Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
File:                     f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json)
Hash identifier:          +Imoe1mv4LcPdsB0/zrTzWf5bjFFdvZalIj/UZGURGE=
Subject key identifier:   06:B8:D9:F3:98:C0:CC:22:C1:B5:14:64:25:01:CD:81:31:C7:F5:04
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584DCDC5A097B31F4CEBF5B76B00
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     53768
IP address blocks:        162.134.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a0:97:b3:1f:4c:eb:f5:b7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=ec2cc1b2-27a0-45a7-8728-6d78675cc6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:df:0d:15:51:76:86:dd:79:47:08:4b:45:
                    d4:10:55:40:09:84:d0:02:9f:8a:83:a5:e4:12:9d:
                    c5:ca:9a:5d:04:4c:91:81:b3:a6:a9:55:3b:d8:56:
                    cc:72:ab:4b:56:90:c6:d4:74:69:a2:d8:58:e4:bb:
                    bf:29:47:66:48:9f:e7:fd:44:d2:bb:19:e5:63:2e:
                    ec:f2:0e:f0:23:eb:66:da:28:7a:35:e5:bc:21:0b:
                    a5:e3:39:5a:db:21:a4:8b:88:78:21:d6:00:05:1e:
                    d9:a9:80:1e:ad:45:71:72:4e:92:ae:bb:42:e8:d1:
                    fc:39:e5:17:8a:f5:36:d6:62:c6:b3:98:eb:4f:c0:
                    b4:8c:bf:3c:20:25:ab:ea:b0:b3:98:61:df:07:6d:
                    ac:f9:79:78:42:64:36:e0:00:da:97:c8:e3:b0:ec:
                    a1:16:48:a4:b8:aa:69:49:ee:60:ed:c4:a4:72:fa:
                    3b:d1:17:96:ec:a2:cc:8d:b2:86:d6:5e:f2:a1:fe:
                    29:2b:19:9e:13:e8:9c:55:d2:c6:74:51:4b:00:de:
                    e8:59:46:e5:8b:a8:43:ea:7f:70:c7:a3:10:b7:06:
                    9f:72:41:b6:db:53:5d:e6:5b:68:55:39:31:0b:d4:
                    3b:2e:81:ca:1b:22:95:de:80:07:13:49:30:43:f9:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:D9:F3:98:C0:CC:22:C1:B5:14:64:25:01:CD:81:31:C7:F5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:06:4d:8e:65:0a:e8:1b:6f:e5:1c:1e:d5:1c:d0:1b:8f:
         36:9f:a7:19:0d:bb:e3:83:25:36:e9:72:c2:06:ef:bc:b1:50:
         44:7d:99:d5:c0:1c:c3:72:9a:03:3f:e5:33:1a:d5:28:d1:8c:
         6c:c5:95:2e:ed:db:39:d2:ed:7d:69:a2:ce:18:9c:44:c0:b9:
         91:cf:69:94:a3:b4:a7:64:5d:a8:e9:49:11:e5:05:b8:4d:d5:
         df:09:bb:37:d2:7c:9b:42:40:2c:37:84:85:b9:4a:f4:d9:8d:
         99:d2:a9:3a:2f:e2:3c:ae:d3:f6:4c:bd:59:dd:de:5b:b5:73:
         66:24:1a:d0:4f:ec:42:1b:3b:99:46:9d:42:b3:e1:82:2f:7e:
         63:cf:5a:aa:e3:8e:be:f2:d5:ae:d5:31:8b:e5:0b:cf:75:eb:
         7c:cb:a0:a2:eb:ae:43:fe:25:e7:52:ef:b2:d8:aa:02:8e:96:
         0f:de:9c:11:fd:3e:fa:ec:3e:cb:18:bb:fc:f4:91:1b:cb:7f:
         c7:62:8e:60:69:ce:33:23:c6:23:67:52:1d:20:66:0e:fc:43:
         f1:b2:d9:28:8f:5b:5f:c6:4e:00:67:21:64:3f:ed:13:fa:b0:
         6a:00:1f:bf:ad:dc:11:be:a4:6a:55:0b:ce:da:c1:12:69:f8:
         91:f4:50:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaCXsx9M6/W3awAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0
YTkyMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZWMyY2MxYjItMjdhMC00NWE3LTg3MjgtNmQ3ODY3NWNjNmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqXfDRVRdobdeUcIS0XUEFVACYTQAp+Kg6Xk
Ep3FyppdBEyRgbOmqVU72FbMcqtLVpDG1HRpothY5Lu/KUdmSJ/n/UTSuxnlYy7s
8g7wI+tm2ih6NeW8IQul4zla2yGki4h4IdYABR7ZqYAerUVxck6SrrtC6NH8OeUX
ivU21mLGs5jrT8C0jL88ICWr6rCzmGHfB22s+Xl4QmQ24ADal8jjsOyhFkikuKpp
Se5g7cSkcvo70ReW7KLMjbKG1l7yof4pKxmeE+icVdLGdFFLAN7oWUbli6hD6n9w
x6MQtwafckG221Nd5ltoVTkxC9Q7LoHKGyKV3oAHE0kwQ/ml4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAa42fOYwMwiwbUUZCUBzYExx/UEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5
YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZjUzOWNmZDEtOTUwMy0z
MWUwLWEzODMtMmRiZTNiYWNkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz
ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm
NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy
MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEf4Bk2OZQroG2/lHB7VHNAbjzafpxkNu+ODJTbpcsIG77yxUER9mdXA
HMNymgM/5TMa1SjRjGzFlS7t2znS7X1pos4YnETAuZHPaZSjtKdkXajpSRHlBbhN
1d8JuzfSfJtCQCw3hIW5SvTZjZnSqTov4jyu0/ZMvVnd3lu1c2YkGtBP7EIbO5lG
nUKz4YIvfmPPWqrjjr7y1a7VMYvlC89163zLoKLrrkP+JedS77LYqgKOlg/enBH9
PvrsPssYu/z0kRvLf8dijmBpzjMjxiNnUh0gZg78Q/Gy2SiPW1/GTgBnIWQ/7RP6
sGoAH7+t3BG+pGpVC87awRJp+JH0UKw=
-----END CERTIFICATE-----
Generated at Wed May 13 13:58:39 2026 by rpki-client