Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/fa77f979-11b5-30ea-8497-cb0986fdf69f.roa
File:                     fa77f979-11b5-30ea-8497-cb0986fdf69f.roa (raw, json)
Hash identifier:          ZUBOhD6SR1fzljSxgY+0HxpLamaBHOrROPq6W85lgvM=
Subject key identifier:   6A:CE:77:43:94:FC:57:36:18:F5:C2:2F:8F:D5:B2:42:1E:32:71:83
Certificate issuer:       /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Certificate serial:       010D0C9F4328584D703FFAC9079BF3DC10222800
Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/fa77f979-11b5-30ea-8497-cb0986fdf69f.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     19871
IP address blocks:        143.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:fa:c9:07:9b:f3:dc:10:22:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=ff811493-a558-40ec-bb27-f0e42906cf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:c1:13:51:86:7a:13:3e:9e:2d:6c:16:8f:
                    55:e7:41:62:6a:c8:a4:97:ef:f5:d6:5a:8f:9f:b9:
                    02:27:b1:db:09:03:51:60:32:d1:31:98:35:6a:96:
                    f9:e5:f3:a1:76:ab:49:58:8b:06:f8:38:bd:12:3e:
                    97:26:77:cc:dd:49:8d:f3:a4:82:d4:71:c5:8a:39:
                    a2:68:b9:22:ee:84:80:bc:ef:70:41:fb:ca:b4:49:
                    e0:04:8a:80:22:a6:68:28:c7:a5:ac:1e:bc:de:7e:
                    e0:71:72:c2:c1:ed:79:f9:97:9c:4b:7d:18:72:a3:
                    38:83:3e:b2:7e:da:5d:97:1b:eb:02:8a:f4:70:a3:
                    ad:d0:3c:85:25:21:fa:b6:0b:e3:a5:20:05:71:54:
                    c8:3d:72:28:0b:ee:fb:6b:a3:02:28:71:84:d8:a5:
                    82:27:6b:27:0f:a0:d7:c3:02:c7:3f:14:f3:ae:d9:
                    45:bb:1c:ea:ea:a3:14:a7:2d:6e:f2:49:dc:0b:4c:
                    d2:f3:73:e2:2f:6e:6b:29:06:2f:76:92:11:57:99:
                    13:8b:e3:6a:3e:e7:b4:4d:2d:96:3b:9c:46:59:7c:
                    13:5a:6c:99:b7:ca:17:17:dc:f8:41:51:45:35:ee:
                    be:f5:e0:76:4a:7c:38:6c:63:90:f7:a4:d5:d2:d1:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:77:43:94:FC:57:36:18:F5:C2:2F:8F:D5:B2:42:1E:32:71:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/fa77f979-11b5-30ea-8497-cb0986fdf69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl

            X509v3 Authority Key Identifier:
                keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:7d:bc:d3:d1:da:02:64:2f:01:63:45:04:f5:dd:72:88:
         eb:f0:31:fd:a6:63:d7:e3:50:36:1f:8a:32:30:a0:ef:aa:03:
         85:46:78:81:cf:de:f7:8f:4a:16:94:3e:9b:a7:7b:a3:61:4a:
         b0:30:4d:a0:a4:d4:78:4d:6e:3f:b0:18:c9:a5:52:a9:0e:15:
         1f:88:0f:c5:c6:24:59:87:b6:53:23:54:24:48:50:fd:73:61:
         31:e6:5e:3e:6f:15:68:c2:6c:d1:92:39:ae:66:8f:18:f7:98:
         be:76:59:72:04:a5:d4:a0:72:74:83:bd:2f:e9:f9:41:0c:c0:
         55:c2:c1:a1:74:7b:65:a9:96:ab:4c:21:8f:b7:cf:8a:35:f9:
         b1:37:78:fe:7a:3d:93:f0:74:34:a4:fd:80:21:6d:04:f7:5c:
         4a:bf:e3:78:57:c7:3d:e1:0c:e7:57:4f:d2:35:53:63:fc:52:
         65:29:ea:80:4b:48:04:5c:08:4a:ff:47:c3:cd:7b:83:dc:fc:
         1a:a2:30:cc:8a:ff:ba:90:4d:00:0f:44:19:8c:57:cf:c8:3f:
         30:69:2f:3d:78:30:df:cd:0d:02:87:7c:6f:41:ed:eb:30:f8:
         21:e0:5f:69:0e:d3:9e:6c:df:3a:cb:fd:8f:8c:f2:06:78:7c:
         fe:1a:07:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1wP/rJB5vz3BAiKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj
NmI5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZmY4MTE0OTMtYTU1OC00MGVjLWJiMjctZjBlNDI5MDZjZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvBE1GGehM+ni1sFo9V50Fiasikl+/11lqP
n7kCJ7HbCQNRYDLRMZg1apb55fOhdqtJWIsG+Di9Ej6XJnfM3UmN86SC1HHFijmi
aLki7oSAvO9wQfvKtEngBIqAIqZoKMelrB683n7gcXLCwe15+ZecS30YcqM4gz6y
ftpdlxvrAor0cKOt0DyFJSH6tgvjpSAFcVTIPXIoC+77a6MCKHGE2KWCJ2snD6DX
wwLHPxTzrtlFuxzq6qMUpy1u8kncC0zS83PiL25rKQYvdpIRV5kTi+NqPue0TS2W
O5xGWXwTWmyZt8oXF9z4QVFFNe6+9eB2Snw4bGOQ96TV0tHGkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGrOd0OU/Fc2GPXCL4/VskIeMnGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi
NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvZmE3N2Y5NzktMTFiNS0z
MGVhLTg0OTctY2IwOTg2ZmRmNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj
YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2
YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl
NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj18wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALc59vNPR2gJkLwFjRQT13XKI6/Ax/aZj1+NQNh+KMjCg76oDhUZ4gc/e
949KFpQ+m6d7o2FKsDBNoKTUeE1uP7AYyaVSqQ4VH4gPxcYkWYe2UyNUJEhQ/XNh
MeZePm8VaMJs0ZI5rmaPGPeYvnZZcgSl1KBydIO9L+n5QQzAVcLBoXR7ZamWq0wh
j7fPijX5sTd4/no9k/B0NKT9gCFtBPdcSr/jeFfHPeEM51dP0jVTY/xSZSnqgEtI
BFwISv9Hw817g9z8GqIwzIr/upBNAA9EGYxXz8g/MGkvPXgw380NAod8b0Ht6zD4
IeBfaQ7TnmzfOsv9j4zyBnh8/hoHIA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 19:31:40 2026 by rpki-client