv2FqXHkgfIG4
htGj8EiUtR/sjGVkTh6z80q2hH8xP4SnQBQmUqHXRAt4arRHqHzZglz5C37uZJ9g
sI1Fq9QNs9wuNEQa/7yo1JU23UEkBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:16 2026 by rpki-client