Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa
File:                     cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa (raw, json)
Hash identifier:          rEQ5xyVo2IpZeqqfy9itxbiwNfa590qU8onoBoMSi2Y=
Subject key identifier:   67:A1:A6:EA:F3:BE:40:D9:9E:7C:9D:53:94:80:BA:BB:4A:4C:F3:EA
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DB1DAD21A2D4B810F8149C180
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     11290
IP address blocks:        205.151.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d2:1a:2d:4b:81:0f:81:49:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=de96880e-1562-4348-9618-6a47244c0a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:5a:96:18:56:d9:b9:e3:b5:a4:a3:34:94:
                    d1:ad:5a:c2:0b:20:bb:6d:b2:76:90:21:3e:1b:00:
                    5f:b5:b5:3f:57:a2:eb:0b:8a:ba:3b:16:22:69:27:
                    84:c6:e3:09:d7:f5:3a:b5:f3:23:73:19:44:ea:a2:
                    97:54:09:12:c0:79:9d:bb:d8:16:f3:b3:1b:35:6a:
                    44:8f:83:5c:0f:fa:1f:94:83:5c:8d:50:ee:85:e7:
                    29:19:13:60:e4:19:c9:ff:a3:38:78:75:ac:97:a8:
                    e8:16:f4:ed:09:fa:08:6d:e0:a8:5f:cd:2d:09:4c:
                    bb:6e:77:5b:b6:e2:db:ff:1b:36:e4:48:fd:09:ff:
                    98:bb:2c:fa:4e:4e:88:d6:f1:a3:79:34:1f:74:f1:
                    6f:77:69:62:45:bf:16:5b:80:4f:12:bc:87:b0:30:
                    0d:89:8f:a2:e2:c9:94:1b:51:73:a7:50:77:27:f8:
                    f1:d1:6e:a3:28:b2:d6:86:4f:c6:b8:ae:cb:48:cd:
                    ca:b4:1b:4f:a1:85:0f:fd:ce:6b:98:b2:f1:d3:48:
                    6c:6c:79:53:4a:d2:ec:88:6e:c2:51:74:5b:37:51:
                    e1:b6:94:ff:bb:83:81:d6:71:c0:66:3b:75:fb:1f:
                    37:60:80:81:f6:45:d8:e2:90:c3:b8:7d:6e:48:2f:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:A6:EA:F3:BE:40:D9:9E:7C:9D:53:94:80:BA:BB:4A:4C:F3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:11:66:3e:89:7a:f4:50:a9:15:84:65:7b:15:31:ea:d0:
         f6:c3:b9:18:7f:d4:fb:41:75:97:bb:5f:19:df:8a:20:ef:e2:
         85:38:70:f4:96:0b:87:7b:c8:b8:ea:e1:0d:06:9a:fb:9a:7b:
         87:d5:76:46:fd:a6:87:bd:79:5c:9d:6a:91:d8:40:50:f7:3f:
         a8:6c:72:e2:8d:3a:e0:24:f8:0a:70:95:6f:11:49:4c:c5:7b:
         2a:58:dd:e7:13:7c:e8:79:8b:fc:ea:15:25:d0:4c:0a:1e:98:
         78:03:3a:9b:1d:4a:6e:c6:63:90:f0:fd:d7:1d:73:cf:17:83:
         cc:3e:ee:55:3f:b3:31:03:6a:20:95:e1:28:48:e6:f3:f0:be:
         b5:cd:8b:34:f5:07:12:b6:13:3c:b3:98:44:15:df:07:a8:29:
         d8:5a:e6:13:f4:ff:0b:11:a3:fc:58:ba:c2:d6:88:69:23:e8:
         7c:42:85:23:b8:b7:73:fc:30:af:63:cf:7d:54:41:3b:17:b9:
         e3:78:52:c6:a6:7c:a2:02:74:d9:6d:1a:45:ee:72:94:60:41:
         60:40:2c:4d:00:6d:9c:9b:0f:53:75:40:5c:47:23:05:10:cf:
         4a:bb:5d:26:dc:b4:ca:4f:e0:97:8a:3f:8e:4b:4a:54:88:e8:
         fc:b0:23:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tIaLUuBD4FJwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZGU5Njg4MGUtMTU2Mi00MzQ4LTk2MTgtNmE0NzI0NGMwYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiShalhhW2bnjtaSjNJTRrVrCCyC7bbJ2kCE+
GwBftbU/V6LrC4q6OxYiaSeExuMJ1/U6tfMjcxlE6qKXVAkSwHmdu9gW87MbNWpE
j4NcD/oflINcjVDuhecpGRNg5BnJ/6M4eHWsl6joFvTtCfoIbeCoX80tCUy7bndb
tuLb/xs25Ej9Cf+Yuyz6Tk6I1vGjeTQfdPFvd2liRb8WW4BPEryHsDANiY+i4smU
G1Fzp1B3J/jx0W6jKLLWhk/GuK7LSM3KtBtPoYUP/c5rmLLx00hsbHlTStLsiG7C
UXRbN1HhtpT/u4OB1nHAZjt1+x83YICB9kXY4pDDuH1uSC9V1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGehpurzvkDZnnydU5SAurtKTPPqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2Q1MTZhNjMtYTRmZC0z
NTY0LWIzMGMtNDIwMmY0ZDNiYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF37EWY+iXr0UKkVhGV7FTHq0PbDuRh/1PtBdZe7XxnfiiDv4oU4cPSW
C4d7yLjq4Q0Gmvuae4fVdkb9poe9eVydapHYQFD3P6hscuKNOuAk+ApwlW8RSUzF
eypY3ecTfOh5i/zqFSXQTAoemHgDOpsdSm7GY5Dw/dcdc88Xg8w+7lU/szEDaiCV
4ShI5vPwvrXNizT1BxK2EzyzmEQV3weoKdha5hP0/wsRo/xYusLWiGkj6HxChSO4
t3P8MK9jz31UQTsXueN4UsamfKICdNltGkXucpRgQWBALE0AbZybD1N1QFxHIwUQ
z0q7XSbctMpP4JeKP45LSlSI6PywI60=
-----END CERTIFICATE-----
Generated at Wed May 13 03:50:43 2026 by rpki-client