Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/83ec6de0-16a2-3664-8fd8-8617951a2f8c.roa
File:                     83ec6de0-16a2-3664-8fd8-8617951a2f8c.roa (raw, json)
Hash identifier:          /GagHn+0LonrnsgKke+OVcw7V6FGJr7gGqcjz1nIrXY=
Subject key identifier:   43:F4:81:02:A9:58:5D:F5:09:D2:5F:CC:51:52:FA:34:DD:5E:BC:C6
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584E147ED92448E426F7F6D41140
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/83ec6de0-16a2-3664-8fd8-8617951a2f8c.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     26006
IP address blocks:        130.12.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d9:24:48:e4:26:f7:f6:d4:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=55d9709d-f984-4aa6-8612-3c4b9428c803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:a4:ce:a0:70:9a:7f:65:6d:7a:bb:a9:dc:
                    3c:6c:8f:b8:80:bf:61:60:d2:c1:45:c7:53:25:38:
                    97:92:a0:4f:1e:b7:08:90:1a:e2:b0:6a:97:0b:33:
                    a2:44:dc:27:51:41:7f:4b:b6:2e:19:59:83:d6:58:
                    6a:ce:90:5d:22:73:43:77:fb:19:f4:53:9d:90:87:
                    ba:31:bf:25:4e:eb:47:93:bf:ed:e5:79:32:41:6b:
                    70:c5:5e:96:ba:94:54:13:69:79:be:57:6d:b6:2b:
                    b8:94:85:92:a4:81:12:5a:a1:e6:e2:9c:df:ac:92:
                    f5:fb:d6:b4:c4:38:4e:53:51:c6:9a:2e:ab:bd:dc:
                    8d:cb:70:f4:ce:af:5a:f9:3e:84:2a:74:aa:94:b2:
                    c4:7e:d9:f9:7d:e0:e6:19:48:36:04:8d:70:39:ab:
                    98:02:15:26:4a:44:59:d2:9e:0e:86:b8:bc:46:e8:
                    61:52:dd:5c:e7:6e:5c:29:9d:fb:e6:92:5a:99:15:
                    9e:08:aa:e5:ca:da:b9:ad:87:61:af:51:da:3a:1e:
                    c7:1f:d1:51:db:62:c1:21:89:bf:29:17:6e:36:db:
                    09:a0:ec:1a:32:14:08:9d:c2:6b:fc:0a:0c:2d:ed:
                    49:e0:69:d8:93:49:f2:13:29:03:23:b8:96:2d:34:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F4:81:02:A9:58:5D:F5:09:D2:5F:CC:51:52:FA:34:DD:5E:BC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/83ec6de0-16a2-3664-8fd8-8617951a2f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:b6:a3:69:f5:c6:1f:bd:46:42:a8:82:19:9f:1b:c5:c8:
         3c:38:1b:5f:45:fb:3d:36:ff:32:25:a0:b8:25:97:ce:77:0f:
         6d:e8:62:ac:e1:11:8c:6d:c1:d1:89:f0:a5:31:0e:7e:f6:4c:
         01:f4:21:e3:97:f8:60:50:90:fb:17:2e:54:d2:52:0d:1f:96:
         de:c5:f1:82:46:53:19:b2:3d:29:db:81:fa:20:e6:94:de:63:
         36:9b:cf:84:1e:1a:04:62:6c:0f:29:fb:e0:61:f9:dd:b3:1b:
         91:a5:5a:b4:80:ac:7c:58:d3:7c:e7:15:e4:d9:36:ff:6b:0a:
         98:ad:fd:ce:d7:81:27:35:24:59:d1:80:62:06:fc:0f:f2:98:
         27:59:26:76:bb:71:12:b1:6c:dc:d5:b2:d3:8d:b7:58:b6:db:
         28:41:b0:b3:d3:e0:22:77:bc:97:11:b4:d8:c2:0b:2b:4b:29:
         22:03:23:52:d8:11:d2:28:61:cc:81:fc:99:87:ba:d0:0b:64:
         74:e8:ec:5b:d5:b1:eb:b6:5d:10:ac:33:d6:c1:db:d9:76:72:
         d8:cf:da:ef:dd:bf:fe:02:ae:76:ed:bb:26:b0:3b:73:95:0b:
         2a:eb:aa:e1:45:4a:be:f5:f9:b1:39:8d:7e:f7:51:31:1f:97:
         af:f1:11:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftkkSOQm9/bUEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0
M2FlMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
NTVkOTcwOWQtZjk4NC00YWE2LTg2MTItM2M0Yjk0MjhjODAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1akzqBwmn9lbXq7qdw8bI+4gL9hYNLBRcdT
JTiXkqBPHrcIkBrisGqXCzOiRNwnUUF/S7YuGVmD1lhqzpBdInNDd/sZ9FOdkIe6
Mb8lTutHk7/t5XkyQWtwxV6WupRUE2l5vldttiu4lIWSpIESWqHm4pzfrJL1+9a0
xDhOU1HGmi6rvdyNy3D0zq9a+T6EKnSqlLLEftn5feDmGUg2BI1wOauYAhUmSkRZ
0p4Ohri8RuhhUt1c525cKZ375pJamRWeCKrlytq5rYdhr1HaOh7HH9FR22LBIYm/
KRduNtsJoOwaMhQIncJr/AoMLe1J4GnYk0nyEykDI7iWLTSvaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEP0gQKpWF31CdJfzFFS+jTdXrzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2
ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvODNlYzZkZTAtMTZhMi0z
NjY0LThmZDgtODYxNzk1MWEyZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi
ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh
NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3
YmY1YTQzYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggz+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRvtqNp9cYfvUZCqIIZnxvFyDw4G19F+z02/zIloLgll853D23oYqzh
EYxtwdGJ8KUxDn72TAH0IeOX+GBQkPsXLlTSUg0flt7F8YJGUxmyPSnbgfog5pTe
Yzabz4QeGgRibA8p++Bh+d2zG5GlWrSArHxY03znFeTZNv9rCpit/c7XgSc1JFnR
gGIG/A/ymCdZJna7cRKxbNzVstONt1i22yhBsLPT4CJ3vJcRtNjCCytLKSIDI1LY
EdIoYcyB/JmHutALZHTo7FvVseu2XRCsM9bB29l2ctjP2u/dv/4CrnbtuyawO3OV
CyrrquFFSr71+bE5jX73UTEfl6/xEYM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:09 2026 by rpki-client