Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
File:                     23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa (raw, json)
Hash identifier:          C0dmDVvSIBlfNgYq219elmjVfZCmHl0FX73M3YPGy08=
Subject key identifier:   22:8D:7A:9E:A6:BC:A5:2D:B8:BC:13:47:25:E3:B1:AF:80:00:42:51
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584E6144AA84EBE26C43D797A700
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        85.113.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:aa:84:eb:e2:6c:43:d7:97:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=1b5dbe5d-d1ae-4d6d-9972-8826c621846c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:90:74:21:ae:0a:73:ff:09:30:60:2b:1c:
                    ba:08:75:a5:98:e7:58:67:0d:47:0f:8d:b2:e0:5a:
                    5a:e5:29:f1:a1:9a:e0:74:4f:36:4e:71:5d:54:f9:
                    ab:03:2d:64:ed:27:6b:3f:99:51:87:02:d3:6f:64:
                    d6:69:27:b6:4e:33:ce:3e:19:37:d0:d9:1d:dc:23:
                    22:1b:15:cd:a7:be:e6:cd:88:32:d3:fa:83:58:b6:
                    4c:03:db:08:59:01:47:96:0b:a4:44:51:48:8f:8f:
                    bd:17:3a:36:a0:49:cb:e6:f9:22:94:68:f6:a2:e4:
                    55:da:8a:b2:82:99:d3:2a:50:86:58:6c:98:f6:f2:
                    8f:7c:96:9f:00:d5:5d:de:5f:7d:e3:c2:72:73:2d:
                    db:e6:62:fd:75:a2:5f:19:2e:b6:a0:58:f8:86:ba:
                    57:75:2a:74:63:10:fd:85:05:3c:92:e4:f4:b7:26:
                    0d:73:2c:15:4a:08:aa:1c:26:2b:53:08:e3:84:c1:
                    d2:0f:c9:c3:de:87:28:eb:a5:3a:f1:0c:92:cd:8b:
                    64:f3:29:84:1b:78:bf:c7:c8:03:46:b5:ce:a8:b4:
                    6d:50:86:58:5e:ce:30:d3:ee:a6:34:e2:50:09:c0:
                    fa:5a:0a:7f:5b:82:03:34:1f:04:6d:76:5d:8c:80:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8D:7A:9E:A6:BC:A5:2D:B8:BC:13:47:25:E3:B1:AF:80:00:42:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:d3:20:7d:23:4e:25:75:60:2b:80:3b:b8:10:c9:88:7b:
         85:ab:8a:ef:c8:fb:6d:88:2a:50:35:ba:29:7d:05:57:9b:92:
         c9:00:86:97:36:5b:ab:ae:4f:32:52:00:ed:16:39:3e:75:ff:
         55:29:e4:3e:cb:5f:4e:e4:b5:8b:49:5f:76:86:7a:20:3e:fe:
         ef:0e:d1:f4:02:b0:a1:ff:00:1b:1c:2b:51:61:08:8c:a2:78:
         35:45:4a:77:38:6c:bf:82:70:95:27:98:35:5f:dc:e7:aa:54:
         25:67:36:15:d2:90:df:5a:3b:96:8f:ea:f0:ef:44:be:f4:91:
         30:b0:d7:46:b4:51:ea:3a:1d:9f:91:cb:d3:09:a6:36:39:6c:
         41:0f:2f:70:8f:28:4e:6d:06:17:c1:92:5c:d8:1a:d7:46:9d:
         c0:c5:4d:a1:d7:56:d8:46:50:44:b9:cb:7f:47:82:a6:ee:a6:
         c5:6a:66:58:01:c5:24:48:b4:b3:4d:74:d0:d0:b4:89:0f:95:
         4f:66:df:45:6c:af:8f:08:8c:8b:68:69:5a:1a:4f:98:0e:aa:
         ad:5a:e4:0f:59:9b:ff:25:d9:b8:0a:16:c0:9d:c4:3c:f5:62:
         3d:6a:ac:81:1c:b8:cc:d0:23:e1:eb:7e:2f:c8:de:86:97:7b:
         e9:3c:e9:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKqE6+JsQ9eXpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
MWI1ZGJlNWQtZDFhZS00ZDZkLTk5NzItODgyNmM2MjE4NDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYuQdCGuCnP/CTBgKxy6CHWlmOdYZw1HD42y
4Fpa5SnxoZrgdE82TnFdVPmrAy1k7SdrP5lRhwLTb2TWaSe2TjPOPhk30Nkd3CMi
GxXNp77mzYgy0/qDWLZMA9sIWQFHlgukRFFIj4+9Fzo2oEnL5vkilGj2ouRV2oqy
gpnTKlCGWGyY9vKPfJafANVd3l9948Jycy3b5mL9daJfGS62oFj4hrpXdSp0YxD9
hQU8kuT0tyYNcywVSgiqHCYrUwjjhMHSD8nD3oco66U68QySzYtk8ymEG3i/x8gD
RrXOqLRtUIZYXs4w0+6mNOJQCcD6Wgp/W4IDNB8EbXZdjID55wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKNep6mvKUtuLwTRyXjsa+AAEJRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMjNjOGQzYTgtZThlNi0z
N2ZlLThlM2EtMmU4MWJkOWVlOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9s0yB9I04ldWArgDu4EMmIe4Wriu/I+22IKlA1uil9BVebkskAhpc2
W6uuTzJSAO0WOT51/1Up5D7LX07ktYtJX3aGeiA+/u8O0fQCsKH/ABscK1FhCIyi
eDVFSnc4bL+CcJUnmDVf3OeqVCVnNhXSkN9aO5aP6vDvRL70kTCw10a0Ueo6HZ+R
y9MJpjY5bEEPL3CPKE5tBhfBklzYGtdGncDFTaHXVthGUES5y39HgqbupsVqZlgB
xSRItLNNdNDQtIkPlU9m30Vsr48IjItoaVoaT5gOqq1a5A9Zm/8l2bgKFsCdxDz1
Yj1qrIEcuMzQI+Hrfi/I3oaXe+k86ZE=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:03 2026 by rpki-client