Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/3054d24b-8a61-3068-91f5-46195ab6bab5.roa
File:                     3054d24b-8a61-3068-91f5-46195ab6bab5.roa (raw, json)
Hash identifier:          /ORuoVHDTztjl7zOjr9QM5+D0htt/V4sZg2G9k3OXuY=
Subject key identifier:   6A:39:63:83:6A:58:5B:CF:84:82:01:83:7B:CB:24:38:60:4D:EC:69
Certificate issuer:       /CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
Certificate serial:       010D0C9F4328584F03A78F8315DF6A0F2CB35340
Authority key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/3054d24b-8a61-3068-91f5-46195ab6bab5.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        159.212.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8f:83:15:df:6a:0f:2c:b3:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=6d2b5458-d983-4665-b4a5-c2bb54b1bea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:36:82:1b:c5:8f:42:8a:20:8d:0b:4e:f7:
                    25:cb:5e:e2:8e:b4:eb:41:7c:d8:aa:ab:f5:a3:d4:
                    6b:cb:98:52:e0:77:20:c9:cf:50:12:44:b2:1b:c0:
                    1e:cc:59:b4:3d:38:0e:68:3d:b8:9e:9d:72:b1:14:
                    91:52:86:c5:ef:92:86:18:7f:26:63:a7:33:2b:72:
                    22:03:51:8c:4a:47:f4:0a:65:04:6d:56:ff:98:23:
                    e0:19:8c:12:9c:62:a1:ee:ee:31:67:e6:3b:98:3c:
                    a9:3a:ca:b2:62:b4:0f:94:f0:bd:63:74:50:c6:37:
                    aa:b8:46:99:c3:62:48:dd:a5:4a:42:74:13:f6:ff:
                    d8:b6:ac:cb:61:7a:6c:17:1e:6a:ce:9e:1c:48:a2:
                    df:65:0f:85:ec:27:6a:e7:61:82:b8:e1:27:8f:67:
                    d7:6b:b8:f9:22:b1:57:86:06:9e:c5:2d:28:f7:6a:
                    0b:3d:f5:c1:1e:3c:e5:58:ec:e2:c9:c2:04:20:9a:
                    ac:79:4b:77:75:d1:4d:a0:39:2d:5c:ec:f6:5c:2c:
                    97:d8:e0:de:b6:61:52:79:fb:cb:dd:fe:12:55:78:
                    c6:9d:1e:ad:b9:87:f1:97:c3:c1:e2:4b:d7:75:6e:
                    24:68:df:d8:c2:65:af:48:54:79:fa:e9:e5:0f:fc:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:63:83:6A:58:5B:CF:84:82:01:83:7B:CB:24:38:60:4D:EC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/3054d24b-8a61-3068-91f5-46195ab6bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl

            X509v3 Authority Key Identifier:
                keyid:FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:b5:4c:94:ec:54:c4:7e:e9:54:d2:56:b9:14:1d:0e:5a:
         7f:df:70:09:60:5c:5b:4a:2f:7b:3e:8e:59:c5:5f:6f:5c:93:
         f2:51:ae:34:1e:63:8f:48:cf:de:7d:93:b5:1d:61:ce:3a:e5:
         ae:88:cb:90:22:85:6a:4b:bc:c0:a6:af:4b:1c:7d:84:94:ea:
         22:59:ae:3e:cc:93:fd:2a:b5:67:e1:77:67:ed:2c:07:b0:91:
         ab:35:d0:b8:e0:6d:61:fd:d9:f0:98:45:9a:49:4b:78:ce:b7:
         52:73:ac:72:34:e7:83:59:2d:60:7b:90:d0:41:40:07:3b:f2:
         ee:58:15:4a:e1:8d:4d:51:80:f3:91:54:19:bb:3c:c9:ae:cd:
         10:e0:06:94:0f:82:8a:20:bf:ee:62:1e:e2:85:b7:53:3b:d4:
         7d:f8:49:ac:ff:6f:8d:fb:d7:f2:bf:4c:ed:0a:c5:e4:87:9c:
         27:ae:6d:4b:d1:d0:c3:df:12:de:00:b8:38:c8:99:ec:69:e3:
         4d:1a:07:b9:a7:a3:be:aa:37:65:ae:fb:08:cb:f7:37:40:12:
         59:2f:c2:b5:30:9d:d0:6e:56:e0:3f:bd:48:57:9a:95:6f:db:
         d1:7b:96:ed:d0:69:08:7b:f6:54:20:78:6c:48:29:63:12:04:
         e6:49:ea:58
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Dp4+DFd9qDyyzU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhhYmM3ZWQtMGNmNC00NzM1LWI1OGYtZDZlODZmZGEw
ZDk3MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NmQyYjU0NTgtZDk4My00NjY1LWI0YTUtYzJiYjU0YjFiZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXs2ghvFj0KKII0LTvcly17ijrTrQXzYqqv1
o9Rry5hS4Hcgyc9QEkSyG8AezFm0PTgOaD24np1ysRSRUobF75KGGH8mY6czK3Ii
A1GMSkf0CmUEbVb/mCPgGYwSnGKh7u4xZ+Y7mDypOsqyYrQPlPC9Y3RQxjequEaZ
w2JI3aVKQnQT9v/YtqzLYXpsFx5qzp4cSKLfZQ+F7Cdq52GCuOEnj2fXa7j5IrFX
hgaexS0o92oLPfXBHjzlWOziycIEIJqseUt3ddFNoDktXOz2XCyX2ODetmFSefvL
3f4SVXjGnR6tuYfxl8PB4kvXdW4kaN/YwmWvSFR5+unlD/xadwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGo5Y4NqWFvPhIIBg3vLJDhgTexpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80OGFi
YzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZkYTBkOTcvMzA1NGQyNGItOGE2MS0z
MDY4LTkxZjUtNDYxOTVhYjZiYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDhhYmM3ZWQtMGNmNC00NzM1LWI1
OGYtZDZlODZmZGEwZDk3LzQ4YWJjN2VkLTBjZjQtNDczNS1iNThmLWQ2ZTg2ZmRh
MGQ5Ny5jcmwwHwYDVR0jBBgwFoAU/D6E9h//jBvTcrXNsnH2Y3kttkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4
NmZkYTBkOTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn9QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAany1TJTsVMR+6VTSVrkUHQ5af99wCWBcW0ovez6OWcVfb1yT8lGuNB5j
j0jP3n2TtR1hzjrlrojLkCKFaku8wKavSxx9hJTqIlmuPsyT/Sq1Z+F3Z+0sB7CR
qzXQuOBtYf3Z8JhFmklLeM63UnOscjTng1ktYHuQ0EFABzvy7lgVSuGNTVGA85FU
Gbs8ya7NEOAGlA+CiiC/7mIe4oW3UzvUffhJrP9vjfvX8r9M7QrF5IecJ65tS9HQ
w98S3gC4OMiZ7GnjTRoHuaejvqo3Za77CMv3N0ASWS/CtTCd0G5W4D+9SFealW/b
0XuW7dBpCHv2VCB4bEgpYxIE5knqWA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 17:47:33 2026 by rpki-client