Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa
File:                     85ed9130-391f-3b65-89fa-da75238163af.roa (raw, json)
Hash identifier:          u4shIyA5I5eMHj7iQRSgawP/oubb1tEJARkEx/EIFIs=
Subject key identifier:   6C:F1:AC:53:E4:3C:6C:EC:2F:41:67:55:49:D1:F8:8E:6D:5D:43:BF
Certificate issuer:       /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
Certificate serial:       010D0C9F4328584D5E1A849F58F29BC493155A30
Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53428
IP address blocks:        204.12.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:84:9f:58:f2:9b:c4:93:15:5a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=743d9eb9-7c21-4cb7-87c7-8c3e56c54eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:d5:d7:8e:e6:e0:e6:79:db:2c:cd:d5:84:
                    6f:29:6d:a5:28:38:52:8f:27:b3:8c:e2:dc:0e:a0:
                    dd:c8:2a:5b:c0:5f:fb:df:04:86:51:eb:7a:b8:4a:
                    c2:c5:8d:56:86:ed:96:00:16:20:f2:87:9d:c0:e7:
                    6a:e7:59:3f:36:f1:0a:d6:19:03:2d:51:9d:12:3a:
                    d8:20:05:f6:07:4b:f2:18:9e:65:53:19:b7:85:19:
                    ed:69:75:0b:0b:99:1e:82:85:ca:9e:80:7b:a0:d5:
                    e7:08:0c:e5:c8:d7:13:80:76:ba:f0:2d:b3:80:5b:
                    7c:ab:96:5a:52:e4:98:8c:95:4c:97:3f:60:21:f1:
                    a2:e0:ba:67:e7:90:18:4d:16:1a:36:84:a1:d6:82:
                    dd:6f:e1:7b:af:d0:e9:75:bc:c9:b6:ad:72:69:69:
                    d1:e8:b2:b0:2d:7c:07:d1:6f:5f:e1:59:54:8a:24:
                    9e:6e:f0:b1:f5:ac:7d:f1:61:e3:47:86:82:35:cc:
                    fb:a2:eb:7a:b4:41:70:17:6a:4a:e1:db:84:c7:0a:
                    df:0a:31:5e:7a:76:78:68:5d:89:53:36:fe:6f:2e:
                    45:6d:d5:1f:0c:f8:bc:c0:fd:c9:64:36:63:b6:96:
                    88:b0:2f:f3:98:a4:4c:31:d1:74:85:44:ba:76:e4:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:AC:53:E4:3C:6C:EC:2F:41:67:55:49:D1:F8:8E:6D:5D:43:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.12.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:38:4c:a0:ef:66:50:05:82:f2:e1:63:74:32:d9:dd:5d:
         e2:a5:d3:ac:15:df:2b:1e:bc:f1:6c:6e:a4:f1:6e:9c:c2:b7:
         7d:a0:bd:9d:4e:3d:0b:98:b1:97:cb:68:37:f4:f6:94:af:db:
         5d:6a:15:d2:48:d2:a5:0f:1c:08:35:db:9a:f7:b1:9e:7d:59:
         cf:a0:67:a0:13:dd:d9:34:e8:07:d1:ce:1e:12:36:e5:f5:68:
         70:c1:02:49:f6:8b:4e:5f:73:4b:e9:3d:be:92:9b:f1:01:e4:
         07:a3:10:7d:01:bc:aa:f7:5c:a9:8e:36:83:2b:13:56:5f:e9:
         41:73:f1:10:d8:4c:c1:59:ad:5a:3e:75:a0:d7:ac:fd:5b:de:
         a6:7f:7e:c0:42:58:51:ba:f8:d1:45:cd:b5:7e:41:af:74:4a:
         f9:93:2a:e5:5e:13:21:38:e4:3e:07:bb:e0:1f:da:64:bd:95:
         f4:bb:71:ed:b7:d7:5c:08:f9:2a:13:fe:1a:5a:f3:a4:9f:0d:
         ec:b6:fa:26:df:f4:a2:91:b1:5a:fe:e5:4f:4d:e2:d6:32:8f:
         db:ea:b9:80:1f:94:53:92:6d:1f:c7:87:eb:a0:d3:72:26:d1:
         31:83:5c:00:28:26:15:3e:16:3b:6a:41:5e:d7:89:1d:e6:04:
         f6:8e:41:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoSfWPKbxJMVWjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRk
ODk5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NzQzZDllYjktN2MyMS00Y2I3LTg3YzctOGMzZTU2YzU0ZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF7V147m4OZ52yzN1YRvKW2lKDhSjyezjOLc
DqDdyCpbwF/73wSGUet6uErCxY1Whu2WABYg8oedwOdq51k/NvEK1hkDLVGdEjrY
IAX2B0vyGJ5lUxm3hRntaXULC5kegoXKnoB7oNXnCAzlyNcTgHa68C2zgFt8q5Za
UuSYjJVMlz9gIfGi4Lpn55AYTRYaNoSh1oLdb+F7r9DpdbzJtq1yaWnR6LKwLXwH
0W9f4VlUiiSebvCx9ax98WHjR4aCNcz7out6tEFwF2pK4duExwrfCjFeenZ4aF2J
Uzb+by5FbdUfDPi8wP3JZDZjtpaIsC/zmKRMMdF0hUS6duSGDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzxrFPkPGzsL0FnVUnR+I5tXUO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZm
MDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvODVlZDkxMzAtMzkxZi0z
YjY1LTg5ZmEtZGE3NTIzODE2M2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGY2ZjAxYjgtMTNhZC00Yzc5LWFh
NzItNjVjZjBkZWRkODk5LzhmNmYwMWI4LTEzYWQtNGM3OS1hYTcyLTY1Y2YwZGVk
ZDg5OS5jcmwwHwYDVR0jBBgwFoAU0YPLdcSP3cpqvpY0LsdsUQ43/gMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNm
MGRlZGQ4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8/OEyg72ZQBYLy4WN0MtndXeKl06wV3ysevPFsbqTxbpzCt32gvZ1O
PQuYsZfLaDf09pSv211qFdJI0qUPHAg125r3sZ59Wc+gZ6AT3dk06AfRzh4SNuX1
aHDBAkn2i05fc0vpPb6Sm/EB5AejEH0BvKr3XKmONoMrE1Zf6UFz8RDYTMFZrVo+
daDXrP1b3qZ/fsBCWFG6+NFFzbV+Qa90SvmTKuVeEyE45D4Hu+Af2mS9lfS7ce23
11wI+SoT/hpa86SfDey2+ibf9KKRsVr+5U9N4tYyj9vquYAflFOSbR/Hh+ug03Im
0TGDXAAoJhU+FjtqQV7XiR3mBPaOQSc=
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:00:22 2026 by rpki-client