Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ab4d6b5-ec7e-373a-b7df-d8d29cfd5c51.roa
File:                     2ab4d6b5-ec7e-373a-b7df-d8d29cfd5c51.roa (raw, json)
Hash identifier:          CSl5bJvMTiTVUoiBcDaCfs7BVKZKnoFg98Y9cNIbUaM=
Subject key identifier:   73:58:48:ED:D3:BD:59:D3:0B:E1:F1:69:0A:B1:74:7E:96:AC:12:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB8A81926A5A6EED6B4780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ab4d6b5-ec7e-373a-b7df-d8d29cfd5c51.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.81.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:8a:81:92:6a:5a:6e:ed:6b:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=bafd9d47-acef-4969-b57e-b662bb326b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:5c:95:a7:55:7d:43:03:41:68:39:68:2b:
                    ba:1f:96:90:ee:d1:81:ef:1f:b9:f6:75:22:50:f5:
                    c5:dc:a5:ff:3b:a8:42:2a:37:62:4b:35:6a:65:01:
                    ed:d5:b0:e5:a5:d4:24:d7:a9:cb:ac:bc:be:7e:49:
                    9f:74:7b:09:df:dd:4a:23:4a:ab:d2:9e:28:77:a0:
                    6a:90:68:57:6b:d9:8d:33:a0:30:2d:bb:5f:72:6c:
                    5e:85:0d:08:15:4c:64:35:6a:72:ca:0d:eb:3f:7f:
                    0e:61:3b:82:54:bb:da:d3:3f:2f:da:8d:89:e6:f1:
                    9a:bc:1e:ef:18:4f:f3:3d:24:95:2a:08:87:61:0e:
                    02:2d:5f:5c:e8:2b:ef:75:37:ef:f1:85:42:ed:26:
                    a1:2a:36:fd:f4:22:31:fa:51:1a:b6:f8:4c:00:99:
                    ff:32:fb:f3:21:20:66:d4:19:cb:3b:4e:c2:30:d4:
                    bf:5a:4a:e9:9e:20:74:21:3b:f7:3f:b5:e3:ba:73:
                    79:18:ec:40:20:da:88:02:ad:53:d1:b0:fa:b8:2f:
                    5e:a8:87:1b:e2:7f:48:10:a8:82:c9:ed:8d:e3:47:
                    4e:91:17:2c:ea:7a:41:7e:fb:db:13:8e:54:87:c0:
                    05:a3:86:da:77:92:8f:cc:76:23:99:4e:af:52:27:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:58:48:ED:D3:BD:59:D3:0B:E1:F1:69:0A:B1:74:7E:96:AC:12:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ab4d6b5-ec7e-373a-b7df-d8d29cfd5c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.81.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:05:47:cf:ce:72:a8:72:86:2e:70:1b:42:e0:a8:8d:9d:
         6e:65:2b:f8:04:ea:1b:68:7a:03:37:a7:cd:d4:a4:80:f6:fd:
         6d:f1:cc:b1:f6:f1:8f:3a:00:5f:ab:69:b2:00:f5:b4:c4:8b:
         6f:43:a7:d8:86:57:25:96:f5:36:47:78:b6:ad:c7:39:ec:fd:
         2b:d5:5e:9b:a4:c3:8c:51:69:81:6f:6f:b5:f1:62:2e:b3:f6:
         87:c4:7c:41:94:c9:23:db:23:8a:b3:3a:cb:3b:e9:25:02:5f:
         fd:15:fd:7a:df:6a:7c:a3:cc:57:7d:39:ff:48:84:c9:7f:71:
         6e:0d:8a:80:87:ef:2e:54:43:d9:31:15:74:d3:a7:87:ed:f0:
         6c:80:e8:fb:cf:ae:16:f2:2c:90:ca:97:59:97:02:1f:d0:55:
         ed:62:b8:c7:e2:86:b3:ca:97:c1:b7:0f:51:3d:e8:e6:f0:ae:
         8c:28:ce:5b:8b:58:fd:8d:02:89:50:d5:ca:78:22:03:77:70:
         22:db:d8:1f:99:ea:68:c6:ff:f4:68:67:28:12:bb:e7:e6:e9:
         40:e6:04:62:5d:54:b9:24:15:dc:91:5b:51:88:bc:a9:b6:b8:
         4c:d4:6c:88:d6:ae:2d:1d:5f:b8:43:ea:35:39:f6:c1:c0:5e:
         69:f7:cb:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4qBkmpabu1rR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YmFmZDlkNDctYWNlZi00OTY5LWI1N2UtYjY2MmJiMzI2YjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjehcladVfUMDQWg5aCu6H5aQ7tGB7x+59nUi
UPXF3KX/O6hCKjdiSzVqZQHt1bDlpdQk16nLrLy+fkmfdHsJ391KI0qr0p4od6Bq
kGhXa9mNM6AwLbtfcmxehQ0IFUxkNWpyyg3rP38OYTuCVLva0z8v2o2J5vGavB7v
GE/zPSSVKgiHYQ4CLV9c6CvvdTfv8YVC7SahKjb99CIx+lEatvhMAJn/MvvzISBm
1BnLO07CMNS/WkrpniB0ITv3P7XjunN5GOxAINqIAq1T0bD6uC9eqIcb4n9IEKiC
ye2N40dOkRcs6npBfvvbE45Uh8AFo4bad5KPzHYjmU6vUid3EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHNYSO3TvVnTC+HxaQqxdH6WrBIwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmFiNGQ2YjUtZWM3ZS0z
NzNhLWI3ZGYtZDhkMjljZmQ1YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnGBUfPznKocoYucBtC4KiNnW5lK/gE6htoegM3p83UpID2/W3xzLH2
8Y86AF+rabIA9bTEi29Dp9iGVyWW9TZHeLatxzns/SvVXpukw4xRaYFvb7XxYi6z
9ofEfEGUySPbI4qzOss76SUCX/0V/XrfanyjzFd9Of9IhMl/cW4NioCH7y5UQ9kx
FXTTp4ft8GyA6PvPrhbyLJDKl1mXAh/QVe1iuMfihrPKl8G3D1E96ObwrowozluL
WP2NAolQ1cp4IgN3cCLb2B+Z6mjG//RoZygSu+fm6UDmBGJdVLkkFdyRW1GIvKm2
uEzUbIjWri0dX7hD6jU59sHAXmn3yxA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:32 2026 by rpki-client