Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
File:                     fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa (raw, json)
Hash identifier:          FhGoFLMYO7D8OlgiFmbwvd3bGQHrRPM8YdiwIGRK73w=
Subject key identifier:   2F:99:80:12:E4:99:B4:6D:6E:DF:DB:8A:2A:EB:BB:B4:8B:0E:A4:53
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DAC456B8E2E2430A6404AE140
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     21859
IP address blocks:        128.1.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6b:8e:2e:24:30:a6:40:4a:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=3f87f419-1862-41d5-b546-8ee348f64b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:05:a7:d5:fb:cc:1c:42:a6:7e:e1:ce:c5:
                    45:d0:1c:0f:b8:0a:e4:bd:36:ca:2c:38:33:ac:fb:
                    84:49:9b:8b:ff:31:7f:4a:48:47:52:c8:e7:d3:6a:
                    91:ce:a2:c0:78:cf:29:74:2d:34:cb:2d:b1:f2:73:
                    84:91:c8:0e:52:92:5a:d5:a1:7e:41:ac:1f:27:a2:
                    af:e8:c3:70:fc:3e:98:0e:54:74:c8:40:b9:72:f3:
                    ae:f3:3e:01:c1:b0:87:3f:36:f4:fd:05:db:4a:7a:
                    37:63:87:d2:3b:9c:07:f8:96:d5:4a:bb:cb:a0:29:
                    1f:a6:9a:0e:1c:c6:7e:87:01:11:93:7d:1c:08:d5:
                    0d:0d:7c:7b:e0:80:16:9a:49:42:59:ec:50:71:eb:
                    f0:6a:ed:79:10:00:d4:68:dc:f3:55:ca:f0:65:d4:
                    b3:17:db:db:0d:e1:de:c7:41:0a:84:2b:5a:0a:34:
                    d4:9a:81:cc:90:2a:3a:b7:66:25:36:bf:2f:e0:f1:
                    2c:1f:f8:21:44:63:85:70:33:6a:9a:f0:39:1d:cb:
                    b7:32:e9:40:3c:27:9f:ee:7b:fa:22:13:49:1c:7f:
                    7c:c2:92:e8:31:9c:e7:01:18:fc:93:0f:ef:a3:de:
                    7e:6e:e6:46:6f:1f:b4:fe:1b:a7:4e:d1:ed:55:dc:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:99:80:12:E4:99:B4:6D:6E:DF:DB:8A:2A:EB:BB:B4:8B:0E:A4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:ec:75:7d:37:fc:86:80:72:27:28:b1:7c:9a:fb:7d:18:
         ee:3a:86:1c:c7:90:59:52:9a:da:99:c4:c1:45:93:b2:34:d8:
         bf:62:a9:73:75:96:29:e1:bb:66:40:e1:63:be:16:65:3c:8b:
         61:ef:60:df:ba:10:d2:31:28:e8:5d:de:90:46:62:ec:a3:3b:
         42:a6:c2:1c:74:2a:27:0e:11:3a:4f:81:7b:24:a6:3e:a2:20:
         44:e9:ca:55:07:9f:36:94:30:ef:9f:3d:96:8e:41:80:f9:b1:
         6e:0a:38:13:d2:4e:b3:1e:dc:1a:a8:4f:14:d1:ad:f3:1c:85:
         73:2b:d0:c6:90:3c:2f:03:79:44:30:d0:15:76:59:5d:92:17:
         d9:38:50:cc:a7:7e:0b:7f:d9:f3:7a:b4:19:26:fa:e1:7b:70:
         c6:af:a0:21:84:c6:a4:06:a8:ed:93:cf:6f:e2:7c:93:3e:f7:
         e5:43:8e:fe:ab:4b:2c:df:a9:5f:ac:69:46:d7:0e:59:ef:23:
         14:47:96:5c:26:43:e9:2e:bf:a8:ad:48:c1:6b:a3:0b:93:3c:
         f5:ae:24:9e:d1:4a:6c:55:75:ab:03:13:ec:0e:13:16:cd:32:
         7b:c1:f5:e3:ec:23:b3:38:d2:36:39:d7:f3:27:96:5d:18:dc:
         3d:47:cb:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWuOLiQwpkBK4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
M2Y4N2Y0MTktMTg2Mi00MWQ1LWI1NDYtOGVlMzQ4ZjY0YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXwFp9X7zBxCpn7hzsVF0BwPuArkvTbKLDgz
rPuESZuL/zF/SkhHUsjn02qRzqLAeM8pdC00yy2x8nOEkcgOUpJa1aF+QawfJ6Kv
6MNw/D6YDlR0yEC5cvOu8z4BwbCHPzb0/QXbSno3Y4fSO5wH+JbVSrvLoCkfppoO
HMZ+hwERk30cCNUNDXx74IAWmklCWexQcevwau15EADUaNzzVcrwZdSzF9vbDeHe
x0EKhCtaCjTUmoHMkCo6t2YlNr8v4PEsH/ghRGOFcDNqmvA5Hcu3MulAPCef7nv6
IhNJHH98wpLoMZznARj8kw/vo95+buZGbx+0/hunTtHtVdx+kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+ZgBLkmbRtbt/biirru7SLDqRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZmI0Zjc3MjgtMmY1ZC0z
Zjk1LTkzYWMtZWI3Yjk1ZmNkNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9X7HV9N/yGgHInKLF8mvt9GO46hhzHkFlSmtqZxMFFk7I02L9iqXN1
linhu2ZA4WO+FmU8i2HvYN+6ENIxKOhd3pBGYuyjO0Kmwhx0KicOETpPgXskpj6i
IETpylUHnzaUMO+fPZaOQYD5sW4KOBPSTrMe3BqoTxTRrfMchXMr0MaQPC8DeUQw
0BV2WV2SF9k4UMynfgt/2fN6tBkm+uF7cMavoCGExqQGqO2Tz2/ifJM+9+VDjv6r
SyzfqV+saUbXDlnvIxRHllwmQ+kuv6itSMFrowuTPPWuJJ7RSmxVdasDE+wOExbN
MnvB9ePsI7M40jY51/Mnll0Y3D1HyyU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:19 2026 by rpki-client