Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa
File:                     2a50901f-0d25-3890-8e17-0f072557c998.roa (raw, json)
Hash identifier:          Db8Af81ro7iBGw7g3PWnKflBaDE3ILzACR0Btp9gfTE=
Subject key identifier:   73:19:A4:89:35:19:AB:B8:C9:35:29:7C:1D:08:D2:67:5B:14:DA:EE
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584F4987574D8689225A529A1780
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     61138
IP address blocks:        130.12.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:57:4d:86:89:22:5a:52:9a:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2dd17720-af4b-4b9f-9b7f-b7125e9870be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:6d:32:2a:11:f2:68:d5:1f:51:96:31:ca:
                    0b:f3:69:cd:cb:fd:b5:27:e9:93:6f:2c:8f:fc:0d:
                    1b:b2:aa:da:7c:5f:81:68:50:52:82:c1:0a:89:ea:
                    74:88:3c:ff:b5:70:8b:cb:57:26:ee:ab:39:07:5b:
                    27:66:27:4c:fd:4a:f2:d8:63:f6:43:7b:4f:61:06:
                    ed:14:a9:d5:41:4a:7d:96:66:7b:49:bb:d5:5a:01:
                    6d:2c:89:e9:92:a1:cd:2a:81:d5:81:8c:dd:4f:ee:
                    fe:77:a2:9f:76:27:13:59:6b:39:41:83:43:e4:cb:
                    e1:51:fd:ef:d4:62:0a:4d:66:84:f4:52:9c:0f:68:
                    dc:59:c3:f3:84:99:e9:2c:fd:a1:8c:30:c5:15:67:
                    d6:fc:14:85:0c:c0:27:c4:76:78:f4:be:35:4e:2b:
                    8a:9b:d1:9a:f9:93:e8:23:fe:83:8b:76:61:62:8e:
                    37:7d:a1:ab:f3:4d:65:05:40:cb:1e:0b:99:df:57:
                    a3:a5:ba:c0:d3:07:20:68:ae:1f:6b:b6:41:bb:1e:
                    c2:c3:7b:bf:98:df:a2:17:f8:43:01:d1:68:3a:a5:
                    8f:3c:1e:7c:2c:e6:6a:e5:24:9c:68:96:af:ed:43:
                    06:c3:60:db:a1:7c:51:21:74:75:8b:f4:5f:18:16:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:A4:89:35:19:AB:B8:C9:35:29:7C:1D:08:D2:67:5B:14:DA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:23:bc:26:c0:37:ba:21:fc:71:66:29:fe:ed:e1:b3:88:bd:
         5d:df:82:c9:68:78:d9:21:79:0a:d7:03:ea:26:19:75:e8:80:
         98:7d:e0:c6:2d:5a:2a:6b:c9:45:68:56:41:4a:fd:22:85:59:
         6c:43:8a:fb:11:9c:4f:75:e2:e7:72:27:43:8c:45:15:06:71:
         c4:2a:3f:bb:bf:77:e5:4a:19:e9:22:07:66:c7:d4:c9:c4:44:
         0a:b7:0a:38:3a:1b:dc:a6:4d:53:d9:85:48:0e:8e:7e:29:3a:
         d8:b3:b1:a1:2f:7d:61:72:52:df:8c:28:fe:3f:d7:6c:f3:95:
         a3:04:ac:09:f6:60:52:fa:51:f9:63:10:21:63:e0:de:27:81:
         91:9c:d5:a7:29:d8:a1:4c:fd:c5:44:e0:b0:b3:57:b4:7e:a6:
         1e:6f:e1:61:61:c2:7d:25:60:e1:2b:7a:27:ab:d2:fb:4f:23:
         da:47:e3:a1:60:5c:e8:86:41:33:c3:7f:e0:75:fc:12:7a:64:
         57:9c:80:83:c7:9d:54:76:08:2d:f4:9d:59:c8:c3:00:36:cc:
         9a:3a:44:42:e2:4b:09:7e:c1:57:87:31:2d:59:09:39:86:4a:
         75:74:43:aa:e1:2d:bd:72:f5:3c:63:db:e9:3b:ba:eb:c9:ab:
         a4:49:4e:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1dNhokiWlKaF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmRkMTc3MjAtYWY0Yi00YjlmLTliN2YtYjcxMjVlOTg3MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJhtMioR8mjVH1GWMcoL82nNy/21J+mTbyyP
/A0bsqrafF+BaFBSgsEKiep0iDz/tXCLy1cm7qs5B1snZidM/Ury2GP2Q3tPYQbt
FKnVQUp9lmZ7SbvVWgFtLInpkqHNKoHVgYzdT+7+d6KfdicTWWs5QYND5MvhUf3v
1GIKTWaE9FKcD2jcWcPzhJnpLP2hjDDFFWfW/BSFDMAnxHZ49L41TiuKm9Ga+ZPo
I/6Di3ZhYo43faGr801lBUDLHguZ31ejpbrA0wcgaK4fa7ZBux7Cw3u/mN+iF/hD
AdFoOqWPPB58LOZq5SScaJav7UMGw2DboXxRIXR1i/RfGBbQKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMZpIk1Gau4yTUpfB0I0mdbFNruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvMmE1MDkwMWYtMGQyNS0z
ODkwLThlMTctMGYwNzI1NTdjOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUjvCbAN7oh/HFmKf7t4bOIvV3fgsloeNkheQrXA+omGXXogJh94MYt
WipryUVoVkFK/SKFWWxDivsRnE914udyJ0OMRRUGccQqP7u/d+VKGekiB2bH1MnE
RAq3Cjg6G9ymTVPZhUgOjn4pOtizsaEvfWFyUt+MKP4/12zzlaMErAn2YFL6Uflj
ECFj4N4ngZGc1acp2KFM/cVE4LCzV7R+ph5v4WFhwn0lYOEreier0vtPI9pH46Fg
XOiGQTPDf+B1/BJ6ZFecgIPHnVR2CC30nVnIwwA2zJo6RELiSwl+wVeHMS1ZCTmG
SnV0Q6rhLb1y9Txj2+k7uuvJq6RJTh4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:02:13 2026 by rpki-client