Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f025f1b9-23d8-3961-9939-e29a46e59750.roa
File:                     f025f1b9-23d8-3961-9939-e29a46e59750.roa (raw, json)
Hash identifier:          v+0uxuTuiNK1mX2fkzzTLXBiFLW9dg2b3q84ZeZmRPU=
Subject key identifier:   AF:DF:B0:CF:07:0A:83:28:61:11:A6:C8:D7:DC:5C:84:DB:0C:F1:95
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D492A44EF4ADD593FA49B5AE0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f025f1b9-23d8-3961-9939-e29a46e59750.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     62610
IP address blocks:        107.150.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:44:ef:4a:dd:59:3f:a4:9b:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=99a33cf2-d0c0-4308-bb5f-6acb9ff97dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0a:32:80:5d:d8:d7:36:c9:3d:9c:1a:b4:24:
                    31:07:31:89:98:43:74:a5:f4:a1:57:0e:f2:90:c7:
                    d8:d5:0f:d4:49:57:68:90:47:23:6e:39:a8:88:ed:
                    10:1a:df:ba:8e:dc:05:2b:31:33:ab:fa:c4:74:b2:
                    26:85:2e:57:a9:d9:db:29:44:ee:cd:b0:d1:53:01:
                    c2:a7:df:de:b0:6e:d3:2b:1c:79:01:7d:f1:5c:35:
                    c7:e9:0e:b6:46:5e:9b:bb:40:6b:bc:15:a3:cb:a6:
                    74:c7:12:c5:13:bf:38:08:36:bf:03:31:e7:b5:19:
                    d1:1b:a9:e1:b7:5b:3e:2a:fa:52:17:48:ca:c9:16:
                    dd:8d:ab:0f:09:b5:6f:b8:bd:00:f2:69:53:c2:3a:
                    e7:97:48:d7:13:5c:cd:c7:ff:11:07:6e:a1:f9:21:
                    40:d2:2f:f5:f4:20:3c:3d:e2:49:ec:bf:6f:b2:dd:
                    29:43:24:3a:0b:70:3e:2f:61:73:4f:b5:3d:86:b2:
                    17:e6:06:b3:0c:3d:0c:8d:5f:30:fe:ea:0e:3a:cb:
                    ad:db:56:09:20:d5:f8:80:7d:a3:40:7a:89:71:71:
                    7e:d2:c1:c5:a2:de:ec:c9:11:6a:80:db:04:8a:51:
                    f6:43:7c:08:5a:b8:c3:b7:d6:2e:b3:10:e4:ed:63:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DF:B0:CF:07:0A:83:28:61:11:A6:C8:D7:DC:5C:84:DB:0C:F1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f025f1b9-23d8-3961-9939-e29a46e59750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:1a:fe:3f:17:bc:15:0e:d9:7f:a1:13:1f:34:af:96:86:
         96:bd:6e:62:13:b5:03:0b:44:d0:19:44:92:02:e1:9e:47:0f:
         c7:a0:f9:7a:ed:93:56:7f:6c:f4:db:1e:d7:80:8e:07:f1:4f:
         36:5b:95:25:cc:98:2a:23:55:8e:83:df:82:45:ff:42:10:f2:
         82:5e:2c:d0:ab:75:a6:d2:c5:15:7c:f6:fc:79:0b:9b:f8:71:
         2f:fe:ac:1a:e7:67:c7:92:11:7c:5e:c8:8d:ae:f8:f7:57:d4:
         39:f9:85:3a:93:db:c1:1b:67:d6:11:a7:dd:53:b4:01:30:8b:
         c8:70:37:8e:2c:11:21:96:06:60:78:b4:86:71:59:9d:f0:f8:
         24:4f:a0:8a:52:dd:cd:60:23:f2:82:61:b7:23:4a:ce:a4:29:
         0f:a0:a7:3c:1b:da:47:71:eb:f9:17:54:ff:8f:a6:9e:0b:cf:
         87:a9:e0:72:c7:31:93:93:49:26:25:93:9f:8c:7d:d5:d8:51:
         d6:a3:76:1e:a1:9e:c9:5f:a9:dd:4b:67:29:71:67:69:cf:55:
         83:4a:c1:3e:6a:27:79:55:b6:a1:b6:18:54:53:2d:36:b0:ce:
         06:ed:04:68:1e:cb:c2:e0:00:f9:5f:f1:a6:16:89:8a:26:5f:
         34:60:75:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkTvSt1ZP6SbWuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
OTlhMzNjZjItZDBjMC00MzA4LWJiNWYtNmFjYjlmZjk3ZGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAoygF3Y1zbJPZwatCQxBzGJmEN0pfShVw7y
kMfY1Q/USVdokEcjbjmoiO0QGt+6jtwFKzEzq/rEdLImhS5XqdnbKUTuzbDRUwHC
p9/esG7TKxx5AX3xXDXH6Q62Rl6bu0BrvBWjy6Z0xxLFE784CDa/AzHntRnRG6nh
t1s+KvpSF0jKyRbdjasPCbVvuL0A8mlTwjrnl0jXE1zNx/8RB26h+SFA0i/19CA8
PeJJ7L9vst0pQyQ6C3A+L2FzT7U9hrIX5gazDD0MjV8w/uoOOsut21YJINX4gH2j
QHqJcXF+0sHFot7syRFqgNsEilH2Q3wIWrjDt9YusxDk7WMFewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/fsM8HCoMoYRGmyNfcXITbDPGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZjAyNWYxYjktMjNkOC0z
OTYxLTk5MzktZTI5YTQ2ZTU5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5Z4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrzGv4/F7wVDtl/oRMfNK+Whpa9bmITtQMLRNAZRJIC4Z5HD8eg+Xrt
k1Z/bPTbHteAjgfxTzZblSXMmCojVY6D34JF/0IQ8oJeLNCrdabSxRV89vx5C5v4
cS/+rBrnZ8eSEXxeyI2u+PdX1Dn5hTqT28EbZ9YRp91TtAEwi8hwN44sESGWBmB4
tIZxWZ3w+CRPoIpS3c1gI/KCYbcjSs6kKQ+gpzwb2kdx6/kXVP+Ppp4Lz4ep4HLH
MZOTSSYlk5+MfdXYUdajdh6hnslfqd1LZylxZ2nPVYNKwT5qJ3lVtqG2GFRTLTaw
zgbtBGgey8LgAPlf8aYWiYomXzRgdRU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:48 2026 by rpki-client