Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/c693c896-911d-300c-b5d5-60f79d7c283b.roa
File:                     c693c896-911d-300c-b5d5-60f79d7c283b.roa (raw, json)
Hash identifier:          F0jZGMpvTVJnJTOwdv4JsVo9s1qj7dN9Cc6sQiuOUCo=
Subject key identifier:   DE:33:EF:D9:7A:FD:77:B5:A3:C3:FD:4B:A6:22:78:D5:83:B4:66:77
Certificate issuer:       /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
Certificate serial:       010D0C9F4328584F2527A272A2FCBB076CACD700
Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/c693c896-911d-300c-b5d5-60f79d7c283b.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     6220
IP address blocks:        204.154.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a2:72:a2:fc:bb:07:6c:ac:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=b6522a2c-c8f6-40cc-a154-84dc9fe696bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:da:5e:41:f4:33:98:49:5b:86:fe:d2:90:
                    0a:44:b5:cd:96:38:5e:a8:e9:96:3e:f7:00:8d:4b:
                    62:1b:1b:51:d0:05:0a:35:94:e4:b8:8d:e2:7f:3d:
                    3d:3e:a7:81:c9:7b:cb:15:39:34:6f:71:2d:e7:35:
                    8c:61:90:c3:d3:c9:71:03:94:63:52:9c:69:25:b6:
                    d1:44:46:3b:0c:e8:ee:db:8e:02:1a:14:7e:85:97:
                    2c:ff:f5:ef:28:55:1e:68:86:5a:f9:dc:24:48:0d:
                    f2:38:8e:87:6d:a9:d2:a7:37:83:84:e2:9e:86:16:
                    49:35:1b:45:8a:87:f4:19:77:53:f4:25:4e:9c:5e:
                    50:6e:f3:35:39:55:50:40:fe:e7:4d:d3:80:07:de:
                    1e:1c:29:a5:72:93:e3:b9:9d:ce:d9:5c:26:8c:67:
                    bf:86:35:89:e6:02:da:6b:a3:58:4c:0d:7d:e5:26:
                    f5:36:4f:c3:67:e3:5a:8c:9c:0e:24:c2:e3:c2:8f:
                    bf:3b:0f:ee:d4:0c:19:03:d4:6e:f8:24:df:0b:e2:
                    5f:a4:f0:34:8a:0a:69:26:87:43:85:97:d5:e9:a4:
                    a9:f7:ec:65:76:3b:8e:06:7b:80:58:f9:ae:b2:8b:
                    fe:7b:3b:02:4f:eb:30:25:34:fd:ab:8a:f3:45:26:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:EF:D9:7A:FD:77:B5:A3:C3:FD:4B:A6:22:78:D5:83:B4:66:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/c693c896-911d-300c-b5d5-60f79d7c283b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl

            X509v3 Authority Key Identifier:
                keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:85:cb:c0:09:6b:ce:ef:6a:92:70:01:35:a2:f3:e3:c7:eb:
         42:05:48:a0:04:ee:fe:59:cf:45:b6:58:ee:ed:21:f2:af:2b:
         ce:94:7f:8f:11:d3:c4:2e:f2:b5:89:11:4a:0a:58:0e:0f:d2:
         5a:68:5e:eb:c2:6f:19:22:b9:03:a6:2c:47:08:26:e2:cd:3e:
         06:22:9e:38:c9:ed:3d:7c:b3:93:cc:0a:91:63:a7:b8:c9:55:
         55:50:0c:20:88:ae:02:80:c4:14:d6:2f:7b:8e:61:81:a3:50:
         1d:3d:97:36:0a:23:0e:79:43:58:6c:2b:44:bb:50:a1:4b:e9:
         03:29:40:80:1b:aa:50:16:07:d9:4a:c4:6d:5d:38:5d:f1:91:
         24:be:4c:9c:82:28:a5:ac:e9:0e:ec:bc:c1:94:ae:a7:2c:34:
         51:02:35:cb:03:9f:3e:60:18:f4:25:85:c8:fc:52:f8:cb:69:
         60:44:29:b4:b6:8e:60:85:ff:d7:37:72:e8:82:38:8f:75:fc:
         7f:2e:3e:3a:b3:40:8a:ab:6e:b0:06:2d:1f:ef:74:62:5c:b8:
         a7:21:76:03:96:ed:b4:90:3d:c5:b9:88:17:15:d4:80:c1:65:
         8e:66:9c:8d:49:80:68:bc:b2:30:80:4a:23:c3:7e:cf:c6:86:
         2b:10:1c:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6Jyovy7B2ys1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZkY2FhZmYtNDI1MC00MzU3LTk4ZTctYzBjMzIyY2Qy
YWQ0MB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk
YjY1MjJhMmMtYzhmNi00MGNjLWExNTQtODRkYzlmZTY5NmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOPaXkH0M5hJW4b+0pAKRLXNljheqOmWPvcA
jUtiGxtR0AUKNZTkuI3ifz09PqeByXvLFTk0b3Et5zWMYZDD08lxA5RjUpxpJbbR
REY7DOju244CGhR+hZcs//XvKFUeaIZa+dwkSA3yOI6HbanSpzeDhOKehhZJNRtF
iof0GXdT9CVOnF5QbvM1OVVQQP7nTdOAB94eHCmlcpPjuZ3O2VwmjGe/hjWJ5gLa
a6NYTA195Sb1Nk/DZ+NajJwOJMLjwo+/Ow/u1AwZA9Ru+CTfC+JfpPA0igppJodD
hZfV6aSp9+xldjuOBnuAWPmusov+ezsCT+swJTT9q4rzRSbf5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4z79l6/Xe1o8P9S6YieNWDtGZ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRj
YWFmZi00MjUwLTQzNTctOThlNy1jMGMzMjJjZDJhZDQvYzY5M2M4OTYtOTExZC0z
MDBjLWI1ZDUtNjBmNzlkN2MyODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTZkY2FhZmYtNDI1MC00MzU3LTk4
ZTctYzBjMzIyY2QyYWQ0L2U2ZGNhYWZmLTQyNTAtNDM1Ny05OGU3LWMwYzMyMmNk
MmFkNC5jcmwwHwYDVR0jBBgwFoAUotz79z2EX9p8wd/6XUtprv2tPMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRjYWFmZi00MjUwLTQzNTctOThlNy1jMGMz
MjJjZDJhZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJrnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANyFy8AJa87vapJwATWi8+PH60IFSKAE7v5Zz0W2WO7tIfKvK86Uf48R
08Qu8rWJEUoKWA4P0lpoXuvCbxkiuQOmLEcIJuLNPgYinjjJ7T18s5PMCpFjp7jJ
VVVQDCCIrgKAxBTWL3uOYYGjUB09lzYKIw55Q1hsK0S7UKFL6QMpQIAbqlAWB9lK
xG1dOF3xkSS+TJyCKKWs6Q7svMGUrqcsNFECNcsDnz5gGPQlhcj8UvjLaWBEKbS2
jmCF/9c3cuiCOI91/H8uPjqzQIqrbrAGLR/vdGJcuKchdgOW7bSQPcW5iBcV1IDB
ZY5mnI1JgGi8sjCASiPDfs/GhisQHBU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:36:03 2026 by rpki-client