Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
File:                     c13dba69-5578-3a01-b3d5-6497abf84b01.roa (raw, json)
Hash identifier:          5InFNaLqlelI1tsJOyo3SIG+wDj3QoVyTXTsqSQKulY=
Subject key identifier:   3C:64:8B:EF:81:BA:6D:D8:5C:A2:17:F0:DD:A9:E1:27:56:94:E1:1A
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584DBBA04ED1832234DB60B31F80
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     35847
IP address blocks:        139.94.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4e:d1:83:22:34:db:60:b3:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=1915ccca-57d8-4d17-b7a0-c073a0735a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:e7:fa:20:01:e9:30:38:e7:60:a6:14:63:
                    49:e7:1f:a9:cd:87:76:41:48:f9:5d:17:49:d9:19:
                    9e:18:78:c6:20:8f:17:a3:d5:50:91:f5:48:2a:ad:
                    be:9d:4b:88:42:65:94:d8:22:38:36:c4:e6:04:f1:
                    84:e8:29:fb:7a:cd:d2:b8:87:00:76:68:b9:3f:c1:
                    e6:be:0a:f3:90:ba:5b:c2:02:00:0f:8b:81:16:41:
                    48:e1:dd:68:eb:0d:a9:b1:6a:70:cc:85:07:1a:bb:
                    94:62:cf:45:77:ef:45:e4:9b:26:f6:1a:b7:42:1c:
                    63:7c:01:c5:fa:f0:1b:b1:65:50:20:4f:22:17:21:
                    a9:b7:46:7e:7f:1f:04:27:62:80:e3:e0:22:27:1d:
                    95:3c:d5:c6:5e:91:41:95:e9:2f:eb:5d:39:26:6d:
                    74:23:22:3e:37:d3:d0:ed:18:df:4f:0b:b4:f1:cd:
                    3b:5a:ac:8b:c6:e7:69:b5:27:f9:71:2b:ac:ab:8c:
                    81:e3:6e:fe:c4:a9:00:76:e0:f0:51:73:2d:eb:53:
                    a5:92:b7:25:5c:7b:a3:26:fd:0b:59:f3:aa:85:96:
                    32:e5:f3:bb:06:b9:f9:22:6d:0b:47:73:08:42:c3:
                    7c:59:1b:12:d5:0c:8e:dc:88:b3:37:0f:63:2b:fa:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:64:8B:EF:81:BA:6D:D8:5C:A2:17:F0:DD:A9:E1:27:56:94:E1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:fe:85:73:bc:ed:89:ee:f4:75:0d:03:62:25:d6:f4:cb:
         c2:d9:51:96:e4:de:57:1e:d8:72:21:ad:c9:06:49:d3:a7:be:
         88:85:87:95:12:54:db:c7:08:64:d8:de:09:ca:43:c2:ba:c2:
         8a:e4:a6:23:82:17:52:56:50:0b:33:94:04:5c:16:2b:63:21:
         06:71:b9:1b:a4:68:73:c8:16:b1:7c:40:9c:74:1b:de:cb:b0:
         87:b2:58:dc:f1:32:85:6f:7c:13:00:97:d6:a9:18:00:1c:1e:
         d7:cc:b4:30:63:65:3f:36:84:0c:16:de:fc:d6:28:27:6d:00:
         c7:72:39:41:a7:7e:8f:44:2c:29:97:d8:45:8b:78:a9:f3:9d:
         2d:63:e4:15:a4:ef:17:11:87:ce:b6:4f:f5:8a:da:61:35:4e:
         28:91:46:e4:5b:3d:88:95:9e:b4:a9:9e:f3:80:a9:c1:7d:49:
         95:67:af:1a:ec:cf:dd:c8:9b:05:05:06:30:c6:06:91:58:69:
         6c:e9:13:97:e6:c6:f2:b9:01:c0:7a:99:6e:e1:32:15:e7:18:
         12:db:de:97:33:84:99:2c:d0:99:3c:2a:61:17:e5:08:e3:59:
         d3:a2:8f:61:80:89:cb:20:4c:cf:5a:4a:d4:6c:42:34:e6:45:
         21:3b:6b:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE27oE7RgyI022CzH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz
ZjExMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
MTkxNWNjY2EtNTdkOC00ZDE3LWI3YTAtYzA3M2EwNzM1YTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJfn+iAB6TA452CmFGNJ5x+pzYd2QUj5XRdJ
2RmeGHjGII8Xo9VQkfVIKq2+nUuIQmWU2CI4NsTmBPGE6Cn7es3SuIcAdmi5P8Hm
vgrzkLpbwgIAD4uBFkFI4d1o6w2psWpwzIUHGruUYs9Fd+9F5Jsm9hq3QhxjfAHF
+vAbsWVQIE8iFyGpt0Z+fx8EJ2KA4+AiJx2VPNXGXpFBlekv6105Jm10IyI+N9PQ
7RjfTwu08c07WqyLxudptSf5cSusq4yB427+xKkAduDwUXMt61OlkrclXHujJv0L
WfOqhZYy5fO7Brn5Im0LR3MIQsN8WRsS1QyO3IizNw9jK/oXzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDxki++Bum3YXKIX8N2p4SdWlOEaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh
NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvYzEzZGJhNjktNTU3OC0z
YTAxLWIzZDUtNjQ5N2FiZjg0YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj
NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm
M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw
YTJjZjNmMTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi14wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHyb+hXO87Ynu9HUNA2Il1vTLwtlRluTeVx7YciGtyQZJ06e+iIWHlRJU
28cIZNjeCcpDwrrCiuSmI4IXUlZQCzOUBFwWK2MhBnG5G6Roc8gWsXxAnHQb3suw
h7JY3PEyhW98EwCX1qkYABwe18y0MGNlPzaEDBbe/NYoJ20Ax3I5Qad+j0QsKZfY
RYt4qfOdLWPkFaTvFxGHzrZP9YraYTVOKJFG5Fs9iJWetKme84CpwX1JlWevGuzP
3cibBQUGMMYGkVhpbOkTl+bG8rkBwHqZbuEyFecYEtvelzOEmSzQmTwqYRflCONZ
06KPYYCJyyBMz1pK1GxCNOZFITtrSw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:06:11 2026 by rpki-client