Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa
File:                     fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa (raw, json)
Hash identifier:          weNAu5a3VqOBU2/Ym1gbwQaBm7doA8ZLJXFwS0/aJZ8=
Subject key identifier:   B3:BC:85:72:F2:C0:D6:7B:89:9C:A2:BD:DA:9B:65:02:89:80:FA:80
Certificate issuer:       /CN=7574108f-d7cc-487e-90e1-c9c14011c9bd
Certificate serial:       010D0C9F4328584DAC456E04149F6D5941676180
Authority key identifier: 5A:3E:28:BB:1A:0C:F4:BE:4B:0D:EE:1A:E7:F9:41:59:C6:04:97:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     1055
IP address blocks:        192.112.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6e:04:14:9f:6d:59:41:67:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7574108f-d7cc-487e-90e1-c9c14011c9bd
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=51be7d6d-990b-47bf-ac57-afb57e9c7ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:60:ae:49:d8:3a:0a:3e:ba:d3:1e:af:9a:
                    3d:58:e0:7d:65:77:cb:c3:ac:f9:59:46:7d:c4:68:
                    75:89:05:13:36:00:4e:4f:90:e7:d0:3c:a0:02:f8:
                    f9:a0:81:03:49:c7:6f:b1:d1:0f:81:e5:a6:3b:0e:
                    e7:fa:07:39:13:0c:4b:73:27:9c:44:cc:52:0b:90:
                    d4:e4:48:8b:9b:f8:db:f0:8d:16:df:59:e9:90:3b:
                    1e:c7:c6:80:7b:18:da:3e:37:9f:73:48:99:cf:4a:
                    d5:2e:de:25:a7:61:27:08:22:c8:e6:11:63:0b:c5:
                    71:3d:26:b7:eb:75:b9:30:8a:f8:83:d2:cf:89:7e:
                    53:3f:4d:8f:ec:2d:0b:50:e0:33:6b:46:68:4e:5e:
                    30:bc:d2:77:23:37:0d:5a:e3:dc:90:47:eb:8a:29:
                    de:40:b5:f0:67:9d:a6:d1:62:f9:21:36:7c:bd:b4:
                    cf:68:cf:7b:cf:93:c7:3d:4d:7b:c5:e2:3f:66:92:
                    aa:18:6f:46:b4:6f:f6:ab:68:f2:41:ab:f6:f3:10:
                    43:5d:53:b9:f1:87:e2:b7:03:d7:d3:0c:83:94:97:
                    d9:43:84:d5:dc:0e:c1:b9:4f:3b:2b:18:b3:63:2b:
                    89:23:d9:ee:04:30:5c:1f:6b:53:c5:dd:16:9d:5d:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:85:72:F2:C0:D6:7B:89:9C:A2:BD:DA:9B:65:02:89:80:FA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/fc2d3d0a-24fd-3bc5-9059-0c87576f485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd/7574108f-d7cc-487e-90e1-c9c14011c9bd.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3E:28:BB:1A:0C:F4:BE:4B:0D:EE:1A:E7:F9:41:59:C6:04:97:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7574108f-d7cc-487e-90e1-c9c14011c9bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:74:05:a1:5c:3f:ee:e4:00:a5:64:5c:0b:92:d4:84:dc:
         5e:48:7e:5f:b8:cc:55:25:fb:f0:b2:44:cc:d7:70:ed:48:17:
         d0:c4:8b:93:de:e7:8c:f7:10:41:6c:8a:a1:f7:a4:58:67:8f:
         b0:5f:cc:6d:ac:97:be:46:74:92:28:de:64:0f:71:06:db:9f:
         40:b8:90:94:d2:92:39:60:e3:0a:61:ab:91:30:eb:bb:9d:78:
         95:a0:75:32:84:4b:8a:23:bd:47:df:36:50:c2:79:6f:f3:9d:
         26:a9:c7:17:b6:8e:cc:6c:48:4f:17:ba:8a:64:95:ed:2c:4a:
         69:cd:64:f1:d1:21:ce:91:87:01:71:f7:01:84:38:2d:9f:0e:
         81:7a:f4:a4:58:56:77:64:8f:c9:c5:8a:9f:fe:fe:92:6e:bd:
         93:76:3e:d0:d4:db:b6:12:ec:3f:ae:90:bf:c8:97:2a:62:38:
         b6:45:4c:4c:ca:8b:86:86:90:b9:e7:96:cf:d9:e5:22:2b:a5:
         58:a0:71:01:14:34:20:c1:78:7d:95:5d:58:1d:47:01:cb:dd:
         ab:44:96:94:0e:91:29:9d:92:18:60:4f:77:09:d0:da:74:2e:
         fa:0e:43:a4:33:d3:d8:f7:78:f4:20:18:62:da:ce:21:6a:8f:
         98:ef:f5:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRW4EFJ9tWUFnYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU3NDEwOGYtZDdjYy00ODdlLTkwZTEtYzljMTQwMTFj
OWJkMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NTFiZTdkNmQtOTkwYi00N2JmLWFjNTctYWZiNTdlOWM3ZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9JgrknYOgo+utMer5o9WOB9ZXfLw6z5WUZ9
xGh1iQUTNgBOT5Dn0DygAvj5oIEDScdvsdEPgeWmOw7n+gc5EwxLcyecRMxSC5DU
5EiLm/jb8I0W31npkDsex8aAexjaPjefc0iZz0rVLt4lp2EnCCLI5hFjC8VxPSa3
63W5MIr4g9LPiX5TP02P7C0LUOAza0ZoTl4wvNJ3IzcNWuPckEfriineQLXwZ52m
0WL5ITZ8vbTPaM97z5PHPU17xeI/ZpKqGG9GtG/2q2jyQav28xBDXVO58YfitwPX
0wyDlJfZQ4TV3A7BuU87KxizYyuJI9nuBDBcH2tTxd0WnV3BgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO8hXLywNZ7iZyivdqbZQKJgPqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NTc0
MTA4Zi1kN2NjLTQ4N2UtOTBlMS1jOWMxNDAxMWM5YmQvZmMyZDNkMGEtMjRmZC0z
YmM1LTkwNTktMGM4NzU3NmY0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzU3NDEwOGYtZDdjYy00ODdlLTkw
ZTEtYzljMTQwMTFjOWJkLzc1NzQxMDhmLWQ3Y2MtNDg3ZS05MGUxLWM5YzE0MDEx
YzliZC5jcmwwHwYDVR0jBBgwFoAUWj4ouxoM9L5LDe4a5/lBWcYEl/kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NTc0MTA4Zi1kN2NjLTQ4N2UtOTBlMS1jOWMx
NDAxMWM5YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHDSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw7dAWhXD/u5AClZFwLktSE3F5Ifl+4zFUl+/CyRMzXcO1IF9DEi5Pe
54z3EEFsiqH3pFhnj7BfzG2sl75GdJIo3mQPcQbbn0C4kJTSkjlg4wphq5Ew67ud
eJWgdTKES4ojvUffNlDCeW/znSapxxe2jsxsSE8Xuopkle0sSmnNZPHRIc6RhwFx
9wGEOC2fDoF69KRYVndkj8nFip/+/pJuvZN2PtDU27YS7D+ukL/IlypiOLZFTEzK
i4aGkLnnls/Z5SIrpVigcQEUNCDBeH2VXVgdRwHL3atElpQOkSmdkhhgT3cJ0Np0
LvoOQ6Qz09j3ePQgGGLaziFqj5jv9RE=
-----END CERTIFICATE-----
Generated at Wed May 13 16:08:52 2026 by rpki-client