Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/5ce0bac5-c3fd-3140-8a00-7d4ff332acd2.roa
File:                     5ce0bac5-c3fd-3140-8a00-7d4ff332acd2.roa (raw, json)
Hash identifier:          QBcKib+Kh23H9aPkjkhfBEs13czgQMjB8YvbYki44kk=
Subject key identifier:   81:A4:DC:8D:6F:05:D6:B1:D5:F3:50:9A:29:4B:7F:5C:CF:9D:82:BF
Certificate issuer:       /CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
Certificate serial:       010D0C9F4328584E5E7A078605C8DB31936D47E0
Authority key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/5ce0bac5-c3fd-3140-8a00-7d4ff332acd2.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     21512
IP address blocks:        162.30.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:07:86:05:c8:db:31:93:6d:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=55fef867-2dc7-4984-af6f-ca54ee4c616e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:50:1d:ed:34:0e:c4:06:f3:d0:74:64:32:
                    36:1d:89:90:15:a5:e2:16:3e:ed:a4:5e:ce:c7:ea:
                    8d:83:1a:75:74:a3:22:5f:ff:2b:90:30:b4:06:78:
                    36:5b:71:51:f2:85:5f:b6:5d:fd:75:52:99:43:ce:
                    02:66:67:c1:17:19:e3:f4:d8:58:c3:51:75:01:f2:
                    b1:bd:32:60:f0:38:7e:5a:69:07:db:3a:1a:af:58:
                    ce:54:24:ee:e2:52:09:ee:e9:b6:9f:ff:76:29:e6:
                    9d:f1:9d:13:88:a7:88:9d:0c:a3:8b:78:d9:61:17:
                    9b:6e:56:97:6f:34:42:0e:6c:15:34:2d:30:84:b2:
                    80:ee:19:b4:ac:08:f5:5f:b6:a3:a7:e7:1d:00:50:
                    71:a6:0b:b0:f7:59:16:2b:f3:be:05:0b:ec:7b:6a:
                    a2:5d:57:4f:e7:4b:de:f3:e0:24:1c:ba:11:d0:c8:
                    ce:c0:fe:4a:50:ea:1f:c5:e5:31:6b:33:c1:5f:fd:
                    3e:40:7a:a9:33:f0:9b:96:62:56:6e:95:e2:22:20:
                    9e:b0:95:d7:e1:01:33:be:90:e0:30:de:58:2e:df:
                    68:74:15:f0:fe:6e:48:b4:ca:ae:e1:13:31:73:3e:
                    c3:8a:8c:06:42:1e:b1:78:0b:84:0e:91:de:d7:e0:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:DC:8D:6F:05:D6:B1:D5:F3:50:9A:29:4B:7F:5C:CF:9D:82:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/5ce0bac5-c3fd-3140-8a00-7d4ff332acd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl

            X509v3 Authority Key Identifier:
                keyid:AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:b4:a1:5a:84:e0:b1:e0:82:f8:01:12:f8:96:b2:1a:21:
         18:7c:3c:f9:31:37:e0:1f:75:ec:eb:2d:24:6d:c5:af:d7:ff:
         f2:a2:15:b4:7f:20:c5:84:2a:49:06:34:8e:63:5f:98:ab:56:
         be:00:0f:b4:23:dd:ed:44:c8:df:aa:9b:ca:87:d5:47:b4:9e:
         51:8d:b2:d5:f8:89:af:18:ad:97:54:80:6f:69:02:42:b3:15:
         de:d4:a4:52:e8:b4:d6:c2:5f:77:c8:67:87:3d:8f:0c:5a:46:
         91:82:72:3b:17:c7:78:e9:37:ae:0e:3e:75:58:f7:c3:38:58:
         2e:df:11:fd:0d:93:b4:9e:9a:cc:ee:d6:2c:02:12:7a:9f:0a:
         10:da:c6:b7:9a:fa:19:76:d5:83:b4:3d:5a:d0:86:77:f1:3a:
         e5:06:98:0d:a4:e9:46:1d:d4:fc:fa:8e:13:ca:01:03:51:fc:
         5b:86:fa:81:8a:e2:9c:6f:c1:f9:b0:e6:9d:cc:eb:d5:85:50:
         91:a6:41:5e:4b:f0:53:85:19:a8:fc:7d:5d:e0:d7:ec:3f:1d:
         ac:bc:43:62:7f:0a:93:e9:86:e8:73:8a:c6:92:38:aa:8d:c3:
         a6:65:6a:83:b4:ae:bb:8c:e9:90:d2:da:3a:ad:7e:6c:2f:a2:
         49:44:8d:d1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5eegeGBcjbMZNtR+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmZTllNDQtYjQ0MS00ZGU0LTlmZDEtOWYzYjZmOTc1
Yzg2MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
NTVmZWY4NjctMmRjNy00OTg0LWFmNmYtY2E1NGVlNGM2MTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI5QHe00DsQG89B0ZDI2HYmQFaXiFj7tpF7O
x+qNgxp1dKMiX/8rkDC0Bng2W3FR8oVftl39dVKZQ84CZmfBFxnj9NhYw1F1AfKx
vTJg8Dh+WmkH2zoar1jOVCTu4lIJ7um2n/92Kead8Z0TiKeInQyji3jZYRebblaX
bzRCDmwVNC0whLKA7hm0rAj1X7ajp+cdAFBxpguw91kWK/O+BQvse2qiXVdP50ve
8+AkHLoR0MjOwP5KUOofxeUxazPBX/0+QHqpM/CblmJWbpXiIiCesJXX4QEzvpDg
MN5YLt9odBXw/m5ItMqu4RMxcz7DiowGQh6xeAuEDpHe1+AIlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIGk3I1vBdax1fNQmilLf1zPnYK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGZl
OWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5NzVjODYvNWNlMGJhYzUtYzNmZC0z
MTQwLThhMDAtN2Q0ZmYzMzJhY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBmZTllNDQtYjQ0MS00ZGU0LTlm
ZDEtOWYzYjZmOTc1Yzg2LzAwZmU5ZTQ0LWI0NDEtNGRlNC05ZmQxLTlmM2I2Zjk3
NWM4Ni5jcmwwHwYDVR0jBBgwFoAUrUt7f6ZAv9X4Mv1uIcCBQjQ9chAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNi
NmY5NzVjODYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoh4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACEy0oVqE4LHggvgBEviWshohGHw8+TE34B917OstJG3Fr9f/8qIVtH8g
xYQqSQY0jmNfmKtWvgAPtCPd7UTI36qbyofVR7SeUY2y1fiJrxitl1SAb2kCQrMV
3tSkUui01sJfd8hnhz2PDFpGkYJyOxfHeOk3rg4+dVj3wzhYLt8R/Q2TtJ6azO7W
LAISep8KENrGt5r6GXbVg7Q9WtCGd/E65QaYDaTpRh3U/PqOE8oBA1H8W4b6gYri
nG/B+bDmnczr1YVQkaZBXkvwU4UZqPx9XeDX7D8drLxDYn8Kk+mG6HOKxpI4qo3D
pmVqg7Suu4zpkNLaOq1+bC+iSUSN0Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:03 2026 by rpki-client