Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
File:                     b945e2a1-3f45-305c-afce-b18a9404721d.roa (raw, json)
Hash identifier:          CKpmxdSQZN+x6+siYuJml57ujjk6bB/pbcIgHSsZeIc=
Subject key identifier:   74:CA:6A:CD:6C:E8:0D:C6:CA:7E:B3:27:18:A8:DF:49:0B:AC:95:51
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584DD625B994A0A71F7D435A3800
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     397976
IP address blocks:        195.85.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b9:94:a0:a7:1f:7d:43:5a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=0cfd3b26-e103-43f9-ac97-f58b44e5be1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:be:5a:c7:01:7e:60:1a:ed:f6:15:c9:41:
                    36:23:f6:40:5e:be:35:62:d8:f2:72:01:4b:8f:93:
                    2a:87:ca:17:8c:12:aa:df:44:0d:b6:d6:b9:b3:0d:
                    01:3b:8f:99:12:fe:ed:0e:13:13:50:32:13:4e:90:
                    5e:8a:4e:a4:d2:32:f6:b0:05:33:ff:89:13:9c:25:
                    3f:39:f5:a9:f7:51:de:e1:c8:d0:b2:36:f3:34:f8:
                    e4:69:1c:f8:82:99:e8:af:dd:fe:ca:83:37:1e:28:
                    23:68:34:8d:84:2e:be:8f:5f:21:fb:ec:27:bd:e9:
                    a3:45:26:3c:04:9c:36:6d:22:5a:31:d7:8c:4f:2b:
                    95:cb:ce:0b:fd:3f:ca:e6:61:bc:bd:d5:d1:6a:16:
                    e2:e1:93:fd:7b:7a:e9:65:5f:12:5d:53:2e:27:ef:
                    be:27:e6:70:fe:96:64:42:4b:3b:3e:4e:30:7e:bd:
                    60:3e:4d:56:b9:52:0a:57:3e:18:a6:3d:6d:43:74:
                    06:55:10:c2:69:ed:55:e9:f6:58:78:cf:bd:7d:b6:
                    de:dc:8a:fc:33:70:8d:d7:6d:06:01:a6:58:78:0a:
                    1b:65:11:59:3c:d2:a4:ee:25:3c:76:15:13:b3:62:
                    34:0b:9f:79:89:9c:ef:21:8b:3a:c3:91:f8:7d:7a:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:6A:CD:6C:E8:0D:C6:CA:7E:B3:27:18:A8:DF:49:0B:AC:95:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:f2:4f:8b:99:b7:0e:85:78:71:06:94:61:41:8d:92:26:
         aa:14:38:b1:b3:08:18:74:2f:c6:b0:4c:5f:7f:ce:a3:e9:ed:
         aa:e9:37:5d:96:2c:a2:92:ec:eb:09:aa:b2:e0:fe:f1:4d:56:
         37:9d:40:ce:20:ba:04:73:ee:02:85:b4:1f:3a:8f:3b:f3:67:
         b5:2d:e5:b7:a2:cc:c7:4a:80:1e:de:72:a3:15:58:9b:32:2f:
         e0:03:fe:e1:af:92:1c:e4:b6:13:4e:da:1f:06:0c:ec:38:a8:
         d2:61:fd:0b:93:a2:fe:85:b7:c3:8c:dc:0a:dc:9e:1d:bb:c1:
         53:21:6d:38:86:3b:5b:5d:5a:e7:2a:57:76:52:26:8b:91:75:
         de:41:de:d0:b6:ba:bb:37:55:0f:a7:ff:ef:25:49:57:95:3b:
         e7:af:86:88:df:b1:69:83:82:21:6d:b4:9b:dd:c8:76:0f:18:
         6f:72:27:a0:3c:9a:78:b9:6b:9c:84:32:75:24:f4:9b:52:41:
         1f:4d:b3:ab:94:32:7d:77:c3:9d:fa:64:43:67:2c:24:5d:6d:
         f0:92:23:89:2d:26:8e:51:11:d2:0c:48:69:09:70:80:2a:66:
         5a:90:db:95:eb:43:ac:19:61:b8:d0:e7:da:91:b7:a7:28:ba:
         82:12:7d:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbmUoKcffUNaOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3
ODQyMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk
MGNmZDNiMjYtZTEwMy00M2Y5LWFjOTctZjU4YjQ0ZTViZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntK+WscBfmAa7fYVyUE2I/ZAXr41YtjycgFL
j5Mqh8oXjBKq30QNtta5sw0BO4+ZEv7tDhMTUDITTpBeik6k0jL2sAUz/4kTnCU/
OfWp91He4cjQsjbzNPjkaRz4gpnor93+yoM3HigjaDSNhC6+j18h++wnvemjRSY8
BJw2bSJaMdeMTyuVy84L/T/K5mG8vdXRahbi4ZP9e3rpZV8SXVMuJ+++J+Zw/pZk
Qks7Pk4wfr1gPk1WuVIKVz4Ypj1tQ3QGVRDCae1V6fZYeM+9fbbe3Ir8M3CN120G
AaZYeAobZRFZPNKk7iU8dhUTs2I0C595iZzvIYs6w5H4fXrviwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTKas1s6A3Gyn6zJxio30kLrJVRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh
YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvYjk0NWUyYTEtM2Y0NS0z
MDVjLWFmY2UtYjE4YTk0MDQ3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx
OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh
Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy
OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1V2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq58k+LmbcOhXhxBpRhQY2SJqoUOLGzCBh0L8awTF9/zqPp7arpN12W
LKKS7OsJqrLg/vFNVjedQM4gugRz7gKFtB86jzvzZ7Ut5beizMdKgB7ecqMVWJsy
L+AD/uGvkhzkthNO2h8GDOw4qNJh/QuTov6Ft8OM3Arcnh27wVMhbTiGO1tdWucq
V3ZSJouRdd5B3tC2urs3VQ+n/+8lSVeVO+evhojfsWmDgiFttJvdyHYPGG9yJ6A8
mni5a5yEMnUk9JtSQR9Ns6uUMn13w536ZENnLCRdbfCSI4ktJo5REdIMSGkJcIAq
ZlqQ25XrQ6wZYbjQ59qRt6couoISfeQ=
-----END CERTIFICATE-----
Generated at Thu May 21 21:56:12 2026 by rpki-client