Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
File:                     8dd28c05-4117-3fd1-8821-8081d349d8d6.roa (raw, json)
Hash identifier:          D0pflDc+0yQuDxGJP2PjAj13WImXD22bUKLg3RGfBD8=
Subject key identifier:   30:2E:CB:A1:8D:8C:54:BA:D1:DA:5F:91:0E:02:AB:C9:25:B7:A2:51
Certificate issuer:       /CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
Certificate serial:       010D0C9F4328584C8B7186127F6B0A06DD2B5A80
Authority key identifier: 72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
Signing time:             Fri 16 Jan 2026 14:00:40 +0000
ROA not before:           Fri 16 Jan 2026 14:00:40 +0000
ROA not after:            Thu 16 Apr 2026 13:00:40 +0000
asID:                     32148
IP address blocks:        206.188.60.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:71:86:12:7f:6b:0a:06:dd:2b:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
        Validity
            Not Before: Jan 16 14:00:40 2026 GMT
            Not After : Apr 16 13:00:40 2026 GMT
        Subject: CN=875e7899-2f7d-4fcb-a0bc-8533b706fd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:7e:f7:7f:3b:93:c9:24:44:11:dd:b7:ec:
                    88:15:81:ed:94:64:06:c4:29:db:1a:8a:e9:49:c2:
                    cd:74:74:a5:08:80:82:5e:02:37:79:f1:44:5b:3f:
                    0f:60:59:4d:9e:3e:15:f5:2f:12:9c:8b:88:e8:0a:
                    04:22:8d:38:1f:38:7e:5a:6e:05:aa:f8:34:28:e0:
                    88:8a:fd:ce:28:d9:55:bd:16:ea:1d:88:35:41:79:
                    52:fd:5a:10:3b:18:e6:de:3c:b9:3a:4a:83:72:a0:
                    58:fc:7a:ff:55:72:55:e4:88:fe:e4:1b:4b:12:24:
                    af:ff:eb:c4:c3:3d:5f:d0:ef:cc:17:2a:9d:7b:ee:
                    45:fd:53:e0:5d:c1:29:15:a0:9a:6a:93:9e:74:58:
                    cf:4d:76:6d:81:a8:2e:2d:7e:0b:55:2b:d7:f8:21:
                    20:f2:27:62:73:71:8e:ec:d6:4f:98:9a:4d:4c:42:
                    40:fc:82:ab:13:1e:71:d6:d8:fa:c9:34:a4:39:73:
                    95:ab:6a:5f:e4:08:d3:0f:f5:d6:4c:b1:ed:fe:dc:
                    b6:cc:87:99:7e:b1:4e:31:70:b4:bf:c5:a7:33:f3:
                    94:52:5f:c1:3c:7b:a8:0b:e9:90:f1:96:0d:fd:d8:
                    fc:a1:09:dd:d9:77:ac:14:3c:62:08:24:80:8b:f8:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2E:CB:A1:8D:8C:54:BA:D1:DA:5F:91:0E:02:AB:C9:25:B7:A2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl

            X509v3 Authority Key Identifier:
                keyid:72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:52:ed:5f:69:3d:b7:e7:6b:7f:70:c7:0f:d3:00:4e:51:
         54:ad:23:d4:94:fd:37:f0:7d:c3:47:c3:f3:11:ba:c8:62:96:
         67:1a:68:ec:de:95:40:85:33:87:1c:17:ff:c9:84:27:d3:79:
         da:c6:2d:7e:d5:8b:f3:84:18:8e:e1:8a:de:3d:42:cc:9d:a6:
         b1:ac:22:24:33:6c:4d:7c:38:64:fd:8f:5e:23:17:07:39:26:
         f0:b8:57:ed:83:d9:3f:2b:63:61:12:79:7d:03:bc:f9:56:14:
         3d:ce:1b:8f:4e:39:92:a6:72:29:11:ac:f7:a6:d5:07:4d:25:
         48:3f:79:4e:d3:f7:fa:dc:05:8b:9b:44:0d:76:e3:5e:ba:2a:
         35:1c:00:e9:01:2a:53:40:3f:ad:2c:a0:a1:f1:4b:da:58:42:
         95:bb:37:c0:36:b7:8f:07:1e:ff:02:72:ea:28:45:a5:26:f8:
         9d:83:21:54:a9:8c:b0:e7:21:aa:96:ea:72:05:92:31:2a:c5:
         6b:17:14:72:c1:54:86:03:a9:dd:95:11:36:9e:fa:d1:23:55:
         84:81:79:1a:59:d8:74:3b:60:b7:70:3f:dc:ca:0c:e7:d8:3c:
         9a:5f:d4:9f:4e:75:cd:36:b1:25:be:a4:fb:4a:1e:41:09:a9:
         7c:3a:4a:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcYYSf2sKBt0rWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZkZTYxYWMtOWY5YS00YmM3LTg4NGItNjJiM2MyODQ4
YTVlMB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ODc1ZTc4OTktMmY3ZC00ZmNiLWEwYmMtODUzM2I3MDZmZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifN+9387k8kkRBHdt+yIFYHtlGQGxCnbGorp
ScLNdHSlCICCXgI3efFEWz8PYFlNnj4V9S8SnIuI6AoEIo04Hzh+Wm4Fqvg0KOCI
iv3OKNlVvRbqHYg1QXlS/VoQOxjm3jy5OkqDcqBY/Hr/VXJV5Ij+5BtLEiSv/+vE
wz1f0O/MFyqde+5F/VPgXcEpFaCaapOedFjPTXZtgaguLX4LVSvX+CEg8idic3GO
7NZPmJpNTEJA/IKrEx5x1tj6yTSkOXOVq2pf5AjTD/XWTLHt/ty2zIeZfrFOMXC0
v8WnM/OUUl/BPHuoC+mQ8ZYN/dj8oQnd2XesFDxiCCSAi/jkIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAuy6GNjFS60dpfkQ4Cq8klt6JRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmRl
NjFhYy05ZjlhLTRiYzctODg0Yi02MmIzYzI4NDhhNWUvOGRkMjhjMDUtNDExNy0z
ZmQxLTg4MjEtODA4MWQzNDlkOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZkZTYxYWMtOWY5YS00YmM3LTg4
NGItNjJiM2MyODQ4YTVlL2E2ZGU2MWFjLTlmOWEtNGJjNy04ODRiLTYyYjNjMjg0
OGE1ZS5jcmwwHwYDVR0jBBgwFoAUcuu3TiS5mVsNQb3v7c8NumPFKsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmRlNjFhYy05ZjlhLTRiYzctODg0Yi02MmIz
YzI4NDhhNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrw8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2NUu1faT2352t/cMcP0wBOUVStI9SU/TfwfcNHw/MRushilmcaaOze
lUCFM4ccF//JhCfTedrGLX7Vi/OEGI7hit49QsydprGsIiQzbE18OGT9j14jFwc5
JvC4V+2D2T8rY2ESeX0DvPlWFD3OG49OOZKmcikRrPem1QdNJUg/eU7T9/rcBYub
RA124166KjUcAOkBKlNAP60soKHxS9pYQpW7N8A2t48HHv8CcuooRaUm+J2DIVSp
jLDnIaqW6nIFkjEqxWsXFHLBVIYDqd2VETae+tEjVYSBeRpZ2HQ7YLdwP9zKDOfY
PJpf1J9Odc02sSW+pPtKHkEJqXw6Sn8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:10 2026 by rpki-client