Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
File:                     108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa (raw, json)
Hash identifier:          Cr+8CmzxKTymCOzONVNlAhBCst5yQ9eaBoGS8I9qljY=
Subject key identifier:   F0:63:82:3B:BE:0B:ED:A7:52:64:9B:32:A8:A6:DD:3A:41:91:A8:5F
Certificate issuer:       /CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
Certificate serial:       010D0C9F4328584DCC6062FB1CB0F51A2240E160
Authority key identifier: 1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     17278
IP address blocks:        192.231.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:62:fb:1c:b0:f5:1a:22:40:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=41331b2d-d21a-49b0-bab5-7eade2c709d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:91:14:af:2e:1a:07:10:af:8b:8c:d4:1b:
                    85:23:e9:f3:42:9c:65:a0:85:0e:11:25:cb:0d:c8:
                    a7:3d:2b:85:26:ad:b8:85:5b:41:cb:f8:60:4b:f1:
                    31:eb:0f:45:a8:8d:48:18:c9:43:e7:8b:10:5b:36:
                    5d:0b:b1:a8:2c:98:49:93:77:96:c1:dc:f4:a4:b8:
                    c5:fa:5b:f4:88:cd:fe:e2:88:5d:83:b9:13:3c:bc:
                    7a:84:3e:49:40:e0:44:d2:53:bc:d8:dc:23:0e:f8:
                    c7:cf:d5:16:11:66:0f:b9:14:ee:8f:8f:0c:0f:a8:
                    5d:9c:d8:a1:df:d9:36:ea:09:e1:f2:8d:e8:39:69:
                    68:ac:69:8a:88:86:41:de:61:84:e1:8f:d0:b5:1a:
                    fb:27:fc:85:88:75:f3:f9:25:ea:c6:8c:e6:dc:ac:
                    5b:6a:33:f9:3d:32:f9:fd:33:6c:ca:eb:ac:6a:3f:
                    8e:98:1c:f2:5d:c6:d5:ed:dc:59:ec:9c:07:f8:13:
                    57:cf:14:b0:db:57:7d:d6:9c:51:cf:0d:65:47:af:
                    29:8f:04:f0:1b:31:3b:92:92:9f:26:38:a7:47:6c:
                    8c:9c:9f:3b:a5:9c:70:c5:30:4b:58:b9:63:22:a0:
                    fe:7a:e9:37:80:60:d7:08:7d:9b:73:40:b4:75:d9:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:82:3B:BE:0B:ED:A7:52:64:9B:32:A8:A6:DD:3A:41:91:A8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl

            X509v3 Authority Key Identifier:
                keyid:1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:10:9a:6a:c9:d1:13:e1:4f:a0:80:96:30:48:1b:59:61:a2:
         7b:b5:e7:f6:fb:92:7b:da:5a:e5:c5:b2:54:8b:08:ac:1a:cf:
         ee:73:f6:6d:2f:5e:64:3c:f8:27:6d:46:6c:37:50:8b:3e:00:
         99:57:22:3e:f2:39:7a:06:9d:33:60:b2:c2:1a:b7:fe:93:d5:
         38:58:a3:f5:df:cf:a9:37:a6:3a:d6:02:40:8f:a3:aa:04:fe:
         2f:e6:ac:bd:b7:75:ce:18:3d:e3:78:ba:b1:dd:c6:70:a9:2e:
         b8:87:a4:4f:7b:6f:78:40:50:37:60:6e:a7:c1:e3:e8:74:d8:
         56:a1:79:9b:21:0e:e2:5c:4e:df:97:97:7b:77:24:c1:19:ab:
         49:56:d9:64:53:42:99:72:87:26:08:36:44:e4:ee:02:e2:ad:
         2b:6c:ba:81:46:56:4b:21:d9:86:05:f6:e6:07:88:08:2c:2e:
         41:d3:68:f9:6c:06:f8:79:08:09:78:38:7b:b0:98:8b:a3:09:
         8f:41:79:16:5a:e2:a8:b2:71:f4:4a:63:ab:72:88:9e:7c:70:
         1f:ef:22:bf:be:40:ce:46:b9:0e:81:7d:7b:2e:64:d0:40:64:
         dd:d7:79:ed:a2:ef:18:4d:f6:31:ec:52:12:68:c6:9c:8b:71:
         ad:1a:53:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGL7HLD1GiJA4WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhjYjhhYmMtZWI5MC00MTc1LWE3NDQtZWNjYTdiZTM0
YjdkMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
NDEzMzFiMmQtZDIxYS00OWIwLWJhYjUtN2VhZGUyYzcwOWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x+RFK8uGgcQr4uM1BuFI+nzQpxloIUOESXL
DcinPSuFJq24hVtBy/hgS/Ex6w9FqI1IGMlD54sQWzZdC7GoLJhJk3eWwdz0pLjF
+lv0iM3+4ohdg7kTPLx6hD5JQOBE0lO82NwjDvjHz9UWEWYPuRTuj48MD6hdnNih
39k26gnh8o3oOWlorGmKiIZB3mGE4Y/QtRr7J/yFiHXz+SXqxozm3KxbajP5PTL5
/TNsyuusaj+OmBzyXcbV7dxZ7JwH+BNXzxSw21d91pxRzw1lR68pjwTwGzE7kpKf
JjinR2yMnJ87pZxwxTBLWLljIqD+euk3gGDXCH2bc0C0ddmdQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBjgju+C+2nUmSbMqim3TpBkahfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mOGNi
OGFiYy1lYjkwLTQxNzUtYTc0NC1lY2NhN2JlMzRiN2QvMTA4ZTRlMmMtNGRiZi0z
MjVlLThmZjctNzRjMmQ2ZTFlNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjhjYjhhYmMtZWI5MC00MTc1LWE3
NDQtZWNjYTdiZTM0YjdkL2Y4Y2I4YWJjLWViOTAtNDE3NS1hNzQ0LWVjY2E3YmUz
NGI3ZC5jcmwwHwYDVR0jBBgwFoAUH4VgVyko45Bel64xQCntO3Y7eb8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mOGNiOGFiYy1lYjkwLTQxNzUtYTc0NC1lY2Nh
N2JlMzRiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQQmmrJ0RPhT6CAljBIG1lhonu15/b7knvaWuXFslSLCKwaz+5z9m0v
XmQ8+CdtRmw3UIs+AJlXIj7yOXoGnTNgssIat/6T1ThYo/Xfz6k3pjrWAkCPo6oE
/i/mrL23dc4YPeN4urHdxnCpLriHpE97b3hAUDdgbqfB4+h02FaheZshDuJcTt+X
l3t3JMEZq0lW2WRTQplyhyYINkTk7gLirStsuoFGVksh2YYF9uYHiAgsLkHTaPls
Bvh5CAl4OHuwmIujCY9BeRZa4qiycfRKY6tyiJ58cB/vIr++QM5GuQ6BfXsuZNBA
ZN3Xee2i7xhN9jHsUhJoxpyLca0aUwI=
-----END CERTIFICATE-----
Generated at Wed May 13 03:06:42 2026 by rpki-client