Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/833cf751-33ee-3ecb-8c0b-07843e39f73e.roa
File:                     833cf751-33ee-3ecb-8c0b-07843e39f73e.roa (raw, json)
Hash identifier:          zHUaW560AFEJq//XPjC8gwD0ZLLM9tB1yILmiBMFZhY=
Subject key identifier:   7F:36:61:9A:F7:D0:3C:50:0A:19:41:A2:A4:0D:DA:DD:4C:3C:81:95
Certificate issuer:       /CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
Certificate serial:       010D0C9F4328584D5F7FAA460A4BB46AED8DFA40
Authority key identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/833cf751-33ee-3ecb-8c0b-07843e39f73e.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     395260
IP address blocks:        130.12.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:aa:46:0a:4b:b4:6a:ed:8d:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=f7a1ecc5-94cc-4065-9dc3-5a8fd8d7f3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:fd:f6:92:58:a2:99:52:dc:84:2f:ea:aa:
                    66:15:86:b1:3d:eb:d9:81:3e:7e:4f:a9:30:c1:a6:
                    71:67:2c:8d:cb:cb:83:30:8e:2e:4b:8f:47:a1:13:
                    a2:42:c2:6f:b1:71:17:15:73:58:2b:a0:8d:39:81:
                    b8:97:4a:e5:d7:dc:5e:3e:05:cc:29:bd:7a:ba:0c:
                    d8:44:85:fd:03:24:c3:50:2c:51:3c:c3:01:71:b1:
                    8e:c7:37:fb:20:d7:65:5f:02:ca:17:77:89:37:be:
                    2b:7f:63:1c:d9:09:1a:43:4f:27:9e:f2:51:44:16:
                    57:bb:94:1d:f0:77:9f:2f:1f:31:d9:79:9c:3b:6e:
                    9c:ce:65:03:6f:44:6e:ad:4e:66:27:e5:0f:08:85:
                    62:32:3b:20:69:74:0e:9b:c5:5b:c3:1a:28:97:a2:
                    2c:38:e0:f6:1a:a2:98:2d:09:90:78:6a:1b:65:c6:
                    57:ff:dc:99:a7:6a:0e:3b:27:81:80:84:18:62:14:
                    d3:6c:f1:a6:fc:b6:99:a5:d6:0b:61:47:b6:49:6f:
                    19:ef:77:5e:1d:65:a7:42:f0:2d:20:46:2b:ce:db:
                    10:f3:bf:08:f3:69:2f:f1:39:85:9d:eb:c4:2f:72:
                    1f:ad:cc:8c:19:39:c3:e3:98:2f:79:45:bc:6f:5f:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:36:61:9A:F7:D0:3C:50:0A:19:41:A2:A4:0D:DA:DD:4C:3C:81:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/833cf751-33ee-3ecb-8c0b-07843e39f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:37:96:f1:cd:c4:41:b1:ea:be:83:9e:8e:53:9a:ad:1f:c3:
         96:c7:21:88:89:50:52:fb:37:f8:79:19:a5:17:9c:0b:9e:0a:
         8c:53:0c:a5:52:e5:a8:a2:cc:b1:3d:ef:70:df:59:1e:3a:af:
         85:2e:9e:04:3f:74:71:14:7f:1f:63:13:1c:26:5e:3a:bc:20:
         de:ca:99:dd:e5:d1:41:f6:e4:38:be:43:5e:66:2d:e3:59:d7:
         20:23:c3:14:ca:9d:d9:1e:dd:f7:be:22:98:d9:94:cf:7f:f9:
         8a:00:cd:58:33:70:5f:f3:59:9f:aa:04:68:e0:f8:ff:85:22:
         5f:1a:ea:b5:40:fb:59:22:13:c2:c1:f8:54:99:81:2d:1c:f2:
         fa:7f:f8:dc:8e:d3:a3:9c:54:1b:e8:3d:6d:75:f5:47:6b:7d:
         ad:fd:a7:04:4c:c1:6d:61:36:75:9e:f1:3d:6c:e5:31:44:4a:
         3d:6a:7d:f9:24:03:24:3b:36:79:f4:ff:02:83:b3:42:d3:cc:
         d4:dd:4b:06:80:de:fa:91:d6:3c:fb:89:d1:67:ef:b1:72:2d:
         da:50:c6:a5:ff:33:4d:82:77:c3:a6:bc:40:1d:42:53:36:ff:
         4d:7c:72:3c:b7:13:a4:1f:51:88:01:8c:cc:38:e6:e6:7a:fc:
         5b:c2:a4:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6pGCku0au2N+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyNDIxZDItYTY5My00NDBlLWE5ZTAtZWNlMmI3Y2Qy
YjM5MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk
ZjdhMWVjYzUtOTRjYy00MDY1LTlkYzMtNWE4ZmQ4ZDdmM2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitX99pJYoplS3IQv6qpmFYaxPevZgT5+T6kw
waZxZyyNy8uDMI4uS49HoROiQsJvsXEXFXNYK6CNOYG4l0rl19xePgXMKb16ugzY
RIX9AyTDUCxRPMMBcbGOxzf7INdlXwLKF3eJN74rf2Mc2QkaQ08nnvJRRBZXu5Qd
8HefLx8x2XmcO26czmUDb0RurU5mJ+UPCIViMjsgaXQOm8Vbwxool6IsOOD2GqKY
LQmQeGobZcZX/9yZp2oOOyeBgIQYYhTTbPGm/LaZpdYLYUe2SW8Z73deHWWnQvAt
IEYrztsQ878I82kv8TmFnevEL3IfrcyMGTnD45gveUW8b19ciwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH82YZr30DxQChlBoqQN2t1MPIGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mZDI0
MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2UyYjdjZDJiMzkvODMzY2Y3NTEtMzNlZS0z
ZWNiLThjMGItMDc4NDNlMzlmNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmQyNDIxZDItYTY5My00NDBlLWE5
ZTAtZWNlMmI3Y2QyYjM5L2ZkMjQyMWQyLWE2OTMtNDQwZS1hOWUwLWVjZTJiN2Nk
MmIzOS5jcmwwHwYDVR0jBBgwFoAUKMvPjF1Z/w2HrWUgbfQRuY+rsxgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mZDI0MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2Uy
YjdjZDJiMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggwIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAU3lvHNxEGx6r6Dno5Tmq0fw5bHIYiJUFL7N/h5GaUXnAueCoxTDKVS
5aiizLE973DfWR46r4UungQ/dHEUfx9jExwmXjq8IN7Kmd3l0UH25Di+Q15mLeNZ
1yAjwxTKndke3fe+IpjZlM9/+YoAzVgzcF/zWZ+qBGjg+P+FIl8a6rVA+1kiE8LB
+FSZgS0c8vp/+NyO06OcVBvoPW119Udrfa39pwRMwW1hNnWe8T1s5TFESj1qffkk
AyQ7Nnn0/wKDs0LTzNTdSwaA3vqR1jz7idFn77FyLdpQxqX/M02Cd8OmvEAdQlM2
/018cjy3E6QfUYgBjMw45uZ6/FvCpO4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:43 2026 by rpki-client