Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa
File:                     1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa (raw, json)
Hash identifier:          vQ6mnq9KbPRS+JiPZ/P9zRdxCiEbOfIZdShojpRNoUo=
Subject key identifier:   AE:5D:E9:CE:32:57:DB:37:20:BC:93:0B:78:1D:D8:6E:A6:F8:97:FB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DAF102CDCAC4E84935FF92C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     395839
IP address blocks:        205.164.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2c:dc:ac:4e:84:93:5f:f9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=6d006fbf-fd3c-4de5-afc1-81d7095b68b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:5b:39:46:6e:a8:1e:92:26:ad:1a:d5:15:
                    80:19:af:b4:fb:05:d2:46:33:cb:17:ca:29:0e:ba:
                    9d:72:cd:a0:ad:74:47:96:2c:7f:c6:47:d0:76:34:
                    f3:50:5f:7f:13:67:b5:8d:e4:8f:c3:52:29:08:12:
                    ec:06:19:7e:a5:d7:1e:0f:8c:8a:cf:64:5f:0a:80:
                    84:86:b9:2c:5d:01:da:e3:65:a4:6f:ed:98:d3:27:
                    97:a0:ee:15:3b:e0:85:69:12:69:85:9f:90:a2:8b:
                    23:c6:64:ff:d7:8f:b0:de:0d:20:bd:80:02:c1:79:
                    83:4f:fa:45:c2:69:df:35:8b:12:c6:1f:7d:81:63:
                    7c:65:84:df:c7:43:6b:0e:37:6c:d9:c5:78:c6:f4:
                    e7:2a:71:77:c3:d5:c5:bd:47:4a:74:3e:82:fe:6c:
                    4c:d3:9e:6b:81:f7:6f:32:34:63:ea:65:b1:e5:2a:
                    10:d1:f7:d3:a7:38:6e:e8:76:00:09:ff:d1:c7:45:
                    49:06:07:6b:dc:6d:6b:1d:d7:80:e8:20:c0:4d:29:
                    94:0b:b5:fa:7b:66:61:e1:e1:af:b1:dc:f0:6b:91:
                    c6:b0:b6:64:e7:69:a3:b7:f1:62:07:a4:a3:09:78:
                    63:32:99:f1:5d:d7:3f:41:16:52:44:d1:e9:86:6b:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:E9:CE:32:57:DB:37:20:BC:93:0B:78:1D:D8:6E:A6:F8:97:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1b1dadbd-2c4e-3a57-8529-162669f94ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.164.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:c1:e2:55:0f:89:8f:02:97:15:6f:4c:82:9d:36:af:85:
         e5:a7:f7:ae:d1:56:b8:ac:1f:ef:1e:ca:f6:a6:e9:cb:9d:bb:
         a9:db:08:d7:1b:19:e0:c0:a2:96:27:84:1c:93:4f:13:7c:ea:
         ab:5a:1c:09:4e:06:25:e8:87:a3:70:a7:fe:42:17:2e:59:89:
         d6:70:32:f0:2b:7a:92:4c:47:09:66:40:66:38:96:a2:06:73:
         78:bb:98:f2:e7:73:2c:fe:b6:1c:ce:2a:06:ad:aa:49:4b:e1:
         2e:f8:78:e3:63:7d:35:b7:8e:ba:3d:c7:13:fe:af:87:8b:41:
         17:4f:65:8f:66:53:02:e4:4a:0e:d1:ba:61:5b:5f:a5:ab:dc:
         16:cd:ba:48:e4:1d:ad:2e:78:d1:75:df:bb:62:e5:17:8c:c6:
         08:27:d0:b4:26:04:2c:47:0a:45:28:f2:90:1b:ad:9e:07:75:
         e6:4b:1f:a6:c5:6f:2f:aa:af:70:b4:0b:c0:3e:90:c9:3e:35:
         5a:4c:26:3e:7f:42:aa:85:5c:d8:9b:7b:c9:4f:89:71:33:5d:
         2b:28:e6:ab:85:02:b0:12:5a:8c:2f:50:f7:25:1a:93:c1:a3:
         95:98:1a:b2:94:08:94:a0:8d:3b:5d:51:7d:4d:a0:38:a5:59:
         53:4c:20:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECzcrE6Ek1/5LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
NmQwMDZmYmYtZmQzYy00ZGU1LWFmYzEtODFkNzA5NWI2OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEdbOUZuqB6SJq0a1RWAGa+0+wXSRjPLF8op
Drqdcs2grXRHlix/xkfQdjTzUF9/E2e1jeSPw1IpCBLsBhl+pdceD4yKz2RfCoCE
hrksXQHa42Wkb+2Y0yeXoO4VO+CFaRJphZ+QoosjxmT/14+w3g0gvYACwXmDT/pF
wmnfNYsSxh99gWN8ZYTfx0NrDjds2cV4xvTnKnF3w9XFvUdKdD6C/mxM055rgfdv
MjRj6mWx5SoQ0ffTpzhu6HYACf/Rx0VJBgdr3G1rHdeA6CDATSmUC7X6e2Zh4eGv
sdzwa5HGsLZk52mjt/FiB6SjCXhjMpnxXdc/QRZSRNHphmuvlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5d6c4yV9s3ILyTC3gd2G6m+Jf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWIxZGFkYmQtMmM0ZS0z
YTU3LTg1MjktMTYyNjY5Zjk0YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzaRyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKl1weJVD4mPApcVb0yCnTavheWn967RVrisH+8eyvam6cudu6nbCNcb
GeDAopYnhByTTxN86qtaHAlOBiXoh6Nwp/5CFy5ZidZwMvArepJMRwlmQGY4lqIG
c3i7mPLncyz+thzOKgatqklL4S74eONjfTW3jro9xxP+r4eLQRdPZY9mUwLkSg7R
umFbX6Wr3BbNukjkHa0ueNF137ti5ReMxggn0LQmBCxHCkUo8pAbrZ4HdeZLH6bF
by+qr3C0C8A+kMk+NVpMJj5/QqqFXNibe8lPiXEzXSso5quFArASWowvUPclGpPB
o5WYGrKUCJSgjTtdUX1NoDilWVNMIGQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:57 2026 by rpki-client