Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa
File:                     ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa (raw, json)
Hash identifier:          +Yd/XVs//MhkBw7zFZuvd00dF4UP2jmtseYg+1wWDrE=
Subject key identifier:   38:B0:B7:A1:AF:63:E0:57:98:17:10:95:32:7B:10:B3:AE:5D:D9:1C
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584DB4A58AB165FA70B2B2992680
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     393653
IP address blocks:        104.128.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8a:b1:65:fa:70:b2:b2:99:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=21eeaacd-d856-4a7f-afec-97640a9cbac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:42:ee:0e:37:7e:fd:99:c3:b2:8f:7a:8c:
                    f1:ac:08:32:6e:63:85:35:39:54:e2:54:c9:86:b0:
                    5b:7f:97:6d:e3:71:43:52:be:6b:58:c3:24:3f:e3:
                    a6:2c:50:58:1f:a3:87:b8:14:d9:27:73:37:fd:9d:
                    2e:a8:89:80:6e:50:76:7e:51:99:e1:cc:6b:35:4c:
                    f9:92:57:88:4e:5f:e6:01:89:24:77:21:4c:f0:c4:
                    76:50:d4:ce:8d:f4:f9:18:43:34:99:d7:00:2c:99:
                    d2:05:58:f7:4f:a3:44:de:05:fe:20:f9:09:31:b6:
                    b6:ee:5a:26:d1:20:c2:98:8a:61:6f:a3:d4:54:da:
                    f7:e6:1d:13:49:28:ff:4a:7c:e8:41:45:32:bd:a2:
                    e8:e7:4c:67:d5:ee:0d:08:c8:00:95:ab:01:09:4a:
                    7e:86:d2:52:3b:3f:99:19:07:b5:d5:b3:0d:09:9c:
                    29:cf:77:7d:fd:c6:c6:39:f0:2b:ef:02:f1:28:a9:
                    a1:25:14:2a:f4:d4:52:40:35:e8:69:08:09:e8:d3:
                    ce:51:a7:69:6c:5c:7b:57:32:9c:09:49:8f:d5:29:
                    6c:ee:0a:fb:1d:b9:03:70:34:ed:05:3a:63:62:bc:
                    a2:8d:86:c7:e0:72:19:68:42:d3:7d:6e:c3:2c:dc:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B0:B7:A1:AF:63:E0:57:98:17:10:95:32:7B:10:B3:AE:5D:D9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:0d:cf:d2:d2:d0:3b:0f:64:c3:69:78:65:3d:e3:c1:6d:
         ce:50:e9:d8:14:e8:96:4a:65:fe:48:e8:72:0f:21:7d:95:be:
         ec:c7:f4:91:7f:18:b0:c3:3f:b2:13:43:15:81:55:77:ef:ab:
         70:9e:8d:47:44:f1:bf:52:3d:11:bc:18:03:28:18:98:dc:c5:
         ed:79:67:03:34:ea:65:1c:7c:06:18:15:b2:3e:67:72:80:c2:
         98:62:ad:fa:95:be:5c:6f:13:de:2e:14:bd:ea:37:8b:8c:c2:
         0b:a7:05:5b:68:e3:79:62:d1:88:e9:78:bf:76:66:ba:9b:f9:
         76:ee:55:3b:be:f7:3f:53:24:cc:84:37:70:59:3e:59:b2:e7:
         ef:fa:fe:50:2b:4f:ac:05:51:1c:0f:a5:56:af:25:44:e0:9f:
         93:fe:9e:27:07:9d:af:93:9e:39:60:b6:e3:91:56:78:3c:be:
         cd:96:e8:95:f7:29:31:33:6f:19:3e:d6:89:99:c9:ea:4e:0a:
         e6:bf:f5:94:2a:6f:0e:8b:55:ba:84:22:a8:48:5b:c7:1c:18:
         32:d2:87:6e:ac:aa:f6:bc:84:31:df:34:19:45:d3:fc:45:ca:
         67:14:23:e8:61:54:93:df:4b:ff:31:7b:ad:d3:5d:3c:e5:8a:
         e3:aa:0e:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYqxZfpwsrKZJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm
ODFjMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MjFlZWFhY2QtZDg1Ni00YTdmLWFmZWMtOTc2NDBhOWNiYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37NC7g43fv2Zw7KPeozxrAgybmOFNTlU4lTJ
hrBbf5dt43FDUr5rWMMkP+OmLFBYH6OHuBTZJ3M3/Z0uqImAblB2flGZ4cxrNUz5
kleITl/mAYkkdyFM8MR2UNTOjfT5GEM0mdcALJnSBVj3T6NE3gX+IPkJMba27lom
0SDCmIphb6PUVNr35h0TSSj/SnzoQUUyvaLo50xn1e4NCMgAlasBCUp+htJSOz+Z
GQe11bMNCZwpz3d9/cbGOfAr7wLxKKmhJRQq9NRSQDXoaQgJ6NPOUadpbFx7VzKc
CUmP1Sls7gr7HbkDcDTtBTpjYryijYbH4HIZaELTfW7DLNwmAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDiwt6GvY+BXmBcQlTJ7ELOuXdkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy
ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvZWJiYWI4Y2EtNTYzZi0z
N2RlLWEyMjktMmZhZDFmNWZlMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi
ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl
ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4
ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACE7Dc/S0tA7D2TDaXhlPePBbc5Q6dgU6JZKZf5I6HIPIX2VvuzH9JF/
GLDDP7ITQxWBVXfvq3CejUdE8b9SPRG8GAMoGJjcxe15ZwM06mUcfAYYFbI+Z3KA
wphirfqVvlxvE94uFL3qN4uMwgunBVto43li0YjpeL92Zrqb+XbuVTu+9z9TJMyE
N3BZPlmy5+/6/lArT6wFURwPpVavJUTgn5P+nicHna+TnjlgtuORVng8vs2W6JX3
KTEzbxk+1omZyepOCua/9ZQqbw6LVbqEIqhIW8ccGDLSh26sqva8hDHfNBlF0/xF
ymcUI+hhVJPfS/8xe63TXTzliuOqDko=
-----END CERTIFICATE-----
Generated at Wed May 13 15:01:15 2026 by rpki-client