Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa
File:                     cbac822a-952d-3a3e-9706-340843fcb234.roa (raw, json)
Hash identifier:          pfBEkr2Fa+etswJzOy8zQQDpaQiP6uW+n77WW6Yvxxw=
Subject key identifier:   AB:54:8B:C8:4C:B0:0A:D6:2F:AD:C9:03:E8:76:C5:2E:6F:39:F8:5A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D1F4A35781E8983E1E6452A30
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        108.178.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:35:78:1e:89:83:e1:e6:45:2a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=40f28225-7a80-4a7d-8e32-372bfe8e849e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:06:59:85:bd:26:b5:d5:25:12:72:62:74:
                    c6:da:1a:94:36:f1:ca:12:5c:dd:2a:d5:f9:73:8f:
                    1b:61:79:95:84:2f:e9:52:f0:4a:5f:65:cc:85:70:
                    0b:f3:70:51:0b:66:e2:dd:d0:cf:b0:42:47:46:e5:
                    6e:62:47:71:85:a8:5c:c5:df:75:15:26:79:92:b8:
                    46:b8:c5:ee:b2:53:20:ae:47:ef:98:c9:8c:48:bd:
                    e9:5c:ce:36:b3:cd:95:44:f2:38:d3:03:95:9f:61:
                    37:53:b0:c2:58:3d:41:b1:12:3a:06:1f:40:c0:40:
                    37:ea:fe:41:c8:39:ce:9c:eb:a8:03:45:8d:48:30:
                    cf:8e:19:c7:a5:ac:0d:ce:59:32:07:f4:0a:13:57:
                    58:29:7a:e7:e2:98:ec:a7:54:8d:88:18:17:ab:70:
                    8d:b9:d8:46:00:9a:1a:7c:57:25:1d:1c:fd:89:b7:
                    d4:0d:e2:9b:e6:3c:25:4f:ee:21:de:12:31:9f:50:
                    c5:42:3e:cc:01:42:6e:01:a1:7a:2c:af:75:2e:5a:
                    7e:9a:77:16:af:c6:f5:9a:7b:de:f9:78:95:ba:42:
                    64:32:7a:d2:32:f0:0b:e5:e0:d1:05:2f:7d:02:0a:
                    41:7f:e8:45:8b:95:02:19:fa:ce:d1:f5:f3:cf:dd:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:54:8B:C8:4C:B0:0A:D6:2F:AD:C9:03:E8:76:C5:2E:6F:39:F8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbac822a-952d-3a3e-9706-340843fcb234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:34:41:bd:96:5f:9a:cc:ca:fe:74:9f:13:0a:22:ca:53:63:
         e2:a8:91:e3:22:29:dc:bc:98:37:43:a8:16:18:3d:38:3f:6b:
         7a:22:de:ed:9b:c4:45:52:70:eb:81:0f:cf:a8:3f:d9:4c:cc:
         0e:f3:b9:30:d1:56:9e:ec:69:8a:14:d7:62:90:87:15:8c:31:
         ed:6e:2f:d8:a6:0e:df:a6:43:6f:0e:2b:b8:64:c3:56:a6:2d:
         c4:89:4d:33:f4:37:7d:17:af:3e:54:c6:b5:86:ae:ec:81:39:
         79:4d:19:47:63:0f:3e:82:6c:cd:cb:53:70:3f:d1:83:54:9a:
         dc:9f:90:1e:66:82:46:46:42:7d:d1:73:f0:c3:da:83:52:1b:
         71:1d:dd:0c:dd:fc:7b:d3:90:61:92:5f:26:cb:67:cb:b3:dc:
         dd:02:25:1f:01:73:0f:df:87:90:8a:d2:bc:7f:68:8f:be:45:
         18:cc:85:f0:8f:20:9d:73:a2:4b:32:4f:c2:39:72:4b:d4:f2:
         80:c7:f2:fb:91:89:7c:65:07:23:ff:84:23:66:f2:7b:0d:0a:
         8a:76:41:8d:72:be:29:47:33:c2:09:24:a6:c3:4a:89:61:91:
         6c:87:54:1e:6c:d6:68:b3:a8:84:91:e4:e2:3c:14:c4:87:b9:
         21:b8:66:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjV4HomD4eZFKjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NDBmMjgyMjUtN2E4MC00YTdkLThlMzItMzcyYmZlOGU4NDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwoGWYW9JrXVJRJyYnTG2hqUNvHKElzdKtX5
c48bYXmVhC/pUvBKX2XMhXAL83BRC2bi3dDPsEJHRuVuYkdxhahcxd91FSZ5krhG
uMXuslMgrkfvmMmMSL3pXM42s82VRPI40wOVn2E3U7DCWD1BsRI6Bh9AwEA36v5B
yDnOnOuoA0WNSDDPjhnHpawNzlkyB/QKE1dYKXrn4pjsp1SNiBgXq3CNudhGAJoa
fFclHRz9ibfUDeKb5jwlT+4h3hIxn1DFQj7MAUJuAaF6LK91Llp+mncWr8b1mnve
+XiVukJkMnrSMvAL5eDRBS99AgpBf+hFi5UCGfrO0fXzz93gzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtUi8hMsArWL63JA+h2xS5vOfhaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvY2JhYzgyMmEtOTUyZC0z
YTNlLTk3MDYtMzQwODQzZmNiMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbLKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAg0Qb2WX5rMyv50nxMKIspTY+KokeMiKdy8mDdDqBYYPTg/a3oi3u2b
xEVScOuBD8+oP9lMzA7zuTDRVp7saYoU12KQhxWMMe1uL9imDt+mQ28OK7hkw1am
LcSJTTP0N30Xrz5UxrWGruyBOXlNGUdjDz6CbM3LU3A/0YNUmtyfkB5mgkZGQn3R
c/DD2oNSG3Ed3Qzd/HvTkGGSXybLZ8uz3N0CJR8Bcw/fh5CK0rx/aI++RRjMhfCP
IJ1zoksyT8I5ckvU8oDH8vuRiXxlByP/hCNm8nsNCop2QY1yvilHM8IJJKbDSolh
kWyHVB5s1mizqISR5OI8FMSHuSG4Zpo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:56 2026 by rpki-client