Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
File:                     5814bd8f-1745-39bc-bd83-5ecb8484effe.roa (raw, json)
Hash identifier:          PK/pdbVork6UJXdnU25K+WhdmOvU2gt8z4NiswteY2w=
Subject key identifier:   A2:97:24:2B:0A:68:C2:EC:8B:38:11:2C:0C:63:D3:C5:EF:5A:AE:E9
Certificate issuer:       /CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Certificate serial:       010D0C9F4328584D4A8FB2E498D9957893EB4600
Authority key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     13376
IP address blocks:        37.26.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b2:e4:98:d9:95:78:93:eb:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=e04f27de-9ca1-48ca-b7dd-96abb500452d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:49:e2:df:d5:77:74:2c:4d:bd:53:f9:0d:
                    22:5b:c1:60:06:7f:1d:e5:d2:b4:58:8a:dd:10:6d:
                    9a:f0:ba:e1:2f:af:74:2d:45:89:e5:64:e9:34:2b:
                    9b:c6:c6:b5:59:ad:c2:3d:70:52:c0:14:d9:fa:c0:
                    25:d4:f8:10:62:0e:99:ac:5c:78:c1:93:6c:ad:71:
                    74:80:34:71:3a:5b:01:12:ed:ca:0e:5a:aa:82:4c:
                    7f:c8:57:02:59:fa:61:17:d7:27:03:0c:5b:7a:bf:
                    71:51:2e:4d:37:5d:18:9a:5d:aa:06:0a:62:8e:1a:
                    e4:5d:20:d6:99:3a:a6:8f:26:ea:91:38:09:c1:f6:
                    cb:a2:d2:b3:18:83:63:a3:82:8b:a9:da:99:4f:bc:
                    a7:82:7f:7a:dd:7f:81:0a:f5:e3:f4:9b:1d:5d:a4:
                    25:b8:6d:54:7b:be:ab:cd:ce:b1:a7:a9:9f:ac:59:
                    6b:a2:8e:06:3c:81:5f:da:a7:86:ad:e3:b6:fd:d1:
                    0a:0e:85:b5:fd:7b:91:e2:ec:8d:65:36:ce:cf:95:
                    44:52:ce:16:cf:76:c5:a2:4e:23:08:8e:4f:66:98:
                    05:46:df:96:40:d0:29:71:9a:0d:2e:de:17:e2:cf:
                    87:db:a8:20:15:d0:87:45:40:be:94:f9:d6:f2:a0:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:24:2B:0A:68:C2:EC:8B:38:11:2C:0C:63:D3:C5:EF:5A:AE:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl

            X509v3 Authority Key Identifier:
                keyid:2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.26.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:1e:f3:e9:2f:fa:31:41:6d:10:20:a8:0a:02:05:d4:ac:
         29:e3:ff:f4:f5:d5:3e:ae:69:58:d8:a6:4a:50:80:b8:15:89:
         08:17:b5:2e:cb:87:a6:fc:a7:14:34:80:14:f6:71:cd:9b:ed:
         06:1f:01:ed:36:be:19:e8:28:2e:1e:fb:96:f8:b9:7b:dc:e8:
         a7:90:54:43:f0:07:07:20:ea:9f:0e:99:47:de:35:6e:45:9e:
         88:95:12:1c:da:92:55:1a:cc:8d:3b:85:d9:22:e9:9b:aa:48:
         a3:f4:ff:f7:21:43:28:0a:8f:09:b0:02:d5:93:0a:4d:a2:aa:
         76:8e:c2:75:7a:fb:35:c2:e6:54:6c:ba:ea:06:99:80:99:2e:
         0d:c6:d0:0a:ab:45:c2:b2:8f:16:5b:f1:da:ac:b3:39:61:c0:
         fd:ae:85:4e:0e:21:0b:38:2e:38:d1:fd:c3:d1:43:38:0a:61:
         65:d4:7a:5f:a6:ac:4f:aa:5b:55:46:66:82:44:d3:cc:87:4c:
         e6:71:a7:dc:51:3a:fc:aa:e9:59:88:fe:2a:df:56:40:be:13:
         55:dd:5e:ab:9f:af:f6:4e:d0:2c:e3:a9:f4:b0:6b:c7:c5:08:
         1c:5b:d2:e2:fb:f4:72:66:18:07:11:b7:c3:7d:08:9d:a6:26:
         c1:fb:48:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7LkmNmVeJPrRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE1YzNkODItYzdlMC00NTExLWIxMDItODk5NWVkODEz
YThhMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTA0ZjI3ZGUtOWNhMS00OGNhLWI3ZGQtOTZhYmI1MDA0NTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysRJ4t/Vd3QsTb1T+Q0iW8FgBn8d5dK0WIrd
EG2a8LrhL690LUWJ5WTpNCubxsa1Wa3CPXBSwBTZ+sAl1PgQYg6ZrFx4wZNsrXF0
gDRxOlsBEu3KDlqqgkx/yFcCWfphF9cnAwxber9xUS5NN10Yml2qBgpijhrkXSDW
mTqmjybqkTgJwfbLotKzGINjo4KLqdqZT7yngn963X+BCvXj9JsdXaQluG1Ue76r
zc6xp6mfrFlroo4GPIFf2qeGreO2/dEKDoW1/XuR4uyNZTbOz5VEUs4Wz3bFok4j
CI5PZpgFRt+WQNApcZoNLt4X4s+H26ggFdCHRUC+lPnW8qAe5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKXJCsKaMLsizgRLAxj08XvWq7pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTVj
M2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1ZWQ4MTNhOGEvNTgxNGJkOGYtMTc0NS0z
OWJjLWJkODMtNWVjYjg0ODRlZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWE1YzNkODItYzdlMC00NTExLWIx
MDItODk5NWVkODEzYThhL2VhNWMzZDgyLWM3ZTAtNDUxMS1iMTAyLTg5OTVlZDgx
M2E4YS5jcmwwHwYDVR0jBBgwFoAULeJlqJFd43jALU+zKkvGnWnFE8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTVjM2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1
ZWQ4MTNhOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJRpYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALy7HvPpL/oxQW0QIKgKAgXUrCnj//T11T6uaVjYpkpQgLgViQgXtS7L
h6b8pxQ0gBT2cc2b7QYfAe02vhnoKC4e+5b4uXvc6KeQVEPwBwcg6p8OmUfeNW5F
noiVEhzaklUazI07hdki6ZuqSKP0//chQygKjwmwAtWTCk2iqnaOwnV6+zXC5lRs
uuoGmYCZLg3G0AqrRcKyjxZb8dqsszlhwP2uhU4OIQs4LjjR/cPRQzgKYWXUel+m
rE+qW1VGZoJE08yHTOZxp9xROvyq6VmI/irfVkC+E1XdXqufr/ZO0CzjqfSwa8fF
CBxb0uL79HJmGAcRt8N9CJ2mJsH7SMg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:02 2026 by rpki-client