Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
File:                     5c85609e-52d3-32f0-af5f-894bf50602aa.roa (raw, json)
Hash identifier:          LQDAuLWwa4nKGZPBgfAvo5sNB1twbjz8kW0sxoeky4c=
Subject key identifier:   8D:1E:62:43:E7:57:0F:AD:5A:35:8D:AA:E5:D7:71:FC:33:C9:CE:5A
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584DC995A973C75445B7772BAD00
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     11808
IP address blocks:        129.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a9:73:c7:54:45:b7:77:2b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=359153d9-de7b-430d-a102-f75da94a50e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:75:69:b2:1e:b7:37:c4:76:d7:a5:d4:74:
                    4e:42:a1:c7:9c:47:95:f8:41:63:38:b8:83:d5:e9:
                    34:60:0b:97:fd:44:bc:7f:82:3a:6b:c7:ad:d9:23:
                    01:68:13:41:c6:4f:6d:d2:12:8a:e0:a2:e6:69:0a:
                    20:e3:d3:91:f3:3b:22:ef:2c:b7:4b:52:99:df:c9:
                    7d:f3:ef:1c:a0:51:3c:9a:c2:d3:5b:21:ae:77:f0:
                    34:c4:c6:97:1b:80:b6:59:70:8b:33:4d:d7:23:5c:
                    2e:2a:62:a7:ec:03:59:50:05:9a:39:42:3e:55:9a:
                    69:69:5b:0f:fc:92:42:93:8b:54:95:fe:1b:85:5b:
                    a6:6e:5a:30:b6:8c:db:df:0d:74:6f:60:bf:ec:26:
                    45:7e:63:3f:ef:5c:f3:09:f2:63:78:ea:4d:72:a4:
                    ea:b5:bb:d8:7f:b1:42:6b:92:e3:b1:f6:f7:85:7a:
                    99:f4:e9:4b:2c:de:a0:42:98:86:ee:dc:55:80:96:
                    72:10:d4:99:e2:07:8b:fe:51:d0:7d:05:2d:4d:ab:
                    52:50:bc:19:1b:10:bc:ff:59:8c:de:8d:3a:6c:4e:
                    4a:01:54:b1:89:3d:14:e3:23:3f:ce:b9:df:42:38:
                    1e:63:7d:6e:ef:bc:3b:3f:96:6d:16:c2:69:a8:ce:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1E:62:43:E7:57:0F:AD:5A:35:8D:AA:E5:D7:71:FC:33:C9:CE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:2f:73:cd:3a:62:34:ba:21:88:83:12:6e:b9:33:8f:69:
         20:b2:dd:94:f4:0f:e5:91:8c:07:7d:f6:6d:aa:cc:92:2f:dc:
         3e:19:25:0f:a5:54:3d:17:69:bd:3b:e9:7e:4d:3d:33:45:cd:
         2e:70:db:9d:36:b0:27:bd:6e:ed:be:bc:0d:47:24:11:1f:88:
         2a:11:98:00:80:95:7a:7a:90:86:f6:79:c1:1b:dd:b9:1a:24:
         c3:97:8f:1e:73:cd:1d:8b:83:d4:6a:e5:47:1d:0e:94:08:a1:
         3e:48:b9:42:c8:52:d5:23:7e:04:a1:47:c7:c9:e8:98:be:b2:
         da:d9:e7:7c:83:77:40:cf:97:b8:c6:1a:68:5b:c6:b9:d5:1c:
         e4:1d:ff:82:90:c9:7d:2a:33:a1:dd:58:b0:b2:07:5e:02:d5:
         8b:65:9f:49:f2:43:b1:e9:ac:bc:af:6b:0c:45:69:72:5a:f5:
         00:ed:bc:3e:6c:9c:0b:41:89:1a:ac:69:65:e6:9c:04:c1:4f:
         3b:ab:96:84:f7:e2:81:e8:d3:b1:a5:0b:b1:02:ce:c6:77:62:
         21:fe:60:43:9b:a3:6a:54:c8:26:aa:68:df:05:0a:6d:fe:0c:
         ac:df:ae:e6:5f:af:3a:7e:c7:b9:f2:77:d3:37:22:a1:58:26:
         bb:e9:76:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlalzx1RFt3crrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk
Nzc0MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
MzU5MTUzZDktZGU3Yi00MzBkLWExMDItZjc1ZGE5NGE1MGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlF1abIetzfEdtel1HROQqHHnEeV+EFjOLiD
1ek0YAuX/US8f4I6a8et2SMBaBNBxk9t0hKK4KLmaQog49OR8zsi7yy3S1KZ38l9
8+8coFE8msLTWyGud/A0xMaXG4C2WXCLM03XI1wuKmKn7ANZUAWaOUI+VZppaVsP
/JJCk4tUlf4bhVumblowtozb3w10b2C/7CZFfmM/71zzCfJjeOpNcqTqtbvYf7FC
a5Ljsfb3hXqZ9OlLLN6gQpiG7txVgJZyENSZ4geL/lHQfQUtTatSULwZGxC8/1mM
3o06bE5KAVSxiT0U4yM/zrnfQjgeY31u77w7P5ZtFsJpqM4vtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0eYkPnVw+tWjWNquXXcfwzyc5aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh
MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvNWM4NTYwOWUtNTJkMy0z
MmYwLWFmNWYtODk0YmY1MDYwMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk
MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1
ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm
OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWVrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgLL3PNOmI0uiGIgxJuuTOPaSCy3ZT0D+WRjAd99m2qzJIv3D4ZJQ+l
VD0Xab076X5NPTNFzS5w2502sCe9bu2+vA1HJBEfiCoRmACAlXp6kIb2ecEb3bka
JMOXjx5zzR2Lg9Rq5UcdDpQIoT5IuULIUtUjfgShR8fJ6Ji+strZ53yDd0DPl7jG
GmhbxrnVHOQd/4KQyX0qM6HdWLCyB14C1Ytln0nyQ7HprLyvawxFaXJa9QDtvD5s
nAtBiRqsaWXmnATBTzurloT34oHo07GlC7ECzsZ3YiH+YEObo2pUyCaqaN8FCm3+
DKzfruZfrzp+x7nyd9M3IqFYJrvpdlA=
-----END CERTIFICATE-----
Generated at Wed May 13 16:26:51 2026 by rpki-client