Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa
File:                     c545ee41-25d1-3f84-a10c-b4b80607c07d.roa (raw, json)
Hash identifier:          V2bW99FnDz/2VWwYYV2MrbKrw7sp7jQuw2AsNusVBDY=
Subject key identifier:   B9:17:B8:F3:23:49:F1:22:D3:8B:6F:36:44:59:6C:C1:79:9D:68:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC4004E6BBA65CC4A16EB7C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     54253
IP address blocks:        134.185.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4e:6b:ba:65:cc:4a:16:eb:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=29fb3c1d-2df0-46eb-ad38-ba7bc4179e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:24:3b:1f:a1:c7:42:47:50:5e:e8:04:94:
                    65:5a:f0:b0:18:ce:4d:41:7c:94:b6:32:4b:27:52:
                    fd:57:25:9b:d2:21:35:d6:2f:50:7a:d4:1a:0e:b8:
                    01:17:d3:91:76:67:58:41:3e:1c:75:bd:22:e2:fb:
                    1c:90:b4:f8:ec:2e:02:0d:5b:9c:72:89:7d:9a:34:
                    21:da:fa:f7:65:8f:5c:66:a7:b8:78:49:d1:e5:d6:
                    70:57:16:20:16:77:83:62:96:b7:ea:ef:6d:68:ce:
                    27:06:4b:e8:16:16:be:fe:28:0d:0c:50:22:55:3c:
                    48:4a:ef:37:f5:5f:2c:98:cc:b1:02:d2:8d:b9:29:
                    88:72:c2:34:e4:01:92:75:eb:4e:35:d7:7b:1b:07:
                    b6:c1:18:65:17:72:90:35:2f:fb:43:af:eb:76:54:
                    18:8d:9a:75:41:ae:4e:4c:77:66:e9:d4:2b:b8:53:
                    c4:a5:7d:b5:95:fe:f9:84:d1:58:73:f7:fa:3c:46:
                    38:7e:2e:d0:58:7b:bb:8b:c7:18:07:cf:bb:d1:74:
                    fe:78:11:fd:56:bf:9b:85:05:0c:77:53:c2:ce:7f:
                    3d:62:dc:64:1a:16:81:4f:7b:ea:d8:16:ad:8c:fb:
                    aa:27:fd:93:ba:67:0d:a9:87:6b:7d:32:bc:a0:f0:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:B8:F3:23:49:F1:22:D3:8B:6F:36:44:59:6C:C1:79:9D:68:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.185.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:98:e3:9f:de:dd:ff:fa:c4:ff:08:5a:7a:9b:b6:80:f6:
         74:7f:79:51:f4:92:a8:ac:54:f8:cb:5e:23:ca:6a:94:5d:65:
         73:eb:55:e0:38:35:ac:ea:3e:ef:cd:ae:68:fd:82:4c:55:37:
         61:d9:73:80:22:71:2c:35:a7:d7:df:b4:54:9f:a7:da:08:69:
         16:1f:ec:a6:3d:91:94:5e:89:24:07:bb:34:b5:3d:ea:a3:0b:
         a3:82:5a:c2:ca:42:64:4e:a0:82:de:64:30:e4:af:a1:4e:8a:
         bb:76:a2:d0:fd:07:ee:b8:ca:e0:0c:3e:be:7d:4c:be:54:0c:
         91:2b:bd:f6:e0:89:f0:b6:87:a3:e8:34:2f:dc:bd:dd:03:76:
         81:2f:03:b3:a2:68:8a:90:3c:64:51:a1:9e:7a:9d:ba:25:71:
         dc:40:ae:2b:f6:5d:46:5d:fc:1c:ee:23:52:14:ca:8b:b8:2b:
         da:d1:ce:c0:1c:f5:9c:6a:e1:21:24:45:7b:35:a6:5b:4a:e6:
         0f:e9:12:b5:c1:91:cc:03:30:7b:25:4f:bd:2a:bb:d8:6c:cf:
         d2:f7:01:7f:af:f9:93:01:90:8a:aa:9a:55:52:b6:df:f5:2b:
         74:b1:8b:b1:09:dc:cb:e2:de:df:0d:62:77:6c:3d:42:69:de:
         bb:13:f2:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAE5rumXMShbrfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
MjlmYjNjMWQtMmRmMC00NmViLWFkMzgtYmE3YmM0MTc5ZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo78kOx+hx0JHUF7oBJRlWvCwGM5NQXyUtjJL
J1L9VyWb0iE11i9QetQaDrgBF9ORdmdYQT4cdb0i4vsckLT47C4CDVuccol9mjQh
2vr3ZY9cZqe4eEnR5dZwVxYgFneDYpa36u9taM4nBkvoFha+/igNDFAiVTxISu83
9V8smMyxAtKNuSmIcsI05AGSdetONdd7Gwe2wRhlF3KQNS/7Q6/rdlQYjZp1Qa5O
THdm6dQruFPEpX21lf75hNFYc/f6PEY4fi7QWHu7i8cYB8+70XT+eBH9Vr+bhQUM
d1PCzn89YtxkGhaBT3vq2BatjPuqJ/2TumcNqYdrfTK8oPAb+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkXuPMjSfEi04tvNkRZbMF5nWjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzU0NWVlNDEtMjVkMS0z
Zjg0LWExMGMtYjRiODA2MDdjMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo8mOOf3t3/+sT/CFp6m7aA9nR/eVH0kqisVPjLXiPKapRdZXPrVeA4
NazqPu/Nrmj9gkxVN2HZc4AicSw1p9fftFSfp9oIaRYf7KY9kZReiSQHuzS1Peqj
C6OCWsLKQmROoILeZDDkr6FOirt2otD9B+64yuAMPr59TL5UDJErvfbgifC2h6Po
NC/cvd0DdoEvA7OiaIqQPGRRoZ56nbolcdxAriv2XUZd/BzuI1IUyou4K9rRzsAc
9Zxq4SEkRXs1pltK5g/pErXBkcwDMHslT70qu9hsz9L3AX+v+ZMBkIqqmlVStt/1
K3Sxi7EJ3Mvi3t8NYndsPUJp3rsT8tQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:21:35 2026 by rpki-client