Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
File:                     ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json)
Hash identifier:          8xD5yCodm3+/VbXrsMMOSPN2S5hoQGKUibbRnTb7uY8=
Subject key identifier:   74:66:83:98:72:CD:81:F5:30:6C:D7:13:C2:EF:A4:54:0D:A5:9B:31
Certificate issuer:       /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Certificate serial:       010D0C9F4328584D00B26FEC3BD9F3C3BA4C5AE0
Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        199.4.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6f:ec:3b:d9:f3:c3:ba:4c:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=39f2623d-6714-47eb-9fa4-41d667549ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:35:20:b8:7a:e8:be:53:e2:65:73:30:54:
                    0d:1c:25:1f:32:63:8c:3a:b8:37:ea:9c:c7:93:7d:
                    de:c9:19:bc:bc:0c:de:c6:9a:b4:2a:52:29:3d:e0:
                    7c:2d:78:fc:f7:d9:cd:c9:94:38:e2:b5:27:b1:08:
                    35:c0:b5:88:57:b3:fa:b4:18:78:9e:ac:c0:f5:1a:
                    f1:81:f8:5c:e6:e9:4c:14:30:8a:33:e6:ef:ea:89:
                    9b:39:2a:b8:32:cd:08:04:ae:9e:5b:b6:85:4d:33:
                    b0:75:47:d8:a4:83:e9:ab:64:90:d0:1f:17:2d:a5:
                    e2:48:28:2e:b3:65:ea:71:81:30:94:80:cd:9e:2b:
                    20:8a:71:a4:f6:f6:45:66:29:92:8a:86:7c:ca:97:
                    22:e2:f0:e5:60:f9:9a:f6:3b:eb:1e:9e:fd:01:2a:
                    eb:ef:44:5b:1c:8b:52:05:8c:c8:8b:43:98:4e:ef:
                    58:0e:18:3d:5d:36:c9:8b:3a:ef:45:da:8c:4b:f9:
                    a8:3d:e9:27:8d:13:bf:b1:27:9b:9e:f4:de:a0:e5:
                    29:a0:11:3c:fa:1a:c0:30:80:97:91:5f:f6:61:f9:
                    b1:d8:32:b1:29:4f:fc:c5:87:9d:19:5b:c5:5b:d2:
                    45:b0:47:34:de:7b:0d:33:1a:b3:ea:bc:41:d4:9b:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:83:98:72:CD:81:F5:30:6C:D7:13:C2:EF:A4:54:0D:A5:9B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl

            X509v3 Authority Key Identifier:
                keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:3b:6d:85:0b:59:2c:ec:20:98:8c:a5:d0:f1:eb:d3:05:
         40:93:68:12:b4:01:6d:2b:e3:67:dd:41:29:b0:4c:15:8d:ce:
         17:fa:d0:83:16:40:eb:a7:04:30:57:4c:db:d4:be:0d:48:15:
         43:a6:3e:3f:7f:d2:8d:7e:5a:0f:1e:81:46:b9:e8:e3:87:ab:
         25:f8:9e:5a:e0:a5:3e:cb:19:5f:50:da:f4:b8:ce:f4:dc:6e:
         ce:33:e7:6b:bb:69:e2:7e:10:5e:73:94:66:ab:16:e7:41:4f:
         62:fa:30:e1:b2:c9:cf:9d:84:d0:9b:f5:0e:6a:7e:5c:14:d9:
         7a:7e:d7:3e:2d:a1:0e:3f:22:a9:63:46:93:de:96:3d:83:89:
         77:77:b8:e5:cb:21:42:b0:58:69:70:b9:fa:e2:61:f0:dd:8b:
         27:51:27:23:02:8d:a7:54:64:de:52:e3:dc:d0:28:99:84:61:
         82:2c:ce:c1:3b:73:4e:ff:ae:bf:cb:00:59:ca:81:ad:76:90:
         3c:94:19:a4:a1:91:5c:c6:23:f5:b1:da:41:24:00:f2:ce:a1:
         5b:c4:9c:00:82:60:cf:3c:96:66:f3:91:27:84:f5:2d:2f:14:
         44:76:e7:ff:68:73:ae:b0:71:c8:bf:dc:83:57:9e:43:e3:e1:
         ff:bb:6c:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asm/sO9nzw7pMWuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4
ZjJiMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
MzlmMjYyM2QtNjcxNC00N2ViLTlmYTQtNDFkNjY3NTQ5ZWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uo1ILh66L5T4mVzMFQNHCUfMmOMOrg36pzH
k33eyRm8vAzexpq0KlIpPeB8LXj899nNyZQ44rUnsQg1wLWIV7P6tBh4nqzA9Rrx
gfhc5ulMFDCKM+bv6ombOSq4Ms0IBK6eW7aFTTOwdUfYpIPpq2SQ0B8XLaXiSCgu
s2XqcYEwlIDNnisginGk9vZFZimSioZ8ypci4vDlYPma9jvrHp79ASrr70RbHItS
BYzIi0OYTu9YDhg9XTbJizrvRdqMS/moPeknjRO/sSebnvTeoOUpoBE8+hrAMICX
kV/2Yfmx2DKxKU/8xYedGVvFW9JFsEc03nsNMxqz6rxB1JsUDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRmg5hyzYH1MGzXE8LvpFQNpZsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw
YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYWU4YzhmYTYtOTU3Yy0z
NzlkLThlODYtNjAyYmFhODI4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw
NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl
OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj
NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnoO22FC1ks7CCYjKXQ8evTBUCTaBK0AW0r42fdQSmwTBWNzhf60IMW
QOunBDBXTNvUvg1IFUOmPj9/0o1+Wg8egUa56OOHqyX4nlrgpT7LGV9Q2vS4zvTc
bs4z52u7aeJ+EF5zlGarFudBT2L6MOGyyc+dhNCb9Q5qflwU2Xp+1z4toQ4/Iqlj
RpPelj2DiXd3uOXLIUKwWGlwufriYfDdiydRJyMCjadUZN5S49zQKJmEYYIszsE7
c07/rr/LAFnKga12kDyUGaShkVzGI/Wx2kEkAPLOoVvEnACCYM88lmbzkSeE9S0v
FER25/9oc66wcci/3INXnkPj4f+7bOY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:45 2026 by rpki-client