Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92d107af-ae0e-3f05-980b-1c1863273838.roa
File:                     92d107af-ae0e-3f05-980b-1c1863273838.roa (raw, json)
Hash identifier:          gqXPk82lnDGIV/JqWWsqH/iRsj5EMdX7QCyjbSe3hxM=
Subject key identifier:   EF:C4:BB:8B:F8:CB:34:01:64:02:0A:A6:F4:04:D4:B5:67:3B:A7:CA
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328584D2BDA1344E26F569BF609D980
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92d107af-ae0e-3f05-980b-1c1863273838.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     11892
IP address blocks:        159.182.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:13:44:e2:6f:56:9b:f6:09:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=cafdc9f4-76ed-4f5d-af97-662345190a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:96:8c:8e:7e:15:5c:3d:d8:44:f7:fe:98:
                    d0:95:c3:68:19:2b:34:88:0f:69:26:d2:7c:4f:6a:
                    72:ef:a5:97:f4:fe:e9:cb:1d:b5:a6:aa:0d:0c:cb:
                    90:8b:c8:79:a3:fd:da:ee:cd:46:1c:aa:e4:5b:ca:
                    74:6a:f2:4f:bc:46:b6:14:03:ff:a5:2e:97:f2:db:
                    50:be:cd:b1:f6:db:43:f8:f4:d8:ae:68:1d:49:3e:
                    33:bf:e4:31:11:85:1c:4e:66:11:78:6d:b4:48:4d:
                    ea:f0:a1:2d:3c:f5:24:eb:d7:5a:e5:ce:fe:79:44:
                    f7:57:dd:cb:2c:06:c6:26:c8:b5:73:a6:1f:36:0f:
                    f8:c6:fb:e5:ac:32:bd:14:76:d5:d3:bb:e2:bc:22:
                    54:88:d8:24:c0:3e:01:97:e2:03:f4:18:3a:3a:27:
                    a7:99:d1:2a:b6:61:d7:2d:f5:0b:6f:5b:66:66:c9:
                    d2:ca:74:59:56:29:ab:5a:23:e1:9a:b4:33:d1:9e:
                    a0:0b:40:fc:6d:07:38:1d:25:49:40:fb:26:b0:9e:
                    43:18:52:97:8a:81:5e:c5:2b:37:08:11:45:17:f8:
                    5e:8b:54:9c:91:7e:69:b5:19:07:db:c8:29:c9:f7:
                    42:78:2d:7f:44:80:4d:12:6e:51:75:64:45:ec:ce:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:BB:8B:F8:CB:34:01:64:02:0A:A6:F4:04:D4:B5:67:3B:A7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92d107af-ae0e-3f05-980b-1c1863273838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:36:00:df:66:51:d4:76:4f:b3:e8:be:e3:c2:8c:d1:96:
         b5:90:75:52:e7:54:03:9c:46:b7:d5:06:93:6f:4b:a4:d5:bc:
         61:70:a7:c2:2d:11:71:3f:e5:80:b1:a5:9d:2d:12:7a:7e:4f:
         f2:a1:b8:76:2e:cd:e8:eb:e2:62:d9:f1:53:7e:aa:8e:57:e2:
         9b:ef:53:ff:b4:08:da:31:ef:b2:6a:3b:34:2f:b8:66:e7:a9:
         30:2f:76:55:7a:e5:2f:60:97:ec:9a:7b:16:ab:17:4b:42:eb:
         1e:f6:8d:68:f7:19:43:1f:22:3d:7e:89:33:66:14:be:73:45:
         bd:e4:14:20:49:12:76:bf:49:24:22:21:06:3b:cb:03:61:c8:
         9d:1f:e7:64:29:3c:40:9f:db:f4:ae:90:a1:90:db:2f:f7:2f:
         5a:1a:27:e0:ab:be:c6:fc:b6:94:43:49:7a:ee:95:87:77:1e:
         37:26:f3:d3:06:de:88:c9:cf:04:15:c7:8e:e0:25:d7:ee:4b:
         c9:12:cb:1e:9b:f0:8f:57:57:d5:2f:88:eb:7c:29:62:d5:b6:
         f8:cc:c0:a6:af:5d:27:38:6b:1c:a9:6c:1d:5d:9f:27:dc:26:
         16:97:6b:2c:29:33:5d:ba:9b:4c:f1:18:07:fb:99:a9:a0:5f:
         04:96:24:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hNE4m9Wm/YJ2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw
ZDhlMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
Y2FmZGM5ZjQtNzZlZC00ZjVkLWFmOTctNjYyMzQ1MTkwYTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoleWjI5+FVw92ET3/pjQlcNoGSs0iA9pJtJ8
T2py76WX9P7pyx21pqoNDMuQi8h5o/3a7s1GHKrkW8p0avJPvEa2FAP/pS6X8ttQ
vs2x9ttD+PTYrmgdST4zv+QxEYUcTmYReG20SE3q8KEtPPUk69da5c7+eUT3V93L
LAbGJsi1c6YfNg/4xvvlrDK9FHbV07vivCJUiNgkwD4Bl+ID9Bg6OienmdEqtmHX
LfULb1tmZsnSynRZVimrWiPhmrQz0Z6gC0D8bQc4HSVJQPsmsJ5DGFKXioFexSs3
CBFFF/hei1SckX5ptRkH28gpyfdCeC1/RIBNEm5RdWRF7M6ypwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/Eu4v4yzQBZAIKpvQE1LVnO6fKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj
ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvOTJkMTA3YWYtYWUwZS0z
ZjA1LTk4MGItMWMxODYzMjczODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk
MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2
MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk
NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7YMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfENgDfZlHUdk+z6L7jwozRlrWQdVLnVAOcRrfVBpNvS6TVvGFwp8It
EXE/5YCxpZ0tEnp+T/KhuHYuzejr4mLZ8VN+qo5X4pvvU/+0CNox77JqOzQvuGbn
qTAvdlV65S9gl+yaexarF0tC6x72jWj3GUMfIj1+iTNmFL5zRb3kFCBJEna/SSQi
IQY7ywNhyJ0f52QpPECf2/SukKGQ2y/3L1oaJ+Crvsb8tpRDSXrulYd3Hjcm89MG
3ojJzwQVx47gJdfuS8kSyx6b8I9XV9UviOt8KWLVtvjMwKavXSc4axypbB1dnyfc
JhaXaywpM126m0zxGAf7mamgXwSWJNo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:50 2026 by rpki-client