Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
File:                     5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa (raw, json)
Hash identifier:          ax0UV597ovCTmOerMQrF+PN4EJiSk2kvEFf7QLN0sH4=
Subject key identifier:   60:C2:D0:53:14:41:77:BC:6E:8F:3F:73:13:C1:4D:76:C0:63:C1:E4
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F4328584D3F64E74D7ECCE90D9A23A400
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     2552
IP address blocks:        128.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e7:4d:7e:cc:e9:0d:9a:23:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=75383982-3cea-4f18-9ea6-755ef11c223b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:7d:ad:59:ed:7c:1d:da:21:ae:f1:14:e1:
                    16:83:59:52:e5:e4:58:54:ae:65:b1:6c:6b:87:57:
                    c9:65:b7:d3:74:9d:01:b2:a0:7e:f9:20:ef:cd:1f:
                    8d:6d:e2:45:2d:2c:f6:c2:fa:9a:df:b8:e6:d1:24:
                    9f:8d:e3:1e:c2:91:42:23:51:54:d2:c0:0b:ef:1b:
                    e0:da:a4:ed:61:4b:2d:88:07:2a:b8:06:c9:99:eb:
                    a8:71:e3:07:c3:3a:a3:1f:57:f0:41:36:ac:0a:18:
                    12:67:8e:8d:ef:b0:2b:4b:8d:41:ef:35:d2:fd:f1:
                    7b:79:c7:00:59:0d:cb:2c:43:96:24:35:81:65:eb:
                    fe:13:8d:73:f0:48:05:8c:a0:04:37:f0:30:fd:a4:
                    0e:c7:12:5b:e2:9b:23:a8:27:54:a1:13:50:95:65:
                    cf:9a:ab:04:8d:1a:56:13:aa:ce:82:49:60:cf:a7:
                    22:a0:84:ff:bb:31:35:69:4d:bd:b8:3f:fd:7c:25:
                    a8:cf:b3:7e:0f:34:a5:75:ed:77:9a:dc:5b:fa:34:
                    76:bc:0c:10:0c:88:db:1c:63:fe:bf:61:9f:65:40:
                    2e:7a:07:9d:a2:9f:77:f2:5c:02:fb:c6:09:d3:4e:
                    03:c3:72:2a:02:a2:16:1d:22:8b:b4:7e:72:bd:ae:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:D0:53:14:41:77:BC:6E:8F:3F:73:13:C1:4D:76:C0:63:C1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:d0:fc:f7:0d:33:13:c7:ee:aa:16:9b:47:9f:f4:23:30:f5:
         98:16:59:e8:4e:f9:a6:05:60:1d:ce:57:bc:a5:aa:90:9d:e8:
         f5:6b:cf:1f:10:ea:49:9e:d1:34:dd:fb:93:ad:a6:2a:14:59:
         90:ca:6e:e6:3a:57:4b:41:4e:f0:e3:3b:9b:c3:22:04:c3:3b:
         5a:47:79:e1:51:9a:71:01:8a:7b:b2:b9:ef:17:a3:5e:13:78:
         13:59:80:67:f8:34:17:0c:8f:1b:9b:d7:fd:2e:4b:a1:10:8a:
         ae:c4:7e:df:00:cb:31:ee:ba:1d:18:5e:1a:89:47:6f:dc:fb:
         49:9e:2d:06:fb:4b:51:1e:da:39:8e:4f:d6:bf:03:17:7d:0a:
         5e:63:2b:17:85:91:4c:8d:7e:a1:fc:7c:ec:e5:8a:f0:e3:fb:
         67:46:46:a5:6f:fd:da:a6:ca:42:98:49:e6:c0:7e:e8:74:cf:
         46:0c:a6:57:af:8d:5a:9d:84:34:a2:0c:22:cf:25:40:77:d1:
         47:56:c7:06:d4:ba:3e:04:38:d7:9f:d7:e3:af:52:42:7d:9a:
         76:e4:c4:a3:2c:54:44:f4:72:5a:52:cd:f4:42:d1:01:89:d5:
         92:83:8a:5d:37:c2:f4:01:70:73:4c:99:e8:72:e3:75:8b:0d:
         e9:ea:b8:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0/ZOdNfszpDZojpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2
YTY0MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
NzUzODM5ODItM2NlYS00ZjE4LTllYTYtNzU1ZWYxMWMyMjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeV9rVntfB3aIa7xFOEWg1lS5eRYVK5lsWxr
h1fJZbfTdJ0BsqB++SDvzR+NbeJFLSz2wvqa37jm0SSfjeMewpFCI1FU0sAL7xvg
2qTtYUstiAcquAbJmeuoceMHwzqjH1fwQTasChgSZ46N77ArS41B7zXS/fF7eccA
WQ3LLEOWJDWBZev+E41z8EgFjKAEN/Aw/aQOxxJb4psjqCdUoRNQlWXPmqsEjRpW
E6rOgklgz6cioIT/uzE1aU29uD/9fCWoz7N+DzSlde13mtxb+jR2vAwQDIjbHGP+
v2GfZUAuegedop938lwC+8YJ004Dw3IqAqIWHSKLtH5yva68NwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGDC0FMUQXe8bo8/cxPBTXbAY8HkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJh
MGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvNWZkYjhhN2UtZTkzYi0z
ZWNlLTkyYWUtMWNkMzgxMDk3NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZiYTBmZDItYjUyNi00OTg1LTkz
MTQtYmY2NDg1MDU2YTY0L2E2YmEwZmQyLWI1MjYtNDk4NS05MzE0LWJmNjQ4NTA1
NmE2NC5jcmwwHwYDVR0jBBgwFoAUzCOVeI0Cs7E5PNhJCdAxa08cphIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0
ODUwNTZhNjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgPwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAutD89w0zE8fuqhabR5/0IzD1mBZZ6E75pgVgHc5XvKWqkJ3o9WvPHxDq
SZ7RNN37k62mKhRZkMpu5jpXS0FO8OM7m8MiBMM7Wkd54VGacQGKe7K57xejXhN4
E1mAZ/g0FwyPG5vX/S5LoRCKrsR+3wDLMe66HRheGolHb9z7SZ4tBvtLUR7aOY5P
1r8DF30KXmMrF4WRTI1+ofx87OWK8OP7Z0ZGpW/92qbKQphJ5sB+6HTPRgymV6+N
Wp2ENKIMIs8lQHfRR1bHBtS6PgQ415/X469SQn2aduTEoyxURPRyWlLN9ELRAYnV
koOKXTfC9AFwc0yZ6HLjdYsN6eq4jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:10 2026 by rpki-client