Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d51bf53-ebb9-3400-bd97-a9084bd37a1d.roa
File:                     3d51bf53-ebb9-3400-bd97-a9084bd37a1d.roa (raw, json)
Hash identifier:          B7MoQQSYAdP7Z47ImhzxWkGuoqP3MvYM2jq3gqmVl7o=
Subject key identifier:   19:20:85:4A:F0:CF:34:56:E9:7F:F4:EB:38:1D:A2:45:29:B9:A1:BD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E0FBE3FFB278F1526FC280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d51bf53-ebb9-3400-bd97-a9084bd37a1d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        173.255.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:fb:e3:ff:b2:78:f1:52:6f:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=61988f80-50c0-4998-944f-0068d98b5fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:b6:cd:1a:76:5a:ab:74:fd:4a:3e:37:ba:
                    8a:e5:79:50:00:0a:11:52:df:83:c6:62:ed:5d:dc:
                    d4:f9:08:9a:c0:8f:14:d0:7a:78:7f:d9:6c:f2:74:
                    6a:05:15:f4:ae:25:ce:07:cd:ff:d7:87:a6:b5:13:
                    b8:cc:37:cb:69:2d:71:1f:17:7d:3d:d3:54:b9:dc:
                    12:76:9a:be:3f:7c:65:9a:9c:fd:96:8b:02:b6:ec:
                    0c:a1:eb:fe:a4:31:50:26:c4:83:32:76:1b:74:8a:
                    32:1c:d8:a8:3f:10:83:cd:e1:57:bd:db:7e:9e:91:
                    ba:46:ec:0c:c5:e8:c7:cd:26:2b:24:68:bb:ef:23:
                    9c:89:5d:44:c0:76:6b:70:a3:d7:7c:06:e7:e1:40:
                    55:f5:4e:cb:48:74:5f:1c:22:99:ad:71:c2:ba:99:
                    e9:ce:77:c4:5f:54:b1:bb:4e:e0:14:8f:c0:4e:2c:
                    0f:ab:7f:72:68:e0:01:a0:81:b0:34:be:6d:2f:75:
                    32:b9:81:79:b8:20:85:03:d1:ab:19:3c:91:35:bb:
                    ca:03:c2:cf:5b:7a:01:40:f5:74:70:d6:3c:58:9a:
                    75:cb:a8:c4:ef:5b:ee:11:ea:77:57:89:46:1e:05:
                    5e:03:17:69:d2:6d:22:69:33:ff:b0:28:18:0e:6c:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:85:4A:F0:CF:34:56:E9:7F:F4:EB:38:1D:A2:45:29:B9:A1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d51bf53-ebb9-3400-bd97-a9084bd37a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:02:9d:c4:6c:d3:de:fe:9b:a9:97:52:f9:60:ae:d2:9c:02:
         ed:9d:7c:b6:a4:a7:ae:22:32:ae:a3:05:7b:9f:2e:07:38:b6:
         2d:70:05:6d:9e:64:47:9a:b7:ba:2c:25:4f:85:be:74:45:0e:
         4c:8b:47:3e:77:47:26:61:78:87:92:b0:36:a8:a7:64:bb:75:
         25:93:e2:2c:48:7a:18:61:2f:32:07:aa:d5:69:0d:44:1b:21:
         2c:fb:c2:7e:67:9f:28:d3:3a:50:74:c9:2a:32:27:60:c1:b3:
         b2:61:ed:dd:75:5a:18:d0:b6:c3:5d:96:0e:dd:8f:f0:94:b5:
         a3:4c:6a:55:d4:29:f0:c9:70:c0:75:ed:52:82:01:66:ae:06:
         02:d8:71:0f:71:d4:58:51:53:c2:44:0c:b4:cc:c2:85:3d:44:
         16:77:d5:ee:1f:1a:79:e3:b3:4f:07:1e:3f:17:d6:7b:5c:53:
         cd:bc:c8:8d:76:2c:45:56:3c:2b:65:cc:af:d1:27:b9:33:fe:
         59:a3:ff:8a:f1:fd:3f:d4:07:e1:0a:2b:18:81:aa:33:c6:1d:
         ee:85:f3:c0:72:39:8f:0b:06:62:6b:db:58:2f:d6:63:6d:d5:
         86:46:f2:92:c0:19:e1:79:c9:2c:a8:cf:e2:9d:51:38:0e:32:
         62:69:dd:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Pvj/7J48VJvwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NjE5ODhmODAtNTBjMC00OTk4LTk0NGYtMDA2OGQ5OGI1ZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF+2zRp2Wqt0/Uo+N7qK5XlQAAoRUt+DxmLt
XdzU+QiawI8U0Hp4f9ls8nRqBRX0riXOB83/14emtRO4zDfLaS1xHxd9PdNUudwS
dpq+P3xlmpz9losCtuwMoev+pDFQJsSDMnYbdIoyHNioPxCDzeFXvdt+npG6RuwM
xejHzSYrJGi77yOciV1EwHZrcKPXfAbn4UBV9U7LSHRfHCKZrXHCupnpznfEX1Sx
u07gFI/ATiwPq39yaOABoIGwNL5tL3UyuYF5uCCFA9GrGTyRNbvKA8LPW3oBQPV0
cNY8WJp1y6jE71vuEep3V4lGHgVeAxdp0m0iaTP/sCgYDmyC6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkghUrwzzRW6X/06zgdokUpuaG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Q1MWJmNTMtZWJiOS0z
NDAwLWJkOTctYTkwODRiZDM3YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf99MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHACncRs097+m6mXUvlgrtKcAu2dfLakp64iMq6jBXufLgc4ti1wBW2e
ZEeat7osJU+FvnRFDkyLRz53RyZheIeSsDaop2S7dSWT4ixIehhhLzIHqtVpDUQb
ISz7wn5nnyjTOlB0ySoyJ2DBs7Jh7d11WhjQtsNdlg7dj/CUtaNMalXUKfDJcMB1
7VKCAWauBgLYcQ9x1FhRU8JEDLTMwoU9RBZ31e4fGnnjs08HHj8X1ntcU828yI12
LEVWPCtlzK/RJ7kz/lmj/4rx/T/UB+EKKxiBqjPGHe6F88ByOY8LBmJr21gv1mNt
1YZG8pLAGeF5ySyoz+KdUTgOMmJp3eU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:43 2026 by rpki-client