Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa
File:                     44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa (raw, json)
Hash identifier:          vgUswV6RV9DkX54U3hyZOjKAvLbVYuaQM+km+AnhS5E=
Subject key identifier:   15:E6:20:64:C7:53:8A:5B:A8:C1:E0:36:25:BC:32:03:04:B8:54:CE
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584D0D427F308329465BB1319700
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     203724
IP address blocks:        131.229.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:7f:30:83:29:46:5b:b1:31:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=805d3ab5-e3fd-4789-9902-dd68b42a4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:b9:b1:cd:3c:3e:80:69:f4:11:63:5f:bc:
                    4b:59:9d:a4:ac:1f:c9:83:11:8e:e2:03:7e:7c:82:
                    38:c4:cf:91:21:0c:88:41:97:ed:1e:9a:52:45:39:
                    6d:42:a1:10:af:15:19:c8:05:1f:7f:f5:64:a7:06:
                    7b:c1:ce:29:90:30:41:94:7c:33:93:f6:c4:de:fb:
                    95:51:8a:fc:c3:76:51:7e:bb:5a:27:06:0f:81:ed:
                    fd:d4:39:a5:17:76:ef:ec:01:37:91:fd:82:06:73:
                    c7:f6:a2:87:42:e8:5b:5c:70:f9:3c:2b:74:b8:36:
                    88:b7:0d:c4:c8:33:78:67:0f:62:9a:48:12:14:85:
                    73:17:3f:47:f4:cd:1a:8a:d0:48:9d:ca:0b:8e:0e:
                    4e:9f:08:46:29:27:f1:f4:ea:09:96:b4:1d:8c:db:
                    1f:b7:fa:51:02:18:ab:8d:1e:23:2f:a5:17:14:04:
                    54:7a:c9:e4:62:1f:da:00:47:5b:4a:d0:27:5d:c2:
                    ac:cf:83:a5:be:ef:60:c5:82:d9:31:05:d0:1d:15:
                    13:6c:de:68:f5:17:20:69:af:af:28:8c:22:2b:b8:
                    ce:a4:5e:12:c5:c2:96:ce:90:a1:59:7a:1e:94:2e:
                    8d:65:5e:a8:97:6b:df:24:1c:22:43:cb:c3:4f:8a:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:20:64:C7:53:8A:5B:A8:C1:E0:36:25:BC:32:03:04:B8:54:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:17:0a:e1:1b:56:2d:9c:8f:94:cd:33:7a:4c:09:7a:ad:
         9f:f3:4e:cc:14:28:78:c2:0d:0a:a5:c3:e9:cf:ca:93:af:77:
         65:8f:58:c4:3f:c7:b4:ea:86:72:e1:a8:57:2b:9b:5e:76:56:
         16:3c:02:be:25:d0:45:1e:66:f6:98:c7:22:94:72:06:03:70:
         fb:99:92:da:47:bf:78:f9:75:ce:d7:09:61:54:2a:c7:3a:9c:
         42:4a:a6:9c:98:1a:49:88:c6:e2:be:e6:79:f6:05:53:96:47:
         db:88:02:0f:31:fb:41:ee:41:36:74:25:6d:68:11:64:bb:81:
         1e:22:c2:57:12:6f:dc:fb:4b:a0:af:16:34:c6:d4:b6:4c:cd:
         57:5c:c4:bb:1f:2a:57:3d:af:3d:3b:45:83:64:9e:17:17:4f:
         27:44:37:67:43:39:a9:aa:4a:3e:2e:98:cd:5c:af:0b:51:08:
         1b:d6:5f:aa:4b:12:d5:4b:bc:9f:29:ff:8b:37:be:19:38:7b:
         14:38:b2:29:02:db:bb:77:bc:f4:c1:b2:48:27:8c:db:b3:6a:
         b4:2f:e8:3e:d1:10:ba:21:94:26:29:5a:07:2b:e2:c2:6f:bb:
         71:06:b2:7f:87:46:66:e3:d0:61:f3:79:b8:70:23:be:e8:91:
         48:4b:a9:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn8wgylGW7ExlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ODA1ZDNhYjUtZTNmZC00Nzg5LTk5MDItZGQ2OGI0MmE0NzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FS5sc08PoBp9BFjX7xLWZ2krB/JgxGO4gN+
fII4xM+RIQyIQZftHppSRTltQqEQrxUZyAUff/VkpwZ7wc4pkDBBlHwzk/bE3vuV
UYr8w3ZRfrtaJwYPge391DmlF3bv7AE3kf2CBnPH9qKHQuhbXHD5PCt0uDaItw3E
yDN4Zw9imkgSFIVzFz9H9M0aitBIncoLjg5OnwhGKSfx9OoJlrQdjNsft/pRAhir
jR4jL6UXFARUesnkYh/aAEdbStAnXcKsz4Olvu9gxYLZMQXQHRUTbN5o9Rcgaa+v
KIwiK7jOpF4SxcKWzpChWXoelC6NZV6ol2vfJBwiQ8vDT4owKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXmIGTHU4pbqMHgNiW8MgMEuFTOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNDRhNDhlZDktMmIzNy0z
YTZlLWI5YTUtYWI1Mjc5NjUyMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFLFwrhG1YtnI+UzTN6TAl6rZ/zTswUKHjCDQqlw+nPypOvd2WPWMQ/
x7TqhnLhqFcrm152VhY8Ar4l0EUeZvaYxyKUcgYDcPuZktpHv3j5dc7XCWFUKsc6
nEJKppyYGkmIxuK+5nn2BVOWR9uIAg8x+0HuQTZ0JW1oEWS7gR4iwlcSb9z7S6Cv
FjTG1LZMzVdcxLsfKlc9rz07RYNknhcXTydEN2dDOamqSj4umM1crwtRCBvWX6pL
EtVLvJ8p/4s3vhk4exQ4sikC27t3vPTBskgnjNuzarQv6D7RELohlCYpWgcr4sJv
u3EGsn+HRmbj0GHzebhwI77okUhLqcU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:48 2026 by rpki-client