Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa
File:                     0569c218-bdee-3e98-84c8-c75d4d681486.roa (raw, json)
Hash identifier:          rL6kkKbPHTgrFa72RwA2c/OIQQv3LdZgZZka8ZSoK8o=
Subject key identifier:   43:0A:3A:A1:9E:41:77:DE:91:39:9B:BF:47:DB:14:85:98:99:4B:7D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DC995BB2B82808CD9A794E460
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     5769
IP address blocks:        173.224.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bb:2b:82:80:8c:d9:a7:94:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=c47953fd-5fba-4342-b2d2-b61be49c8738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:53:83:9e:23:c0:10:cf:61:3c:9c:a1:8e:
                    24:98:40:e2:24:09:67:41:67:6f:c6:4b:44:fe:39:
                    0b:3f:6d:33:dc:80:d1:c2:c8:70:87:57:0e:5b:92:
                    ff:a3:e1:2b:49:99:fc:32:0d:b9:01:73:31:0d:3d:
                    68:21:23:e5:dd:f1:dd:23:5f:7a:35:c7:58:25:8d:
                    7b:ff:c7:9a:80:52:b4:44:80:c6:df:d4:62:31:2b:
                    3b:b6:a1:74:13:bf:34:bf:21:d4:ec:7a:72:57:c0:
                    b5:7a:7d:59:48:4a:1d:7b:ad:1a:8b:fe:1d:7e:bf:
                    2d:e6:3d:a0:d4:9f:9e:e6:d5:be:fc:a7:88:68:22:
                    0c:f9:1d:d4:90:47:42:be:58:2b:84:a1:f5:f7:9c:
                    aa:7c:76:87:70:35:56:16:1e:88:ea:bd:52:47:30:
                    c6:0d:12:0a:81:37:f5:07:d0:b9:58:c3:57:3d:a1:
                    d4:25:27:ab:6a:15:c4:a1:f5:23:fa:33:2e:ab:e6:
                    04:95:4e:ba:41:00:61:a6:59:57:f4:3a:df:0b:c4:
                    f9:ae:fe:19:2d:41:59:ba:34:f6:54:c2:76:56:bd:
                    07:75:dd:26:43:7e:ad:7b:e2:09:87:a1:35:09:aa:
                    27:09:65:7b:75:8e:35:5d:01:ee:ae:e6:43:b5:36:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:3A:A1:9E:41:77:DE:91:39:9B:BF:47:DB:14:85:98:99:4B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:b1:46:ac:32:6b:2b:4b:7b:90:b7:15:a8:de:b3:ff:a7:
         05:e2:f0:c3:1b:39:2e:2b:c4:39:e3:24:d4:8c:40:e7:ae:7e:
         32:17:25:db:73:27:35:32:6b:1a:4c:48:88:96:3a:5a:06:05:
         45:74:81:9e:67:1d:9a:be:90:df:8e:5f:ba:98:58:6f:14:80:
         73:ae:1c:8e:26:09:1b:b9:83:f5:e9:c5:ce:16:53:b6:5b:c7:
         79:cf:82:7e:a7:43:a8:a5:22:d7:b0:3e:20:9c:cb:ab:18:4e:
         a4:53:f3:fe:10:14:c3:25:07:72:dd:cb:3b:23:89:51:dd:f8:
         4d:da:50:7f:f7:29:b7:dc:70:f4:7f:76:d3:74:c1:f4:a6:9e:
         4e:51:34:bf:3a:20:60:e3:36:48:d4:f5:02:05:91:28:21:62:
         0f:95:6b:1e:ab:55:fe:5e:19:71:34:ff:c2:4a:39:2c:95:c6:
         9a:b3:95:5a:8d:ff:7e:e3:a8:a4:b9:a1:59:09:4e:5e:9b:f7:
         5e:26:59:f5:09:73:18:9b:4b:bb:7d:ee:d9:00:76:dc:36:ca:
         69:30:cf:14:55:5e:1b:f9:92:c0:92:ca:a4:e1:c7:77:37:03:
         21:c9:4b:a1:44:d7:e5:bf:f5:11:a0:90:db:c0:4a:ab:07:4f:
         1c:ca:d6:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbsrgoCM2aeU5GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
YzQ3OTUzZmQtNWZiYS00MzQyLWIyZDItYjYxYmU0OWM4NzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI1Tg54jwBDPYTycoY4kmEDiJAlnQWdvxktE
/jkLP20z3IDRwshwh1cOW5L/o+ErSZn8Mg25AXMxDT1oISPl3fHdI196NcdYJY17
/8eagFK0RIDG39RiMSs7tqF0E780vyHU7HpyV8C1en1ZSEode60ai/4dfr8t5j2g
1J+e5tW+/KeIaCIM+R3UkEdCvlgrhKH195yqfHaHcDVWFh6I6r1SRzDGDRIKgTf1
B9C5WMNXPaHUJSerahXEofUj+jMuq+YElU66QQBhpllX9DrfC8T5rv4ZLUFZujT2
VMJ2Vr0Hdd0mQ36te+IJh6E1CaonCWV7dY41XQHuruZDtTYBrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMKOqGeQXfekTmbv0fbFIWYmUt9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDU2OWMyMTgtYmRlZS0z
ZTk4LTg0YzgtYzc1ZDRkNjgxNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4xsUasMmsrS3uQtxWo3rP/pwXi8MMbOS4rxDnjJNSMQOeufjIXJdtz
JzUyaxpMSIiWOloGBUV0gZ5nHZq+kN+OX7qYWG8UgHOuHI4mCRu5g/Xpxc4WU7Zb
x3nPgn6nQ6ilItewPiCcy6sYTqRT8/4QFMMlB3LdyzsjiVHd+E3aUH/3KbfccPR/
dtN0wfSmnk5RNL86IGDjNkjU9QIFkSghYg+Vax6rVf5eGXE0/8JKOSyVxpqzlVqN
/37jqKS5oVkJTl6b914mWfUJcxibS7t97tkAdtw2ymkwzxRVXhv5ksCSyqThx3c3
AyHJS6FE1+W/9RGgkNvASqsHTxzK1kI=
-----END CERTIFICATE-----
Generated at Wed May 13 05:46:13 2026 by rpki-client