Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa
File:                     f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa (raw, json)
Hash identifier:          FdapRJiz9sAEUt1s1w5eP2/FcZSBd0+8cVnaVNGuGMI=
Subject key identifier:   F6:72:88:B5:1A:0A:81:09:CC:08:FC:39:A2:25:6B:AD:3D:82:F9:C7
Certificate issuer:       /CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
Certificate serial:       010D0C9F4328584EBC771096723F07617A898238
Authority key identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        130.12.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:10:96:72:3f:07:61:7a:89:82:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=e67b8578-0d1b-4e09-9bb0-2cc12eb841bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:8a:18:24:ec:f4:f8:fa:f7:66:4d:14:83:
                    e3:5a:f8:6e:55:e3:94:cf:f0:ec:8f:00:cf:93:40:
                    f5:09:50:3a:4d:0e:78:47:31:ee:01:95:d3:84:cf:
                    a9:16:39:04:26:eb:5c:5e:a7:f7:ae:49:84:7a:6f:
                    88:43:dd:7d:b2:6d:da:ee:17:47:c4:1d:12:92:87:
                    ce:4c:6f:30:29:c7:a8:d5:9d:0b:e1:26:1b:0a:64:
                    d8:dc:e0:4a:5b:d2:83:3f:e6:31:e7:96:79:4f:34:
                    82:45:30:a8:d0:f5:0b:10:f4:d1:7b:21:00:dd:24:
                    8a:b9:23:f7:21:db:83:86:fa:ae:ee:71:0b:b5:7c:
                    48:ce:50:1d:3e:23:71:fe:68:36:38:d5:ae:c1:a2:
                    ee:55:06:41:c0:f9:80:55:24:22:c3:52:32:5a:c7:
                    8c:3f:36:0c:0c:95:02:3d:cf:7a:d7:ff:21:37:60:
                    cc:06:ea:84:14:a8:d1:5c:fd:23:5f:9b:bf:38:e0:
                    b8:51:99:c1:43:9f:8f:93:48:96:3e:7c:9f:e5:ed:
                    48:26:eb:16:b8:ef:f9:c6:71:81:ed:7c:90:66:17:
                    c9:05:c1:9c:22:ac:54:b2:93:b0:08:3f:a8:05:bb:
                    ad:18:a8:8c:1d:82:55:f3:28:ce:b8:89:ec:d3:7a:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:72:88:B5:1A:0A:81:09:CC:08:FC:39:A2:25:6B:AD:3D:82:F9:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:47:f9:f5:e7:34:05:9e:ac:60:57:be:f7:ce:f3:3e:e9:
         61:d4:6f:5a:99:54:75:ad:d1:29:73:d3:58:0c:b5:7e:54:7e:
         0d:f0:96:09:f5:b8:f6:79:00:32:1c:12:12:ce:91:77:3d:bf:
         a7:37:4f:dd:aa:05:d7:88:40:23:34:8e:fa:b4:9d:cc:0a:dc:
         ea:a9:a9:ad:c8:b1:9c:32:cc:d0:0e:f1:1d:b3:74:c9:5c:d6:
         13:df:e8:29:42:96:27:44:c9:fb:c2:1b:1b:87:b4:da:5d:30:
         a4:e9:61:fc:96:16:5a:bb:a2:9e:19:6b:6e:d0:51:33:a2:cc:
         13:a1:39:c4:56:d1:8c:a6:a4:95:ab:29:e2:09:ba:67:46:87:
         42:d3:13:59:bf:7f:13:ce:1f:dd:e5:82:02:ac:a6:72:4f:ff:
         a5:e5:c7:1a:1e:60:21:0a:86:f0:8b:c2:4d:3c:73:47:d7:b7:
         8b:a1:db:f3:ec:b6:2a:7b:7b:35:e0:2e:4f:a5:ae:0b:ee:7c:
         5e:7e:8b:9d:22:dd:a3:94:45:fc:d5:66:3b:83:95:ee:47:65:
         36:1b:fd:68:25:20:da:d5:88:3b:cd:67:75:66:9e:df:29:87:
         41:d3:07:ab:d6:f5:ee:72:80:df:c2:32:d4:da:dc:c1:e7:15:
         c5:d3:c9:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dxCWcj8HYXqJgjgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhiY2ExMGQtNjQ0NS00NDA3LWJkMTYtNmQwYzkwZTli
ZmQ1MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZTY3Yjg1NzgtMGQxYi00ZTA5LTliYjAtMmNjMTJlYjg0MWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lmKGCTs9Pj692ZNFIPjWvhuVeOUz/DsjwDP
k0D1CVA6TQ54RzHuAZXThM+pFjkEJutcXqf3rkmEem+IQ919sm3a7hdHxB0SkofO
TG8wKceo1Z0L4SYbCmTY3OBKW9KDP+Yx55Z5TzSCRTCo0PULEPTReyEA3SSKuSP3
IduDhvqu7nELtXxIzlAdPiNx/mg2ONWuwaLuVQZBwPmAVSQiw1IyWseMPzYMDJUC
Pc961/8hN2DMBuqEFKjRXP0jX5u/OOC4UZnBQ5+Pk0iWPnyf5e1IJusWuO/5xnGB
7XyQZhfJBcGcIqxUspOwCD+oBbutGKiMHYJV8yjOuIns03qKnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZyiLUaCoEJzAj8OaIla609gvnHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jOGJj
YTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBjOTBlOWJmZDUvZjRmOTIyMzktMGYzNS0z
MmEzLThkYzQtNzllYTRiMDhiY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzhiY2ExMGQtNjQ0NS00NDA3LWJk
MTYtNmQwYzkwZTliZmQ1L2M4YmNhMTBkLTY0NDUtNDQwNy1iZDE2LTZkMGM5MGU5
YmZkNS5jcmwwHwYDVR0jBBgwFoAU6W/v0BNc7n2Z/G4hRnIj77qgdY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jOGJjYTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBj
OTBlOWJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggyfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFebR/n15zQFnqxgV773zvM+6WHUb1qZVHWt0Slz01gMtX5Ufg3wlgn1
uPZ5ADIcEhLOkXc9v6c3T92qBdeIQCM0jvq0ncwK3Oqpqa3IsZwyzNAO8R2zdMlc
1hPf6ClClidEyfvCGxuHtNpdMKTpYfyWFlq7op4Za27QUTOizBOhOcRW0YympJWr
KeIJumdGh0LTE1m/fxPOH93lggKspnJP/6XlxxoeYCEKhvCLwk08c0fXt4uh2/Ps
tip7ezXgLk+lrgvufF5+i50i3aOURfzVZjuDle5HZTYb/WglINrViDvNZ3Vmnt8p
h0HTB6vW9e5ygN/CMtTa3MHnFcXTyYI=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:24 2026 by rpki-client