Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/be1c8c09-ef4b-3aa5-bd69-289928d1337f.roa
File:                     be1c8c09-ef4b-3aa5-bd69-289928d1337f.roa (raw, json)
Hash identifier:          MJyvh9mxa6UiUlaMxUguu6wdY+ZHCXnZP43uMMUjpGU=
Subject key identifier:   0D:6B:DB:17:28:5D:CA:44:FB:2B:A5:2D:B6:FF:6B:78:B2:F9:4F:AA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D300AAFEAE20DAF7DFBDB36C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/be1c8c09-ef4b-3aa5-bd69-289928d1337f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     1072
IP address blocks:        67.208.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:af:ea:e2:0d:af:7d:fb:db:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=10adc939-dba8-4026-ae25-2b22e3065867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:85:53:ac:60:2d:2e:18:cd:86:90:6a:ac:
                    c3:69:d2:85:cd:35:17:29:7b:6c:3c:a6:03:75:84:
                    43:6e:8a:6f:c9:2d:56:9b:4c:99:a5:27:b4:b7:a9:
                    85:36:5e:9e:c5:fb:61:e0:fc:e6:e3:e0:36:50:f6:
                    c9:3e:ba:5d:99:1e:b5:34:f0:ad:31:bd:47:6b:8e:
                    d0:f5:dd:d6:f8:3d:66:0b:b5:4a:e1:07:3d:5d:0a:
                    37:02:e6:ba:25:a3:bb:8b:c3:64:de:65:02:22:f9:
                    de:31:7b:7c:40:2f:22:ac:01:24:fa:47:09:c0:37:
                    67:dd:68:c6:ea:1c:92:3a:70:21:48:0c:2d:06:13:
                    f2:70:61:0d:99:71:73:c3:6a:51:a9:ad:d6:02:88:
                    dc:3c:38:89:f0:07:a1:c1:f4:40:b2:fe:bb:23:ee:
                    40:fe:9f:9e:0c:c8:25:9b:6f:fc:51:bf:c6:b2:ca:
                    64:42:51:9e:9c:34:64:58:4a:fd:c7:54:20:da:35:
                    ae:fe:c3:3e:e1:4f:cd:dc:59:58:80:db:41:74:b8:
                    70:d3:e0:5e:46:fe:d7:25:ba:c6:fa:f0:59:94:ff:
                    01:e1:e9:f0:3c:1b:50:d1:7c:20:27:2f:fe:d5:9d:
                    76:53:d7:f8:fa:7b:aa:8e:aa:62:57:7a:e9:a1:34:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:DB:17:28:5D:CA:44:FB:2B:A5:2D:B6:FF:6B:78:B2:F9:4F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/be1c8c09-ef4b-3aa5-bd69-289928d1337f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.208.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:61:bc:48:5c:5c:60:cc:8d:1a:4c:44:c8:89:a0:72:b4:58:
         4b:8b:0f:38:fb:f7:06:7d:bf:89:93:a0:a0:91:71:2a:da:5f:
         e1:31:0b:ca:dc:d2:69:12:bc:e2:82:aa:d3:04:cd:16:94:12:
         61:90:49:e9:32:b8:92:8f:c1:9b:72:37:17:b6:e0:03:6f:2f:
         ff:16:73:97:cf:32:6a:df:c5:3e:9a:10:c6:de:ea:4a:c1:03:
         71:9d:13:71:ab:2c:75:d9:8f:80:c2:eb:69:c4:48:98:c4:1a:
         eb:c4:71:ab:40:e4:39:22:35:79:d9:4d:57:47:d3:61:f1:10:
         d6:69:74:50:cb:e9:62:65:a0:0f:3e:4e:c5:29:ab:e0:21:00:
         6d:30:ed:60:a8:04:d8:42:c2:ff:03:64:c3:40:39:23:26:7d:
         9f:8c:f1:dd:29:69:79:ed:36:9f:bf:22:fa:68:c4:0a:50:8a:
         4b:d6:91:6d:55:67:66:a4:a1:c0:2f:49:2b:21:ef:34:5e:3c:
         33:21:17:ef:4a:0c:f9:21:ec:57:06:64:ae:47:9b:60:0d:0f:
         33:8f:90:7c:4b:c7:c3:7f:2e:1c:fb:f9:86:18:b7:33:bd:31:
         20:29:0e:03:b2:61:e8:fd:06:4f:5c:93:80:6d:06:0d:b2:d9:
         c0:47:65:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCq/q4g2vffvbNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MTBhZGM5MzktZGJhOC00MDI2LWFlMjUtMmIyMmUzMDY1ODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH+FU6xgLS4YzYaQaqzDadKFzTUXKXtsPKYD
dYRDbopvyS1Wm0yZpSe0t6mFNl6exfth4Pzm4+A2UPbJPrpdmR61NPCtMb1Ha47Q
9d3W+D1mC7VK4Qc9XQo3Aua6JaO7i8Nk3mUCIvneMXt8QC8irAEk+kcJwDdn3WjG
6hySOnAhSAwtBhPycGENmXFzw2pRqa3WAojcPDiJ8AehwfRAsv67I+5A/p+eDMgl
m2/8Ub/GsspkQlGenDRkWEr9x1Qg2jWu/sM+4U/N3FlYgNtBdLhw0+BeRv7XJbrG
+vBZlP8B4enwPBtQ0XwgJy/+1Z12U9f4+nuqjqpiV3rpoTRnLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1r2xcoXcpE+yulLbb/a3iy+U+qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYmUxYzhjMDktZWY0Yi0z
YWE1LWJkNjktMjg5OTI4ZDEzMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9DqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNhvEhcXGDMjRpMRMiJoHK0WEuLDzj79wZ9v4mToKCRcSraX+ExC8rc
0mkSvOKCqtMEzRaUEmGQSekyuJKPwZtyNxe24ANvL/8Wc5fPMmrfxT6aEMbe6krB
A3GdE3GrLHXZj4DC62nESJjEGuvEcatA5DkiNXnZTVdH02HxENZpdFDL6WJloA8+
TsUpq+AhAG0w7WCoBNhCwv8DZMNAOSMmfZ+M8d0paXntNp+/IvpoxApQikvWkW1V
Z2akocAvSSsh7zRePDMhF+9KDPkh7FcGZK5Hm2ANDzOPkHxLx8N/Lhz7+YYYtzO9
MSApDgOyYej9Bk9ck4BtBg2y2cBHZfA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:26 2026 by rpki-client