Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/30faa407-6888-3f41-aada-e236638aa773.roa
File:                     30faa407-6888-3f41-aada-e236638aa773.roa (raw, json)
Hash identifier:          yAPo1xgecMl75UrBVgOk4a6f2vgmm4KRkXwFd781cm0=
Subject key identifier:   79:94:64:32:33:C7:71:BA:85:23:6F:37:96:83:B6:0C:69:73:31:55
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DC6860D4E2C34843D5A6CD200
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/30faa407-6888-3f41-aada-e236638aa773.roa
Signing time:             Sat 09 May 2026 10:41:44 +0000
ROA not before:           Sat 09 May 2026 10:41:44 +0000
ROA not after:            Fri 07 Aug 2026 10:41:44 +0000
asID:                     54994
IP address blocks:        153.43.170.0/24 maxlen: 24
                          153.43.171.0/24 maxlen: 24
                          153.43.172.0/24 maxlen: 24
                          153.43.173.0/24 maxlen: 24
                          153.43.174.0/24 maxlen: 24
                          153.43.175.0/24 maxlen: 24
                          153.43.176.0/24 maxlen: 24
                          153.43.177.0/24 maxlen: 24
                          153.43.178.0/24 maxlen: 24
                          153.43.179.0/24 maxlen: 24
                          153.43.180.0/24 maxlen: 24
                          153.43.181.0/24 maxlen: 24
                          153.43.182.0/24 maxlen: 24
                          153.43.183.0/24 maxlen: 24
                          153.43.184.0/24 maxlen: 24
                          153.43.185.0/24 maxlen: 24
                          153.43.186.0/24 maxlen: 24
                          153.43.187.0/24 maxlen: 24
                          153.43.188.0/24 maxlen: 24
                          153.43.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:86:0d:4e:2c:34:84:3d:5a:6c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May  9 10:41:44 2026 GMT
            Not After : Aug  7 10:41:44 2026 GMT
        Subject: CN=3ca9d766-676f-4cdf-b26a-67e0d8208a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:0c:20:4c:8e:25:1c:fd:0c:2a:74:2b:ac:
                    4c:3c:09:dc:34:dc:46:f5:ca:07:ef:88:34:41:2a:
                    90:a1:df:4b:bf:36:4b:5c:22:df:64:e7:cb:f6:62:
                    c4:0b:c9:8d:ea:03:69:d7:ef:33:c7:ca:33:67:ca:
                    b1:4e:26:48:49:48:53:56:ea:f5:fc:82:39:38:32:
                    b5:63:58:24:5f:ad:92:f5:85:ff:eb:19:79:e3:17:
                    1c:cc:6c:4f:b5:a2:98:22:70:e9:09:0e:95:00:d5:
                    6d:c0:44:d0:d7:1a:89:8b:32:8c:09:cd:2b:9e:c8:
                    64:16:d6:86:68:0d:a1:bd:ed:6a:d6:88:62:fa:8b:
                    c4:1e:60:bf:c5:ae:ca:87:d3:1b:d3:5e:e7:c9:d6:
                    c1:30:fd:6e:37:c7:37:76:d3:03:e8:a3:95:a7:2f:
                    9a:56:ff:6a:08:7d:9c:10:b9:61:e2:76:38:a7:10:
