Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa
File:                     df3639fb-d567-3ed8-bdb5-f77a98d07476.roa (raw, json)
Hash identifier:          Isw8u/WE8g1eOjdrB4WYO1uF/M7t629spyUAkE5T0WY=
Subject key identifier:   62:4B:17:26:8A:CE:F7:6B:8B:DA:BA:BC:33:BA:08:1F:8F:3E:13:DE
Certificate issuer:       /CN=0e425ca6-d583-4845-b329-c74ded17c483
Certificate serial:       010D0C9F4328584CAB8C63DA10D5F78FE0879600
Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     20200
IP address blocks:        130.12.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:63:da:10:d5:f7:8f:e0:87:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=0ac0e848-4ba1-4e40-9dc9-f81d64baf73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:03:0c:71:3a:e4:98:94:9f:14:97:fc:82:
                    e9:bc:fb:ca:7c:72:94:f5:48:a0:4c:86:e8:d2:3d:
                    d3:ba:18:2e:ff:1b:13:83:5e:68:46:48:de:d8:73:
                    8b:45:a1:00:c2:00:54:aa:bb:82:e6:79:4b:ba:68:
                    a6:73:56:2f:37:7d:c2:72:6f:83:47:7b:55:b6:a8:
                    c4:89:be:78:64:fd:0f:eb:c5:04:00:7a:43:a9:13:
                    3b:11:9c:12:5d:46:97:2c:94:3c:32:97:ca:e1:a8:
                    7d:c0:86:ba:b1:41:b5:40:5e:ae:29:4b:86:fb:8f:
                    51:bc:84:7f:e6:e8:53:49:78:67:4c:0b:4a:76:5f:
                    5e:62:9f:dd:70:eb:3d:00:95:90:52:88:4c:b9:70:
                    ad:2f:27:d6:43:e1:f2:6b:0a:0b:d3:df:3c:39:8f:
                    91:60:14:8b:16:f3:cc:41:94:66:51:e6:e6:71:cd:
                    90:a1:f9:c7:96:1f:35:be:2d:e8:a4:36:fe:2c:ac:
                    09:23:95:0a:d4:46:ee:13:95:84:7a:64:f2:98:63:
                    9d:37:8e:7b:f4:98:7b:0e:83:19:a1:ab:78:2d:f5:
                    11:5f:52:96:d3:60:1e:ef:99:6f:cc:c1:26:9a:58:
                    05:2a:9b:7b:ee:19:17:2d:cd:d8:69:4c:ca:98:57:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4B:17:26:8A:CE:F7:6B:8B:DA:BA:BC:33:BA:08:1F:8F:3E:13:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl

            X509v3 Authority Key Identifier:
                keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:7f:dc:75:63:76:a5:f3:3e:2c:f1:e2:6d:37:94:73:2a:99:
         a0:44:a9:5d:ea:ef:bb:4e:79:cf:26:ab:b0:5e:4b:e8:d6:5a:
         fa:f0:bc:7b:6a:c1:9a:e8:1c:68:10:93:d3:d7:56:f2:a6:13:
         74:df:60:bc:8a:56:72:06:ba:ef:47:3c:b1:77:8c:e4:c1:1e:
         ae:0d:87:0b:c3:cc:56:dc:1b:b3:35:b8:94:4d:c6:47:95:b7:
         11:54:f4:d9:76:3c:f3:2f:22:5e:86:28:3b:72:cb:f9:0d:be:
         12:de:8d:1c:3b:83:7d:dd:f9:49:72:18:07:15:20:78:c0:58:
         86:cd:0d:11:5a:b9:b8:de:3b:49:72:29:dc:b5:19:81:54:fa:
         d9:8b:4e:75:23:27:bf:fd:2d:81:93:a8:37:c0:8c:04:c5:b2:
         df:6c:f8:01:9d:ac:02:31:9f:8f:00:af:a1:d2:ab:a1:ae:7e:
         a0:37:51:97:10:df:70:43:f9:05:90:85:75:74:8f:48:13:35:
         79:ec:a0:7d:7c:05:3f:e7:16:70:1c:71:bf:3a:f5:33:97:3c:
         77:9a:e8:39:31:54:77:03:1d:e3:2d:f3:47:bb:a8:52:d6:1d:
         de:38:60:25:bf:6c:cf:88:db:52:59:1f:77:d3:32:02:2b:df:
         1d:7c:5d:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjGPaENX3j+CHlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0MjVjYTYtZDU4My00ODQ1LWIzMjktYzc0ZGVkMTdj
NDgzMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk
MGFjMGU4NDgtNGJhMS00ZTQwLTlkYzktZjgxZDY0YmFmNzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE0DDHE65JiUnxSX/ILpvPvKfHKU9UigTIbo
0j3Tuhgu/xsTg15oRkje2HOLRaEAwgBUqruC5nlLumimc1YvN33Ccm+DR3tVtqjE
ib54ZP0P68UEAHpDqRM7EZwSXUaXLJQ8MpfK4ah9wIa6sUG1QF6uKUuG+49RvIR/
5uhTSXhnTAtKdl9eYp/dcOs9AJWQUohMuXCtLyfWQ+HyawoL0988OY+RYBSLFvPM
QZRmUebmcc2QofnHlh81vi3opDb+LKwJI5UK1EbuE5WEemTymGOdN4579Jh7DoMZ
oat4LfURX1KW02Ae75lvzMEmmlgFKpt77hkXLc3YaUzKmFdExQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJLFyaKzvdri9q6vDO6CB+PPhPeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQy
NWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRkZWQxN2M0ODMvZGYzNjM5ZmItZDU2Ny0z
ZWQ4LWJkYjUtZjc3YTk4ZDA3NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGU0MjVjYTYtZDU4My00ODQ1LWIz
MjktYzc0ZGVkMTdjNDgzLzBlNDI1Y2E2LWQ1ODMtNDg0NS1iMzI5LWM3NGRlZDE3
YzQ4My5jcmwwHwYDVR0jBBgwFoAUqrP7ga5ZlVGHBQocTRtwPJLcwQQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQyNWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRk
ZWQxN2M0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggw/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANJ/3HVjdqXzPizx4m03lHMqmaBEqV3q77tOec8mq7BeS+jWWvrwvHtq
wZroHGgQk9PXVvKmE3TfYLyKVnIGuu9HPLF3jOTBHq4NhwvDzFbcG7M1uJRNxkeV
txFU9Nl2PPMvIl6GKDtyy/kNvhLejRw7g33d+UlyGAcVIHjAWIbNDRFaubjeO0ly
Kdy1GYFU+tmLTnUjJ7/9LYGTqDfAjATFst9s+AGdrAIxn48Ar6HSq6GufqA3UZcQ
33BD+QWQhXV0j0gTNXnsoH18BT/nFnAccb869TOXPHea6DkxVHcDHeMt80e7qFLW
Hd44YCW/bM+I21JZH3fTMgIr3x18XdY=
-----END CERTIFICATE-----
Generated at Fri Feb 20 05:02:17 2026 by rpki-client