Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa
File:                     212bf11e-b3d9-3478-98f7-910f5122a518.roa (raw, json)
Hash identifier:          pFLjuugqTDP97rizv0GWVMcKj0sMI3X/s9Y9FOO/QK8=
Subject key identifier:   EE:ED:E1:49:90:AF:88:3C:F5:41:14:C7:6F:2B:73:FE:95:8C:19:8A
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584F268D08311A4045CD224D1900
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        216.230.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:08:31:1a:40:45:cd:22:4d:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=c56c1e06-ebcd-49a2-af86-45e6191126ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:74:c7:e9:04:43:c3:a8:35:28:39:9b:86:
                    c7:d6:f7:ca:2f:7a:c2:12:42:93:e4:03:82:c9:2c:
                    e2:1c:01:70:71:a1:8e:b3:73:cf:d9:3e:04:f7:7f:
                    ed:f2:79:e8:ed:c6:7c:7e:5d:84:72:b3:a5:87:3f:
                    b8:01:76:47:31:5a:09:c1:51:8d:60:02:cd:53:db:
                    c4:8b:46:34:5e:10:ac:97:0e:39:cd:0d:70:7c:e7:
                    ab:28:eb:7b:16:e3:b6:a4:ec:4b:2b:24:87:3b:61:
                    a4:fc:fd:ea:98:50:13:f2:81:20:d8:71:fb:aa:db:
                    dc:25:8d:4d:39:8d:61:35:b3:2b:59:71:0f:9e:c6:
                    40:0d:58:16:2e:15:95:d1:56:47:2a:1e:59:32:5f:
                    a0:14:59:9f:c7:33:7b:fb:0c:67:34:c5:16:c0:33:
                    74:ed:f3:3d:84:d7:8e:89:4f:b7:32:ec:71:3a:5c:
                    1a:69:8c:0a:c0:ea:72:55:44:8a:27:99:9d:45:7e:
                    30:12:a5:d1:fd:94:46:12:e4:89:bb:5d:76:55:08:
                    38:a8:b1:0e:22:08:18:9c:cc:9e:b9:bb:f7:1e:99:
                    50:77:13:f1:e9:46:90:1b:f9:3d:49:d2:55:dc:d6:
                    67:9b:ec:77:b1:e7:c3:98:27:63:17:f2:f3:2a:74:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:E1:49:90:AF:88:3C:F5:41:14:C7:6F:2B:73:FE:95:8C:19:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:69:c5:3b:9d:5d:cb:00:f0:6e:80:a6:17:94:13:4d:96:db:
         23:44:51:e9:07:29:99:73:e6:90:44:0b:e5:c9:27:fc:84:62:
         54:f9:07:c2:e1:f8:1c:2d:66:c7:fe:81:7b:ea:6c:e5:15:1b:
         2c:47:0a:24:06:b1:c3:c1:c4:0b:a2:d3:50:af:30:d6:4d:d1:
         a9:38:3f:ab:ee:27:65:3a:01:4f:6a:d8:b3:b4:e4:70:f6:05:
         c0:6a:93:9a:9f:3a:1c:3f:2e:d7:b3:ec:52:3a:b9:eb:ca:39:
         bf:70:59:89:1b:f7:8a:40:b0:c6:ac:cb:85:7b:ac:06:80:03:
         a9:4d:a2:77:c7:dd:c5:5d:c8:d1:f5:9e:1a:7c:95:0f:ac:57:
         8f:24:6a:a6:65:02:a8:9d:b6:95:8a:3c:cb:3a:10:83:cf:04:
         78:88:88:3a:6b:2a:d2:24:e5:89:ff:fa:2f:24:37:f7:98:83:
         8d:36:9e:eb:52:64:d4:b3:15:a2:a5:be:35:1d:48:e6:66:59:
         1c:cc:75:2e:db:49:4f:c3:fd:7a:7c:1f:64:ef:d7:06:93:43:
         9c:c1:f6:ff:b0:2b:66:44:af:5c:f0:8e:19:a8:8f:5f:f8:d2:
         18:a0:e9:f8:ab:2b:50:c7:45:c4:f8:e9:83:3f:8e:09:6b:71:
         9e:4d:81:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQgxGkBFzSJNGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm
OTg5MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
YzU2YzFlMDYtZWJjZC00OWEyLWFmODYtNDVlNjE5MTEyNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMd0x+kEQ8OoNSg5m4bH1vfKL3rCEkKT5AOC
ySziHAFwcaGOs3PP2T4E93/t8nno7cZ8fl2EcrOlhz+4AXZHMVoJwVGNYALNU9vE
i0Y0XhCslw45zQ1wfOerKOt7FuO2pOxLKySHO2Gk/P3qmFAT8oEg2HH7qtvcJY1N
OY1hNbMrWXEPnsZADVgWLhWV0VZHKh5ZMl+gFFmfxzN7+wxnNMUWwDN07fM9hNeO
iU+3MuxxOlwaaYwKwOpyVUSKJ5mdRX4wEqXR/ZRGEuSJu112VQg4qLEOIggYnMye
ubv3HplQdxPx6UaQG/k9SdJV3NZnm+x3sefDmCdjF/LzKnTVPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7t4UmQr4g89UEUx28rc/6VjBmKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1
MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMjEyYmYxMWUtYjNkOS0z
NDc4LTk4ZjctOTEwZjUxMjJhNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1
NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1
Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk
MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVpxTudXcsA8G6ApheUE02W2yNEUekHKZlz5pBEC+XJJ/yEYlT5B8Lh
+BwtZsf+gXvqbOUVGyxHCiQGscPBxAui01CvMNZN0ak4P6vuJ2U6AU9q2LO05HD2
BcBqk5qfOhw/Ltez7FI6uevKOb9wWYkb94pAsMasy4V7rAaAA6lNonfH3cVdyNH1
nhp8lQ+sV48kaqZlAqidtpWKPMs6EIPPBHiIiDprKtIk5Yn/+i8kN/eYg402nutS
ZNSzFaKlvjUdSOZmWRzMdS7bSU/D/Xp8H2Tv1waTQ5zB9v+wK2ZEr1zwjhmoj1/4
0hig6firK1DHRcT46YM/jglrcZ5Ngcs=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:09:06 2026 by rpki-client