Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/11a0cf52-e109-343c-9514-8f92d25931fe.roa
File:                     11a0cf52-e109-343c-9514-8f92d25931fe.roa (raw, json)
Hash identifier:          g5wyWRqKM0lA6coRorYG7GUMzJYJfZ/KeUGvEsWeoTM=
Subject key identifier:   77:75:20:BB:F8:FB:BB:5D:12:85:9B:9E:CC:A6:3F:31:FC:25:45:C0
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584D04E2334FC536C4DDF1FFF5C0
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/11a0cf52-e109-343c-9514-8f92d25931fe.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     33201
IP address blocks:        130.12.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:33:4f:c5:36:c4:dd:f1:ff:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=268b5aa2-2371-4acd-ad38-f8ee568033b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:b1:38:f2:74:e6:c1:5a:a7:6e:4c:59:2b:
                    22:ec:90:f6:15:58:d3:ee:b0:38:0c:3d:2d:8b:71:
                    bf:ce:cf:b1:a5:58:1b:3f:ce:c3:fb:cf:f5:ab:c6:
                    ea:3b:18:f8:a2:10:af:d9:8e:13:bc:b0:fb:d6:5d:
                    4c:20:98:f4:ba:61:08:1c:c6:bf:62:1d:1b:75:6f:
                    a9:e4:04:c5:33:89:c7:73:15:2f:50:35:5e:81:50:
                    c0:87:cb:5d:47:85:14:ee:1f:65:34:8c:99:20:55:
                    6e:24:5e:4d:f4:b5:4d:5f:e2:0b:20:90:ee:b9:d4:
                    e8:85:26:d0:e8:dd:39:e3:5b:60:6a:53:79:cc:62:
                    d9:5b:22:25:70:c8:1e:3f:9b:fe:9f:a3:5f:3c:61:
                    e4:c9:bb:7c:fe:26:db:56:a9:4d:a1:ba:98:ab:99:
                    17:5c:e9:d1:1c:36:0d:86:f6:67:87:60:38:9b:c2:
                    0e:d0:ae:e0:56:98:82:59:36:83:02:da:9c:2a:91:
                    a3:6b:f3:6b:aa:0e:c8:bf:ea:77:c6:52:7d:47:6c:
                    01:a4:24:0d:a6:fd:90:09:1c:11:82:36:bf:c9:c1:
                    02:12:12:16:b8:07:84:03:a1:a9:10:1a:24:82:3a:
                    da:ff:8f:1f:03:3a:a3:49:a1:0d:8f:f6:86:ba:96:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:75:20:BB:F8:FB:BB:5D:12:85:9B:9E:CC:A6:3F:31:FC:25:45:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/11a0cf52-e109-343c-9514-8f92d25931fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:c2:8f:3b:cd:05:11:22:93:2d:54:91:55:9d:50:59:6e:
         e0:9e:38:e3:43:a6:95:38:a4:23:1c:38:45:7c:fd:ce:6f:c9:
         8d:83:ec:6f:43:5d:5b:fd:3e:c2:cf:4a:e4:f8:ad:85:22:fe:
         4f:d2:90:99:0f:94:ac:35:9e:80:de:d9:75:2f:d5:86:74:1a:
         0b:96:ba:36:65:5f:39:86:97:7a:4e:10:01:21:05:1b:35:09:
         cb:4e:8a:c8:2a:69:30:95:c3:c8:7d:1a:69:7e:69:dd:ff:56:
         a7:3d:29:ca:56:35:5d:82:68:f5:62:f0:e0:b5:1c:54:28:c5:
         2f:51:43:d8:cc:bb:49:3e:e0:ba:0c:9b:ad:46:37:96:2a:00:
         b1:1c:96:32:f6:ca:97:a5:5b:7f:30:fa:ab:b6:2c:49:52:33:
         1a:8e:d9:36:87:ef:d8:bb:be:df:b7:e3:78:f1:d2:b7:c5:cb:
         84:10:35:ba:e1:dd:04:42:30:57:36:e2:50:2d:4d:45:d9:17:
         97:aa:a5:46:f5:64:91:1c:3c:ec:3a:0b:45:ef:01:a8:cc:78:
         e8:69:b4:27:4f:68:6f:74:c0:a7:0d:60:89:9c:05:c2:dd:9a:
         c8:0e:d3:57:8e:d6:a0:60:41:ff:65:8e:24:46:bf:3b:8f:22:
         c2:95:41:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4jNPxTbE3fH/9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUyZDg5NDgtYTQ4Yi00YTY0LWJiODgtNWMyODk0MDg5
NDRjMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MjY4YjVhYTItMjM3MS00YWNkLWFkMzgtZjhlZTU2ODAzM2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld2xOPJ05sFap25MWSsi7JD2FVjT7rA4DD0t
i3G/zs+xpVgbP87D+8/1q8bqOxj4ohCv2Y4TvLD71l1MIJj0umEIHMa/Yh0bdW+p
5ATFM4nHcxUvUDVegVDAh8tdR4UU7h9lNIyZIFVuJF5N9LVNX+ILIJDuudTohSbQ
6N0541tgalN5zGLZWyIlcMgeP5v+n6NfPGHkybt8/ibbVqlNobqYq5kXXOnRHDYN
hvZnh2A4m8IO0K7gVpiCWTaDAtqcKpGja/Nrqg7Iv+p3xlJ9R2wBpCQNpv2QCRwR
gja/ycECEhIWuAeEA6GpEBokgjra/48fAzqjSaENj/aGupaWBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHd1ILv4+7tdEoWbnsymPzH8JUXAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTJk
ODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4OTQwODk0NGMvMTFhMGNmNTItZTEwOS0z
NDNjLTk1MTQtOGY5MmQyNTkzMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDUyZDg5NDgtYTQ4Yi00YTY0LWJi
ODgtNWMyODk0MDg5NDRjLzQ1MmQ4OTQ4LWE0OGItNGE2NC1iYjg4LTVjMjg5NDA4
OTQ0Yy5jcmwwHwYDVR0jBBgwFoAUKsewww4das+JnT01pxsrYbZMN2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTJkODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4
OTQwODk0NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggw9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGnwo87zQURIpMtVJFVnVBZbuCeOONDppU4pCMcOEV8/c5vyY2D7G9D
XVv9PsLPSuT4rYUi/k/SkJkPlKw1noDe2XUv1YZ0GguWujZlXzmGl3pOEAEhBRs1
CctOisgqaTCVw8h9Gml+ad3/Vqc9KcpWNV2CaPVi8OC1HFQoxS9RQ9jMu0k+4LoM
m61GN5YqALEcljL2ypelW38w+qu2LElSMxqO2TaH79i7vt+343jx0rfFy4QQNbrh
3QRCMFc24lAtTUXZF5eqpUb1ZJEcPOw6C0XvAajMeOhptCdPaG90wKcNYImcBcLd
msgO01eO1qBgQf9ljiRGvzuPIsKVQas=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:20 2026 by rpki-client