Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa
File:                     242691ed-7e95-376c-af82-2bd75883d13d.roa (raw, json)
Hash identifier:          gTZ+tAhxO8bUt4QMFiquQ++o+FRLH6iYahpZck96uas=
Subject key identifier:   34:B8:A2:05:87:5F:D3:8F:F7:08:87:81:0B:BB:85:79:80:F2:15:28
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584DB77028EEAE8E06228DF52880
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     12213
IP address blocks:        149.137.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:28:ee:ae:8e:06:22:8d:f5:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=c723974f-fd84-48c6-8fdb-dd78586ea7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:cd:a0:89:9d:cf:27:5a:48:a6:98:c0:f4:
                    8f:66:4c:9c:ea:23:ee:07:4d:89:ed:f3:26:cb:61:
                    f2:4a:55:b8:86:36:1f:96:5e:08:df:88:70:0a:a8:
                    69:48:28:28:c0:aa:2b:80:56:d6:1f:5c:19:6c:03:
                    de:04:ea:59:90:bc:84:a8:0c:11:db:5d:2c:2d:31:
                    7d:d6:d2:3c:b5:df:3f:ac:0c:24:ef:f9:24:ce:5f:
                    50:93:d7:b7:84:f3:f1:b1:84:d2:9a:77:10:3d:26:
                    ee:d9:58:1e:ff:e2:fd:ff:05:b3:02:5d:3e:8e:80:
                    6f:61:f5:af:0f:5c:64:63:ba:f0:ba:b9:e3:c6:b0:
                    f8:51:a6:38:8d:fa:c8:b9:4c:4f:76:a6:00:0f:57:
                    eb:7e:dd:b0:99:c5:1e:61:44:3f:04:66:b5:f1:38:
                    01:84:1e:7a:4b:8a:05:e7:c7:7b:64:72:1d:32:f5:
                    7e:39:1d:a7:cf:fb:54:92:66:08:e0:56:bf:2f:56:
                    63:f6:62:bd:bf:b0:c5:6d:b3:e9:5e:b0:93:83:96:
                    ce:d0:67:ba:de:d7:b5:07:54:2f:e1:4c:16:11:fd:
                    1a:cb:9e:d7:86:89:4b:bf:70:13:0c:40:b5:60:8d:
                    7c:a2:a3:00:c8:49:f0:37:9e:aa:5b:97:06:05:a7:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B8:A2:05:87:5F:D3:8F:F7:08:87:81:0B:BB:85:79:80:F2:15:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:d5:20:32:36:77:a2:56:d4:cf:2a:08:ab:10:13:e5:d7:
         91:e6:db:69:8f:42:52:c3:6f:54:f9:a4:8a:bb:34:bb:83:2b:
         2b:43:d3:58:de:0f:ec:f4:7c:21:96:ae:66:46:78:2d:c3:51:
         9b:b9:b7:53:7e:2b:2f:87:8d:66:2a:59:3f:30:aa:21:fc:f3:
         c7:71:a6:ba:75:4b:c0:a4:3f:79:a0:83:04:e7:f3:e2:8e:2b:
         e0:40:6c:a4:64:a9:6c:bc:be:17:8e:72:97:76:8d:73:18:d4:
         bd:d8:db:c1:bd:e9:78:f9:09:3c:81:c5:5d:e7:70:f1:64:38:
         e9:e6:e3:e3:fa:64:0e:c6:3f:3c:51:35:f2:68:06:a0:61:a7:
         dd:91:11:9e:ac:89:ca:b7:50:22:a8:8a:32:b2:e4:b7:86:16:
         ca:db:f1:31:68:3c:5a:30:9b:b6:3c:c5:6a:04:c1:30:f3:2f:
         a1:d0:6f:ce:9c:2b:29:e2:83:e8:5b:53:24:08:a1:18:d7:17:
         08:1a:1f:66:4d:8e:4b:d4:ac:e0:17:25:30:3d:40:57:20:90:
         c2:f7:de:72:36:6b:71:ab:85:a1:4d:20:2b:25:8f:54:98:a1:
         74:4e:68:e7:89:1b:55:c7:76:0a:15:6a:6b:0e:b5:ef:da:c5:
         6e:05:e7:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCjuro4GIo31KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi
NzA3MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
YzcyMzk3NGYtZmQ4NC00OGM2LThmZGItZGQ3ODU4NmVhN2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+jNoImdzydaSKaYwPSPZkyc6iPuB02J7fMm
y2HySlW4hjYfll4I34hwCqhpSCgowKorgFbWH1wZbAPeBOpZkLyEqAwR210sLTF9
1tI8td8/rAwk7/kkzl9Qk9e3hPPxsYTSmncQPSbu2Vge/+L9/wWzAl0+joBvYfWv
D1xkY7rwurnjxrD4UaY4jfrIuUxPdqYAD1frft2wmcUeYUQ/BGa18TgBhB56S4oF
58d7ZHIdMvV+OR2nz/tUkmYI4Fa/L1Zj9mK9v7DFbbPpXrCTg5bO0Ge63te1B1Qv
4UwWEf0ay57XholLv3ATDEC1YI18oqMAyEnwN56qW5cGBadq6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDS4ogWHX9OP9wiHgQu7hXmA8hUoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0
MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjQyNjkxZWQtN2U5NS0z
NzZjLWFmODItMmJkNzU4ODNkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj
NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw
YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk
ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIr1SAyNneiVtTPKgirEBPl15Hm22mPQlLDb1T5pIq7NLuDKytD01je
D+z0fCGWrmZGeC3DUZu5t1N+Ky+HjWYqWT8wqiH888dxprp1S8CkP3mggwTn8+KO
K+BAbKRkqWy8vheOcpd2jXMY1L3Y28G96Xj5CTyBxV3ncPFkOOnm4+P6ZA7GPzxR
NfJoBqBhp92REZ6sicq3UCKoijKy5LeGFsrb8TFoPFowm7Y8xWoEwTDzL6HQb86c
Kynig+hbUyQIoRjXFwgaH2ZNjkvUrOAXJTA9QFcgkML33nI2a3GrhaFNICslj1SY
oXROaOeJG1XHdgoVamsOte/axW4F57Y=
-----END CERTIFICATE-----
Generated at Wed May 13 08:32:34 2026 by rpki-client