Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
File:                     8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa (raw, json)
Hash identifier:          lJQFvVV13DYxDHinuuJhPTLYhrA3EMB6dCCIj+wX+Rg=
Subject key identifier:   FA:FF:48:09:A2:EB:90:F6:7E:F5:9F:66:17:5B:4B:51:2F:2C:A5:AB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDC4B5A149773E04C06A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     397630
IP address blocks:        158.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:dc:4b:5a:14:97:73:e0:4c:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=b1867c53-3042-43dc-94e3-388d831f6398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:43:8a:3b:53:90:5a:68:54:3a:b7:3b:e4:
                    0c:50:c9:9b:23:59:3a:45:83:06:aa:2c:b6:6a:6f:
                    13:37:59:1d:6a:ae:b7:53:33:84:83:b1:3d:81:ae:
                    d0:af:b7:22:66:c1:be:ac:39:5b:05:72:f8:55:63:
                    d1:4c:04:64:9d:da:b3:b2:44:17:d9:7d:84:d7:98:
                    b9:f3:eb:5d:5e:6a:37:8f:60:eb:87:df:eb:62:ee:
                    14:5b:65:6d:12:aa:97:90:32:35:4a:99:27:e6:ab:
                    6d:bd:ae:84:c7:3d:7c:0f:ba:10:db:39:9a:ab:12:
                    ac:fa:98:cc:9f:fc:06:99:71:d2:bf:ec:39:ee:31:
                    d9:e1:ef:57:6d:5b:d9:20:20:8e:80:8e:96:e1:29:
                    fb:f1:1e:61:b4:0e:ef:27:0b:b1:19:86:b0:77:c3:
                    ed:dc:35:2c:8b:8c:1e:78:7b:12:5a:cb:c8:34:5a:
                    65:d8:6c:f9:d2:ce:1b:9f:28:d5:d9:38:92:05:b8:
                    12:d8:88:c3:87:ab:71:2d:c7:ec:87:3b:49:b5:74:
                    64:01:ed:09:6e:32:5d:12:bc:82:f1:41:06:0b:57:
                    3a:81:66:38:db:92:22:ed:a4:40:35:49:03:67:cd:
                    85:66:9f:7e:f0:00:b4:ae:6e:dc:cc:51:da:c4:11:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:48:09:A2:EB:90:F6:7E:F5:9F:66:17:5B:4B:51:2F:2C:A5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:ca:e2:ab:30:64:33:c3:09:9f:5f:7f:be:f6:38:fb:a2:
         52:98:bb:e3:e5:b4:03:2a:ae:c4:d5:41:d3:db:94:11:e4:83:
         cd:0c:0a:ff:41:44:d2:13:0b:e6:7d:aa:bf:d7:31:6d:b9:45:
         95:02:10:70:42:64:80:ab:08:06:93:ee:a6:e9:2d:f1:ca:7e:
         39:98:5a:6b:b4:4d:01:1c:58:34:ca:ed:59:7c:df:8c:93:87:
         9d:00:41:24:96:0d:59:c8:5c:9e:57:a2:27:33:a0:5a:74:f5:
         62:77:c9:d6:03:0f:0c:78:0f:15:79:c1:4f:c4:0b:34:5e:cb:
         c0:e3:c6:54:7a:70:39:56:ea:46:e3:de:8a:55:43:b2:38:8b:
         bf:8b:fc:e8:d0:e4:27:00:07:85:58:95:3f:8b:75:d4:51:38:
         5b:a5:fa:98:70:e0:c8:4a:cc:58:81:e5:b0:11:f3:27:7a:66:
         dc:c0:6f:ba:0f:45:57:4d:fb:3f:20:cc:6a:e3:90:45:72:d4:
         13:69:8d:99:b3:c7:30:43:ca:67:e3:af:ad:a9:20:1e:9e:74:
         e2:60:fb:63:17:31:4c:46:0a:9f:32:21:54:ad:6d:f3:31:dc:
         46:48:63:c4:8a:e9:60:21:22:92:47:22:7b:26:fd:de:64:ca:
         58:00:b7:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9xLWhSXc+BMBqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
YjE4NjdjNTMtMzA0Mi00M2RjLTk0ZTMtMzg4ZDgzMWY2Mzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo5DijtTkFpoVDq3O+QMUMmbI1k6RYMGqiy2
am8TN1kdaq63UzOEg7E9ga7Qr7ciZsG+rDlbBXL4VWPRTARkndqzskQX2X2E15i5
8+tdXmo3j2Drh9/rYu4UW2VtEqqXkDI1Spkn5qttva6Exz18D7oQ2zmaqxKs+pjM
n/wGmXHSv+w57jHZ4e9XbVvZICCOgI6W4Sn78R5htA7vJwuxGYawd8Pt3DUsi4we
eHsSWsvINFpl2Gz50s4bnyjV2TiSBbgS2IjDh6txLcfshztJtXRkAe0JbjJdEryC
8UEGC1c6gWY425Ii7aRANUkDZ82FZp9+8AC0rm7czFHaxBEC/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPr/SAmi65D2fvWfZhdbS1EvLKWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGI0MDg1YzMtODBiZi0z
ZDE4LWI2ZTQtNjUxOTNiZDc5ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzXyuKrMGQzwwmfX3++9jj7olKYu+PltAMqrsTVQdPblBHkg80MCv9B
RNITC+Z9qr/XMW25RZUCEHBCZICrCAaT7qbpLfHKfjmYWmu0TQEcWDTK7Vl834yT
h50AQSSWDVnIXJ5XoiczoFp09WJ3ydYDDwx4DxV5wU/ECzRey8DjxlR6cDlW6kbj
3opVQ7I4i7+L/OjQ5CcAB4VYlT+LddRROFul+phw4MhKzFiB5bAR8yd6ZtzAb7oP
RVdN+z8gzGrjkEVy1BNpjZmzxzBDymfjr62pIB6edOJg+2MXMUxGCp8yIVStbfMx
3EZIY8SK6WAhIpJHInsm/d5kylgAt5M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:57 2026 by rpki-client