Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
File:                     ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa (raw, json)
Hash identifier:          d3u4UTRwph7qUDOiPItY+/42qOBS2TV0JS6A209ID9U=
Subject key identifier:   D6:34:40:B4:8C:22:DD:27:D4:DD:F1:FA:30:7B:86:A1:E9:1E:4E:0D
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584CCD0C8E139FA15551EDF8BB80
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     10753
IP address blocks:        172.93.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:8e:13:9f:a1:55:51:ed:f8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=81f818f2-3fd1-46d3-9526-9a6fae1aa4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:40:09:24:e5:6d:71:78:5f:6f:c1:f8:47:
                    42:9d:77:97:e8:72:c7:93:d1:ec:5a:0a:a4:1f:7b:
                    52:87:4b:30:9f:fa:4a:e4:cc:b6:a5:0a:b8:62:37:
                    83:0f:d9:7f:e4:8f:47:85:2a:cc:87:a9:a6:70:d1:
                    3c:39:14:49:f6:fd:f2:22:fc:c7:53:93:61:95:cc:
                    e4:4a:6a:fb:99:ff:fd:69:aa:94:6a:65:d5:71:80:
                    d2:c8:01:99:2d:a7:26:9b:2c:ba:ff:8d:e4:8e:1d:
                    f7:be:25:4a:38:b6:d9:38:f3:2e:6e:74:7c:67:98:
                    90:08:cc:97:dc:39:d6:37:d4:72:ee:a1:a5:aa:bc:
                    4e:48:3e:98:27:00:aa:a3:46:b2:fc:70:da:46:df:
                    67:37:cf:87:ae:b8:58:8d:28:9b:9c:e7:b1:f7:16:
                    cd:77:be:89:21:95:02:06:6a:7b:77:2c:19:89:b0:
                    e5:ce:40:2f:c0:c5:eb:ae:e5:80:38:df:8f:0a:a7:
                    75:53:e8:5c:33:c2:88:e9:4c:2f:3d:bf:3d:00:b0:
                    fa:aa:fb:9d:c5:d2:dd:23:e2:25:e3:8f:92:5e:18:
                    f7:75:9c:9e:1a:a5:ca:4c:1f:b1:0f:8d:b8:89:58:
                    14:71:62:75:e2:90:71:87:f6:de:f4:2a:d0:3d:08:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:40:B4:8C:22:DD:27:D4:DD:F1:FA:30:7B:86:A1:E9:1E:4E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:a1:93:81:44:6a:ad:8a:df:8c:06:d9:f2:f6:9a:fe:d7:
         04:e7:17:d4:b0:64:76:aa:96:48:b9:b0:9c:93:62:da:6a:db:
         3e:44:eb:4c:fa:58:6a:6e:c0:c9:f5:48:9d:a8:15:47:b2:13:
         e9:4a:cb:e6:83:26:2c:f3:d5:4a:4d:42:26:08:63:96:e7:d4:
         90:7b:cc:a3:c2:1d:45:2c:a9:c9:86:63:b3:8a:64:56:67:cc:
         ee:3d:86:06:fe:13:52:c7:ad:1d:1d:f5:b5:ba:de:ae:32:d3:
         4a:c1:52:07:a3:35:17:c7:1d:40:76:69:24:eb:38:c8:5a:6a:
         f5:df:92:15:78:ec:98:01:5b:f7:34:eb:91:52:be:eb:2e:74:
         fd:ea:cf:10:e4:3a:eb:2a:6a:93:41:f8:a0:f3:3b:ee:99:f8:
         fa:98:b4:99:b4:d2:e7:c4:e4:9f:f2:e8:03:d4:c5:88:93:96:
         23:65:18:9d:68:77:67:9a:98:91:42:eb:ea:19:40:e3:09:7e:
         84:a2:2d:a1:61:2e:c8:25:46:d6:43:83:27:98:72:6d:18:8d:
         7b:5f:9a:b8:54:9b:7d:16:c2:87:ba:02:96:1c:a2:27:85:9c:
         ea:41:ba:f7:91:4f:2c:5a:b5:c7:09:d3:e9:86:55:ea:91:d7:
         4f:c0:d5:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDI4Tn6FVUe34u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyYTVhZWUtYzE1Ni00M2E3LTg1MmQtOGNmYzJhY2Ez
NmU2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
ODFmODE4ZjItM2ZkMS00NmQzLTk1MjYtOWE2ZmFlMWFhNGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZACSTlbXF4X2/B+EdCnXeX6HLHk9HsWgqk
H3tSh0swn/pK5My2pQq4YjeDD9l/5I9HhSrMh6mmcNE8ORRJ9v3yIvzHU5Nhlczk
Smr7mf/9aaqUamXVcYDSyAGZLacmmyy6/43kjh33viVKOLbZOPMubnR8Z5iQCMyX
3DnWN9Ry7qGlqrxOSD6YJwCqo0ay/HDaRt9nN8+HrrhYjSibnOex9xbNd76JIZUC
Bmp7dywZibDlzkAvwMXrruWAON+PCqd1U+hcM8KI6UwvPb89ALD6qvudxdLdI+Il
44+SXhj3dZyeGqXKTB+xD424iVgUcWJ14pBxh/be9CrQPQggkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNY0QLSMIt0n1N3x+jB7hqHpHk4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJh
NWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFjYTM2ZTYvZGRiYzNlNmEtZmEzOS0z
MmExLWE5NjQtNDczMDZkMGEwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTgyYTVhZWUtYzE1Ni00M2E3LTg1
MmQtOGNmYzJhY2EzNmU2L2U4MmE1YWVlLWMxNTYtNDNhNy04NTJkLThjZmMyYWNh
MzZlNi5jcmwwHwYDVR0jBBgwFoAUUFdAxxWy+40HQ6bcB3qgd77rv0QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2Zj
MmFjYTM2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF16MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqHoZOBRGqtit+MBtny9pr+1wTnF9SwZHaqlki5sJyTYtpq2z5E60z6
WGpuwMn1SJ2oFUeyE+lKy+aDJizz1UpNQiYIY5bn1JB7zKPCHUUsqcmGY7OKZFZn
zO49hgb+E1LHrR0d9bW63q4y00rBUgejNRfHHUB2aSTrOMhaavXfkhV47JgBW/c0
65FSvusudP3qzxDkOusqapNB+KDzO+6Z+PqYtJm00ufE5J/y6APUxYiTliNlGJ1o
d2eamJFC6+oZQOMJfoSiLaFhLsglRtZDgyeYcm0YjXtfmrhUm30Wwoe6ApYcoieF
nOpBuveRTyxatccJ0+mGVeqR10/A1RA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:51 2026 by rpki-client