Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/adc43cbf-c432-3b70-b205-89194e000889.roa
File:                     adc43cbf-c432-3b70-b205-89194e000889.roa (raw, json)
Hash identifier:          V8ntAvWps36eTCGCE35DQfgXJg2whFcnf5mujFSc0S0=
Subject key identifier:   E7:D3:81:33:EE:CA:13:27:5C:C7:3C:3F:34:CE:D2:9B:6B:B4:29:2D
Certificate issuer:       /CN=4f12be01-5f55-4434-8f8a-921808f7c306
Certificate serial:       010D0C9F4328584D5024FB13E99E1498583ECB60
Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/adc43cbf-c432-3b70-b205-89194e000889.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62582
IP address blocks:        134.195.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:fb:13:e9:9e:14:98:58:3e:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=9eeba1a9-74d7-41cc-bfbb-60dbbefb58ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:59:1b:06:41:4f:3a:e2:77:3e:ff:b6:14:51:
                    b5:95:f7:52:ba:4a:7e:9c:83:1e:ea:85:b5:fa:1b:
                    47:54:f4:9e:d5:2d:ec:7e:84:74:c4:2c:90:3f:c0:
                    34:d8:80:4c:bd:d8:1f:c6:fa:73:79:d3:92:83:a0:
                    0a:1f:be:0b:2b:12:84:a1:d7:99:d1:b6:cc:2c:dd:
                    22:ad:4a:38:bf:38:5d:bb:ae:a5:2d:95:20:82:90:
                    e8:0c:57:4a:5e:23:c3:f0:c8:a5:11:e2:95:e0:2f:
                    ee:cf:58:ad:5c:b1:0c:38:cc:82:7a:b0:2e:b2:df:
                    42:1b:26:69:f7:22:17:2e:77:13:f5:42:3f:a2:fd:
                    8f:63:f6:f8:1a:6c:5c:a7:9f:72:e9:6e:64:c0:55:
                    f2:c9:c0:2f:84:35:3c:56:75:92:f0:f8:c3:9a:80:
                    47:97:7e:07:c7:a0:c4:4b:5d:e8:a0:ea:a0:24:67:
                    97:22:31:e2:bf:90:ec:50:76:22:4d:d1:be:b5:a1:
                    e8:f9:0e:9e:6c:c6:a4:26:89:15:33:f6:2a:b1:2b:
                    6c:0f:fc:e8:7f:76:c8:aa:1c:2f:06:61:36:8b:a0:
                    50:43:c7:d2:d5:c3:51:ba:b5:32:f2:a6:19:c3:92:
                    c3:29:b2:22:a9:6d:60:8d:72:f1:dd:93:0a:9b:c9:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D3:81:33:EE:CA:13:27:5C:C7:3C:3F:34:CE:D2:9B:6B:B4:29:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/adc43cbf-c432-3b70-b205-89194e000889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl

            X509v3 Authority Key Identifier:
                keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:27:bb:85:a3:32:ae:1a:48:c9:25:61:5f:62:80:15:b2:c8:
         2a:47:13:fe:51:90:c7:5d:b1:b3:bc:75:89:74:ec:7d:f0:e0:
         2f:37:40:7f:4e:ad:fd:81:f9:e7:9e:35:2e:b8:87:aa:6a:f6:
         19:37:91:66:67:d9:ca:25:e3:48:88:3f:94:fa:7e:09:49:8d:
         6c:ba:f8:aa:27:10:de:4e:f5:23:4f:4c:ad:6b:a1:8f:ea:05:
         73:0c:40:53:e5:3c:a2:b5:8b:a5:61:d9:f0:ec:d4:55:62:3b:
         d8:53:6a:24:de:1c:e8:f8:2f:35:83:96:f5:35:11:c8:d2:bc:
         60:de:58:8e:cd:b0:31:d2:9f:d2:06:de:b5:58:b7:d3:ee:21:
         04:54:1f:8d:84:a2:be:9f:d0:92:2b:1c:11:52:a9:74:d4:a2:
         ca:e5:1d:83:c3:d5:30:46:2f:be:02:94:7f:5c:e4:92:f6:0c:
         6a:38:99:78:ac:d3:84:a1:0e:7d:b4:8e:88:90:7f:27:c6:e2:
         80:c5:b0:2d:4d:fd:a8:fe:ba:70:f4:db:98:29:f5:f1:9c:97:
         49:58:b8:25:d1:7c:26:38:6d:54:43:f3:1e:d9:de:ef:15:f9:
         41:ef:c1:1c:75:d0:5e:2d:90:29:f4:2b:a1:19:26:e0:f3:76:
         c4:75:3b:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPsT6Z4UmFg+y2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj
MzA2MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk
OWVlYmExYTktNzRkNy00MWNjLWJmYmItNjBkYmJlZmI1OGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglkbBkFPOuJ3Pv+2FFG1lfdSukp+nIMe6oW1
+htHVPSe1S3sfoR0xCyQP8A02IBMvdgfxvpzedOSg6AKH74LKxKEodeZ0bbMLN0i
rUo4vzhdu66lLZUggpDoDFdKXiPD8MilEeKV4C/uz1itXLEMOMyCerAust9CGyZp
9yIXLncT9UI/ov2PY/b4Gmxcp59y6W5kwFXyycAvhDU8VnWS8PjDmoBHl34Hx6DE
S13ooOqgJGeXIjHiv5DsUHYiTdG+taHo+Q6ebMakJokVM/YqsStsD/zof3bIqhwv
BmE2i6BQQ8fS1cNRurUy8qYZw5LDKbIiqW1gjXLx3ZMKm8kX3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfTgTPuyhMnXMc8PzTO0ptrtCktMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy
YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYWRjNDNjYmYtYzQzMi0z
YjcwLWIyMDUtODkxOTRlMDAwODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm
OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3
YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4
MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAnu4WjMq4aSMklYV9igBWyyCpHE/5RkMddsbO8dYl07H3w4C83QH9O
rf2B+eeeNS64h6pq9hk3kWZn2col40iIP5T6fglJjWy6+KonEN5O9SNPTK1roY/q
BXMMQFPlPKK1i6Vh2fDs1FViO9hTaiTeHOj4LzWDlvU1EcjSvGDeWI7NsDHSn9IG
3rVYt9PuIQRUH42Eor6f0JIrHBFSqXTUosrlHYPD1TBGL74ClH9c5JL2DGo4mXis
04ShDn20joiQfyfG4oDFsC1N/aj+unD025gp9fGcl0lYuCXRfCY4bVRD8x7Z3u8V
+UHvwRx10F4tkCn0K6EZJuDzdsR1O5w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:08 2026 by rpki-client