Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/9cfa8b5f-a18b-3790-8246-29c05153af4c.roa
File:                     9cfa8b5f-a18b-3790-8246-29c05153af4c.roa (raw, json)
Hash identifier:          LxWc7aRF1Lo9gbyV0u1cozm3wBxta5hO7WGtBK8APYI=
Subject key identifier:   77:53:6A:AC:F8:7B:8F:42:0C:14:6D:D9:A6:C8:CA:4C:61:0E:6F:95
Certificate issuer:       /CN=3f915079-cb02-4279-8f5b-48fa6683491f
Certificate serial:       010D0C9F4328584D19B4E1F48C27A7B1845BE680
Authority key identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/9cfa8b5f-a18b-3790-8246-29c05153af4c.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        107.190.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e1:f4:8c:27:a7:b1:84:5b:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f915079-cb02-4279-8f5b-48fa6683491f
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=a85b68d5-1a6a-4eb8-91b3-27e96f7c35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:f4:f8:30:77:f8:24:9d:9d:49:5d:a9:6e:
                    0c:25:2a:00:65:41:8e:10:f2:e3:81:a5:3c:19:19:
                    ce:15:6c:fc:5c:ef:bf:18:57:6f:03:79:82:93:e5:
                    70:42:4d:1c:4b:84:06:12:1e:66:41:5e:b4:53:4f:
                    9e:5d:55:83:be:61:df:48:2f:e9:79:85:b9:5d:c8:
                    af:e1:1a:9c:3d:7b:eb:90:60:e9:2c:f8:5a:c2:81:
                    ce:c0:01:30:e4:8f:88:11:74:fe:d4:bc:24:b0:65:
                    50:65:11:f1:bc:b2:4e:c1:73:a1:37:f4:ec:f5:4d:
                    ee:fa:6a:37:e0:4e:8b:95:c4:67:e2:a4:e6:3a:23:
                    80:58:f5:63:28:32:47:7b:3f:ab:26:0f:2c:0e:62:
                    d9:9d:5a:4d:22:3f:22:a2:15:d6:e6:40:9e:87:42:
                    ce:16:ea:87:9c:fb:9c:d1:42:be:3d:55:59:89:ff:
                    ba:8c:3e:10:1f:b2:3b:15:7c:3d:d7:60:8c:7d:9d:
                    81:b9:2f:69:ea:19:df:b7:f0:d6:89:eb:1d:28:e0:
                    59:18:c6:d9:12:88:25:fa:08:f7:39:83:00:4d:0a:
                    fd:86:9d:91:1b:96:f6:b7:44:9f:fb:44:be:19:ab:
                    08:e6:b5:f1:d6:34:7e:61:87:c8:b9:97:e1:34:70:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:53:6A:AC:F8:7B:8F:42:0C:14:6D:D9:A6:C8:CA:4C:61:0E:6F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/9cfa8b5f-a18b-3790-8246-29c05153af4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl

            X509v3 Authority Key Identifier:
                keyid:07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:62:f1:8a:9a:58:7a:4f:57:b6:f1:4e:b8:91:61:50:8b:
         f2:e0:d4:55:32:ce:be:f6:79:19:48:29:27:dd:86:51:41:ff:
         b9:3c:52:08:89:47:0a:75:f8:90:2b:67:ba:c0:77:13:a1:b6:
         95:be:ce:b4:8b:db:ad:cc:89:0f:2c:a4:9d:77:77:54:40:97:
         7b:55:9d:9c:85:40:f3:98:e8:c1:36:23:ab:4a:77:9b:6b:8c:
         3f:e9:f1:00:d3:35:ce:c3:7a:9b:b9:cf:a3:49:6b:de:ab:79:
         ae:89:b8:d6:37:b6:79:39:79:8e:e9:e1:14:bc:6b:3e:b4:b2:
         79:fe:2f:70:72:0a:e0:74:5a:af:82:ed:d0:c8:b0:fb:3c:9e:
         d6:d0:97:1c:3f:2a:f7:e6:47:cd:51:ac:5a:7e:dd:df:c0:3c:
         c7:39:9c:9f:10:20:c2:b8:ae:48:59:07:82:2b:e0:21:1b:4b:
         89:dc:8b:3f:f8:a5:b0:fe:e3:40:96:69:7b:b2:6d:cc:c3:68:
         e7:6c:1b:5a:00:7f:51:b7:bb:68:69:b8:a8:94:10:fa:f1:c3:
         38:9c:2b:75:96:d5:c7:fc:ca:53:b1:2f:c4:84:45:17:ee:52:
         4e:04:8a:2c:e0:81:ed:48:89:91:f6:72:76:d9:90:01:8e:07:
         43:1b:49:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtOH0jCensYRb5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y5MTUwNzktY2IwMi00Mjc5LThmNWItNDhmYTY2ODM0
OTFmMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
YTg1YjY4ZDUtMWE2YS00ZWI4LTkxYjMtMjdlOTZmN2MzNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjT0+DB3+CSdnUldqW4MJSoAZUGOEPLjgaU8
GRnOFWz8XO+/GFdvA3mCk+VwQk0cS4QGEh5mQV60U0+eXVWDvmHfSC/peYW5Xciv
4RqcPXvrkGDpLPhawoHOwAEw5I+IEXT+1LwksGVQZRHxvLJOwXOhN/Ts9U3u+mo3
4E6LlcRn4qTmOiOAWPVjKDJHez+rJg8sDmLZnVpNIj8iohXW5kCeh0LOFuqHnPuc
0UK+PVVZif+6jD4QH7I7FXw912CMfZ2BuS9p6hnft/DWiesdKOBZGMbZEogl+gj3
OYMATQr9hp2RG5b2t0Sf+0S+GasI5rXx1jR+YYfIuZfhNHD4rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdTaqz4e49CDBRt2abIykxhDm+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjkx
NTA3OS1jYjAyLTQyNzktOGY1Yi00OGZhNjY4MzQ5MWYvOWNmYThiNWYtYTE4Yi0z
NzkwLTgyNDYtMjljMDUxNTNhZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y5MTUwNzktY2IwMi00Mjc5LThm
NWItNDhmYTY2ODM0OTFmLzNmOTE1MDc5LWNiMDItNDI3OS04ZjViLTQ4ZmE2Njgz
NDkxZi5jcmwwHwYDVR0jBBgwFoAUB99WYcgbeeKM2DlwZqP9wj0nE68wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZjkxNTA3OS1jYjAyLTQyNzktOGY1Yi00OGZh
NjY4MzQ5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa763MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADb5YvGKmlh6T1e28U64kWFQi/Lg1FUyzr72eRlIKSfdhlFB/7k8UgiJ
Rwp1+JArZ7rAdxOhtpW+zrSL263MiQ8spJ13d1RAl3tVnZyFQPOY6ME2I6tKd5tr
jD/p8QDTNc7Depu5z6NJa96rea6JuNY3tnk5eY7p4RS8az60snn+L3ByCuB0Wq+C
7dDIsPs8ntbQlxw/KvfmR81RrFp+3d/APMc5nJ8QIMK4rkhZB4Ir4CEbS4nciz/4
pbD+40CWaXuybczDaOdsG1oAf1G3u2hpuKiUEPrxwzicK3WW1cf8ylOxL8SERRfu
Uk4Eiizgge1IiZH2cnbZkAGOB0MbSeQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:49 2026 by rpki-client