Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa
File:                     2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa (raw, json)
Hash identifier:          PoQ8TE+4S8BezwywiUV/gWffao56UavKd4OrayccP84=
Subject key identifier:   55:E2:48:B0:7C:6F:2A:60:01:BA:1D:B6:FD:DD:9E:34:6F:86:43:54
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584CAA270671558EAC5ECA472A80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     14618
IP address blocks:        85.113.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:06:71:55:8e:ac:5e:ca:47:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=e0e64930-9cc6-4797-bb23-aaf47afc6660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:be:f8:ce:de:9a:3b:9d:42:38:3b:17:32:
                    7a:49:ac:cd:6a:f6:5e:56:8b:a2:16:93:8e:ff:ed:
                    df:91:84:20:ee:a7:7d:01:d1:f0:08:ec:5d:d1:11:
                    ef:3e:81:e6:1a:b8:59:0d:8c:dc:9b:4f:c5:b9:69:
                    f0:2e:94:e6:84:b3:43:4f:27:a8:74:9e:fd:6c:5b:
                    58:fb:8c:b2:6c:62:fd:4a:73:42:27:f4:cf:dd:a1:
                    d5:bc:09:55:65:24:5e:4a:fb:26:31:44:99:58:ba:
                    b6:45:08:19:4c:7d:67:91:8d:88:24:a0:3e:23:c7:
                    0f:4c:7c:eb:76:bf:6e:e1:33:38:60:4c:78:a6:45:
                    e3:fb:92:40:2f:b7:1d:44:6b:d4:1a:de:b1:59:f7:
                    37:be:35:03:c1:6f:c4:a9:3f:89:6e:75:9f:7d:93:
                    51:8d:ac:3c:b5:4d:38:a6:d0:e6:e2:48:f0:a2:75:
                    b7:7a:e7:46:6a:ad:21:b5:ec:e7:7e:75:b2:d8:43:
                    3b:85:6c:c2:3c:cc:27:90:6a:ca:fb:d7:1c:f8:e6:
                    46:f2:43:5b:34:ec:cb:a9:68:76:ee:38:82:82:a0:
                    7d:78:01:8f:61:2d:b4:25:51:21:73:e9:d6:22:15:
                    f9:68:fc:f4:a8:2d:36:b2:9e:f5:11:bb:78:60:cf:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:48:B0:7C:6F:2A:60:01:BA:1D:B6:FD:DD:9E:34:6F:86:43:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:3d:f7:38:53:af:15:e4:a0:fe:24:45:9c:ae:ed:df:c4:
         06:68:19:6a:3f:20:b3:68:d1:8a:dc:79:8d:4f:f6:4b:f9:be:
         45:b1:dc:94:a5:08:1f:ef:05:6b:c9:53:6f:6d:15:fb:6e:bd:
         43:82:d4:d5:7f:fb:ef:9b:b0:36:5f:de:9c:56:fc:3d:90:44:
         22:18:51:b1:28:6b:52:b2:ca:2e:32:69:c5:5f:c6:4d:12:50:
         58:fc:7a:82:45:08:14:db:ba:38:ce:a7:d0:b5:b6:62:92:47:
         06:77:06:03:9f:56:06:4e:6b:e7:25:e9:0f:56:49:c1:5e:9c:
         ea:e2:29:87:fc:d2:b2:69:57:d9:7c:50:d2:db:54:c9:a3:25:
         9e:0b:be:83:e8:1a:f6:d4:80:62:f5:ad:fb:65:a2:c7:6d:ad:
         2c:b4:c1:07:76:be:7f:83:92:8d:34:3a:6c:70:f0:0f:f9:42:
         1a:81:78:78:bc:b1:be:b3:42:47:9f:9d:0d:9a:15:73:b8:2d:
         26:c4:8a:f3:23:61:6c:ec:6e:74:f9:b6:e7:b9:0a:50:a0:57:
         df:c2:95:61:c2:a9:e7:46:95:4c:1a:3b:9b:e5:ef:65:20:c6:
         0c:ad:5a:ca:e6:eb:0b:93:ed:b1:f2:67:38:18:c1:aa:36:1f:
         13:49:a8:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwZxVY6sXspHKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ZTBlNjQ5MzAtOWNjNi00Nzk3LWJiMjMtYWFmNDdhZmM2NjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/y++M7emjudQjg7FzJ6SazNavZeVouiFpOO
/+3fkYQg7qd9AdHwCOxd0RHvPoHmGrhZDYzcm0/FuWnwLpTmhLNDTyeodJ79bFtY
+4yybGL9SnNCJ/TP3aHVvAlVZSReSvsmMUSZWLq2RQgZTH1nkY2IJKA+I8cPTHzr
dr9u4TM4YEx4pkXj+5JAL7cdRGvUGt6xWfc3vjUDwW/EqT+JbnWffZNRjaw8tU04
ptDm4kjwonW3eudGaq0hteznfnWy2EM7hWzCPMwnkGrK+9cc+OZG8kNbNOzLqWh2
7jiCgqB9eAGPYS20JVEhc+nWIhX5aPz0qC02sp71Ebt4YM+IbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXiSLB8bypgAbodtv3dnjRvhkNUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMmU1YzgzYzAtZWQ2Yy0z
MDk0LWFmNzItNDM1Y2U1YWI5NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvvPfc4U68V5KD+JEWcru3fxAZoGWo/ILNo0YrceY1P9kv5vkWx3JSl
CB/vBWvJU29tFftuvUOC1NV/+++bsDZf3pxW/D2QRCIYUbEoa1Kyyi4yacVfxk0S
UFj8eoJFCBTbujjOp9C1tmKSRwZ3BgOfVgZOa+cl6Q9WScFenOriKYf80rJpV9l8
UNLbVMmjJZ4LvoPoGvbUgGL1rftlosdtrSy0wQd2vn+Dko00Omxw8A/5QhqBeHi8
sb6zQkefnQ2aFXO4LSbEivMjYWzsbnT5tue5ClCgV9/ClWHCqedGlUwaO5vl72Ug
xgytWsrm6wuT7bHyZzgYwao2HxNJqFs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:01 2026 by rpki-client