Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ac863065-ffed-3c22-b90b-acfb042922f9.roa
File:                     ac863065-ffed-3c22-b90b-acfb042922f9.roa (raw, json)
Hash identifier:          24tHwKs0wV17CRRkvNJ4IatWT8RoEyg8WjOOnKYhIM0=
Subject key identifier:   D5:54:4C:4E:1A:22:F0:E6:C3:80:F3:F3:35:5E:FE:0E:FA:84:71:D2
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584D386A30EA8620AC6E34CB6880
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ac863065-ffed-3c22-b90b-acfb042922f9.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     54252
IP address blocks:        96.43.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:30:ea:86:20:ac:6e:34:cb:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=bbb250d9-e0b5-4637-9608-b6db3da86e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:f6:e9:82:7b:b3:1b:17:c9:68:4e:df:2f:
                    cd:a7:5b:ab:0b:7a:1e:ca:0e:ab:1a:11:be:4c:f3:
                    e2:06:f2:dd:87:32:28:ab:f8:e2:01:42:c1:a5:10:
                    fb:de:54:96:67:4d:57:b6:67:ee:f4:70:a4:98:c1:
                    b5:fa:ae:eb:2e:f3:2e:a4:e7:1c:77:b4:3e:9e:fb:
                    cc:0a:3f:fe:67:be:4f:0c:d5:26:9f:43:bf:96:d6:
                    93:a5:f4:ef:44:f3:11:f8:ac:0b:17:29:91:4f:51:
                    28:e9:45:66:67:2c:cc:34:c5:60:af:be:ad:33:c1:
                    84:36:50:e6:55:44:10:86:4e:51:20:08:f2:7b:d4:
                    69:77:86:a6:6f:d6:57:4d:71:2a:10:08:83:58:19:
                    ac:d9:f3:99:19:56:59:1b:95:c7:58:cb:4a:0e:6f:
                    05:bb:0d:82:ea:ca:0f:6a:b1:ac:f0:9b:d9:93:ca:
                    82:91:df:f1:f1:26:8d:bd:4c:8b:bd:1f:0d:06:20:
                    54:56:27:e7:b0:8f:c4:a0:46:a5:34:ed:de:e8:0a:
                    18:32:bd:0e:c0:32:3e:a1:bf:07:74:9f:19:1d:9a:
                    54:4b:21:a5:30:5d:98:fe:6b:f4:db:57:6e:bb:24:
                    05:2b:a1:0b:be:b7:76:04:9d:b1:ca:98:8d:8f:9c:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:4C:4E:1A:22:F0:E6:C3:80:F3:F3:35:5E:FE:0E:FA:84:71:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ac863065-ffed-3c22-b90b-acfb042922f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:66:c8:6d:62:56:c7:c2:38:66:27:9f:12:55:23:7f:b6:
         98:72:07:51:0b:7c:42:3e:41:76:9e:80:92:d5:2b:5d:82:3e:
         02:1e:22:14:fa:15:bb:2c:c4:1d:f5:93:8a:69:3e:cd:f9:f2:
         91:6c:76:d3:73:4d:30:06:cb:28:7b:c1:82:02:c3:14:e5:42:
         35:32:fe:22:75:c1:9b:ce:c5:fd:e4:e3:13:08:ea:b7:ab:0b:
         18:b5:34:4a:44:c2:4a:3b:8a:3f:4b:12:74:56:bf:0b:62:08:
         30:8d:e8:19:a6:3d:f5:c6:1c:ab:28:49:a6:05:7a:ee:c1:7b:
         07:23:c7:59:ff:ac:ef:e9:c0:1b:5e:9c:ac:74:2e:b0:b5:a7:
         47:10:68:33:be:f3:b0:61:3c:84:ad:8f:dc:10:01:ae:b3:94:
         e5:ae:56:22:07:86:af:56:a7:dc:82:c3:3f:48:fb:1f:aa:d9:
         16:e9:33:3b:31:b9:29:00:a6:3a:b1:fe:3b:b8:af:b2:32:2f:
         e8:8b:77:18:3e:b2:30:43:f2:58:82:e6:d9:8a:8f:e5:1c:eb:
         09:f5:13:ab:13:8a:b2:18:43:ea:db:39:54:9b:b7:44:62:80:
         6c:d1:d9:66:8a:03:0c:7b:c8:80:1e:7a:28:62:9d:f5:c3:0d:
         48:ff:b6:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajDqhiCsbjTLaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
YmJiMjUwZDktZTBiNS00NjM3LTk2MDgtYjZkYjNkYTg2ZTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVb26YJ7sxsXyWhO3y/Np1urC3oeyg6rGhG+
TPPiBvLdhzIoq/jiAULBpRD73lSWZ01Xtmfu9HCkmMG1+q7rLvMupOccd7Q+nvvM
Cj/+Z75PDNUmn0O/ltaTpfTvRPMR+KwLFymRT1Eo6UVmZyzMNMVgr76tM8GENlDm
VUQQhk5RIAjye9Rpd4amb9ZXTXEqEAiDWBms2fOZGVZZG5XHWMtKDm8Fuw2C6soP
arGs8JvZk8qCkd/x8SaNvUyLvR8NBiBUVifnsI/EoEalNO3e6AoYMr0OwDI+ob8H
dJ8ZHZpUSyGlMF2Y/mv021duuyQFK6ELvrd2BJ2xypiNj5xrvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVUTE4aIvDmw4Dz8zVe/g76hHHSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYWM4NjMwNjUtZmZlZC0z
YzIyLWI5MGItYWNmYjA0MjkyMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCthMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHugZshtYlbHwjhmJ58SVSN/tphyB1ELfEI+QXaegJLVK12CPgIeIhT6
FbssxB31k4ppPs358pFsdtNzTTAGyyh7wYICwxTlQjUy/iJ1wZvOxf3k4xMI6rer
Cxi1NEpEwko7ij9LEnRWvwtiCDCN6BmmPfXGHKsoSaYFeu7Bewcjx1n/rO/pwBte
nKx0LrC1p0cQaDO+87BhPIStj9wQAa6zlOWuViIHhq9Wp9yCwz9I+x+q2RbpMzsx
uSkApjqx/ju4r7IyL+iLdxg+sjBD8liC5tmKj+Uc6wn1E6sTirIYQ+rbOVSbt0Ri
gGzR2WaKAwx7yIAeeihinfXDDUj/tkk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:59 2026 by rpki-client