Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          icSC93IafcXRQ4D6QwvVKarjqCYwotZSIKwe92Ju/Lc=
Subject key identifier:   B1:AA:52:3B:8A:91:32:C6:28:CE:CA:23:3F:CF:8B:18:36:8E:5A:65
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F4328584D40CA3C549DC17E2B869F1480
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3c:54:9d:c1:7e:2b:86:9f:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1418de7e-0169-470e-81a4-ca4ea7c2fca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:d3:f2:74:04:48:27:b5:91:b3:56:fd:22:
                    6d:e0:e5:16:0b:ba:5d:73:34:b7:4b:2a:b2:5a:28:
                    b0:24:0a:d8:e6:f7:06:59:75:10:84:da:1f:d9:85:
                    9c:c2:53:ac:6f:6d:a5:24:b7:a0:0c:6c:5c:4d:80:
                    8a:59:3d:e2:ce:96:d9:9e:2b:f1:63:f6:b7:c8:4e:
                    bc:01:c6:6d:46:8f:59:3a:19:b8:2f:75:6e:bb:a7:
                    fc:54:c2:cb:2c:69:cc:54:b9:50:07:d5:d3:7a:fd:
                    d5:38:2c:f4:be:e4:f4:31:01:31:bb:df:ef:ab:ab:
                    17:e0:72:d1:6f:30:e3:e7:d2:88:fd:2f:d4:7b:5f:
                    5b:dc:12:92:86:45:d1:5b:7a:df:9e:72:ae:24:6d:
                    b7:01:0b:7b:da:0e:8f:ed:e4:b1:a7:b5:32:e9:a3:
                    c8:d1:3a:05:f2:47:36:c9:08:5c:0c:45:43:c7:72:
                    88:ca:2c:9b:5a:43:b0:e5:65:5d:32:69:9f:75:60:
                    b8:bf:16:eb:39:56:70:08:d0:0b:69:54:2e:45:ea:
                    de:cf:40:ae:99:89:79:9e:8c:e3:51:75:19:e2:86:
                    2d:98:f6:8c:ca:c2:2c:e5:52:0a:98:c6:a6:e0:22:
                    fb:b5:8e:e7:be:86:65:c8:97:29:53:90:40:c4:4b:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:52:3B:8A:91:32:C6:28:CE:CA:23:3F:CF:8B:18:36:8E:5A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:31:3c:16:75:34:0f:7f:5c:9c:1d:63:b6:03:bf:84:06:f2:
         a5:0d:a1:49:9f:b7:53:70:f7:8c:1a:9c:43:ba:ca:96:bf:56:
         a3:28:93:98:cf:31:b9:53:fb:2d:c9:b1:e9:02:38:27:ca:18:
         ec:2b:92:a7:8e:2e:44:a9:ac:18:2e:44:39:8e:3c:7d:b2:8b:
         40:76:e6:7f:8f:04:b6:6f:c9:ee:af:4b:cf:1e:84:41:30:a1:
         8e:b3:0c:dc:c2:63:a0:c5:03:37:98:3f:fd:d1:a4:61:6a:62:
         a0:22:24:56:1f:0c:5d:7a:78:b7:56:5a:6b:89:36:ca:29:37:
         5b:ac:82:80:d8:73:84:5b:1f:75:ef:58:ed:05:08:0e:f0:aa:
         f1:7d:ff:c0:c5:5a:0d:31:40:4d:53:26:6c:05:4a:6f:f0:e8:
         58:6c:64:6e:76:c4:d0:ac:47:79:0f:5f:3f:c5:d0:7e:b3:eb:
         dd:83:66:9b:07:ab:55:d9:a7:72:71:bc:7b:11:0b:c3:89:fd:
         fb:f3:f5:a2:13:9c:4f:f8:80:a1:f4:40:25:27:58:53:54:59:
         b3:6d:71:14:fb:79:4e:fe:98:6a:90:01:42:bf:c2:39:98:d4:
         a1:83:85:75:46:d6:66:60:fd:ca:7a:9f:8d:2b:e1:d6:b2:30:
         bf:e7:8d:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjxUncF+K4afFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjY2QzYjMtZGRhNS00NTNmLWI1MGQtMGExZTllNGQ0
ZWY0MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MTQxOGRlN2UtMDE2OS00NzBlLTgxYTQtY2E0ZWE3YzJmY2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizvT8nQESCe1kbNW/SJt4OUWC7pdczS3Syqy
WiiwJArY5vcGWXUQhNof2YWcwlOsb22lJLegDGxcTYCKWT3izpbZnivxY/a3yE68
AcZtRo9ZOhm4L3Vuu6f8VMLLLGnMVLlQB9XTev3VOCz0vuT0MQExu9/vq6sX4HLR
bzDj59KI/S/Ue19b3BKShkXRW3rfnnKuJG23AQt72g6P7eSxp7Uy6aPI0ToF8kc2
yQhcDEVDx3KIyiybWkOw5WVdMmmfdWC4vxbrOVZwCNALaVQuRerez0CumYl5nozj
UXUZ4oYtmPaMysIs5VIKmMam4CL7tY7nvoZlyJcpU5BAxEvrxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGqUjuKkTLGKM7KIz/Pixg2jlplMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGNj
ZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFlOWU0ZDRlZjQvOTNhZjVkN2YtMTQ1YS0z
Yjc1LTk2MzUtYmQ3ODAwNzhiOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRjY2QzYjMtZGRhNS00NTNmLWI1
MGQtMGExZTllNGQ0ZWY0L2FkY2NkM2IzLWRkYTUtNDUzZi1iNTBkLTBhMWU5ZTRk
NGVmNC5jcmwwHwYDVR0jBBgwFoAUv8KbwFu17C9/2Z0ujo92iFdsHpEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGNjZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFl
OWU0ZDRlZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8M0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYxPBZ1NA9/XJwdY7YDv4QG8qUNoUmft1Nw94wanEO6ypa/VqMok5jP
MblT+y3JsekCOCfKGOwrkqeOLkSprBguRDmOPH2yi0B25n+PBLZvye6vS88ehEEw
oY6zDNzCY6DFAzeYP/3RpGFqYqAiJFYfDF16eLdWWmuJNsopN1usgoDYc4RbH3Xv
WO0FCA7wqvF9/8DFWg0xQE1TJmwFSm/w6FhsZG52xNCsR3kPXz/F0H6z692DZpsH
q1XZp3JxvHsRC8OJ/fvz9aITnE/4gKH0QCUnWFNUWbNtcRT7eU7+mGqQAUK/wjmY
1KGDhXVG1mZg/cp6n40r4dayML/njTU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:03 2026 by rpki-client