Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/c07fca01-1dd0-3561-8916-ab7f222e37f3.roa
File:                     c07fca01-1dd0-3561-8916-ab7f222e37f3.roa (raw, json)
Hash identifier:          YDutlXLjGwytisYot5RlX8nEVGJvQldmfXq+ZfgkWvk=
Subject key identifier:   BE:B7:20:B9:60:DC:96:62:13:B4:E2:18:5D:DE:27:6B:5D:B2:05:CF
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584CB551E49C3E0477D6AA31C940
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/c07fca01-1dd0-3561-8916-ab7f222e37f3.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     49581
IP address blocks:        141.195.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:e4:9c:3e:04:77:d6:aa:31:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=a0fdbb7a-a3a0-44df-b3e3-0ebbeeaa894c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:a6:4a:ff:1a:f4:cb:11:d5:81:47:8f:f5:
                    55:bb:b5:2a:fb:f5:f4:72:7a:e2:8d:e5:c6:35:da:
                    6f:31:19:b3:cf:53:61:13:f5:15:36:e2:16:67:b3:
                    8c:f9:e4:44:4c:ec:06:f8:6b:00:5e:6a:6e:c8:fe:
                    cf:40:93:ac:f1:8f:91:55:4e:06:57:19:6c:17:e4:
                    d1:df:61:81:7b:73:45:bd:da:0d:b3:52:82:2f:f6:
                    35:75:d5:c9:a8:0b:e0:77:12:ce:2d:2c:68:3b:24:
                    57:b1:64:2e:e4:8f:15:bc:7a:3b:30:f5:39:4b:17:
                    b3:73:ff:cf:d5:f6:23:d8:fb:0f:60:90:9b:60:fc:
                    98:39:da:16:f4:24:17:fa:8d:c5:c2:d1:43:1c:38:
                    63:15:13:9a:bc:f7:75:ff:f7:84:d5:78:e5:61:0d:
                    98:c1:a9:dd:70:43:b2:91:e6:e7:f8:a5:a0:89:dc:
                    80:7b:12:5c:e2:ae:94:68:3a:39:88:4c:fc:57:dc:
                    07:24:d6:84:07:41:d5:0a:7f:6c:06:2a:a9:c9:30:
                    69:37:6a:28:c8:c1:3c:a1:36:d5:58:87:b0:33:03:
                    04:f3:42:b9:68:4e:61:46:7a:d2:89:34:8f:ef:90:
                    22:d2:ed:3a:d4:32:20:63:1a:9a:e3:85:8f:f4:6d:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:20:B9:60:DC:96:62:13:B4:E2:18:5D:DE:27:6B:5D:B2:05:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/c07fca01-1dd0-3561-8916-ab7f222e37f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:39:ae:9b:0d:a9:57:78:2d:8d:ad:75:dd:2e:2f:f0:4e:
         17:7c:7f:f4:29:46:8c:a2:cb:f6:62:8d:92:35:da:2d:6f:7d:
         98:f7:a2:ef:98:06:28:82:75:1c:c8:38:6e:8b:77:99:ae:0e:
         fe:71:73:6b:17:66:6d:32:c2:57:99:b3:ca:3e:a5:a0:2a:23:
         1c:08:25:b4:7f:99:54:df:f1:dd:49:35:47:be:3e:19:b3:c6:
         47:ea:fe:3c:e9:c1:03:e2:bb:18:77:b7:78:70:14:f2:22:64:
         cf:21:05:27:50:24:8c:e3:12:a7:9d:84:f5:a3:a5:54:93:8c:
         ec:c9:46:45:e8:78:84:41:32:ca:d9:72:9b:71:fd:bc:33:f2:
         49:6d:de:0a:46:d1:24:b2:0a:ae:0f:1d:1d:0f:65:97:d7:13:
         97:16:59:76:dd:9e:c4:e6:54:c6:ae:ca:40:f1:a9:fd:c7:05:
         0c:00:19:88:32:93:e4:f2:65:4b:28:50:e5:c4:97:7c:f9:f3:
         5b:2d:40:df:bb:05:06:1f:44:2a:8a:69:76:a8:61:63:94:1a:
         f0:a2:39:26:09:62:a7:71:21:53:7b:49:68:01:37:23:6c:1c:
         9c:07:ef:e1:7d:3a:3b:2f:22:24:82:e9:b5:29:7d:62:6d:ec:
         b3:ba:db:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeScPgR31qoxyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
YTBmZGJiN2EtYTNhMC00NGRmLWIzZTMtMGViYmVlYWE4OTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbemSv8a9MsR1YFHj/VVu7Uq+/X0cnrijeXG
NdpvMRmzz1NhE/UVNuIWZ7OM+eRETOwG+GsAXmpuyP7PQJOs8Y+RVU4GVxlsF+TR
32GBe3NFvdoNs1KCL/Y1ddXJqAvgdxLOLSxoOyRXsWQu5I8VvHo7MPU5Sxezc//P
1fYj2PsPYJCbYPyYOdoW9CQX+o3FwtFDHDhjFROavPd1//eE1XjlYQ2YwandcEOy
kebn+KWgidyAexJc4q6UaDo5iEz8V9wHJNaEB0HVCn9sBiqpyTBpN2ooyME8oTbV
WIewMwME80K5aE5hRnrSiTSP75Ai0u061DIgYxqa44WP9G1y1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL63ILlg3JZiE7TiGF3eJ2tdsgXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvYzA3ZmNhMDEtMWRkMC0z
NTYxLTg5MTYtYWI3ZjIyMmUzN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC4Oa6bDalXeC2NrXXdLi/wThd8f/QpRoyiy/ZijZI12i1vfZj3ou+Y
BiiCdRzIOG6Ld5muDv5xc2sXZm0ywleZs8o+paAqIxwIJbR/mVTf8d1JNUe+Phmz
xkfq/jzpwQPiuxh3t3hwFPIiZM8hBSdQJIzjEqedhPWjpVSTjOzJRkXoeIRBMsrZ
cptx/bwz8klt3gpG0SSyCq4PHR0PZZfXE5cWWXbdnsTmVMauykDxqf3HBQwAGYgy
k+TyZUsoUOXEl3z581stQN+7BQYfRCqKaXaoYWOUGvCiOSYJYqdxIVN7SWgBNyNs
HJwH7+F9OjsvIiSC6bUpfWJt7LO620M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:25 2026 by rpki-client