Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/febf86d8-27fb-3dde-957b-9d6c2c1386d0.roa
File:                     febf86d8-27fb-3dde-957b-9d6c2c1386d0.roa (raw, json)
Hash identifier:          w8Abfr1fVc8IoqrnI1Xq7m6h8nJZ+/rkq+hdDwKbfok=
Subject key identifier:   56:13:3C:03:2C:28:55:69:F8:21:E0:AF:F2:F7:99:8F:F8:14:29:76
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D95F0046D5ED682F7DED8B980
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/febf86d8-27fb-3dde-957b-9d6c2c1386d0.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     1742
IP address blocks:        65.112.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:04:6d:5e:d6:82:f7:de:d8:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=8ffceb4d-caa7-4374-84f0-315ef164a4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:7c:17:99:c7:4a:db:e0:0f:60:b8:66:9e:
                    8f:cd:21:ab:a2:a0:00:19:6f:c7:ca:fd:ae:53:17:
                    da:00:f6:c1:a3:d6:55:10:bb:6e:6b:5f:29:dd:ce:
                    a1:92:85:24:66:9b:99:7c:a4:0b:31:b1:14:36:91:
                    31:9f:9c:d7:55:63:2a:9f:06:9f:2c:ac:9e:ee:1c:
                    1f:38:1c:7f:63:ba:bf:72:8b:7f:73:27:27:69:fb:
                    c3:07:a4:09:be:f7:17:d0:66:52:80:bc:49:3e:f9:
                    cc:d5:59:56:e9:9d:f5:a8:25:f0:03:3c:a5:ff:04:
                    c1:71:eb:d2:c0:ca:be:7b:d1:5f:8b:8f:56:53:7d:
                    cf:89:58:32:d8:28:42:5b:06:00:68:43:05:ab:90:
                    70:71:7c:8d:08:74:23:37:8e:cc:c7:26:8b:6f:43:
                    c1:21:cc:f6:c6:84:35:db:14:3b:0d:90:7c:17:cd:
                    a1:a2:25:cd:76:90:2e:ae:8a:d2:4b:16:6c:a5:bd:
                    88:cb:f4:e4:04:6f:37:9f:9c:6d:8f:f5:1d:a9:9a:
                    6b:5e:52:91:99:cd:6a:07:87:db:8d:58:b4:a2:05:
                    66:65:e0:c4:31:e8:14:bc:e1:f8:66:f7:15:2e:a1:
                    21:fe:86:a5:40:53:b3:22:1b:6d:45:44:50:d8:87:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:13:3C:03:2C:28:55:69:F8:21:E0:AF:F2:F7:99:8F:F8:14:29:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/febf86d8-27fb-3dde-957b-9d6c2c1386d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.112.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:6b:a9:a2:0a:b6:58:df:41:e2:95:45:c5:be:e0:c0:70:2b:
         e6:33:c2:42:18:b8:bc:f1:1c:06:d8:a7:af:8a:9f:66:99:5a:
         e5:08:05:0c:7e:08:2f:64:42:cf:61:79:ea:1b:7e:52:0c:6a:
         4a:29:2d:c3:3b:c1:c5:b6:48:5d:57:f1:2c:d4:3b:49:49:de:
         12:81:dd:c3:c8:0e:74:ad:ea:82:be:fc:13:d2:b8:8f:09:22:
         d7:50:75:77:94:77:74:75:44:fc:b8:f9:df:e5:29:9c:4b:9e:
         4e:31:dd:a2:10:55:0d:43:80:4f:f8:6c:a4:07:f1:f8:1a:a8:
         b0:38:f9:80:89:99:9e:b6:a8:d9:a1:e3:12:80:f1:2f:d0:e4:
         97:fb:4f:8c:7a:34:8b:be:88:f2:04:6f:d1:59:82:4d:3d:f3:
         aa:cb:48:67:77:6f:29:14:5c:c7:bb:4d:ed:d5:d3:ac:9c:9a:
         7f:12:31:bd:71:3e:d3:3b:0e:cb:f5:dd:f2:d0:8d:44:e3:83:
         ad:98:83:44:ee:9c:dc:4c:6e:3d:a6:13:6b:20:bb:8c:bc:2d:
         74:5a:20:82:81:59:d8:76:2e:a9:de:99:6f:33:f5:9d:4e:d1:
         68:7c:91:0a:b0:ea:f1:97:d5:d3:7c:60:6a:4d:a1:30:25:e6:
         8b:9e:c9:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8ARtXtaC997YuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OGZmY2ViNGQtY2FhNy00Mzc0LTg0ZjAtMzE1ZWYxNjRhNGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyl8F5nHStvgD2C4Zp6PzSGroqAAGW/Hyv2u
UxfaAPbBo9ZVELtua18p3c6hkoUkZpuZfKQLMbEUNpExn5zXVWMqnwafLKye7hwf
OBx/Y7q/cot/cycnafvDB6QJvvcX0GZSgLxJPvnM1VlW6Z31qCXwAzyl/wTBcevS
wMq+e9Ffi49WU33PiVgy2ChCWwYAaEMFq5BwcXyNCHQjN47MxyaLb0PBIcz2xoQ1
2xQ7DZB8F82hoiXNdpAurorSSxZspb2Iy/TkBG83n5xtj/UdqZprXlKRmc1qB4fb
jVi0ogVmZeDEMegUvOH4ZvcVLqEh/oalQFOzIhttRURQ2Iev/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYTPAMsKFVp+CHgr/L3mY/4FCl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZmViZjg2ZDgtMjdmYi0z
ZGRlLTk1N2ItOWQ2YzJjMTM4NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQXAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdrqaIKtljfQeKVRcW+4MBwK+YzwkIYuLzxHAbYp6+Kn2aZWuUIBQx+
CC9kQs9heeobflIMakopLcM7wcW2SF1X8SzUO0lJ3hKB3cPIDnSt6oK+/BPSuI8J
ItdQdXeUd3R1RPy4+d/lKZxLnk4x3aIQVQ1DgE/4bKQH8fgaqLA4+YCJmZ62qNmh
4xKA8S/Q5Jf7T4x6NIu+iPIEb9FZgk0986rLSGd3bykUXMe7Te3V06ycmn8SMb1x
PtM7Dsv13fLQjUTjg62Yg0TunNxMbj2mE2sgu4y8LXRaIIKBWdh2LqnemW8z9Z1O
0Wh8kQqw6vGX1dN8YGpNoTAl5oueyUc=
-----END CERTIFICATE-----
Generated at Wed May 13 11:44:41 2026 by rpki-client