Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa
File:                     d4822db4-899b-317f-98e0-8c241217efa5.roa (raw, json)
Hash identifier:          nef6ayR9PdpNzOCIoPvoJOz2onfzEJV7Iuek7hhRPUM=
Subject key identifier:   40:BB:F3:D8:DF:D7:22:66:6F:C3:E5:4E:74:2B:95:D1:98:78:67:72
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF57008C3E0C846285A3A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        129.148.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:70:08:c3:e0:c8:46:28:5a:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9ac28cb6-19cd-462b-a407-fb6e21890550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:ae:80:b7:3f:97:79:c4:61:0e:6c:d7:db:
                    a6:29:54:d4:51:2c:d6:55:d8:5e:6b:67:41:70:a0:
                    ba:3c:e5:38:b1:bd:88:41:69:80:2f:6d:31:46:71:
                    98:85:dc:dc:a3:3a:b8:59:0e:df:71:9b:d2:4c:54:
                    ee:b2:03:4c:21:d0:29:a2:4d:04:00:70:3b:92:28:
                    65:2d:9b:37:44:9d:96:3d:50:6c:e1:d2:9a:4d:6b:
                    8d:1b:05:82:8a:06:8f:00:09:dc:1f:37:29:cf:f4:
                    ae:ee:fa:87:11:71:f8:dc:32:d9:ee:4c:75:24:6f:
                    d3:05:2f:75:b7:e7:e2:af:09:2a:9f:fd:51:26:b0:
                    fd:3d:23:11:72:6e:40:05:07:d5:3e:f3:20:d0:21:
                    60:e0:ae:9a:9a:41:f0:47:6a:84:f7:17:3f:d6:e2:
                    06:81:9b:4b:61:03:c7:5a:62:2e:7d:8e:ab:e6:fc:
                    8a:b6:23:2b:9c:e2:f0:71:78:9e:09:f3:80:47:1d:
                    a8:63:70:0c:d8:48:70:55:2f:06:51:0b:99:bd:76:
                    f0:9a:73:2f:33:e0:b1:63:af:21:fc:fa:64:bb:6d:
                    5a:fb:70:3a:7e:f9:08:8b:b3:b8:2c:e5:ad:f6:06:
                    8a:2f:8d:da:42:91:df:11:28:e7:d6:07:c1:35:60:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:F3:D8:DF:D7:22:66:6F:C3:E5:4E:74:2B:95:D1:98:78:67:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.148.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:8a:02:4f:da:ff:87:ba:56:a6:0e:1f:93:ab:02:da:9e:
         0f:98:e9:14:d5:27:18:c0:8d:6a:29:2c:ac:92:96:f8:35:a9:
         19:47:88:69:e5:d2:e6:70:01:1f:8e:b9:d9:82:1e:23:a6:42:
         83:d2:34:72:bc:08:b7:ec:2e:8f:85:cd:1a:00:69:51:84:2c:
         7f:72:80:d9:05:b7:23:93:77:b1:fe:78:8b:4d:05:38:89:e5:
         46:ee:13:a8:e2:db:fc:1d:6d:0a:91:92:34:7e:60:6a:6c:71:
         a2:7a:cb:91:4c:73:3d:28:d2:7d:17:c6:fe:80:17:e6:20:a5:
         59:fa:87:6f:56:ba:40:46:09:fb:44:87:b7:19:83:f5:3f:af:
         22:6d:51:7e:4b:e5:6b:c8:40:44:2f:17:09:74:39:31:39:8f:
         85:f3:4b:40:b8:6e:f4:f8:7d:a7:af:cc:61:36:9c:1c:a2:e4:
         1d:e5:d0:c9:48:2a:08:ae:e4:36:ee:80:71:33:6d:fe:e6:a9:
         cc:33:75:e5:66:62:8a:1d:fe:2e:ef:8b:c4:50:57:3a:58:e5:
         12:b8:0c:a0:7a:04:95:a3:be:b3:b7:84:71:39:83:8f:41:a7:
         9d:df:31:0b:b2:bf:3c:48:c0:65:0d:d8:ff:6c:9a:49:2f:4c:
         79:6c:90:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XAIw+DIRihaOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OWFjMjhjYjYtMTljZC00NjJiLWE0MDctZmI2ZTIxODkwNTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy2ugLc/l3nEYQ5s19umKVTUUSzWVdhea2dB
cKC6POU4sb2IQWmAL20xRnGYhdzcozq4WQ7fcZvSTFTusgNMIdApok0EAHA7kihl
LZs3RJ2WPVBs4dKaTWuNGwWCigaPAAncHzcpz/Su7vqHEXH43DLZ7kx1JG/TBS91
t+firwkqn/1RJrD9PSMRcm5ABQfVPvMg0CFg4K6amkHwR2qE9xc/1uIGgZtLYQPH
WmIufY6r5vyKtiMrnOLwcXieCfOARx2oY3AM2EhwVS8GUQuZvXbwmnMvM+CxY68h
/Ppku21a+3A6fvkIi7O4LOWt9gaKL43aQpHfESjn1gfBNWAKpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEC789jf1yJmb8PlTnQrldGYeGdyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDQ4MjJkYjQtODk5Yi0z
MTdmLTk4ZTAtOGMyNDEyMTdlZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoCigJP2v+HulamDh+TqwLang+Y6RTVJxjAjWopLKySlvg1qRlHiGnl
0uZwAR+OudmCHiOmQoPSNHK8CLfsLo+FzRoAaVGELH9ygNkFtyOTd7H+eItNBTiJ
5UbuE6ji2/wdbQqRkjR+YGpscaJ6y5FMcz0o0n0Xxv6AF+YgpVn6h29WukBGCftE
h7cZg/U/ryJtUX5L5WvIQEQvFwl0OTE5j4XzS0C4bvT4faevzGE2nByi5B3l0MlI
Kgiu5DbugHEzbf7mqcwzdeVmYood/i7vi8RQVzpY5RK4DKB6BJWjvrO3hHE5g49B
p53fMQuyvzxIwGUN2P9smkkvTHlskAU=
-----END CERTIFICATE-----
Generated at Wed May 13 11:33:21 2026 by rpki-client