Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa
File:                     b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (raw, json)
Hash identifier:          riUTA/7n58daF6WEDtsrozLs9usK1wg27jYf3sF43p8=
Subject key identifier:   DB:35:B3:6C:94:41:F0:B2:0B:DE:A3:49:66:CE:2E:1D:AA:26:BC:AA
Certificate issuer:       /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Certificate serial:       010D0C9F4328584E5084B3F0F0F20D8282C5F390
Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     198949
IP address blocks:        143.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b3:f0:f0:f2:0d:82:82:c5:f3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f715e43e-6246-4ca7-bbca-51609e6f35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:30:b0:b5:11:cb:55:9f:35:16:a1:b9:bc:
                    f4:c0:7c:8e:f5:fd:23:63:f6:4a:f2:50:65:bb:75:
                    b7:a8:76:b9:19:68:08:c3:a4:84:10:8a:19:a3:50:
                    bb:b8:b6:4f:83:5c:dc:dd:88:b5:c3:ef:46:f1:45:
                    dd:32:54:49:59:3e:aa:42:77:04:c9:24:61:3f:b5:
                    13:a4:6f:d3:3f:aa:45:97:5c:b5:3d:f9:c7:e2:cc:
                    7a:d0:5f:be:91:fa:81:8f:3c:77:60:2d:33:51:2f:
                    bf:7f:b9:1e:db:95:08:4b:ab:2a:56:70:61:71:04:
                    60:b7:c9:dc:a6:26:e4:36:c4:e0:ab:4a:d9:50:aa:
                    ec:13:83:74:72:0b:67:10:f6:85:2c:93:9a:08:91:
                    b5:0a:0a:8e:ff:41:4b:71:24:b1:97:e8:ac:99:3b:
                    6e:0b:b6:62:17:f6:ea:37:06:28:92:89:7e:aa:27:
                    4b:96:e3:27:7b:d8:11:91:d0:47:93:fd:ab:a4:18:
                    f8:60:c8:d8:b5:7c:a9:24:1a:fb:5d:8f:aa:c7:67:
                    d2:fc:46:5a:75:1f:8c:23:6c:2e:a0:8b:58:5e:6a:
                    54:2a:ba:ca:68:04:72:12:6a:40:0c:f0:d2:9d:f6:
                    c0:f9:69:80:c6:88:b1:7c:97:7d:ff:7e:a7:1d:a0:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:35:B3:6C:94:41:F0:B2:0B:DE:A3:49:66:CE:2E:1D:AA:26:BC:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl

            X509v3 Authority Key Identifier:
                keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:17:3c:5c:8b:d0:ff:5e:91:58:b2:0f:83:90:28:35:b4:
         79:a4:9f:99:96:0c:8e:8e:10:21:b2:61:a3:01:43:bc:be:24:
         76:c2:c3:6f:ca:7e:f4:84:1b:94:66:04:b9:03:4d:02:1d:6d:
         dd:20:8c:c5:37:fc:76:e0:77:f7:77:ef:ab:44:20:4a:75:08:
         58:8d:cd:61:c5:8c:33:b5:73:b0:1c:26:07:d7:4b:17:cc:41:
         97:4c:88:2c:6c:f5:9f:9f:0b:8a:4a:9b:b7:9a:61:9a:2c:92:
         89:06:2e:bc:e9:27:2a:ae:c4:b1:8d:30:28:2c:82:ac:6b:1f:
         34:3e:1f:63:d8:11:50:a9:f6:4d:4d:76:7d:6d:cc:cf:96:ad:
         bc:eb:56:04:81:3a:70:7c:61:a4:49:7d:31:96:c3:54:a0:1f:
         20:45:51:1d:37:3e:bc:f0:b4:4f:a5:0d:08:ba:65:c5:ff:35:
         1c:3e:10:9c:70:56:26:85:2d:88:43:85:e6:ab:6f:d2:d7:c9:
         d1:d6:18:4f:68:60:b8:26:57:25:9c:c9:00:e5:69:4f:ea:d8:
         34:21:70:78:70:3c:5f:fe:45:46:d7:8e:95:55:b9:05:a6:e7:
         fb:a7:31:ce:7e:a8:8a:d0:f7:19:4a:e2:59:c0:d3:c2:78:a0:
         fe:82:5d:25
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5QhLPw8PINgoLF85AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj
NmI5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZjcxNWU0M2UtNjI0Ni00Y2E3LWJiY2EtNTE2MDllNmYzNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IwsLURy1WfNRahubz0wHyO9f0jY/ZK8lBl
u3W3qHa5GWgIw6SEEIoZo1C7uLZPg1zc3Yi1w+9G8UXdMlRJWT6qQncEySRhP7UT
pG/TP6pFl1y1PfnH4sx60F++kfqBjzx3YC0zUS+/f7ke25UIS6sqVnBhcQRgt8nc
pibkNsTgq0rZUKrsE4N0cgtnEPaFLJOaCJG1CgqO/0FLcSSxl+ismTtuC7ZiF/bq
NwYokol+qidLluMne9gRkdBHk/2rpBj4YMjYtXypJBr7XY+qx2fS/EZadR+MI2wu
oItYXmpUKrrKaARyEmpADPDSnfbA+WmAxoixfJd9/36nHaC/EQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNs1s2yUQfCyC96jSWbOLh2qJryqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi
NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjhkMTA5ZGMtNWFhYi0z
ZDQ1LWJjYTAtZTA2Y2M0NWVjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj
YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2
YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl
NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlSoXPFyL0P9ekViyD4OQKDW0eaSfmZYMjo4QIbJhowFDvL4kdsLDb8p+
9IQblGYEuQNNAh1t3SCMxTf8duB393fvq0QgSnUIWI3NYcWMM7VzsBwmB9dLF8xB
l0yILGz1n58Likqbt5phmiySiQYuvOknKq7EsY0wKCyCrGsfND4fY9gRUKn2TU12
fW3Mz5atvOtWBIE6cHxhpEl9MZbDVKAfIEVRHTc+vPC0T6UNCLplxf81HD4QnHBW
JoUtiEOF5qtv0tfJ0dYYT2hguCZXJZzJAOVpT+rYNCFweHA8X/5FRteOlVW5Babn
+6cxzn6oitD3GUriWcDTwnig/oJdJQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:46 2026 by rpki-client