Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/63460249-2220-32c5-9955-6a43a0eaaf99.roa
File:                     63460249-2220-32c5-9955-6a43a0eaaf99.roa (raw, json)
Hash identifier:          P56h0fZUUA3HiM6jjs0tyI0dlHVpePuLkrQiiv2Af0Q=
Subject key identifier:   E1:C6:F8:74:2E:FF:70:87:73:EC:89:9C:AE:03:B4:43:5B:ED:0A:15
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584CAE5728963FC29C745D258600
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/63460249-2220-32c5-9955-6a43a0eaaf99.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        192.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:28:96:3f:c2:9c:74:5d:25:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2228aecd-f0cc-4927-85d8-93ae114fdeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:52:06:9d:56:2b:2a:0e:6d:d8:fb:66:cc:
                    ea:dc:6c:58:61:0f:89:56:44:b5:ea:06:05:70:cb:
                    e1:7e:42:27:ae:10:dc:b2:d0:86:75:f7:59:66:04:
                    d9:fb:38:db:7b:ed:a6:8b:00:17:a2:7b:8b:7f:6e:
                    fd:33:e7:cb:db:9a:3d:ff:59:9a:9b:dd:79:e3:8c:
                    ed:cb:09:cd:b1:2a:d5:6d:e7:da:06:41:e4:20:8e:
                    c0:cc:65:e4:ec:cb:23:08:d0:d5:d7:28:7a:9f:71:
                    9a:53:c5:58:35:67:e5:30:74:45:03:59:99:db:ee:
                    51:7a:6b:1e:b2:aa:df:de:ca:ff:ac:0a:18:b2:44:
                    ec:14:ba:20:c9:e1:65:65:8c:1a:c9:03:6f:3b:b9:
                    3d:53:a2:ef:ca:1f:6c:17:65:f0:8f:af:99:66:7c:
                    ea:9a:36:cc:5a:ad:a1:44:81:82:ad:7a:34:3b:3d:
                    e6:01:80:d0:ca:b3:98:12:8f:b5:8f:ff:11:f2:fb:
                    10:72:b1:df:fe:e2:73:6e:7b:38:c8:77:18:2b:ae:
                    c7:22:6f:ca:b2:dd:0a:db:26:d0:8a:60:cd:66:1c:
                    27:aa:97:5c:45:9a:e3:37:a5:9f:85:d6:23:27:82:
                    a9:81:94:a5:1c:e0:96:bf:ad:b9:d1:4f:9c:8e:d4:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:F8:74:2E:FF:70:87:73:EC:89:9C:AE:03:B4:43:5B:ED:0A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/63460249-2220-32c5-9955-6a43a0eaaf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:7e:b6:9f:78:d9:2b:cc:b6:b1:a0:bc:a7:9b:76:7a:fc:
         bc:ab:af:1a:01:1f:b1:00:b7:c2:ce:ed:58:6e:70:73:65:a4:
         a5:c6:98:86:f4:db:58:63:4c:95:70:0a:79:59:9d:9d:e5:0b:
         6e:b9:a4:a5:d3:33:ec:98:00:10:06:a7:f1:46:40:35:89:75:
         60:74:b8:21:bb:c5:b2:a0:63:85:46:0a:2f:ca:13:21:7f:bf:
         4c:6a:6d:cb:ee:38:a6:65:b8:76:5a:75:cf:59:7f:97:f1:fe:
         36:d1:fd:ed:48:5c:2f:99:33:6a:b6:e7:da:08:00:45:ee:55:
         36:ec:d9:ef:8b:f1:4b:9b:0b:ef:4a:72:d3:9e:f9:03:05:79:
         cd:88:e4:e1:3b:5d:9a:44:19:8a:e4:0d:d8:57:fa:43:27:d5:
         41:fe:66:4f:3d:ea:39:d9:b8:7c:32:18:1e:01:dd:85:f5:24:
         85:38:e3:f4:0e:de:3e:fc:fd:a5:2c:20:90:98:bb:25:82:23:
         67:b3:5a:95:86:2f:64:82:25:1b:00:30:6c:82:3a:36:d1:70:
         b9:e2:41:2c:41:b3:2f:35:55:60:76:cb:be:fe:99:4a:5c:34:
         71:83:25:a5:25:ac:9c:9b:ae:82:63:91:69:4d:35:c1:05:e8:
         11:53:33:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyiWP8KcdF0lhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3
NTgzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjIyOGFlY2QtZjBjYy00OTI3LTg1ZDgtOTNhZTExNGZkZWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRSBp1WKyoObdj7Zszq3GxYYQ+JVkS16gYF
cMvhfkInrhDcstCGdfdZZgTZ+zjbe+2miwAXonuLf279M+fL25o9/1mam91544zt
ywnNsSrVbefaBkHkII7AzGXk7MsjCNDV1yh6n3GaU8VYNWflMHRFA1mZ2+5Remse
sqrf3sr/rAoYskTsFLogyeFlZYwayQNvO7k9U6Lvyh9sF2Xwj6+ZZnzqmjbMWq2h
RIGCrXo0Oz3mAYDQyrOYEo+1j/8R8vsQcrHf/uJzbns4yHcYK67HIm/Kst0K2ybQ
imDNZhwnqpdcRZrjN6WfhdYjJ4KpgZSlHOCWv6250U+cjtRQRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHG+HQu/3CHc+yJnK4DtENb7QoVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk
NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvNjM0NjAyNDktMjIyMC0z
MmM1LTk5NTUtNmE0M2EwZWFhZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx
ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0
NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2
MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOeGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgNfrafeNkrzLaxoLynm3Z6/LyrrxoBH7EAt8LO7VhucHNlpKXGmIb0
21hjTJVwCnlZnZ3lC265pKXTM+yYABAGp/FGQDWJdWB0uCG7xbKgY4VGCi/KEyF/
v0xqbcvuOKZluHZadc9Zf5fx/jbR/e1IXC+ZM2q259oIAEXuVTbs2e+L8UubC+9K
ctOe+QMFec2I5OE7XZpEGYrkDdhX+kMn1UH+Zk896jnZuHwyGB4B3YX1JIU44/QO
3j78/aUsIJCYuyWCI2ezWpWGL2SCJRsAMGyCOjbRcLniQSxBsy81VWB2y77+mUpc
NHGDJaUlrJybroJjkWlNNcEF6BFTM8Q=
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:03:09 2026 by rpki-client