Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1b967fd-2537-30b3-884a-7642fe5caf49.roa
File:                     d1b967fd-2537-30b3-884a-7642fe5caf49.roa (raw, json)
Hash identifier:          1vU+485WVssMI82B5XZkbK/T5tgmPA+BvpK3zE72rzU=
Subject key identifier:   24:8F:03:EE:31:7F:AA:68:CA:3F:5A:51:F3:03:2D:78:3D:A6:C6:53
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DBD05A1AF1F329ED3D8356CC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1b967fd-2537-30b3-884a-7642fe5caf49.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     18214
IP address blocks:        208.181.136.0/24 maxlen: 24
                          208.181.137.0/24 maxlen: 24
                          209.29.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a1:af:1f:32:9e:d3:d8:35:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=e7afa40e-e8a6-4db4-a617-9454f5f039b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:a5:c3:dc:2b:79:e4:bf:dc:2e:08:03:55:
                    5a:76:cf:91:28:b6:f6:29:1e:17:22:1f:de:e4:b5:
                    d1:db:ae:ae:e8:7d:c0:1a:2f:dc:c6:91:d3:6d:f3:
                    c7:21:5b:e7:19:67:cf:2d:c7:cc:29:24:4d:49:f0:
                    34:07:f4:d0:d6:11:01:b8:5c:fc:eb:07:d7:c9:4b:
                    41:54:2a:c5:98:61:28:60:f4:01:81:4d:ce:ab:45:
                    ef:5b:4c:bf:a7:07:aa:c1:5a:f0:7b:5c:32:95:d8:
                    bb:d7:f6:a4:ce:11:c5:a1:22:79:18:10:9f:2f:3f:
                    03:2d:b4:7c:aa:86:91:df:07:dd:72:7c:33:48:a4:
                    5b:90:57:0c:24:a4:4a:7c:af:b5:b4:b3:ea:56:ad:
                    ae:72:b0:7f:13:c0:6d:dd:41:b6:8d:66:73:c5:b2:
                    82:41:2b:5b:c8:69:a9:59:cf:d3:79:a3:b6:25:93:
                    01:db:5f:54:32:d1:d4:7a:5b:0c:f3:be:14:2e:7b:
                    0e:0e:08:1b:77:cd:bc:56:d1:ab:49:82:d6:80:18:
                    c5:5e:95:13:22:4b:1f:ef:c5:f6:ed:d1:57:4a:97:
                    47:98:72:1e:ea:3a:38:95:4a:b7:41:a8:78:e1:6c:
                    2a:3d:89:f7:91:7b:c1:1f:ea:7a:1a:52:45:59:1c:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:03:EE:31:7F:AA:68:CA:3F:5A:51:F3:03:2D:78:3D:A6:C6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1b967fd-2537-30b3-884a-7642fe5caf49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.136.0/23
                  209.29.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:cf:64:3b:cd:06:0b:a9:e4:c4:d7:e3:db:6a:be:18:18:
         fd:c3:ff:00:61:87:19:51:36:3f:c4:14:2d:93:32:46:37:df:
         96:8b:2d:8e:82:ca:57:71:6d:7c:81:10:94:c6:eb:f0:47:18:
         5c:27:6f:67:57:fd:0a:c1:c6:d5:27:a8:8f:5a:a5:92:77:93:
         34:9f:47:fd:50:00:4a:47:ce:24:b3:35:5e:ae:d3:5e:4d:98:
         87:4b:08:9e:b6:09:51:18:53:99:a0:f8:2a:6b:24:61:70:1a:
         c6:6b:e0:78:32:e1:11:9b:76:37:64:11:9d:a2:d3:ad:41:0d:
         56:97:b1:43:8b:5d:c2:8c:3b:cb:61:8b:da:b9:13:98:1f:11:
         ca:5d:a1:85:72:fa:72:b6:43:e5:85:0e:99:c5:8e:5b:83:7a:
         86:e2:cb:99:05:7c:ae:a1:5c:af:56:fc:86:96:80:b3:7d:30:
         91:24:13:ac:43:8a:e9:4a:3a:de:d3:49:dc:ac:6c:98:e4:54:
         32:4b:e5:06:7d:b4:3d:e9:25:5f:9f:77:db:f4:1f:53:8a:da:
         75:01:12:56:47:96:ae:d6:8b:a6:8b:20:be:6f:c3:30:ea:9d:
         10:cf:1c:ec:ba:a7:a3:35:b6:ec:df:36:a7:d0:c9:34:c1:ec:
         f3:06:8e:f8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE29BaGvHzKe09g1bMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZTdhZmE0MGUtZThhNi00ZGI0LWE2MTctOTQ1NGY1ZjAzOWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+6lw9wreeS/3C4IA1Vads+RKLb2KR4XIh/e
5LXR266u6H3AGi/cxpHTbfPHIVvnGWfPLcfMKSRNSfA0B/TQ1hEBuFz86wfXyUtB
VCrFmGEoYPQBgU3Oq0XvW0y/pweqwVrwe1wyldi71/akzhHFoSJ5GBCfLz8DLbR8
qoaR3wfdcnwzSKRbkFcMJKRKfK+1tLPqVq2ucrB/E8Bt3UG2jWZzxbKCQStbyGmp
Wc/TeaO2JZMB219UMtHUelsM874ULnsODggbd828VtGrSYLWgBjFXpUTIksf78X2
7dFXSpdHmHIe6jo4lUq3Qah44WwqPYn3kXvBH+p6GlJFWRxD5QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCSPA+4xf6poyj9aUfMDLXg9psZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDFiOTY3ZmQtMjUzNy0z
MGIzLTg4NGEtNzY0MmZlNWNhZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0LWIAwQA
0R3xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG7oz2Q7zQYLqeTE1+Pbar4YGP3D/wBhhxlRNj/EFC2TMkY3
35aLLY6CyldxbXyBEJTG6/BHGFwnb2dX/QrBxtUnqI9apZJ3kzSfR/1QAEpHziSz
NV6u015NmIdLCJ62CVEYU5mg+CprJGFwGsZr4Hgy4RGbdjdkEZ2i061BDVaXsUOL
XcKMO8thi9q5E5gfEcpdoYVy+nK2Q+WFDpnFjluDeobiy5kFfK6hXK9W/IaWgLN9
MJEkE6xDiulKOt7TSdysbJjkVDJL5QZ9tD3pJV+fd9v0H1OK2nUBElZHlq7Wi6aL
IL5vwzDqnRDPHOy6p6M1tuzfNqfQyTTB7PMGjvg=
-----END CERTIFICATE-----
Generated at Wed May 13 15:49:20 2026 by rpki-client