Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/9f2b1f56-281e-3ec0-8759-c1618035cd99.roa
File:                     9f2b1f56-281e-3ec0-8759-c1618035cd99.roa (raw, json)
Hash identifier:          T92viiVI0L0/QARJvR2qWEBfMTcv4RTgPu5Ige424+k=
Subject key identifier:   B5:B0:2E:A0:7E:2A:1F:3B:85:61:73:C3:F4:ED:25:F5:24:6F:F9:85
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584CB81C8AC6A7983508D6ABFB80
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/9f2b1f56-281e-3ec0-8759-c1618035cd99.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     30045
IP address blocks:        192.139.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:8a:c6:a7:98:35:08:d6:ab:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=ebc73c49-4990-4cf0-ab45-473d3c9d52a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:5a:35:66:da:2e:bd:21:b8:11:21:52:66:
                    dc:36:9f:ca:c1:51:d5:c2:b8:52:17:fd:fe:d5:e8:
                    f6:81:44:5e:9a:e7:01:c7:5d:66:63:0f:b4:f1:54:
                    c8:71:aa:cd:2d:3a:81:fd:a8:cb:47:7b:03:d1:f1:
                    f8:14:7e:99:bc:12:55:76:1c:af:5f:f3:7e:a2:8b:
                    b2:11:d8:e7:fc:59:22:73:43:0e:97:06:cf:60:ad:
                    00:12:b8:e8:96:41:21:e7:fd:a8:75:62:63:c2:85:
                    d4:d8:c0:0b:38:f1:42:74:51:b1:c5:89:77:10:87:
                    76:a4:9e:49:50:5a:9d:88:df:3d:85:6b:f5:19:2b:
                    fb:bf:ab:06:c9:f5:b7:f3:43:de:d1:ed:21:db:cb:
                    42:0a:bc:df:0c:d1:ef:11:d9:9d:18:a8:51:2b:3e:
                    51:8c:bb:c8:a1:b9:ac:e8:5b:3c:7b:84:a0:95:32:
                    24:d3:4e:b8:a9:a3:34:92:5f:63:df:82:fa:03:1c:
                    bd:72:80:b9:1b:2f:81:6d:fa:b4:ad:1b:1a:80:85:
                    84:05:05:11:af:28:f6:a9:c7:27:75:dc:be:46:82:
                    ee:6f:19:9d:bd:f6:25:98:9b:8d:b0:4e:ca:3f:32:
                    ae:31:51:94:e2:67:1b:df:a5:dc:f9:08:32:eb:c5:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:2E:A0:7E:2A:1F:3B:85:61:73:C3:F4:ED:25:F5:24:6F:F9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/9f2b1f56-281e-3ec0-8759-c1618035cd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:b6:01:3a:9c:e6:cf:36:a8:8b:c4:d1:61:78:16:1b:0f:f3:
         80:ee:dc:4e:7f:62:92:89:1c:83:26:bf:58:84:02:65:70:23:
         00:62:4a:e4:02:62:13:2b:c7:e3:7e:6c:08:b5:02:85:0a:51:
         aa:40:f3:de:3c:2f:ec:1a:1a:c6:e3:72:1f:9e:d7:0f:09:69:
         c7:29:24:de:53:8c:9c:f8:ca:01:59:f8:e5:17:a9:22:5d:36:
         2f:82:e4:7f:6e:17:c3:39:4e:77:d1:f4:4f:42:08:cd:43:ef:
         31:70:02:54:e0:38:44:c4:28:d8:4e:15:c7:88:91:9a:45:5a:
         de:a4:13:45:b0:e9:c0:cf:2a:27:de:d6:07:88:6e:24:19:5e:
         8f:65:a0:7f:60:5a:d9:2a:c4:42:d1:72:79:e3:ff:b1:3e:61:
         3d:c5:e0:59:7b:ba:f2:18:fb:c6:2b:f6:b1:f4:b4:99:27:96:
         a9:08:37:d3:e3:40:3c:38:6d:35:21:ba:e0:d5:38:17:04:6e:
         a0:b0:d4:1b:b1:b0:b8:ad:cd:0d:87:9c:57:66:ee:f4:5d:ce:
         16:8e:f8:fb:93:e8:46:98:c2:f2:f1:cd:94:3d:f1:ed:f8:e8:
         c7:9f:af:df:b1:cb:02:ed:41:0d:4c:1a:ff:78:30:4d:c1:0c:
         a4:1b:89:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIrGp5g1CNar+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
ZWJjNzNjNDktNDk5MC00Y2YwLWFiNDUtNDczZDNjOWQ1MmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv1aNWbaLr0huBEhUmbcNp/KwVHVwrhSF/3+
1ej2gURemucBx11mYw+08VTIcarNLTqB/ajLR3sD0fH4FH6ZvBJVdhyvX/N+oouy
Edjn/Fkic0MOlwbPYK0AErjolkEh5/2odWJjwoXU2MALOPFCdFGxxYl3EId2pJ5J
UFqdiN89hWv1GSv7v6sGyfW380Pe0e0h28tCCrzfDNHvEdmdGKhRKz5RjLvIobms
6Fs8e4SglTIk0064qaM0kl9j34L6Axy9coC5Gy+Bbfq0rRsagIWEBQURryj2qccn
ddy+RoLubxmdvfYlmJuNsE7KPzKuMVGU4mcb36Xc+Qgy68VFQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWwLqB+Kh87hWFzw/TtJfUkb/mFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvOWYyYjFmNTYtMjgxZS0z
ZWMwLTg3NTktYzE2MTgwMzVjZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwItTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOC2ATqc5s82qIvE0WF4FhsP84Du3E5/YpKJHIMmv1iEAmVwIwBiSuQC
YhMrx+N+bAi1AoUKUapA8948L+waGsbjch+e1w8JaccpJN5TjJz4ygFZ+OUXqSJd
Ni+C5H9uF8M5TnfR9E9CCM1D7zFwAlTgOETEKNhOFceIkZpFWt6kE0Ww6cDPKife
1geIbiQZXo9loH9gWtkqxELRcnnj/7E+YT3F4Fl7uvIY+8Yr9rH0tJknlqkIN9Pj
QDw4bTUhuuDVOBcEbqCw1BuxsLitzQ2HnFdm7vRdzhaO+PuT6EaYwvLxzZQ98e34
6Mefr9+xywLtQQ1MGv94ME3BDKQbiW4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:11 2026 by rpki-client