Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa
File:                     eba4ae94-ead6-3e99-9ce9-933e47db254e.roa (raw, json)
Hash identifier:          DIZopX53SCwjvOMmhrwlMIr7JtHLlA2lIs+kkfFvOq0=
Subject key identifier:   51:9C:96:D4:CC:DE:9F:E5:57:C1:47:A9:D7:C8:7C:C1:4F:57:DA:9C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05A5E215CB20D0BF326430
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        209.158.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a5:e2:15:cb:20:d0:bf:32:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=13e52b28-56ab-4a3d-88d4-716681822539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:04:e1:9d:1e:88:d8:6d:a3:70:01:cf:e3:
                    b3:ba:9f:76:59:ad:e1:00:8a:e2:29:03:45:45:dd:
                    3a:8c:42:c5:85:75:55:34:e4:15:8d:88:eb:ce:3e:
                    47:2f:6c:c9:39:78:1e:00:1d:c1:73:59:8c:01:77:
                    61:e1:a8:1c:98:ff:57:49:32:ce:cf:ac:8c:c0:68:
                    42:02:75:2c:de:47:2a:49:34:b5:29:85:ae:e5:89:
                    92:6c:88:1e:a2:99:23:0a:41:c1:19:e3:00:a0:c3:
                    2e:df:b6:9c:1a:b9:75:1c:90:ce:34:2f:1f:c7:1c:
                    65:18:f6:69:04:a4:22:f4:89:5a:32:2c:26:f0:37:
                    21:6d:e9:33:4e:2a:22:a5:65:87:17:33:26:bb:4e:
                    37:77:c9:e0:8f:76:b1:87:79:58:7e:f2:0d:42:96:
                    a1:55:81:cb:b6:9b:09:1f:62:ae:cc:72:4f:35:e3:
                    85:d7:3a:a2:78:b1:c9:9b:77:73:c0:ec:5e:ee:6a:
                    79:d4:17:a2:91:32:15:fa:0b:6c:86:62:fc:f1:27:
                    18:cf:92:a7:4b:2b:8a:2b:f1:de:18:21:60:75:48:
                    4a:49:0d:d1:7d:fd:7d:0b:30:8c:40:1e:5e:d8:7f:
                    13:4e:a1:2c:24:6c:63:42:4d:5f:16:8a:8a:ff:eb:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:96:D4:CC:DE:9F:E5:57:C1:47:A9:D7:C8:7C:C1:4F:57:DA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:a3:b5:0e:f4:33:17:39:53:44:a6:2f:3a:1d:61:96:26:
         fe:a2:8d:5a:69:3b:50:b4:e3:17:81:5f:a2:bb:bd:45:71:d7:
         fe:10:70:4c:f4:39:cc:77:0c:cb:bc:1d:49:db:11:7d:f1:2a:
         f5:cf:e9:66:50:6b:31:4a:b4:bf:31:e6:3b:e6:d4:bc:dc:6c:
         e8:59:cd:7e:0c:a7:4a:5b:b8:3f:d6:9f:18:4b:a2:a1:b7:a1:
         49:92:ee:75:03:77:17:46:30:d0:27:c1:5b:af:7d:5b:5f:35:
         5a:89:9e:41:f3:82:3f:31:26:47:d2:b0:28:8d:3d:80:67:d9:
         30:11:3b:ab:06:86:5f:2c:6c:a9:ec:ff:91:82:16:06:86:b9:
         0c:3d:57:71:c4:41:6f:6c:ec:f6:d0:82:5e:6c:76:8f:00:b1:
         c1:7a:33:05:d9:5f:3a:4b:7b:b3:bb:c8:ee:e6:10:b1:2e:51:
         6b:68:bb:d0:a3:87:3b:c0:62:81:68:58:75:b2:d5:fa:1e:01:
         29:8b:9b:56:66:69:7e:b9:4b:c6:bd:33:da:d6:ab:3d:49:fa:
         94:50:af:8f:2f:8e:cb:99:2f:ae:b6:6f:c3:ed:ab:b8:1f:00:
         65:7a:c3:a5:86:d3:83:48:50:1f:50:48:d3:0d:47:37:91:83:
         85:dd:69:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaXiFcsg0L8yZDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
MTNlNTJiMjgtNTZhYi00YTNkLTg4ZDQtNzE2NjgxODIyNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pwE4Z0eiNhto3ABz+Ozup92Wa3hAIriKQNF
Rd06jELFhXVVNOQVjYjrzj5HL2zJOXgeAB3Bc1mMAXdh4agcmP9XSTLOz6yMwGhC
AnUs3kcqSTS1KYWu5YmSbIgeopkjCkHBGeMAoMMu37acGrl1HJDONC8fxxxlGPZp
BKQi9IlaMiwm8DchbekzTioipWWHFzMmu043d8ngj3axh3lYfvINQpahVYHLtpsJ
H2KuzHJPNeOF1zqieLHJm3dzwOxe7mp51BeikTIV+gtshmL88ScYz5KnSyuKK/He
GCFgdUhKSQ3Rff19CzCMQB5e2H8TTqEsJGxjQk1fFoqK/+shwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGcltTM3p/lV8FHqdfIfMFPV9qcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWJhNGFlOTQtZWFkNi0z
ZTk5LTljZTktOTMzZTQ3ZGIyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Z6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAp5o7UO9DMXOVNEpi86HWGWJv6ijVppO1C04xeBX6K7vUVx1/4QcEz0
Ocx3DMu8HUnbEX3xKvXP6WZQazFKtL8x5jvm1LzcbOhZzX4Mp0pbuD/WnxhLoqG3
oUmS7nUDdxdGMNAnwVuvfVtfNVqJnkHzgj8xJkfSsCiNPYBn2TARO6sGhl8sbKns
/5GCFgaGuQw9V3HEQW9s7PbQgl5sdo8AscF6MwXZXzpLe7O7yO7mELEuUWtou9Cj
hzvAYoFoWHWy1foeASmLm1ZmaX65S8a9M9rWqz1J+pRQr48vjsuZL662b8Ptq7gf
AGV6w6WG04NIUB9QSNMNRzeRg4Xdacw=
-----END CERTIFICATE-----
Generated at Wed May 13 10:18:21 2026 by rpki-client