Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa
File:                     28882b8d-debf-3cd2-ac74-b73104b5c21a.roa (raw, json)
Hash identifier:          F1F5ESaI0q608oqlM16uYpri89+wd/10i/zdncQOCpE=
Subject key identifier:   64:37:69:89:41:C1:F0:D2:CF:BA:87:94:33:1B:FA:FC:B1:4F:C8:3C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E147EDFF9A8C32747EFCD9100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     21859
IP address blocks:        185.194.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:df:f9:a8:c3:27:47:ef:cd:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=9099df72-3ffb-44b2-9386-cc38d3668e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:d1:e0:ab:47:24:b0:fb:87:d6:b1:26:c3:
                    e7:92:73:50:39:2f:aa:3a:69:ad:3f:6c:0a:66:2d:
                    79:1c:74:70:fc:4d:07:af:58:88:18:38:fb:55:2d:
                    87:f4:09:0a:92:fa:13:f8:9b:66:5a:4a:55:73:a1:
                    c3:94:10:dc:49:03:2b:8f:4d:a6:ff:d6:ea:47:a0:
                    f4:64:04:75:ad:7f:2c:05:a8:0e:0d:04:53:d6:e5:
                    d1:e2:e1:f7:d0:83:11:85:98:85:f3:0b:54:98:97:
                    98:23:ed:0f:b1:46:2d:8c:e5:eb:43:7f:41:3c:f2:
                    ed:e3:c7:80:f2:f4:03:f9:c7:d8:d4:3b:53:c6:bf:
                    01:8c:b5:1e:eb:6b:fd:55:52:b9:ef:43:ab:89:e8:
                    25:4c:db:e0:df:7c:1a:17:5a:e5:30:8b:5b:7f:95:
                    50:e9:fb:3f:9b:82:5d:a2:00:9c:22:83:7b:df:b4:
                    d9:eb:79:33:8a:5b:7f:10:8d:7b:f6:45:e3:62:9e:
                    68:71:78:fa:78:a2:e8:5b:7f:74:99:d6:df:0c:21:
                    37:31:2a:d5:c9:ff:9b:04:17:f5:4f:8c:41:e5:32:
                    55:b1:4e:34:12:eb:c2:af:48:26:e4:a6:e7:44:79:
                    30:45:ed:29:25:7f:89:8f:f0:3e:a6:41:9a:fd:2e:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:37:69:89:41:C1:F0:D2:CF:BA:87:94:33:1B:FA:FC:B1:4F:C8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:9d:a8:ae:74:61:e1:b6:c7:a6:dc:8f:d5:10:6a:20:05:
         9b:9f:4b:f8:80:23:81:cf:6f:bb:f1:46:e6:c8:82:57:e6:41:
         b2:25:8d:24:1c:2f:fd:58:dd:4c:fc:78:4d:fc:2f:8d:94:e6:
         db:b4:26:05:d6:36:11:8a:e0:3d:3d:ac:b5:20:34:0f:65:65:
         65:ff:1f:c0:18:39:0c:b7:d0:14:7e:e8:7a:d4:19:c1:2d:4e:
         97:74:10:16:43:8a:28:23:c6:b5:a7:2d:c8:57:38:14:a9:fd:
         50:0c:b2:50:ca:1e:75:63:27:3c:46:fe:d9:fe:98:a1:02:42:
         50:93:a4:50:b2:84:a0:50:72:ff:66:99:65:84:cb:bd:af:a3:
         e3:80:b4:98:25:54:06:19:eb:3b:dd:3f:22:1c:4e:f4:47:44:
         88:9a:c0:3f:c5:2c:f2:eb:0a:ef:9b:99:de:46:ea:d2:de:1e:
         9e:06:4f:02:fc:59:f2:4d:3c:65:00:42:31:99:c4:5a:6a:01:
         6c:46:aa:0e:c2:da:7b:82:74:1d:c1:6b:24:09:81:22:55:9f:
         51:ac:bd:db:44:6d:24:4c:14:b9:e9:55:d1:06:34:69:8f:b1:
         d9:18:a6:31:06:3c:ac:55:8a:c6:96:cc:09:8b:b8:12:f5:73:
         91:53:60:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Uft/5qMMnR+/NkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
OTA5OWRmNzItM2ZmYi00NGIyLTkzODYtY2MzOGQzNjY4ZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTR4KtHJLD7h9axJsPnknNQOS+qOmmtP2wK
Zi15HHRw/E0Hr1iIGDj7VS2H9AkKkvoT+JtmWkpVc6HDlBDcSQMrj02m/9bqR6D0
ZAR1rX8sBagODQRT1uXR4uH30IMRhZiF8wtUmJeYI+0PsUYtjOXrQ39BPPLt48eA
8vQD+cfY1DtTxr8BjLUe62v9VVK570OrieglTNvg33waF1rlMItbf5VQ6fs/m4Jd
ogCcIoN737TZ63kzilt/EI179kXjYp5ocXj6eKLoW390mdbfDCE3MSrVyf+bBBf1
T4xB5TJVsU40EuvCr0gm5KbnRHkwRe0pJX+Jj/A+pkGa/S5OzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ3aYlBwfDSz7qHlDMb+vyxT8g8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjg4ODJiOGQtZGViZi0z
Y2QyLWFjNzQtYjczMTA0YjVjMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucLlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFcnaiudGHhtsem3I/VEGogBZufS/iAI4HPb7vxRubIglfmQbIljSQc
L/1Y3Uz8eE38L42U5tu0JgXWNhGK4D09rLUgNA9lZWX/H8AYOQy30BR+6HrUGcEt
Tpd0EBZDiigjxrWnLchXOBSp/VAMslDKHnVjJzxG/tn+mKECQlCTpFCyhKBQcv9m
mWWEy72vo+OAtJglVAYZ6zvdPyIcTvRHRIiawD/FLPLrCu+bmd5G6tLeHp4GTwL8
WfJNPGUAQjGZxFpqAWxGqg7C2nuCdB3BayQJgSJVn1GsvdtEbSRMFLnpVdEGNGmP
sdkYpjEGPKxVisaWzAmLuBL1c5FTYJ4=
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:53:56 2026 by rpki-client