Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe749367-8a78-377a-b1b5-de86bddf92b6.roa
File:                     fe749367-8a78-377a-b1b5-de86bddf92b6.roa (raw, json)
Hash identifier:          dhXd6fbtvjGKViCYF00ZpLlPQyI0knPZ0+Jv2uREyew=
Subject key identifier:   62:B8:39:FF:58:2B:9C:9D:D3:47:1A:44:B2:10:7F:0E:52:CD:80:92
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8A5FEBB5CDB8A19C8480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe749367-8a78-377a-b1b5-de86bddf92b6.roa
Signing time:             Fri 06 Mar 2026 15:38:27 +0000
ROA not before:           Fri 06 Mar 2026 15:38:27 +0000
ROA not after:            Thu 04 Jun 2026 14:38:27 +0000
asID:                     81
IP address blocks:        128.109.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8a:5f:eb:b5:cd:b8:a1:9c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:27 2026 GMT
            Not After : Jun  4 14:38:27 2026 GMT
        Subject: CN=26f15762-17a3-424b-bc09-8b8264827f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:eb:ec:4a:19:3f:87:2b:e1:65:06:7e:7b:
                    a6:c7:9a:0b:b8:71:70:8b:80:af:b1:a2:86:85:82:
                    6f:74:d1:2c:22:3c:f4:d8:fe:22:14:44:4a:48:99:
                    35:73:61:5f:33:36:38:f2:62:c0:df:65:2d:eb:87:
                    af:53:28:bf:05:24:00:a6:0b:55:24:9c:1a:31:7b:
                    27:93:05:01:78:95:3a:35:e2:6d:95:49:41:94:1e:
                    61:21:02:0c:54:81:0f:f9:6e:da:d1:5f:8f:df:64:
                    9d:4f:d2:bc:fe:22:4a:e1:6b:59:ff:54:9d:3d:4e:
                    13:c5:2b:a5:c3:b9:7a:23:6a:20:84:c9:42:da:36:
                    6b:c6:ac:40:dd:73:d1:bb:62:3d:d3:de:1d:03:59:
                    61:65:fc:89:06:c4:63:ed:66:7c:23:67:8c:e9:20:
                    6e:1b:28:b6:0f:21:d7:8e:0d:ac:22:f5:79:21:0c:
                    4b:44:35:0d:6c:8e:1d:d0:a1:56:2e:ea:97:92:fa:
                    37:ba:99:fc:0e:3a:32:73:b1:c5:a1:76:f9:c4:e6:
                    7e:37:bf:54:24:fb:d5:05:6f:0b:7a:e6:ca:92:3a:
                    b6:e4:ca:72:39:6f:ff:01:25:a7:07:5b:39:f3:8c:
                    85:e6:74:86:40:a4:d0:42:6d:4e:1a:19:ad:76:e6:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:39:FF:58:2B:9C:9D:D3:47:1A:44:B2:10:7F:0E:52:CD:80:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe749367-8a78-377a-b1b5-de86bddf92b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:74:8f:d9:65:d7:ff:fe:85:c0:30:c5:76:90:61:2e:2a:
         e6:0a:54:48:4d:4d:58:d9:0c:05:53:c5:33:9d:29:ea:0a:1e:
         c9:5c:8c:c1:3c:0d:4d:3b:f3:25:a1:dc:1a:60:3e:8b:30:5c:
         e2:88:86:f1:85:f1:39:a5:e5:85:a5:07:f2:44:e7:13:8b:b2:
         a2:b8:12:20:06:b7:a1:66:e6:87:c8:fe:02:f4:a1:33:be:0b:
         62:4a:0c:a7:9d:06:c4:38:21:83:4d:d8:d0:f7:63:23:11:79:
         58:f4:01:9c:37:29:68:a1:da:f8:c2:e9:f1:2a:30:90:87:60:
         ab:3a:81:a3:1a:5f:67:b3:79:fc:32:7f:23:8f:42:7e:f2:4b:
         e3:a9:5d:11:1e:ba:cc:5b:38:6a:cc:85:71:82:22:f0:f7:7f:
         40:e0:76:77:20:6d:b9:a8:ab:0c:2a:19:12:52:0c:ed:4a:a9:
         d0:bc:75:41:9e:a1:31:6c:ce:01:78:a0:57:24:d4:52:90:c1:
         34:67:f0:8c:30:47:53:ab:9c:30:5e:00:eb:a2:2c:0f:de:6d:
         16:e1:49:5f:e3:11:6f:55:7d:dd:70:db:ea:8d:19:08:55:e6:
         a8:d1:3b:37:2f:7a:ca:e8:f4:52:a5:2f:c1:5b:26:36:e2:67:
         9b:0c:65:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYpf67XNuKGchIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk
MjZmMTU3NjItMTdhMy00MjRiLWJjMDktOGI4MjY0ODI3ZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspjr7EoZP4cr4WUGfnumx5oLuHFwi4CvsaKG
hYJvdNEsIjz02P4iFERKSJk1c2FfMzY48mLA32Ut64evUyi/BSQApgtVJJwaMXsn
kwUBeJU6NeJtlUlBlB5hIQIMVIEP+W7a0V+P32SdT9K8/iJK4WtZ/1SdPU4TxSul
w7l6I2oghMlC2jZrxqxA3XPRu2I9094dA1lhZfyJBsRj7WZ8I2eM6SBuGyi2DyHX
jg2sIvV5IQxLRDUNbI4d0KFWLuqXkvo3upn8Djoyc7HFoXb5xOZ+N79UJPvVBW8L
eubKkjq25MpyOW//ASWnB1s584yF5nSGQKTQQm1OGhmtdubnZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGK4Of9YK5yd00caRLIQfw5SzYCSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZmU3NDkzNjctOGE3OC0z
NzdhLWIxYjUtZGU4NmJkZGY5MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOPdI/ZZdf//oXAMMV2kGEuKuYKVEhNTVjZDAVTxTOdKeoKHslcjME8
DU078yWh3BpgPoswXOKIhvGF8Tml5YWlB/JE5xOLsqK4EiAGt6Fm5ofI/gL0oTO+
C2JKDKedBsQ4IYNN2ND3YyMReVj0AZw3KWih2vjC6fEqMJCHYKs6gaMaX2ezefwy
fyOPQn7yS+OpXREeusxbOGrMhXGCIvD3f0DgdncgbbmoqwwqGRJSDO1KqdC8dUGe
oTFszgF4oFck1FKQwTRn8IwwR1OrnDBeAOuiLA/ebRbhSV/jEW9Vfd1w2+qNGQhV
5qjROzcvesro9FKlL8FbJjbiZ5sMZVw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:33 2026 by rpki-client