                    53:b4:a2:5b:8b:ad:cc:ff:1e:49:3c:91:72:c3:2d:
                    8a:fd:95:db:09:0c:a6:3f:1f:c0:1c:0b:a5:dd:71:
                    2c:39:7a:ad:7c:0c:db:f4:67:45:f3:cd:ec:c3:e1:
                    b7:f7:cb:00:b5:e0:b3:c7:d5:f0:94:69:b6:3d:f1:
                    ec:6b:d3:b7:f1:00:fb:2c:86:e8:12:42:f6:ef:4a:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:64:32:33:C7:71:BA:85:23:6F:37:96:83:B6:0C:69:73:31:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/30faa407-6888-3f41-aada-e236638aa773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.170.0-153.43.189.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:64:2e:ee:ea:63:cf:6b:e1:7e:6f:e8:96:ce:74:64:bb:
         fc:15:40:e1:a3:07:3c:81:0c:09:40:02:62:bb:5e:33:04:65:
         f4:e9:b7:b2:91:86:a3:c2:61:1f:6c:36:70:19:ca:dc:93:f5:
         63:78:d4:63:bd:55:91:99:2f:ee:f6:40:25:55:ab:27:ee:20:
         aa:11:57:43:ff:9c:e3:e1:32:b8:a1:67:a1:f0:7c:3d:17:31:
         66:ec:2d:48:a1:67:df:f4:88:f7:f9:5b:16:10:d3:a0:08:b3:
         08:4f:f1:2a:dd:6e:3c:41:8f:e3:94:54:b7:7a:ed:97:6c:fd:
         86:e7:06:56:91:96:08:9a:a0:d8:5d:44:5e:e1:24:14:09:a6:
         2a:6f:5b:c4:12:f9:7a:64:7b:1e:99:68:5a:65:4b:a3:f9:f7:
         db:53:cb:01:b2:8d:dd:a9:c3:ee:03:b1:1d:d9:8f:6d:b3:9e:
         96:ee:e8:80:5f:0b:fe:1b:38:39:50:37:45:91:1a:91:20:34:
         00:f5:86:fa:7a:24:1d:94:3c:6e:1a:7f:17:da:e3:af:a2:86:
         4c:df:17:cd:18:c1:a5:4e:d2:3a:22:01:d9:5e:3c:f2:94:6b:
         aa:43:ff:60:b3:cf:31:31:cf:a0:22:ab:e9:b9:96:9b:bd:00:
         c6:9b:90:73
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE3Ghg1OLDSEPVps0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDUwOTEwNDE0NFoXDTI2MDgwNzEwNDE0NFowLzEtMCsGA1UEAxMk
M2NhOWQ3NjYtNjc2Zi00Y2RmLWIyNmEtNjdlMGQ4MjA4YTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjIMIEyOJRz9DCp0K6xMPAncNNxG9coH74g0
QSqQod9LvzZLXCLfZOfL9mLEC8mN6gNp1+8zx8ozZ8qxTiZISUhTVur1/II5ODK1
Y1gkX62S9YX/6xl54xcczGxPtaKYInDpCQ6VANVtwETQ1xqJizKMCc0rnshkFtaG
aA2hve1q1ohi+ovEHmC/xa7Kh9Mb017nydbBMP1uN8c3dtMD6KOVpy+aVv9qCH2c
ELlh4nY4pxBTtKJbi63M/x5JPJFywy2K/ZXbCQymPx/AHAul3XEsOXqtfAzb9GdF
883sw+G398sAteCzx9XwlGm2PfHsa9O38QD7LIboEkL270qBVwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHmUZDIzx3G6hSNvN5aDtgxpczFVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzBmYWE0MDctNjg4OC0z
ZjQxLWFhZGEtZTIzNjYzOGFhNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGZK6oD
BAGZK7wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAOk1kLu7qY89r4X5v6JbOdGS7/BVA4aMHPIEMCUACYrte
MwRl9Om3spGGo8JhH2w2cBnK3JP1Y3jUY71VkZkv7vZAJVWrJ+4gqhFXQ/+c4+Ey
uKFnofB8PRcxZuwtSKFn3/SI9/lbFhDToAizCE/xKt1uPEGP45RUt3rtl2z9hucG
VpGWCJqg2F1EXuEkFAmmKm9bxBL5emR7HploWmVLo/n321PLAbKN3anD7gOxHdmP
bbOelu7ogF8L/hs4OVA3RZEakSA0APWG+nokHZQ8bhp/F9rjr6KGTN8XzRjBpU7S
OiIB2V488pRrqkP/YLPPMTHPoCKr6bmWm70AxpuQcw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:03 2026 by rpki-client