Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
File:                     e0ad3b0f-7869-3619-ab7f-8889d031055b.roa (raw, json)
Hash identifier:          aU7hvOwUmKi6GR2k5QIxQ//x4+UO74+KjvLr3O8oiHs=
Subject key identifier:   39:0B:83:02:FB:46:CB:14:4F:5F:8A:E4:CB:67:B7:B1:F2:74:4B:CA
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584CB121CF127CA58EBA43106A80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     394094
IP address blocks:        65.99.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:cf:12:7c:a5:8e:ba:43:10:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=8749823b-9c00-46b7-9d00-14ad823eb2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:ac:35:75:d9:d8:9f:33:f8:4c:ac:ab:8d:
                    3c:8f:41:8b:00:99:4a:c5:ad:2b:2e:be:d0:e0:10:
                    c1:f4:a2:86:84:24:d7:ad:4f:a4:44:7b:b2:84:b4:
                    47:69:ee:d4:14:81:aa:d0:16:cc:e3:9a:90:31:2d:
                    e6:6a:80:90:39:90:91:b3:2d:11:9e:f4:e3:04:9e:
                    63:5e:4c:b3:1b:85:41:38:9a:41:b0:3d:12:18:13:
                    49:39:56:c0:9a:1a:c0:08:15:85:0b:85:6e:9d:23:
                    d4:35:0a:8c:16:28:10:0b:0f:95:87:1f:3e:20:3b:
                    06:68:d4:5a:c8:50:24:88:d6:6c:17:61:dd:3f:1b:
                    0a:3a:3f:7b:17:9a:98:8c:59:df:38:90:24:d2:ae:
                    ea:e2:2d:77:20:df:22:39:ee:f5:10:3a:6a:2a:66:
                    f7:f5:71:d7:3b:9c:2b:23:2a:75:32:31:11:3e:d1:
                    ea:4b:dd:89:b2:87:bf:cf:7e:f6:19:10:db:95:a4:
                    e2:6c:27:3a:8d:f9:19:29:5e:2b:94:52:26:21:f2:
                    36:5f:18:99:4a:98:60:93:c6:ef:5a:b8:23:1c:ff:
                    65:87:16:6c:58:41:26:9d:3f:d2:0f:76:76:5d:ac:
                    6e:3b:bd:15:8d:c2:0e:ed:66:c7:3b:81:20:29:32:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:83:02:FB:46:CB:14:4F:5F:8A:E4:CB:67:B7:B1:F2:74:4B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.99.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:16:5f:26:05:70:71:3e:1a:25:4e:9d:c6:f3:7f:fd:da:
         1a:68:1d:41:18:0b:17:ff:08:2d:ec:36:32:de:79:36:0d:0e:
         42:82:da:08:b6:e9:6d:fa:9b:59:76:66:66:f8:d3:27:36:4c:
         76:0e:85:28:46:fb:b1:51:a3:20:16:39:0e:fa:07:c9:72:50:
         05:d5:7b:0b:1c:00:44:43:c4:83:7f:ce:00:14:53:55:4b:57:
         91:9b:57:19:d8:65:1b:ac:d6:28:f1:c2:d0:85:3a:88:5f:48:
         24:f3:ba:28:86:cd:77:b3:29:28:cd:8a:cb:63:6f:58:70:d1:
         8d:d2:4f:f0:bf:dc:0f:12:1d:f0:d3:19:66:52:c1:15:6f:bc:
         97:72:7c:08:cf:c5:46:04:f4:ae:ff:2d:09:bb:52:a7:c5:50:
         63:17:94:33:5b:07:01:8b:37:dd:0c:5d:cd:c6:b0:1f:53:7e:
         bd:a6:55:f8:cf:84:25:06:47:a6:49:c3:e0:e9:9a:f7:79:e5:
         92:be:91:96:cf:d4:b9:73:63:51:79:5d:e8:a6:ac:d7:40:a1:
         67:08:ef:68:11:47:47:ed:d4:c9:c1:6c:94:28:16:6a:44:84:
         eb:28:29:9e:b1:67:dd:08:55:4d:62:d3:2d:6f:a1:ea:03:d8:
         d9:d4:95:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIc8SfKWOukMQaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ODc0OTgyM2ItOWMwMC00NmI3LTlkMDAtMTRhZDgyM2ViMmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcCsNXXZ2J8z+Eysq408j0GLAJlKxa0rLr7Q
4BDB9KKGhCTXrU+kRHuyhLRHae7UFIGq0BbM45qQMS3maoCQOZCRsy0RnvTjBJ5j
XkyzG4VBOJpBsD0SGBNJOVbAmhrACBWFC4VunSPUNQqMFigQCw+Vhx8+IDsGaNRa
yFAkiNZsF2HdPxsKOj97F5qYjFnfOJAk0q7q4i13IN8iOe71EDpqKmb39XHXO5wr
Iyp1MjERPtHqS92Jsoe/z372GRDblaTibCc6jfkZKV4rlFImIfI2XxiZSphgk8bv
WrgjHP9lhxZsWEEmnT/SD3Z2XaxuO70VjcIO7WbHO4EgKTKoLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkLgwL7RssUT1+K5Mtnt7HydEvKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZTBhZDNiMGYtNzg2OS0z
NjE5LWFiN2YtODg4OWQwMzEwNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQWP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGgFl8mBXBxPholTp3G83/92hpoHUEYCxf/CC3sNjLeeTYNDkKC2gi2
6W36m1l2Zmb40yc2THYOhShG+7FRoyAWOQ76B8lyUAXVewscAERDxIN/zgAUU1VL
V5GbVxnYZRus1ijxwtCFOohfSCTzuiiGzXezKSjNistjb1hw0Y3ST/C/3A8SHfDT
GWZSwRVvvJdyfAjPxUYE9K7/LQm7UqfFUGMXlDNbBwGLN90MXc3GsB9Tfr2mVfjP
hCUGR6ZJw+Dpmvd55ZK+kZbP1LlzY1F5XeimrNdAoWcI72gRR0ft1MnBbJQoFmpE
hOsoKZ6xZ90IVU1i0y1voeoD2NnUlXk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:06 2026 by rpki-client