Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/84dff645-a6f6-3d1d-b6d1-8fc99df1b72e.roa
File:                     84dff645-a6f6-3d1d-b6d1-8fc99df1b72e.roa (raw, json)
Hash identifier:          NpSQ6/ZlwFyZxjTev/CWXvC3hDphlwiEy808fRWrUyo=
Subject key identifier:   C5:B0:BE:49:C3:FA:B7:3C:8C:AB:34:51:5C:AC:4C:0D:63:1A:8C:ED
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB956897078F18531E461FCF0
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/84dff645-a6f6-3d1d-b6d1-8fc99df1b72e.roa
Signing time:             Mon 04 May 2026 17:20:29 +0000
ROA not before:           Mon 04 May 2026 17:20:29 +0000
ROA not after:            Sun 02 Aug 2026 17:20:29 +0000
asID:                     398391
IP address blocks:        131.226.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:89:70:78:f1:85:31:e4:61:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:29 2026 GMT
            Not After : Aug  2 17:20:29 2026 GMT
        Subject: CN=0f3850ff-99e6-459a-bb0c-23789018ccbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:96:c6:39:64:9b:95:46:bf:b8:72:d3:f4:
                    98:83:36:cf:bf:ea:61:56:48:70:2b:47:b0:8f:5b:
                    a1:f6:de:69:b4:0a:d0:18:36:4f:32:9f:ea:e1:47:
                    8b:66:62:2d:4b:7e:5a:61:44:06:e1:e5:ee:55:60:
                    09:e8:a0:50:29:52:bb:29:02:fd:9b:bb:40:ba:0d:
                    73:da:56:6a:06:43:84:ba:16:40:6d:46:83:32:43:
                    d9:e3:f4:ed:c6:c8:17:75:f7:55:35:ce:6a:30:39:
                    35:03:e9:76:e4:93:ee:dc:82:9c:5b:de:a8:9f:7d:
                    15:f4:66:d8:3e:18:77:de:b9:77:25:4b:66:ca:b8:
                    f9:5b:9c:74:ff:c1:75:65:95:93:20:43:a1:71:04:
                    23:65:e6:c5:61:b5:a7:c1:bc:3d:ba:6e:31:3a:9d:
                    6c:5d:e6:ab:55:60:66:8c:6d:b0:5c:d2:03:ad:52:
                    77:da:d1:a0:93:5e:6d:db:6f:d5:59:60:51:ef:83:
                    cb:13:ea:2f:4a:6e:45:35:65:63:b1:85:b0:27:a0:
                    5b:86:1f:d2:02:63:eb:04:0a:e8:63:2a:9c:a9:e9:
                    b1:51:2a:e4:99:df:ef:86:65:64:8b:a6:40:49:ca:
                    62:c7:1f:ed:6f:d0:77:0f:a9:6e:a5:d3:a3:e7:c4:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B0:BE:49:C3:FA:B7:3C:8C:AB:34:51:5C:AC:4C:0D:63:1A:8C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/84dff645-a6f6-3d1d-b6d1-8fc99df1b72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:2a:84:28:60:1e:5c:42:f8:24:df:cd:b4:7c:8b:2e:c6:
         18:2c:a5:4d:fb:e8:08:10:0e:57:08:a8:1d:b3:30:b9:be:52:
         da:a5:c3:ab:3c:2e:a7:07:a0:c9:ec:74:b8:ba:ee:cf:ef:32:
         52:fc:e5:71:0a:57:58:9e:8d:5e:9a:c1:0d:d7:5e:51:da:41:
         53:b4:36:8d:f3:52:a9:c0:78:9b:bb:9b:95:44:f5:42:bf:17:
         f5:2b:75:e3:b7:22:11:76:2a:f9:c0:da:79:4e:3c:c2:8c:db:
         f8:81:4b:20:2b:11:f7:ed:d3:55:c6:fd:e2:5e:db:19:5f:c0:
         de:47:85:65:97:93:2c:dc:06:f5:63:5b:02:f0:55:55:ff:fd:
         9b:8f:07:8d:b5:10:8d:b3:61:91:57:42:8b:4b:e1:8f:da:da:
         72:9e:14:2d:ae:5d:5a:34:c2:87:b9:f1:27:56:41:2d:27:a1:
         2f:e8:01:96:d2:87:6a:b1:d0:b3:6c:cc:a7:39:a7:6b:b7:a0:
         5d:c3:1d:20:36:5d:c5:39:e3:74:32:83:06:b8:9d:ab:e6:71:
         8c:32:d0:67:4b:9b:6b:0e:c7:dd:23:6e:3d:76:7e:4c:13:66:
         de:01:3b:1f:f7:17:19:ff:e4:19:39:76:93:23:99:b6:19:83:
         84:5f:fd:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE25VolwePGFMeRh/PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5
NzllMB4XDTI2MDUwNDE3MjAyOVoXDTI2MDgwMjE3MjAyOVowLzEtMCsGA1UEAxMk
MGYzODUwZmYtOTllNi00NTlhLWJiMGMtMjM3ODkwMThjY2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwCWxjlkm5VGv7hy0/SYgzbPv+phVkhwK0ew
j1uh9t5ptArQGDZPMp/q4UeLZmItS35aYUQG4eXuVWAJ6KBQKVK7KQL9m7tAug1z
2lZqBkOEuhZAbUaDMkPZ4/TtxsgXdfdVNc5qMDk1A+l25JPu3IKcW96on30V9GbY
Phh33rl3JUtmyrj5W5x0/8F1ZZWTIEOhcQQjZebFYbWnwbw9um4xOp1sXearVWBm
jG2wXNIDrVJ32tGgk15t22/VWWBR74PLE+ovSm5FNWVjsYWwJ6Bbhh/SAmPrBAro
YyqcqemxUSrkmd/vhmVki6ZAScpixx/tb9B3D6lupdOj58S76QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWwvknD+rc8jKs0UVysTA1jGoztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAz
YmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvODRkZmY2NDUtYTZmNi0z
ZDFkLWI2ZDEtOGZjOTlkZjFiNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2UwM2JhMDEtODZiZS00ZTUxLWI5
NWYtYWY2ZTE3YTc5NzllLzNlMDNiYTAxLTg2YmUtNGU1MS1iOTVmLWFmNmUxN2E3
OTc5ZS5jcmwwHwYDVR0jBBgwFoAU00rEQ/6NmukUUAv2fHtKoOM64sEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZl
MTdhNzk3OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+IhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6xKoQoYB5cQvgk3820fIsuxhgspU376AgQDlcIqB2zMLm+Utqlw6s8
LqcHoMnsdLi67s/vMlL85XEKV1iejV6awQ3XXlHaQVO0No3zUqnAeJu7m5VE9UK/
F/UrdeO3IhF2KvnA2nlOPMKM2/iBSyArEfft01XG/eJe2xlfwN5HhWWXkyzcBvVj
WwLwVVX//ZuPB421EI2zYZFXQotL4Y/a2nKeFC2uXVo0woe58SdWQS0noS/oAZbS
h2qx0LNszKc5p2u3oF3DHSA2XcU543Qygwa4navmcYwy0GdLm2sOx90jbj12fkwT
Zt4BOx/3Fxn/5Bk5dpMjmbYZg4Rf/aw=
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:27 2026 by rpki-client