Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa
File:                     99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa (raw, json)
Hash identifier:          xDH720u/XRMR8eMyyMsVcAhrYikZteNb7oo5tFmxSu0=
Subject key identifier:   21:51:2F:36:94:F9:76:F6:E6:AE:1F:AE:42:99:0E:E3:FF:4C:D6:32
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584CB81C8B48BFDC31CD8F871540
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     30045
IP address blocks:        192.219.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:8b:48:bf:dc:31:cd:8f:87:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=20488aa5-b1bf-4709-9682-d3618b623f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:bf:50:dd:43:df:88:be:c8:de:ea:69:f5:
                    9b:40:96:c3:2b:e3:f7:30:4a:fa:b4:af:7e:f8:06:
                    00:5d:f4:27:f7:b4:75:ae:e4:d1:e8:02:06:b9:45:
                    08:66:74:dd:cb:d2:3e:6f:d6:5a:d9:ae:6d:5e:33:
                    a0:46:56:40:e6:af:c3:b4:a5:ea:55:0b:7e:4f:fa:
                    cb:0a:cf:11:f1:04:02:5f:0c:95:6a:7e:98:4a:07:
                    ca:67:4d:d1:de:49:b7:17:74:90:11:35:d4:4b:ef:
                    fc:01:d0:3e:8a:55:bc:ec:6b:4d:ff:d7:e7:81:bb:
                    9c:5e:75:2d:90:d7:80:72:29:e4:60:d4:3a:09:87:
                    8a:0b:21:2e:48:cf:3c:bf:e4:17:b7:e8:52:2d:fb:
                    45:95:10:18:5c:cf:50:84:57:b3:6e:ae:c7:7c:78:
                    5f:0c:4b:53:d5:fd:1d:66:87:29:cb:95:c6:51:ac:
                    d9:cb:f6:0b:79:0a:d9:5e:ff:6e:07:85:ff:bf:f6:
                    c3:c0:6a:04:1a:30:a1:fa:d2:17:6f:82:22:c7:30:
                    07:b9:c6:89:7c:e1:41:3e:f3:8b:31:a5:a6:3e:3d:
                    71:6d:db:35:7d:f2:d8:d8:27:67:40:bf:bf:8a:9e:
                    00:e5:dc:e8:35:b3:b1:5f:80:66:71:65:9f:10:8e:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:2F:36:94:F9:76:F6:E6:AE:1F:AE:42:99:0E:E3:FF:4C:D6:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6d:12:2e:47:bd:c2:26:96:bd:45:13:61:f8:8b:df:a3:64:
         54:51:c0:25:f1:36:63:da:5c:67:2e:18:ed:37:6f:04:ea:9b:
         a6:a3:a9:d1:4e:47:25:0b:80:9c:de:b5:0d:35:7d:ba:4f:29:
         3a:d5:96:a3:f4:1d:7a:fb:c7:a7:52:43:c8:fe:55:00:70:cd:
         48:6b:ec:ad:31:ff:d7:30:81:9d:46:e2:fa:5a:ae:94:b4:ac:
         1a:f2:3a:b8:43:ca:dd:5e:f4:98:09:83:ff:a9:16:e9:91:f0:
         d5:8a:fb:1e:7c:0b:c9:3a:7f:e3:1b:a2:95:06:d4:a4:54:b3:
         37:37:74:32:e5:0e:48:5f:2e:91:d3:fe:cb:4d:1f:66:93:6f:
         98:7d:a4:7b:e8:90:49:6e:b5:04:7b:9c:df:9a:74:af:4b:7f:
         8d:a0:ee:99:ce:f5:e6:15:c2:cd:64:b8:07:42:b8:97:72:bf:
         0b:ae:0d:e9:5a:e8:69:d7:e8:19:8b:a9:0f:55:c6:ff:e0:fb:
         13:2c:f2:8a:76:5a:47:7e:ea:2c:f1:9a:dc:1a:38:e4:5d:f6:
         0c:2a:2b:e7:37:e2:eb:1e:b9:4d:e2:af:35:d4:cf:32:51:13:
         84:80:57:d0:be:68:5c:5f:2f:5b:8e:b6:df:c8:53:45:d7:81:
         92:a5:f2:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HItIv9wxzY+HFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
MjA0ODhhYTUtYjFiZi00NzA5LTk2ODItZDM2MThiNjIzZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW6/UN1D34i+yN7qafWbQJbDK+P3MEr6tK9+
+AYAXfQn97R1ruTR6AIGuUUIZnTdy9I+b9Za2a5tXjOgRlZA5q/DtKXqVQt+T/rL
Cs8R8QQCXwyVan6YSgfKZ03R3km3F3SQETXUS+/8AdA+ilW87GtN/9fngbucXnUt
kNeAcinkYNQ6CYeKCyEuSM88v+QXt+hSLftFlRAYXM9QhFezbq7HfHhfDEtT1f0d
Zocpy5XGUazZy/YLeQrZXv9uB4X/v/bDwGoEGjCh+tIXb4IixzAHucaJfOFBPvOL
MaWmPj1xbds1ffLY2CdnQL+/ip4A5dzoNbOxX4BmcWWfEI5/mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFRLzaU+Xb25q4frkKZDuP/TNYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvOTllZWFhZGEtNjIyMi0z
YTZhLWI0ZTEtYWFkYThmMDllNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNsIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxtEi5HvcImlr1FE2H4i9+jZFRRwCXxNmPaXGcuGO03bwTqm6ajqdFO
RyULgJzetQ01fbpPKTrVlqP0HXr7x6dSQ8j+VQBwzUhr7K0x/9cwgZ1G4vparpS0
rBryOrhDyt1e9JgJg/+pFumR8NWK+x58C8k6f+MbopUG1KRUszc3dDLlDkhfLpHT
/stNH2aTb5h9pHvokElutQR7nN+adK9Lf42g7pnO9eYVws1kuAdCuJdyvwuuDela
6GnX6BmLqQ9Vxv/g+xMs8op2Wkd+6izxmtwaOORd9gwqK+c34useuU3irzXUzzJR
E4SAV9C+aFxfL1uOtt/IU0XXgZKl8qY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:18 2026 by rpki-client