Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
File:                     f82f5044-0067-38a4-988f-171ba4f694e4.roa (raw, json)
Hash identifier:          mQmBiQpx1VPEmQGnvI4XHhw6DZ8u8siSTX05h3snP6o=
Subject key identifier:   95:BB:23:7C:97:CC:6D:FD:91:47:39:08:F5:35:E6:6A:17:FC:E8:71
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584CB28731E4D0F2758F058B6B60
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        45.223.208.0/24 maxlen: 24
                          45.223.209.0/24 maxlen: 24
                          45.223.210.0/24 maxlen: 24
                          45.223.211.0/24 maxlen: 24
                          45.223.212.0/24 maxlen: 24
                          45.223.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:31:e4:d0:f2:75:8f:05:8b:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=c770e694-9016-4d69-8a1d-306b351ae3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:3b:ad:3e:75:82:8e:73:c9:e9:97:4a:56:
                    81:5b:11:8d:3e:a8:65:7b:7a:4f:c5:ca:43:5c:e9:
                    65:85:6b:06:a5:9d:d4:e1:8d:d3:7f:fb:92:1c:80:
                    fa:c6:6b:3f:59:67:ad:69:5a:64:dc:4a:a2:f4:b6:
                    42:17:b1:63:f3:25:fd:51:bc:29:d3:19:93:5f:29:
                    34:d5:ca:1f:9c:d5:fc:fc:a0:20:d0:1d:c0:ee:da:
                    01:9d:a3:e3:14:b3:33:b9:76:c0:75:d2:ad:8d:b5:
                    03:88:2a:b1:ff:0f:37:e1:61:55:a3:6f:70:a4:b9:
                    1d:77:1e:84:d3:57:10:15:ed:12:11:0a:2a:84:d1:
                    16:64:aa:48:7f:d9:4a:86:42:a1:5e:d0:2c:98:7e:
                    90:83:d8:90:2d:50:89:e3:ae:84:3d:3e:e0:6f:d3:
                    f6:4c:67:98:53:66:64:dd:48:98:2c:a1:e5:e1:d4:
                    5e:de:fd:a1:ba:60:e4:7c:83:c9:04:a6:76:87:0b:
                    d9:82:81:d1:34:c6:8c:07:9f:27:33:dd:5d:45:94:
                    5f:e0:39:ec:93:d6:1a:a9:b7:29:68:43:d5:3a:44:
                    11:a3:09:c5:74:bf:69:07:ef:ea:71:b4:8a:c0:bd:
                    62:48:f1:bf:56:d5:8d:5f:75:d9:ab:d7:67:7d:e0:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:23:7C:97:CC:6D:FD:91:47:39:08:F5:35:E6:6A:17:FC:E8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.208.0-45.223.213.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:44:7e:b3:3a:54:2e:67:e7:48:70:7c:4b:0d:20:36:b3:91:
         9e:7e:a6:d6:12:d0:00:30:29:61:5e:74:e4:42:d1:93:6d:36:
         82:25:cc:5d:8c:d7:2e:c0:9f:70:36:b8:cc:42:30:bd:45:0c:
         dc:05:b9:f9:68:55:02:15:27:ea:2d:31:f3:8f:2f:fc:7e:17:
         d4:a3:bb:f7:fe:55:42:a7:ae:c1:ea:99:ea:7f:dc:0e:09:db:
         53:0f:9a:c5:de:f7:7a:64:cf:b3:7b:d2:e7:c5:33:1d:59:9d:
         bd:f3:7e:b1:c3:55:48:77:a8:98:a1:ed:f2:c6:8d:b5:9d:71:
         51:8a:c2:6e:a7:60:fb:96:e4:bf:ee:3f:17:da:5d:de:02:d0:
         79:65:c5:8f:67:40:ec:cf:7e:f5:6f:02:96:0f:e6:a4:e3:c6:
         b3:e8:68:32:2e:3a:50:25:34:e3:98:87:88:41:92:6a:46:9c:
         7f:09:0c:f9:5f:21:18:1d:e0:d3:d5:19:dd:0b:6c:62:1b:75:
         31:a1:d1:8c:91:57:0b:7d:9e:6e:13:db:e1:9b:9d:09:2f:a2:
         e3:dc:b0:ea:93:8e:97:5e:11:f1:c1:56:90:46:a6:22:93:a1:
         3b:8f:b6:80:a6:a5:74:b2:af:a7:86:be:4f:2e:f1:80:85:6a:
         22:ab:9b:44
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyyhzHk0PJ1jwWLa2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj
Yzc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
Yzc3MGU2OTQtOTAxNi00ZDY5LThhMWQtMzA2YjM1MWFlM2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXs7rT51go5zyemXSlaBWxGNPqhle3pPxcpD
XOllhWsGpZ3U4Y3Tf/uSHID6xms/WWetaVpk3Eqi9LZCF7Fj8yX9Ubwp0xmTXyk0
1cofnNX8/KAg0B3A7toBnaPjFLMzuXbAddKtjbUDiCqx/w834WFVo29wpLkddx6E
01cQFe0SEQoqhNEWZKpIf9lKhkKhXtAsmH6Qg9iQLVCJ466EPT7gb9P2TGeYU2Zk
3UiYLKHl4dRe3v2humDkfIPJBKZ2hwvZgoHRNMaMB58nM91dRZRf4Dnsk9Yaqbcp
aEPVOkQRownFdL9pB+/qcbSKwL1iSPG/VtWNX3XZq9dnfeD4awIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJW7I3yXzG39kUc5CPU15moX/OhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi
N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvZjgyZjUwNDQtMDA2Ny0z
OGE0LTk4OGYtMTcxYmE0ZjY5NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl
Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj
Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0
ZDZiY2NjNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQt39AD
BAEt39QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAaUR+szpULmfnSHB8Sw0gNrORnn6m1hLQADApYV505ELR
k202giXMXYzXLsCfcDa4zEIwvUUM3AW5+WhVAhUn6i0x848v/H4X1KO79/5VQqeu
weqZ6n/cDgnbUw+axd73emTPs3vS58UzHVmdvfN+scNVSHeomKHt8saNtZ1xUYrC
bqdg+5bkv+4/F9pd3gLQeWXFj2dA7M9+9W8Clg/mpOPGs+hoMi46UCU045iHiEGS
akacfwkM+V8hGB3g09UZ3QtsYht1MaHRjJFXC32ebhPb4ZudCS+i49yw6pOOl14R
8cFWkEamIpOhO4+2gKaldLKvp4a+Ty7xgIVqIqubRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:52 2026 by rpki-client