Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
File:                     63c48833-2603-30da-8097-8c1712221517.roa (raw, json)
Hash identifier:          ySnd7Z6WD+s8rTh2S1E2kM55UN/N1DCLNWLmcSxhIzs=
Subject key identifier:   7F:4B:30:E6:26:16:63:D3:D2:EB:3D:38:BC:C6:E1:AE:96:B9:25:E9
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D55BA37F618CC3BEAFB14E880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30128
IP address blocks:        192.228.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:37:f6:18:cc:3b:ea:fb:14:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0d872c8f-3241-4f95-83b0-81d77b3ea293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:e7:c4:a2:27:0d:3c:30:75:3f:4d:2d:65:
                    2f:bb:e0:56:42:13:1d:14:3c:7f:cf:83:90:2e:b1:
                    95:75:e3:20:01:b7:81:88:b6:c6:34:74:ea:a4:51:
                    52:28:59:40:d6:eb:b8:e4:48:4c:48:88:f2:85:00:
                    6f:2c:b1:d0:4c:92:9e:87:dc:20:e2:3d:e3:55:15:
                    67:60:0e:e4:15:63:5f:eb:3c:e6:db:25:37:83:c6:
                    eb:d4:df:07:9e:93:54:2b:5d:07:f5:a6:2a:11:6f:
                    58:78:aa:ee:1c:8f:b1:86:a9:c8:7d:84:3b:23:4f:
                    17:15:04:fd:ff:2b:78:63:a6:2d:dc:29:66:83:ca:
                    dd:94:11:3f:a9:06:b2:58:89:18:9f:41:0f:85:6e:
                    9f:fb:f6:fe:d0:da:d3:ae:49:b0:f0:42:a0:fa:8a:
                    bb:99:88:8d:2f:76:b8:33:3f:de:ce:6d:5f:5a:36:
                    65:0a:b5:ab:70:3a:d5:50:16:f2:c2:a0:8d:b8:74:
                    d0:d4:95:ed:12:9d:68:d0:e8:45:a9:ae:47:a4:95:
                    11:15:f1:4f:f2:6f:15:ce:7c:4b:db:51:f0:21:36:
                    d7:d4:60:ba:bc:5f:7a:b9:d5:df:d7:13:69:c0:4f:
                    af:0c:d5:3b:67:69:3f:68:f1:22:43:d4:da:b7:c8:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:30:E6:26:16:63:D3:D2:EB:3D:38:BC:C6:E1:AE:96:B9:25:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:50:6b:26:32:2c:6a:fb:a6:ca:ac:6c:c9:1a:a2:65:8c:
         22:ed:49:9b:a1:8e:5d:71:6a:49:dd:9b:eb:d8:09:bc:6a:1b:
         03:35:a0:aa:b6:2a:93:f4:2a:69:49:96:d9:cd:34:ff:8c:5a:
         1b:c6:b1:15:0d:f5:cb:17:8c:eb:17:b2:0b:b9:d1:77:30:30:
         c9:f9:01:bb:43:5e:7d:9a:93:51:98:89:2c:a2:3f:3c:8c:35:
         68:26:4a:46:34:30:d7:ca:8b:fe:cc:a4:1d:0c:5c:b3:e8:d8:
         8b:52:fd:ff:7f:a1:7a:24:1e:a0:7f:1e:44:30:8c:28:66:7d:
         f2:c0:25:ce:98:dd:9e:0f:08:7c:c4:22:d4:de:5d:bf:c5:33:
         da:2e:90:00:3a:01:f4:1a:13:a9:ac:fc:73:a2:25:db:7d:81:
         4f:bb:cc:bf:89:5d:8e:d5:0a:6d:c8:e4:6d:1c:23:a2:a2:22:
         50:3c:5f:19:07:8d:ac:8a:2e:1b:6c:64:a1:c3:1e:f6:a4:48:
         82:84:f0:2b:a5:c0:72:6e:c6:7b:52:d5:c0:35:e1:b9:d7:d1:
         0f:bb:bd:19:90:75:40:5e:3b:c8:d0:66:a6:99:27:83:ad:eb:
         da:e9:9f:9d:f2:ef:78:d8:7d:bc:92:a9:8e:04:24:7e:4f:48:
         25:2d:6a:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vujf2GMw76vsU6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MGQ4NzJjOGYtMzI0MS00Zjk1LTgzYjAtODFkNzdiM2VhMjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp3nxKInDTwwdT9NLWUvu+BWQhMdFDx/z4OQ
LrGVdeMgAbeBiLbGNHTqpFFSKFlA1uu45EhMSIjyhQBvLLHQTJKeh9wg4j3jVRVn
YA7kFWNf6zzm2yU3g8br1N8HnpNUK10H9aYqEW9YeKruHI+xhqnIfYQ7I08XFQT9
/yt4Y6Yt3Clmg8rdlBE/qQayWIkYn0EPhW6f+/b+0NrTrkmw8EKg+oq7mYiNL3a4
Mz/ezm1fWjZlCrWrcDrVUBbywqCNuHTQ1JXtEp1o0OhFqa5HpJURFfFP8m8VznxL
21HwITbX1GC6vF96udXf1xNpwE+vDNU7Z2k/aPEiQ9Tat8h6bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9LMOYmFmPT0us9OLzG4a6WuSXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNjNjNDg4MzMtMjYwMy0z
MGRhLTgwOTctOGMxNzEyMjIxNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6RUGsmMixq+6bKrGzJGqJljCLtSZuhjl1xakndm+vYCbxqGwM1oKq2
KpP0KmlJltnNNP+MWhvGsRUN9csXjOsXsgu50XcwMMn5AbtDXn2ak1GYiSyiPzyM
NWgmSkY0MNfKi/7MpB0MXLPo2ItS/f9/oXokHqB/HkQwjChmffLAJc6Y3Z4PCHzE
ItTeXb/FM9oukAA6AfQaE6ms/HOiJdt9gU+7zL+JXY7VCm3I5G0cI6KiIlA8XxkH
jayKLhtsZKHDHvakSIKE8CulwHJuxntS1cA14bnX0Q+7vRmQdUBeO8jQZqaZJ4Ot
69rpn53y73jYfbySqY4EJH5PSCUtakc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:20 2026 by rpki-client