Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
File:                     b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa (raw, json)
Hash identifier:          y2KeKQ/jY8bcRGqiq0hX0MY2nrO0DcV9p7/Gxo8rx2Q=
Subject key identifier:   91:88:C9:CC:ED:79:7A:84:AC:5B:84:74:CB:BF:C6:EB:D9:8D:9D:85
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584CC777458E10D0CB80137DBEC0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        204.8.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:45:8e:10:d0:cb:80:13:7d:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=215efbac-de1e-476e-bf39-8cc9efaf9815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:69:13:59:41:9f:92:91:ed:b0:42:22:73:
                    f7:73:aa:90:f7:3a:63:86:3f:f2:9b:fe:8f:28:27:
                    2b:96:f5:4b:f7:f3:b4:05:a0:96:41:51:74:f7:b2:
                    7f:27:38:68:69:a3:9d:01:84:25:7e:c1:67:55:f7:
                    a8:bc:cc:78:b3:69:8d:d0:ff:49:f4:a3:db:f1:14:
                    af:36:3b:f5:25:62:84:e1:a7:13:18:eb:d8:85:d7:
                    24:47:0f:4d:cd:98:96:90:0e:aa:66:25:3d:31:7e:
                    86:c3:9b:33:e3:24:90:32:4d:29:26:d0:64:67:b1:
                    98:6c:ac:b5:09:10:17:af:20:38:90:a5:85:e1:8a:
                    f5:3a:cf:90:06:9f:1d:42:17:35:fd:7b:d2:54:45:
                    1b:a2:15:74:9e:89:c8:d6:28:c9:6b:a0:7d:52:34:
                    02:25:24:bf:2a:09:5d:30:cb:be:ad:95:1c:69:02:
                    9b:3b:82:2d:7c:55:b7:58:a0:af:94:ba:c0:28:b8:
                    e2:0b:a6:29:41:c1:05:c1:1a:eb:6b:5d:d1:4f:79:
                    92:1e:b9:d2:56:3d:d9:f5:59:ef:c5:75:3e:09:6d:
                    20:35:f5:d3:2d:36:90:f4:59:75:c4:7e:9b:5f:88:
                    eb:a3:31:df:8c:5b:99:03:82:5f:b3:5d:0e:cb:8a:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:88:C9:CC:ED:79:7A:84:AC:5B:84:74:CB:BF:C6:EB:D9:8D:9D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:79:7b:40:f4:25:8c:d2:9a:f2:9c:f0:a9:f9:18:8f:b2:2c:
         fc:7a:f3:d4:93:4e:14:47:13:82:1e:43:f4:01:88:4b:f3:73:
         15:bd:48:c9:76:7a:33:de:ed:ec:bf:17:80:23:55:92:19:c9:
         c5:cb:16:97:b1:0d:5b:53:88:3c:c2:7a:ee:4e:ba:c3:e7:72:
         03:b9:98:43:21:92:86:4e:29:d8:c6:57:a2:97:9a:fc:5b:42:
         4c:0e:54:26:9c:28:eb:9c:68:47:5c:a4:9c:b1:b4:88:f4:fc:
         0f:f9:11:b0:cf:ef:6c:13:f8:da:3c:c4:32:8b:92:11:11:a8:
         6b:e4:9e:1f:ba:24:19:c1:29:83:5a:28:e5:53:c7:4e:cc:33:
         b1:2c:84:ec:7d:fe:fd:95:71:80:2a:b0:5b:37:82:9c:6e:5b:
         c7:24:23:67:d9:e5:f0:09:88:b6:b9:f0:e3:2c:af:49:f0:a5:
         4e:02:70:ec:d6:97:8a:c8:1f:9e:02:36:d4:84:7f:48:ac:b4:
         cc:d0:ce:53:dc:ff:8d:84:dd:fc:63:0a:6a:89:28:5b:c8:8e:
         29:f0:52:77:59:ec:b9:2a:5c:be:18:c7:72:80:26:5f:36:f1:
         93:9c:2b:b0:d9:d7:25:c6:e2:cd:a0:c9:07:4a:ad:d8:70:9a:
         05:f5:30:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0WOENDLgBN9vsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj
ZGExMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
MjE1ZWZiYWMtZGUxZS00NzZlLWJmMzktOGNjOWVmYWY5ODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMtpE1lBn5KR7bBCInP3c6qQ9zpjhj/ym/6P
KCcrlvVL9/O0BaCWQVF097J/JzhoaaOdAYQlfsFnVfeovMx4s2mN0P9J9KPb8RSv
Njv1JWKE4acTGOvYhdckRw9NzZiWkA6qZiU9MX6Gw5sz4ySQMk0pJtBkZ7GYbKy1
CRAXryA4kKWF4Yr1Os+QBp8dQhc1/XvSVEUbohV0nonI1ijJa6B9UjQCJSS/Kgld
MMu+rZUcaQKbO4ItfFW3WKCvlLrAKLjiC6YpQcEFwRrra13RT3mSHrnSVj3Z9Vnv
xXU+CW0gNfXTLTaQ9Fl1xH6bX4jrozHfjFuZA4Jfs10Oy4rAGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGIyczteXqErFuEdMu/xuvZjZ2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm
Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvYjNiNGVmMGUtNTdhNy0z
NWRmLTgzYzMtY2E3MjhiN2MwMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw
YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw
Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy
YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFl5e0D0JYzSmvKc8Kn5GI+yLPx689STThRHE4IeQ/QBiEvzcxW9SMl2
ejPe7ey/F4AjVZIZycXLFpexDVtTiDzCeu5OusPncgO5mEMhkoZOKdjGV6KXmvxb
QkwOVCacKOucaEdcpJyxtIj0/A/5EbDP72wT+No8xDKLkhERqGvknh+6JBnBKYNa
KOVTx07MM7EshOx9/v2VcYAqsFs3gpxuW8ckI2fZ5fAJiLa58OMsr0nwpU4CcOzW
l4rIH54CNtSEf0istMzQzlPc/42E3fxjCmqJKFvIjinwUndZ7LkqXL4Yx3KAJl82
8ZOcK7DZ1yXG4s2gyQdKrdhwmgX1MIU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:45 2026 by rpki-client