Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa
File:                     82929a32-9dfc-3178-af45-6711a15f933d.roa (raw, json)
Hash identifier:          D8a9g/LwGQQFeTdbcw6b7Q1NFX/WArgBJJojjiTSyZU=
Subject key identifier:   A7:56:71:6A:F2:4A:8C:D9:FB:DA:CD:BD:39:D0:6E:FE:5E:DA:0E:A2
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D386A3800EDC83C10DEFE91A0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     20057
IP address blocks:        108.144.128.0/17 maxlen: 24
                          108.146.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:38:00:ed:c8:3c:10:de:fe:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=200eae51-d18b-4e5b-8daf-a999916ce1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:8c:a3:27:e5:fd:0e:b3:f9:7a:a6:ef:68:
                    52:84:32:f9:68:2c:f8:db:c2:b0:f7:2b:ca:42:d5:
                    d6:25:cc:10:83:9a:8d:a7:d9:e1:6b:c0:33:64:85:
                    f9:8f:c9:0e:47:ec:14:c3:5d:be:29:66:f2:4f:42:
                    1e:81:19:e5:f2:f9:c9:36:13:11:45:39:65:91:af:
                    fe:1f:40:f0:75:48:93:f9:f7:17:8d:d3:42:7b:05:
                    b2:2a:a8:80:83:1d:18:20:8f:52:00:4c:12:7e:76:
                    26:44:5f:f8:eb:37:84:77:b6:89:1a:0a:a9:59:fb:
                    46:43:64:0c:bf:38:5e:80:cd:c2:de:36:17:03:23:
                    9a:4a:ff:42:35:69:25:0f:74:98:a2:15:57:09:03:
                    2d:0e:45:82:5c:8e:e9:1f:3f:36:da:fb:f3:9d:04:
                    8a:55:57:2c:b6:3f:89:1c:69:32:8b:7f:d8:86:72:
                    28:4e:a1:26:b7:22:b7:f6:c8:c0:4d:61:c9:bf:d2:
                    f2:be:39:23:a6:df:05:6f:66:8e:fe:e7:2b:b3:2b:
                    f8:8f:e7:70:73:b5:e9:cb:5a:10:93:0d:17:f8:ca:
                    a5:79:1f:bf:1e:64:b1:cb:6d:71:ef:ed:e6:50:25:
                    3a:17:55:44:2c:1e:10:07:eb:d1:17:ce:6a:c8:1f:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:71:6A:F2:4A:8C:D9:FB:DA:CD:BD:39:D0:6E:FE:5E:DA:0E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/82929a32-9dfc-3178-af45-6711a15f933d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.144.128.0/17
                  108.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fd:4c:f7:cc:9b:ce:03:f6:5e:e3:39:a0:cf:89:0f:b7:3e:
         a6:e6:4f:8e:0c:1f:ee:29:4c:5f:3b:ac:a5:64:d7:2c:3a:c7:
         70:4a:5e:08:c1:fb:ec:c2:6c:a9:cc:86:c0:6c:9f:1e:f2:45:
         e0:c8:80:c6:28:a6:09:1e:85:f2:d5:6b:38:68:ba:0c:ce:e5:
         e8:07:ab:ee:14:e7:45:6a:5d:85:23:f4:ca:f4:d9:80:72:c2:
         40:12:32:6f:0c:4e:8a:81:b8:00:6d:02:09:16:6d:e7:e0:d9:
         99:c7:da:54:d5:2b:41:5a:84:ff:bb:f3:9a:d2:db:01:c3:aa:
         36:fe:2a:d8:45:e6:bc:d1:63:c2:b1:3e:f0:29:aa:f8:2c:19:
         b5:3b:00:41:0e:5a:56:e0:68:4a:0e:10:25:0c:52:af:2c:db:
         3e:21:fc:6a:e7:97:86:b3:e8:55:bc:5f:3e:d8:58:d3:cf:d1:
         86:28:4e:94:51:10:6a:78:15:1d:4d:4e:d4:94:d0:70:69:b9:
         cc:a2:97:fb:3d:ad:58:a8:a9:cd:90:12:53:30:fa:d8:6a:aa:
         c5:00:3a:04:67:91:9a:54:92:23:d1:6f:2a:59:50:68:e1:76:
         62:95:4b:54:ff:22:ef:c5:02:e0:2f:b0:4a:43:de:4e:4c:ab:
         a9:09:87:8c
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE04ajgA7cg8EN7+kaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
MjAwZWFlNTEtZDE4Yi00ZTViLThkYWYtYTk5OTkxNmNlMWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklqMoyfl/Q6z+Xqm72hShDL5aCz428Kw9yvK
QtXWJcwQg5qNp9nha8AzZIX5j8kOR+wUw12+KWbyT0IegRnl8vnJNhMRRTllka/+
H0DwdUiT+fcXjdNCewWyKqiAgx0YII9SAEwSfnYmRF/46zeEd7aJGgqpWftGQ2QM
vzhegM3C3jYXAyOaSv9CNWklD3SYohVXCQMtDkWCXI7pHz822vvznQSKVVcstj+J
HGkyi3/YhnIoTqEmtyK39sjATWHJv9Lyvjkjpt8Fb2aO/ucrsyv4j+dwc7Xpy1oQ
kw0X+MqleR+/HmSxy21x7+3mUCU6F1VELB4QB+vRF85qyB+88wIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFKdWcWrySozZ+9rNvTnQbv5e2g6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvODI5MjlhMzItOWRmYy0z
MTc4LWFmNDUtNjcxMWExNWY5MzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQHbJCAAwMA
bJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEALf1M98ybzgP2XuM5oM+JD7c+puZPjgwf7ilMXzuspWTXLDrH
cEpeCMH77MJsqcyGwGyfHvJF4MiAxiimCR6F8tVrOGi6DM7l6Aer7hTnRWpdhSP0
yvTZgHLCQBIybwxOioG4AG0CCRZt5+DZmcfaVNUrQVqE/7vzmtLbAcOqNv4q2EXm
vNFjwrE+8Cmq+CwZtTsAQQ5aVuBoSg4QJQxSryzbPiH8aueXhrPoVbxfPthY08/R
hihOlFEQangVHU1O1JTQcGm5zKKX+z2tWKipzZASUzD62GqqxQA6BGeRmlSSI9Fv
KllQaOF2YpVLVP8i78UC4C+wSkPeTkyrqQmHjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:53 2026 by rpki-client