Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
File:                     9db44533-de07-3bd6-a689-efec080bd048.roa (raw, json)
Hash identifier:          5pVjWDL3QT8776FflQTQamB7CWH8IjdUuIsq8AE1CuQ=
Subject key identifier:   14:F9:B8:3E:E1:5D:37:2F:48:0E:DB:A1:8F:18:53:09:57:31:39:34
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584D95F0040430269DB4EF2EC600
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     36511
IP address blocks:        208.103.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:04:04:30:26:9d:b4:ef:2e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=959838a7-3774-440e-b17e-8bf39ff82b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:6a:7b:b5:96:02:52:b1:af:b9:cf:0b:b3:
                    e8:bb:eb:ff:a3:84:a0:97:4b:70:73:d0:5c:f7:05:
                    88:9d:10:9a:f9:8a:0e:4a:b9:cc:86:c6:98:8c:64:
                    e8:e1:59:94:a2:89:a0:fb:23:92:b1:87:4a:40:fa:
                    25:03:4b:36:ca:89:b8:4b:4d:50:45:d8:f3:6a:25:
                    19:e2:1c:50:3b:79:b0:cd:5f:1e:e5:09:ed:a9:bd:
                    5e:c6:01:ee:9e:53:9a:9d:63:2a:7f:2e:25:0f:a4:
                    fb:43:6f:0b:6c:20:2c:62:48:f5:31:38:9a:47:48:
                    1f:17:0d:3a:98:f5:c8:a0:08:73:6a:80:8c:d7:a2:
                    25:d5:f3:8d:8d:6f:af:d6:4a:ef:39:d4:88:56:8a:
                    94:1c:89:87:ae:7c:8c:56:a7:4a:5c:a3:0f:16:b4:
                    36:91:e1:29:d7:96:bf:90:29:65:21:3d:ed:a9:82:
                    1a:f1:e1:45:16:7b:d1:50:42:dd:24:d2:c8:05:dc:
                    49:39:59:f6:ec:03:a5:79:e2:ee:5d:27:10:8a:07:
                    e0:d0:e3:e2:19:62:92:ea:16:c4:d8:e5:46:b2:8a:
                    b9:38:0c:f1:82:0b:df:90:11:e1:af:ee:79:d9:db:
                    e2:0e:08:84:61:8f:8a:1b:26:e7:2d:8a:10:e2:26:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F9:B8:3E:E1:5D:37:2F:48:0E:DB:A1:8F:18:53:09:57:31:39:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:b9:8e:c8:0f:ad:be:36:f8:60:c9:a7:99:3f:5c:25:ff:
         49:5d:db:5e:9a:ac:63:6e:a8:f7:14:e4:ba:12:87:91:d7:a5:
         60:6c:50:a7:a3:cf:b9:72:b0:b9:37:6d:d2:9f:5d:7e:ac:0d:
         72:98:38:e4:2c:e5:87:fd:ee:6f:38:7f:5c:5a:01:09:96:4d:
         23:41:55:9f:6d:c7:7d:ae:e6:1c:ea:63:5a:a4:7b:26:8b:c0:
         11:bc:44:90:00:23:7d:b9:86:47:34:c6:87:49:76:86:60:67:
         63:2d:0e:aa:96:19:58:71:4f:f7:6e:81:8f:92:ab:fb:7b:cd:
         cf:ae:81:bc:ed:6f:fe:c9:bb:80:90:ce:25:36:21:b4:20:22:
         be:38:75:16:42:6a:d7:22:df:60:6a:75:e6:68:88:87:f7:a2:
         46:ab:ec:be:5b:80:ff:73:9c:32:26:26:db:60:ef:e8:fe:b4:
         73:8f:b9:fa:94:28:94:48:fd:93:62:23:8c:1b:2d:ff:65:64:
         4f:fd:78:f0:b2:00:98:b1:4e:bd:fd:99:35:b1:7b:5d:87:88:
         b1:e4:01:5b:77:b0:1c:a3:46:3c:2f:79:89:1d:70:aa:5a:63:
         b2:ff:16:bc:70:1a:f8:66:4d:04:a7:85:04:c1:d1:6e:4f:fb:
         06:a0:b8:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AQEMCadtO8uxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OTU5ODM4YTctMzc3NC00NDBlLWIxN2UtOGJmMzlmZjgyYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty1qe7WWAlKxr7nPC7Pou+v/o4Sgl0twc9Bc
9wWInRCa+YoOSrnMhsaYjGTo4VmUoomg+yOSsYdKQPolA0s2yom4S01QRdjzaiUZ
4hxQO3mwzV8e5Qntqb1exgHunlOanWMqfy4lD6T7Q28LbCAsYkj1MTiaR0gfFw06
mPXIoAhzaoCM16Il1fONjW+v1krvOdSIVoqUHImHrnyMVqdKXKMPFrQ2keEp15a/
kCllIT3tqYIa8eFFFnvRUELdJNLIBdxJOVn27AOleeLuXScQigfg0OPiGWKS6hbE
2OVGsoq5OAzxggvfkBHhr+552dviDgiEYY+KGybnLYoQ4ib4aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBT5uD7hXTcvSA7boY8YUwlXMTk0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvOWRiNDQ1MzMtZGUwNy0z
YmQ2LWE2ODktZWZlYzA4MGJkMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkUuY7ID62+NvhgyaeZP1wl/0ld216arGNuqPcU5LoSh5HXpWBsUKej
z7lysLk3bdKfXX6sDXKYOOQs5Yf97m84f1xaAQmWTSNBVZ9tx32u5hzqY1qkeyaL
wBG8RJAAI325hkc0xodJdoZgZ2MtDqqWGVhxT/dugY+Sq/t7zc+ugbztb/7Ju4CQ
ziU2IbQgIr44dRZCatci32BqdeZoiIf3okar7L5bgP9znDImJttg7+j+tHOPufqU
KJRI/ZNiI4wbLf9lZE/9ePCyAJixTr39mTWxe12HiLHkAVt3sByjRjwveYkdcKpa
Y7L/FrxwGvhmTQSnhQTB0W5P+waguJo=
-----END CERTIFICATE-----
Generated at Wed May 13 05:07:16 2026 by rpki-client