Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e70eef63-0556-3de7-b11d-102f8ba6c3b3.roa
File:                     e70eef63-0556-3de7-b11d-102f8ba6c3b3.roa (raw, json)
Hash identifier:          75fn8nvEY5LGbPsyE4y9jRCxYql2zKLLdXMUcbB+unk=
Subject key identifier:   5D:7D:8D:62:CA:57:75:E9:13:86:96:12:A5:C5:74:EA:09:8A:EE:2B
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584D4394DAF409BED018DAF41580
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e70eef63-0556-3de7-b11d-102f8ba6c3b3.roa
Signing time:             Mon 23 Mar 2026 13:00:39 +0000
ROA not before:           Mon 23 Mar 2026 13:00:39 +0000
ROA not after:            Sun 21 Jun 2026 13:00:39 +0000
asID:                     212238
IP address blocks:        104.243.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:94:da:f4:09:be:d0:18:da:f4:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 23 13:00:39 2026 GMT
            Not After : Jun 21 13:00:39 2026 GMT
        Subject: CN=5a42168c-2d93-4883-bbd2-91a44d8aceae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:2b:68:5a:0e:c4:3f:b2:31:c0:df:9c:13:
                    7b:6c:f9:08:89:25:eb:3c:99:d2:b7:8a:1f:bb:bb:
                    db:92:ea:c4:f2:22:fb:f1:ae:f5:b3:f7:b9:6c:ff:
                    9f:63:7f:d2:9d:04:f0:d2:c4:53:fa:27:3f:ed:18:
                    63:7c:16:40:5a:0c:09:55:ca:82:db:58:0a:40:4f:
                    f8:ef:bf:5f:7c:37:37:30:d2:28:70:da:8d:c3:56:
                    b2:09:72:bb:2d:3b:e4:cf:52:23:24:b8:5d:3a:35:
                    e8:78:68:f3:52:16:22:24:9a:5a:7c:8f:65:dc:77:
                    70:00:76:7f:bd:5a:84:66:6a:a1:12:18:2f:81:ec:
                    74:f7:1f:d9:ff:77:0b:a9:42:26:3e:27:e8:db:79:
                    9d:8e:a5:93:bd:26:5a:a6:fb:10:4f:5c:25:98:38:
                    7f:f8:3f:bc:40:86:5d:18:6b:7f:5f:95:06:b7:6a:
                    1d:f3:04:99:61:59:e1:be:45:92:ed:f6:2e:04:7b:
                    c5:f0:e8:f2:33:10:cc:21:a2:1e:bf:06:7a:3e:08:
                    8b:f6:18:59:57:52:15:01:0c:50:35:d5:65:63:47:
                    d4:fc:2c:dc:98:d5:b1:ab:06:2d:15:b9:8a:f0:a0:
                    18:84:66:a5:27:3a:f2:0e:c3:57:fb:13:61:f4:8c:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7D:8D:62:CA:57:75:E9:13:86:96:12:A5:C5:74:EA:09:8A:EE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e70eef63-0556-3de7-b11d-102f8ba6c3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:78:8c:5b:33:4d:18:71:19:79:b7:5c:a5:a6:5b:16:1d:61:
         64:cd:6d:c6:9a:a4:13:36:31:25:8a:5d:13:84:e9:8b:24:4d:
         47:6e:dc:8e:1b:9a:57:c7:8a:52:38:99:6a:60:0a:eb:3e:be:
         5c:dd:3b:1b:5b:de:43:61:b2:f3:c7:ab:f4:4a:a5:be:65:89:
         fa:9d:a1:f9:30:5d:32:02:e3:36:94:f0:88:ba:eb:bc:57:ab:
         8f:c3:63:75:80:22:f4:55:a0:85:d3:dd:17:3f:d8:f9:14:06:
         bf:30:68:2e:5d:e8:a1:3e:99:f9:8e:26:1c:3a:c6:39:9a:8e:
         6f:f3:5d:92:ff:c5:39:d4:b4:3c:9a:f2:f2:e5:1d:27:1c:53:
         c2:34:6f:bf:28:c9:a3:21:91:17:c7:92:3f:17:ec:6b:40:c2:
         19:4f:b9:82:47:4c:34:1a:d0:85:39:1a:39:1f:0d:fa:bd:8d:
         6f:a3:5e:d4:c4:3e:fb:fb:49:c0:1f:c4:79:55:d8:7c:0e:8a:
         d7:ce:ab:08:d8:c6:94:ed:e6:ba:10:51:1f:ce:e6:c6:22:f7:
         d2:b0:6b:b9:25:5b:8b:bc:9c:a1:2c:3c:28:ef:93:c6:35:32:
         8b:b8:2d:ad:3d:9f:65:b8:8c:da:c3:3a:c9:0b:9d:b5:3a:2a:
         8d:4b:8d:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1DlNr0Cb7QGNr0FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDMyMzEzMDAzOVoXDTI2MDYyMTEzMDAzOVowLzEtMCsGA1UEAxMk
NWE0MjE2OGMtMmQ5My00ODgzLWJiZDItOTFhNDRkOGFjZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2graFoOxD+yMcDfnBN7bPkIiSXrPJnSt4of
u7vbkurE8iL78a71s/e5bP+fY3/SnQTw0sRT+ic/7RhjfBZAWgwJVcqC21gKQE/4
779ffDc3MNIocNqNw1ayCXK7LTvkz1IjJLhdOjXoeGjzUhYiJJpafI9l3HdwAHZ/
vVqEZmqhEhgvgex09x/Z/3cLqUImPifo23mdjqWTvSZapvsQT1wlmDh/+D+8QIZd
GGt/X5UGt2od8wSZYVnhvkWS7fYuBHvF8OjyMxDMIaIevwZ6PgiL9hhZV1IVAQxQ
NdVlY0fU/CzcmNWxqwYtFbmK8KAYhGalJzryDsNX+xNh9Izk5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF19jWLKV3XpE4aWEqXFdOoJiu4rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvZTcwZWVmNjMtMDU1Ni0z
ZGU3LWIxMWQtMTAyZjhiYTZjM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACl4jFszTRhxGXm3XKWmWxYdYWTNbcaapBM2MSWKXROE6YskTUdu3I4b
mlfHilI4mWpgCus+vlzdOxtb3kNhsvPHq/RKpb5lifqdofkwXTIC4zaU8Ii667xX
q4/DY3WAIvRVoIXT3Rc/2PkUBr8waC5d6KE+mfmOJhw6xjmajm/zXZL/xTnUtDya
8vLlHSccU8I0b78oyaMhkRfHkj8X7GtAwhlPuYJHTDQa0IU5GjkfDfq9jW+jXtTE
Pvv7ScAfxHlV2HwOitfOqwjYxpTt5roQUR/O5sYi99Kwa7klW4u8nKEsPCjvk8Y1
Mou4La09n2W4jNrDOskLnbU6Ko1Ljdo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:41 2026 by rpki-client