Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
File:                     cebecf45-75c8-339f-b4d9-cff06abf94d8.roa (raw, json)
Hash identifier:          r1w20mNUheZixdCDutqhXeIUddPqdGUa6Vd15wV69Is=
Subject key identifier:   99:3F:20:77:05:42:B7:DD:7B:6F:81:EB:26:6B:71:23:B3:27:80:51
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F4328584F225CFEAB2A450F83A91236B0
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     46555
IP address blocks:        198.133.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:fe:ab:2a:45:0f:83:a9:12:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=ac01e836-51aa-4d63-b876-7e0ada6ecb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:c3:72:37:bb:2f:ee:18:4b:61:e4:c0:e7:
                    42:c2:fe:9f:48:f3:ee:66:d9:d9:2b:97:45:e0:6f:
                    2d:47:50:9f:92:da:47:47:6a:36:21:db:b2:6f:fc:
                    24:5f:58:b2:59:8a:0a:00:4c:16:5d:3f:55:5d:53:
                    91:30:5e:67:6e:2f:b6:7b:08:9c:79:bb:56:d9:0b:
                    a3:44:cd:63:d4:1c:e5:9f:f2:3d:29:a5:d7:ff:ec:
                    a3:e6:af:b2:4d:5d:ba:b4:95:6f:2c:56:7c:9c:fb:
                    49:b3:0f:02:40:34:f6:3c:ba:07:44:98:30:eb:c2:
                    b1:d2:62:70:12:5d:0b:ea:08:c2:09:d6:90:9b:b9:
                    21:7e:86:ce:bb:3d:c5:f3:4a:0b:d5:90:b2:24:67:
                    40:4f:72:2f:30:c1:2c:c1:43:03:4b:9a:f1:2c:06:
                    ab:11:89:88:ab:87:e3:c5:83:e5:c6:28:15:5c:27:
                    e0:3c:bb:84:f1:34:bc:fa:39:7d:d3:6b:3f:80:75:
                    26:18:50:ce:9e:78:cb:af:d8:53:00:1f:66:03:44:
                    f8:9b:c3:1c:58:94:96:04:14:22:53:d5:df:9a:38:
                    b9:ba:b0:25:76:78:d4:b9:62:32:14:b7:24:ab:34:
                    cf:cc:9b:cc:00:53:90:29:44:ed:49:6f:72:6b:b9:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:20:77:05:42:B7:DD:7B:6F:81:EB:26:6B:71:23:B3:27:80:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:5b:a0:ca:88:86:4b:41:a7:27:9a:80:e3:39:9a:e0:2b:
         67:1e:56:c6:5f:84:a0:03:78:d5:9e:6d:40:25:64:a9:7f:19:
         40:f1:63:74:f3:b8:88:de:6a:70:7c:88:d5:81:58:7c:34:5b:
         c6:31:c6:9f:c1:a6:c9:22:b6:d5:04:ec:8c:58:f3:19:bd:fd:
         fe:d3:80:d4:0d:29:a6:88:99:84:c3:4c:63:d2:f9:2d:b5:56:
         d4:28:ff:79:4a:5a:1c:8e:ab:f1:c9:36:a3:27:fe:da:d1:e4:
         e6:2e:46:50:d6:e2:66:03:c1:76:bc:c0:a1:10:f4:e7:e5:1d:
         2e:9b:94:82:25:fd:90:fe:06:9c:54:10:cf:9e:53:5f:a1:4f:
         2a:ac:75:06:ee:ba:91:82:43:0e:38:c5:d3:44:e1:5d:fc:7d:
         a5:14:6e:04:91:6b:13:df:c0:2d:68:7c:6c:f4:c6:67:64:01:
         72:b8:27:63:30:ec:bf:01:9a:08:05:1b:14:fe:c6:c3:26:c5:
         2a:4f:16:35:c5:38:90:99:c8:31:7b:b5:51:cf:3f:c2:74:ce:
         66:cc:da:ae:ae:0b:ac:af:80:cb:61:46:d0:eb:4f:a8:0c:3a:
         05:34:32:0f:51:d5:d5:5a:d9:5c:ec:85:e5:f5:fb:c6:64:60:
         3f:a9:df:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP6rKkUPg6kSNrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhZGE4ZjUtNmJlMy00YTlmLTlhMmMtMWUxYWEwZTM3
NTk2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWMwMWU4MzYtNTFhYS00ZDYzLWI4NzYtN2UwYWRhNmVjYjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndPDcje7L+4YS2HkwOdCwv6fSPPuZtnZK5dF
4G8tR1CfktpHR2o2Iduyb/wkX1iyWYoKAEwWXT9VXVORMF5nbi+2ewicebtW2Quj
RM1j1Bzln/I9KaXX/+yj5q+yTV26tJVvLFZ8nPtJsw8CQDT2PLoHRJgw68Kx0mJw
El0L6gjCCdaQm7khfobOuz3F80oL1ZCyJGdAT3IvMMEswUMDS5rxLAarEYmIq4fj
xYPlxigVXCfgPLuE8TS8+jl902s/gHUmGFDOnnjLr9hTAB9mA0T4m8McWJSWBBQi
U9Xfmji5urAldnjUuWIyFLckqzTPzJvMAFOQKUTtSW9ya7m+swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJk/IHcFQrfde2+B6yZrcSOzJ4BRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFk
YThmNS02YmUzLTRhOWYtOWEyYy0xZTFhYTBlMzc1OTYvY2ViZWNmNDUtNzVjOC0z
MzlmLWI0ZDktY2ZmMDZhYmY5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZhZGE4ZjUtNmJlMy00YTlmLTlh
MmMtMWUxYWEwZTM3NTk2L2U2YWRhOGY1LTZiZTMtNGE5Zi05YTJjLTFlMWFhMGUz
NzU5Ni5jcmwwHwYDVR0jBBgwFoAU7UtG3BZ/kJdyk1+1d0FQ/ZJcw20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFkYThmNS02YmUzLTRhOWYtOWEyYy0xZTFh
YTBlMzc1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKxgW6DKiIZLQacnmoDjOZrgK2ceVsZfhKADeNWebUAlZKl/GUDxY3Tz
uIjeanB8iNWBWHw0W8Yxxp/BpskittUE7IxY8xm9/f7TgNQNKaaImYTDTGPS+S21
VtQo/3lKWhyOq/HJNqMn/trR5OYuRlDW4mYDwXa8wKEQ9OflHS6blIIl/ZD+BpxU
EM+eU1+hTyqsdQbuupGCQw44xdNE4V38faUUbgSRaxPfwC1ofGz0xmdkAXK4J2Mw
7L8BmggFGxT+xsMmxSpPFjXFOJCZyDF7tVHPP8J0zmbM2q6uC6yvgMthRtDrT6gM
OgU0Mg9R1dVa2VzsheX1+8ZkYD+p3xY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:52:23 2026 by rpki-client