Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
File:                     28825819-faa0-3299-98f6-374b899c8d28.roa (raw, json)
Hash identifier:          ULv84DSpIjy1Sj5DCO5Dk2BjTH7n3t7Y1d+rZ9lFevU=
Subject key identifier:   87:A5:F5:A0:4B:75:63:31:8F:91:71:A5:04:7C:F3:FE:83:ED:6D:7D
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F4328584D037D19C9290228C65B27D500
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     14048
IP address blocks:        141.225.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:19:c9:29:02:28:c6:5b:27:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=3528c584-4ed3-4324-a370-0d006178c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:5e:5c:c4:54:bf:f1:f2:66:f4:13:df:71:
                    3a:55:42:eb:15:74:7e:10:ed:34:2c:74:bc:c5:d8:
                    ec:4b:c4:de:43:f1:94:1e:2b:c0:a7:f8:48:f7:b7:
                    a3:cf:87:51:a4:a6:a3:68:d1:20:c4:17:41:e3:58:
                    c2:88:d3:86:9c:f1:67:92:fe:13:45:b2:b3:61:c4:
                    f8:84:c6:c3:9f:11:6d:4e:3c:0a:ec:77:b7:06:89:
                    cf:33:cb:91:0c:d1:7d:63:c8:3f:72:e9:9a:0c:8b:
                    6b:38:c6:de:53:b5:c6:8f:bb:7f:8f:7f:56:3c:96:
                    bc:52:03:02:71:78:8e:c7:0d:41:2a:49:12:34:e8:
                    54:7c:12:6a:c9:16:02:93:d7:d7:d4:99:a0:ba:35:
                    9b:42:c9:45:89:85:fe:6a:4b:5e:eb:a8:8b:7a:ec:
                    10:75:87:29:4c:60:16:ae:a8:98:9e:6a:52:1b:87:
                    66:68:d8:42:a4:e6:25:b4:24:de:6d:8c:b9:7d:e1:
                    fe:81:c0:e1:46:29:2b:f8:59:35:ab:22:5c:e1:ab:
                    b1:65:d6:6a:76:a2:70:ca:d9:f9:5e:33:f2:c8:3e:
                    fa:bd:ae:0c:40:af:ac:0b:36:95:c7:b1:b1:cb:b1:
                    ee:4c:fc:00:d4:bd:e2:54:18:e6:b1:9c:3b:6a:09:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:F5:A0:4B:75:63:31:8F:91:71:A5:04:7C:F3:FE:83:ED:6D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:9e:2e:ad:c5:5a:4e:f6:38:cc:1f:7a:1d:ac:32:a8:cb:
         b0:0d:f9:45:54:ea:8f:b5:64:53:5f:ec:0d:7d:8e:74:1e:d7:
         28:da:ba:a4:68:6a:ef:29:14:3a:5c:e8:ab:da:61:95:e4:82:
         46:25:b2:2f:23:ad:29:c1:bf:c1:55:75:d1:37:2c:d6:96:7f:
         c6:c7:b6:3f:04:97:6b:3b:fb:4d:dd:92:52:40:98:40:2c:df:
         27:1c:30:cb:42:e0:4a:f1:f7:63:48:d5:58:14:b1:56:77:f1:
         6d:f4:46:a8:de:08:94:37:22:c7:68:57:87:ea:c3:02:67:ae:
         3f:d3:c8:83:f3:75:75:48:7a:12:f6:21:38:34:82:94:ba:d6:
         97:be:74:fb:33:79:75:0c:29:7f:ac:c2:f6:b0:98:af:bd:e0:
         97:d3:ae:e5:b4:33:aa:8e:22:5b:a8:f7:82:16:cc:a6:ab:67:
         2a:61:24:c4:65:33:16:c8:e0:61:6a:bd:47:b9:79:b8:a0:eb:
         18:3a:e9:e3:20:10:66:ae:28:68:e2:b1:e6:a6:fc:2b:c9:70:
         3e:86:19:58:c2:2d:ca:91:eb:0c:bb:79:44:40:de:e1:3f:0b:
         fd:24:c2:d7:0c:72:eb:89:0c:66:3a:ac:db:16:bd:40:ab:f3:
         18:74:73:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRnJKQIoxlsn1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4
NDEyMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MzUyOGM1ODQtNGVkMy00MzI0LWEzNzAtMGQwMDYxNzhjNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMZeXMRUv/HyZvQT33E6VULrFXR+EO00LHS8
xdjsS8TeQ/GUHivAp/hI97ejz4dRpKajaNEgxBdB41jCiNOGnPFnkv4TRbKzYcT4
hMbDnxFtTjwK7He3BonPM8uRDNF9Y8g/cumaDItrOMbeU7XGj7t/j39WPJa8UgMC
cXiOxw1BKkkSNOhUfBJqyRYCk9fX1JmgujWbQslFiYX+akte66iLeuwQdYcpTGAW
rqiYnmpSG4dmaNhCpOYltCTebYy5feH+gcDhRikr+Fk1qyJc4auxZdZqdqJwytn5
XjPyyD76va4MQK+sCzaVx7Gxy7HuTPwA1L3iVBjmsZw7agnm6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIel9aBLdWMxj5FxpQR88/6D7W19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWVm
ZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvMjg4MjU4MTktZmFhMC0z
Mjk5LTk4ZjYtMzc0Yjg5OWM4ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVlZmRkNzktYTJjMi00ZmQ0LWFk
MWEtNWQ1Mzg0MTM4NDEyLzY1ZWZkZDc5LWEyYzItNGZkNC1hZDFhLTVkNTM4NDEz
ODQxMi5jcmwwHwYDVR0jBBgwFoAUrBLkmEvyBzypjD+IIQbdJmX8XKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUz
ODQxMzg0MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+6ni6txVpO9jjMH3odrDKoy7AN+UVU6o+1ZFNf7A19jnQe1yjauqRo
au8pFDpc6KvaYZXkgkYlsi8jrSnBv8FVddE3LNaWf8bHtj8El2s7+03dklJAmEAs
3yccMMtC4Erx92NI1VgUsVZ38W30RqjeCJQ3IsdoV4fqwwJnrj/TyIPzdXVIehL2
ITg0gpS61pe+dPszeXUMKX+swvawmK+94JfTruW0M6qOIluo94IWzKarZyphJMRl
MxbI4GFqvUe5ebig6xg66eMgEGauKGjiseam/CvJcD6GGVjCLcqR6wy7eURA3uE/
C/0kwtcMcuuJDGY6rNsWvUCr8xh0c8g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:34 2026 by rpki-client