Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa
File:                     5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa (raw, json)
Hash identifier:          5o+527k8B5+vIWytg4h44JZ0Pz65kTiBsfXhBw0Nhh8=
Subject key identifier:   DC:47:1A:84:BB:8D:60:0D:E1:62:D7:A1:77:F3:6D:C1:E3:3A:B9:7F
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F4328584D571FAEC91A36F1AD7AE1F740
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     6360
IP address blocks:        192.48.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ae:c9:1a:36:f1:ad:7a:e1:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=fd896381-caef-4ffb-96e9-eebbdcc4e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:d0:bf:f2:bb:11:f5:aa:0a:d9:c6:61:33:
                    88:46:94:2b:81:1e:34:2d:39:80:23:3a:45:c3:b2:
                    c0:ff:47:24:0a:c9:15:fa:0d:a4:92:1d:fc:3c:9d:
                    5c:14:3c:32:88:c9:cf:8e:9b:bc:c2:c7:60:c7:a6:
                    f2:73:a4:cd:88:99:ea:bb:1a:58:3f:19:d8:1d:b6:
                    03:e1:73:44:b0:4e:a9:3f:7a:9b:1d:f5:7b:86:89:
                    92:fb:fd:ba:e9:22:f0:17:52:92:81:92:2b:ee:1e:
                    47:dc:ef:f9:44:de:90:b6:8b:19:c9:bb:a8:84:8e:
                    85:10:04:5f:bd:2c:a8:df:af:e4:12:74:59:b4:05:
                    d9:b9:3b:1a:7e:8e:23:79:ea:e8:41:2f:5b:7a:b3:
                    c9:61:fd:a3:d2:75:15:f7:fc:4b:9a:00:94:99:2c:
                    76:7a:31:a0:3d:e2:35:fd:0e:f8:19:a0:f7:7f:6e:
                    84:e3:8a:af:bb:f5:49:20:12:4d:1f:27:c9:12:e0:
                    ad:4e:fa:51:ab:57:78:6b:a5:29:62:ac:12:be:c4:
                    db:7c:d0:b1:51:4c:ee:4c:74:3e:9f:f0:35:f2:c2:
                    51:4b:e4:c5:db:7b:64:16:1e:71:6a:e7:f4:78:56:
                    02:76:6f:e5:25:36:c4:4c:e3:fc:cb:57:91:12:30:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:1A:84:BB:8D:60:0D:E1:62:D7:A1:77:F3:6D:C1:E3:3A:B9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:87:27:24:97:66:5c:7a:51:45:96:7c:00:e2:fd:76:c6:
         bf:f5:fb:3b:a7:b2:02:37:82:a3:3d:ee:44:10:b6:7a:23:07:
         2f:20:b2:f8:c4:a4:bd:0a:fb:a6:bb:c3:2e:6e:90:25:e7:7b:
         d1:0f:b6:ac:b0:dd:6e:98:19:a2:c7:6d:00:32:ae:5c:d8:52:
         3f:a8:af:30:c6:31:b7:63:40:09:9f:92:13:78:de:ab:52:d1:
         99:db:af:aa:39:5d:40:36:82:45:a6:88:f5:6f:56:b4:31:e3:
         58:aa:09:05:6e:d9:c4:a8:e1:06:68:b1:4a:db:95:35:21:5a:
         ac:c7:2f:f4:6e:71:3e:29:e0:f7:26:64:12:35:80:af:b5:5f:
         97:e9:0e:2c:67:0b:b1:3a:8c:2d:bf:b0:9c:7b:5e:bc:e4:e9:
         82:79:53:31:c6:89:74:18:82:8f:d6:ab:c3:50:da:71:c2:c6:
         01:8d:ff:0d:5c:02:e6:a9:79:65:16:de:f6:f0:47:5a:92:48:
         c8:bc:db:ba:4b:b7:37:27:38:0c:84:d8:84:59:31:d6:15:08:
         f4:fa:ae:14:6a:f0:2a:94:15:04:90:2a:97:c7:e6:e2:6e:be:
         28:9d:dd:a8:bb:c4:ff:b1:63:3f:90:75:8b:df:83:e3:45:e5:
         d4:89:c9:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH67JGjbxrXrh90AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz
Nzc2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
ZmQ4OTYzODEtY2FlZi00ZmZiLTk2ZTktZWViYmRjYzRlNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovQv/K7EfWqCtnGYTOIRpQrgR40LTmAIzpF
w7LA/0ckCskV+g2kkh38PJ1cFDwyiMnPjpu8wsdgx6byc6TNiJnquxpYPxnYHbYD
4XNEsE6pP3qbHfV7homS+/266SLwF1KSgZIr7h5H3O/5RN6QtosZybuohI6FEARf
vSyo36/kEnRZtAXZuTsafo4jeeroQS9berPJYf2j0nUV9/xLmgCUmSx2ejGgPeI1
/Q74GaD3f26E44qvu/VJIBJNHyfJEuCtTvpRq1d4a6UpYqwSvsTbfNCxUUzuTHQ+
n/A18sJRS+TF23tkFh5xauf0eFYCdm/lJTbETOP8y1eREjDCQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxHGoS7jWAN4WLXoXfzbcHjOrl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj
NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNWZmOTFhNTAtNzhkNy0z
OTE5LWI5YTgtMTRkZWRkNmNmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1
OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh
Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj
OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDAiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXPhyckl2ZcelFFlnwA4v12xr/1+zunsgI3gqM97kQQtnojBy8gsvjE
pL0K+6a7wy5ukCXne9EPtqyw3W6YGaLHbQAyrlzYUj+orzDGMbdjQAmfkhN43qtS
0Znbr6o5XUA2gkWmiPVvVrQx41iqCQVu2cSo4QZosUrblTUhWqzHL/RucT4p4Pcm
ZBI1gK+1X5fpDixnC7E6jC2/sJx7Xrzk6YJ5UzHGiXQYgo/Wq8NQ2nHCxgGN/w1c
AuapeWUW3vbwR1qSSMi827pLtzcnOAyE2IRZMdYVCPT6rhRq8CqUFQSQKpfH5uJu
viid3ai7xP+xYz+QdYvfg+NF5dSJydo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:24 2026 by rpki-client