Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa
File:                     ab376764-b694-3baa-a49e-bd5c96338fd9.roa (raw, json)
Hash identifier:          5YYjyQEMJdzwKZif2hU5zH3LaUXkmCZOFAYQ2Dwy9+s=
Subject key identifier:   C3:EF:DD:B6:FE:F8:BC:04:55:53:49:1E:F7:8E:03:C6:73:CB:50:01
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F4328584D359FDA170CC7D8723B17EF00
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     36001
IP address blocks:        97.107.32.0/20 maxlen: 24
                          104.192.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:17:0c:c7:d8:72:3b:17:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=96def9b2-4626-4b07-bd49-0a9592af40ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:a1:12:96:39:86:32:f8:55:86:a3:d8:eb:
                    ed:fc:fd:de:2d:b0:66:a4:22:d2:b2:b0:7b:d0:57:
                    77:eb:72:84:da:88:a7:40:f3:c3:9c:15:87:2e:a4:
                    b2:60:70:8c:77:bf:02:90:dc:f4:fb:82:c2:fc:7b:
                    e5:9d:08:8d:34:d5:36:0c:e1:bc:80:90:06:8d:c6:
                    d2:d0:e5:32:ef:ea:e5:0b:9a:e4:ef:89:e9:5c:03:
                    15:28:02:34:88:20:1a:25:fa:a4:04:7e:c2:41:38:
                    c3:28:d9:66:27:0f:1b:fb:d0:7b:61:0a:f6:48:2a:
                    1b:d6:a6:3d:3f:f5:7a:74:ad:3a:86:ff:76:e9:b0:
                    e1:af:30:fb:c4:8e:38:b6:da:36:13:19:73:65:68:
                    56:0e:6e:96:53:d0:67:6e:db:06:0f:7e:3d:2d:36:
                    76:e6:5a:00:92:64:2e:11:03:c0:01:25:f0:f7:91:
                    35:c3:d4:d5:ce:d5:28:3a:d0:d1:e6:66:e6:6d:2e:
                    43:1d:e7:bb:3f:a5:c8:a9:c1:72:84:bc:a4:e1:26:
                    65:18:df:af:34:d2:2c:c7:90:93:f2:e6:33:31:4b:
                    08:29:46:f1:ed:e3:f1:ec:0b:a9:f0:d6:4d:7f:66:
                    50:26:77:19:f5:af:d6:da:1a:48:2f:da:b1:a7:7d:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:DD:B6:FE:F8:BC:04:55:53:49:1E:F7:8E:03:C6:73:CB:50:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.32.0/20
                  104.192.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:8e:52:7c:c7:70:0f:7b:8c:21:d2:26:8e:5f:6e:bc:2c:
         1e:8f:23:db:d8:ef:9d:c7:4f:78:dc:76:5c:6c:da:55:85:dc:
         7b:65:95:e6:e8:4e:e3:f0:1e:60:53:33:88:45:e2:80:cd:8b:
         31:55:ca:e0:b4:5d:ac:46:87:72:b0:bb:cb:27:0f:1a:38:b8:
         41:2d:0c:c9:f6:5a:8d:69:15:02:25:5a:08:d2:ee:a5:a6:98:
         17:ce:9b:db:b4:ef:b6:bf:67:89:2a:50:4b:bd:eb:25:de:39:
         db:f5:b6:69:0c:87:b6:9d:8c:2d:29:ae:62:f0:ed:51:d4:70:
         c9:4c:6c:b4:23:12:d6:ba:9d:f6:b4:bf:88:03:19:8c:57:80:
         54:74:40:cf:56:74:8c:1d:47:ac:f9:ac:48:9a:df:19:31:fe:
         ca:89:ed:8d:0a:54:1d:04:6a:14:54:67:b1:f8:37:8c:4a:16:
         b6:8a:31:f2:2e:82:e6:b8:41:5a:8b:ce:f8:18:ba:a6:d2:2c:
         d4:6a:ca:8f:8a:25:f6:7d:c9:a6:98:66:ec:74:f8:11:04:5d:
         5f:97:49:09:d2:21:0b:11:7b:d6:a6:a9:be:3a:e7:8e:20:ca:
         a7:c9:f8:29:40:f7:93:fd:a3:7b:04:5b:c9:0f:2e:03:c9:19:
         41:20:d3:ef
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE01n9oXDMfYcjsX7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdhMWJmZjMtY2ZmMi00MWY4LWExZDItOGExMGNhZDdl
MzQwMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
OTZkZWY5YjItNDYyNi00YjA3LWJkNDktMGE5NTkyYWY0MGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5yhEpY5hjL4VYaj2Ovt/P3eLbBmpCLSsrB7
0Fd363KE2oinQPPDnBWHLqSyYHCMd78CkNz0+4LC/HvlnQiNNNU2DOG8gJAGjcbS
0OUy7+rlC5rk74npXAMVKAI0iCAaJfqkBH7CQTjDKNlmJw8b+9B7YQr2SCob1qY9
P/V6dK06hv926bDhrzD7xI44tto2ExlzZWhWDm6WU9BnbtsGD349LTZ25loAkmQu
EQPAASXw95E1w9TVztUoOtDR5mbmbS5DHee7P6XIqcFyhLyk4SZlGN+vNNIsx5CT
8uYzMUsIKUbx7ePx7Aup8NZNf2ZQJncZ9a/W2hpIL9qxp30ADQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMPv3bb++LwEVVNJHveOA8Zzy1ABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Ex
YmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2FkN2UzNDAvYWIzNzY3NjQtYjY5NC0z
YmFhLWE0OWUtYmQ1Yzk2MzM4ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdhMWJmZjMtY2ZmMi00MWY4LWEx
ZDItOGExMGNhZDdlMzQwLzM3YTFiZmYzLWNmZjItNDFmOC1hMWQyLThhMTBjYWQ3
ZTM0MC5jcmwwHwYDVR0jBBgwFoAUDIygQW4g0FWlM0V3sX5RNjMiEXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEw
Y2FkN2UzNDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYWsgAwQC
aMD0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAA/yjlJ8x3APe4wh0iaOX268LB6PI9vY753HT3jcdlxs2lWF
3HtlleboTuPwHmBTM4hF4oDNizFVyuC0XaxGh3Kwu8snDxo4uEEtDMn2Wo1pFQIl
WgjS7qWmmBfOm9u077a/Z4kqUEu96yXeOdv1tmkMh7adjC0prmLw7VHUcMlMbLQj
Eta6nfa0v4gDGYxXgFR0QM9WdIwdR6z5rEia3xkx/sqJ7Y0KVB0EahRUZ7H4N4xK
FraKMfIugua4QVqLzvgYuqbSLNRqyo+KJfZ9yaaYZux0+BEEXV+XSQnSIQsRe9am
qb46544gyqfJ+ClA95P9o3sEW8kPLgPJGUEg0+8=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:38 2026 by rpki-client