Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/bf0537fd-0182-3568-8d3d-f3508ba26387.roa
File:                     bf0537fd-0182-3568-8d3d-f3508ba26387.roa (raw, json)
Hash identifier:          5r0WcIdK6zfmobYEEbrXvnLdIoHYm5Cm6XjSrpyB6Xg=
Subject key identifier:   96:19:0F:B9:9C:71:F8:17:AF:A6:52:71:25:BD:1D:00:AB:7E:B9:36
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584E5E7A071662F8761015CFFD80
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/bf0537fd-0182-3568-8d3d-f3508ba26387.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        192.65.12.0/24 maxlen: 24
                          192.65.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:07:16:62:f8:76:10:15:cf:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=a6ba40b9-21f4-4d0f-bac5-eccfb92effe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:39:0d:e5:c0:b2:cc:ac:f3:bd:29:d9:99:
                    36:5b:af:01:0f:4c:b0:72:be:b4:5f:c2:eb:c1:0f:
                    d3:14:fa:cb:5b:bb:f2:b4:a5:70:cb:0e:db:a5:37:
                    46:69:0e:b2:64:e6:86:e5:13:1d:fe:a7:30:76:ab:
                    5b:a5:51:80:a6:e6:cd:6f:f1:cc:67:91:19:5e:a8:
                    c1:ff:b9:21:ab:a8:97:58:a7:71:f5:d0:84:a3:49:
                    8e:05:7c:22:29:c2:7e:aa:0a:42:cd:c0:e8:e8:af:
                    b2:7b:f2:31:12:f3:81:31:0a:41:ac:6f:2b:70:4d:
                    8c:58:16:e1:0d:9b:81:74:2a:2a:46:b0:c8:a0:82:
                    91:da:ed:51:30:39:62:9d:b1:82:bf:a8:a6:dc:70:
                    d7:ef:91:6b:d1:d6:c3:9a:ae:73:bb:2c:cd:5e:dc:
                    e1:57:7d:d1:99:d3:2d:62:b8:c1:ea:de:b0:5d:75:
                    50:93:80:b1:24:6d:f2:08:1b:0e:10:61:52:6f:77:
                    81:d8:df:3c:06:e8:d1:13:48:10:3b:20:1a:93:a7:
                    45:cc:de:b7:5f:2d:e1:e6:5f:8e:31:b9:2c:9b:00:
                    a0:a7:86:c0:b1:9c:95:ca:ed:b5:47:53:79:89:e9:
                    2b:90:79:08:cb:ee:5d:42:e2:9f:57:ca:e6:4e:f5:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:0F:B9:9C:71:F8:17:AF:A6:52:71:25:BD:1D:00:AB:7E:B9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/bf0537fd-0182-3568-8d3d-f3508ba26387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.65.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:5d:cc:6c:56:a6:59:c7:c2:73:ec:b4:15:3e:16:4c:36:17:
         b4:b2:2f:38:20:2d:f7:1c:c2:da:21:3d:b2:50:a2:b0:82:3b:
         b1:90:64:09:16:e1:5e:26:d4:0c:b1:fb:98:74:1d:a6:ab:b4:
         02:97:42:26:47:f0:43:f7:b9:03:98:90:f2:e6:a1:d8:d8:cb:
         8f:6b:ae:93:3e:2b:ca:28:18:e9:bf:a0:02:8d:8a:93:97:5f:
         a4:4e:6c:d2:63:df:93:5a:04:8d:3f:f6:fa:ed:07:54:02:d1:
         31:68:a2:1c:f5:43:67:da:a6:88:59:cb:ea:c4:c9:20:b7:df:
         cb:5c:c9:61:fe:5f:c8:e3:a6:7b:ad:75:bf:38:56:a6:bd:e5:
         f2:29:74:72:f3:7c:3e:6a:ba:b7:37:08:9d:4b:c3:45:48:fc:
         72:82:15:6f:74:b4:db:c3:62:db:79:62:68:f0:d9:61:5a:80:
         ff:12:d6:4a:cf:07:42:9f:65:1c:64:5f:8d:af:e4:fa:56:97:
         1f:1c:79:39:c3:93:aa:0b:db:d0:bb:2b:fd:d4:9c:92:a3:77:
         5e:eb:33:60:8d:ea:ad:47:43:8b:dd:12:39:71:b7:f9:3f:72:
         f9:8d:80:8f:1d:b6:90:6c:af:59:ce:6e:c6:e1:f1:13:e8:ab:
         2f:1b:4d:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegcWYvh2EBXP/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
YTZiYTQwYjktMjFmNC00ZDBmLWJhYzUtZWNjZmI5MmVmZmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nk5DeXAssys870p2Zk2W68BD0ywcr60X8Lr
wQ/TFPrLW7vytKVwyw7bpTdGaQ6yZOaG5RMd/qcwdqtbpVGApubNb/HMZ5EZXqjB
/7khq6iXWKdx9dCEo0mOBXwiKcJ+qgpCzcDo6K+ye/IxEvOBMQpBrG8rcE2MWBbh
DZuBdCoqRrDIoIKR2u1RMDlinbGCv6im3HDX75Fr0dbDmq5zuyzNXtzhV33RmdMt
YrjB6t6wXXVQk4CxJG3yCBsOEGFSb3eB2N88BujRE0gQOyAak6dFzN63Xy3h5l+O
MbksmwCgp4bAsZyVyu21R1N5iekrkHkIy+5dQuKfV8rmTvXD1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYZD7mccfgXr6ZScSW9HQCrfrk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvYmYwNTM3ZmQtMDE4Mi0z
NTY4LThkM2QtZjM1MDhiYTI2Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANZdzGxWplnHwnPstBU+Fkw2F7SyLzggLfccwtohPbJQorCCO7GQZAkW
4V4m1Ayx+5h0HaartAKXQiZH8EP3uQOYkPLmodjYy49rrpM+K8ooGOm/oAKNipOX
X6RObNJj35NaBI0/9vrtB1QC0TFoohz1Q2fapohZy+rEySC338tcyWH+X8jjpnut
db84Vqa95fIpdHLzfD5qurc3CJ1Lw0VI/HKCFW90tNvDYtt5Ymjw2WFagP8S1krP
B0KfZRxkX42v5PpWlx8ceTnDk6oL29C7K/3UnJKjd17rM2CN6q1HQ4vdEjlxt/k/
cvmNgI8dtpBsr1nObsbh8RPoqy8bTXM=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:30 2026 by rpki-client