Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/e3fab8c3-0ad6-326e-b0d0-dae43475b52d.roa
File:                     e3fab8c3-0ad6-326e-b0d0-dae43475b52d.roa (raw, json)
Hash identifier:          rDvQ/Lfj9CItPkhhMrkj+7p+rEFY1CrGTf9L8pV4uew=
Subject key identifier:   FB:58:5A:68:A3:94:90:57:93:F8:9F:7B:58:78:F8:3F:66:8E:C1:37
Certificate issuer:       /CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
Certificate serial:       010D0C9F4328584F024214F1104F006D2849A140
Authority key identifier: DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/e3fab8c3-0ad6-326e-b0d0-dae43475b52d.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        208.92.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:14:f1:10:4f:00:6d:28:49:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=0fc099d8-f10c-4c8c-aabd-adf891dfd4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:de:ec:6b:53:62:5c:c9:40:20:d3:92:24:
                    6e:d7:91:3d:ad:00:8f:aa:82:74:98:4a:fa:36:53:
                    1e:55:89:de:4d:cd:5b:dd:de:22:f7:4a:9f:3d:94:
                    69:22:c4:62:b2:a0:2b:e5:8b:3b:2d:a6:47:94:ea:
                    63:de:2c:02:b4:79:f2:65:3f:e9:14:8a:9d:8f:72:
                    4c:53:5e:fe:7c:3f:25:22:3e:ea:29:c8:01:53:65:
                    34:64:bf:61:1a:25:52:20:99:93:b5:cd:91:33:56:
                    9c:bb:07:49:2a:e7:95:b8:d5:cc:cd:86:3a:28:93:
                    96:7d:f1:2e:70:74:91:37:19:a4:98:01:92:cb:8b:
                    f9:2a:f8:1f:7f:cc:95:09:3f:07:f7:e1:82:77:60:
                    61:90:b2:12:a6:c9:09:79:a5:57:10:1a:86:c9:81:
                    cc:34:0c:38:af:c8:a8:8f:30:70:f5:f4:87:37:00:
                    12:0d:2f:5e:79:46:2a:21:83:6b:64:4a:56:13:7e:
                    54:1b:40:77:d2:62:39:2c:27:9d:74:d2:6f:62:55:
                    8c:3c:63:35:2e:6b:81:20:f1:b1:af:82:33:98:25:
                    e3:a6:27:0d:c4:27:e0:ac:2d:01:7e:f4:fc:ae:7e:
                    21:9c:7a:04:0d:59:3e:4c:d2:0e:af:85:ba:f9:90:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:5A:68:A3:94:90:57:93:F8:9F:7B:58:78:F8:3F:66:8E:C1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/e3fab8c3-0ad6-326e-b0d0-dae43475b52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl

            X509v3 Authority Key Identifier:
                keyid:DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:54:05:bd:aa:c8:a1:87:3e:1d:3c:a1:aa:c3:d7:9a:2d:80:
         56:3c:f9:e5:64:a4:a5:e8:8f:ba:80:78:e8:fb:0a:36:6d:ba:
         91:c9:a9:65:07:1f:ce:f3:ed:e1:a5:f2:43:5a:8c:cd:1c:a4:
         88:cc:c6:4c:e3:d8:e2:30:00:a6:47:ed:c6:b7:75:7f:89:cb:
         57:a7:ff:94:6e:e9:43:3a:ee:3d:21:4f:c3:87:ec:bf:43:87:
         5c:ac:47:b6:b2:85:ed:57:57:19:ce:bc:bb:18:6c:3e:ba:d8:
         ed:ad:f5:38:6c:1c:df:0a:3b:7f:4a:88:08:84:3a:a7:f7:b0:
         c0:20:d7:9e:f3:fd:d5:9e:03:bf:c1:77:62:43:bc:d7:a1:67:
         04:07:34:6d:04:76:53:a2:c3:7b:9c:a7:69:46:cf:64:54:42:
         b0:23:23:ee:75:59:01:bb:e2:ae:73:82:af:de:35:76:86:5c:
         fa:bb:b8:fc:20:6d:9f:c8:4d:90:16:8b:b0:dc:9b:1a:2e:0e:
         0e:d0:48:8a:3b:80:c2:24:83:e6:4c:23:92:ee:10:ad:04:aa:
         76:bf:26:85:83:69:25:9e:0a:31:40:1a:db:74:5b:a2:76:40:
         27:ec:90:90:c9:12:7d:04:e5:01:2e:02:55:55:53:ed:6b:c9:
         ec:57:5f:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhTxEE8AbShJoUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIwZjU4OTgtNmJmYS00ZmRjLWFhMDktZDkwNzg3NTAw
NzU1MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
MGZjMDk5ZDgtZjEwYy00YzhjLWFhYmQtYWRmODkxZGZkNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm3e7GtTYlzJQCDTkiRu15E9rQCPqoJ0mEr6
NlMeVYneTc1b3d4i90qfPZRpIsRisqAr5Ys7LaZHlOpj3iwCtHnyZT/pFIqdj3JM
U17+fD8lIj7qKcgBU2U0ZL9hGiVSIJmTtc2RM1acuwdJKueVuNXMzYY6KJOWffEu
cHSRNxmkmAGSy4v5Kvgff8yVCT8H9+GCd2BhkLISpskJeaVXEBqGyYHMNAw4r8io
jzBw9fSHNwASDS9eeUYqIYNrZEpWE35UG0B30mI5LCeddNJvYlWMPGM1LmuBIPGx
r4IzmCXjpicNxCfgrC0BfvT8rn4hnHoEDVk+TNIOr4W6+ZCKuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtYWmijlJBXk/ife1h4+D9mjsE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82YjBm
NTg5OC02YmZhLTRmZGMtYWEwOS1kOTA3ODc1MDA3NTUvZTNmYWI4YzMtMGFkNi0z
MjZlLWIwZDAtZGFlNDM0NzViNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmIwZjU4OTgtNmJmYS00ZmRjLWFh
MDktZDkwNzg3NTAwNzU1LzZiMGY1ODk4LTZiZmEtNGZkYy1hYTA5LWQ5MDc4NzUw
MDc1NS5jcmwwHwYDVR0jBBgwFoAU2s++aHwzlazTyr+sps9hrZuJ36kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82YjBmNTg5OC02YmZhLTRmZGMtYWEwOS1kOTA3
ODc1MDA3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FxiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMtUBb2qyKGHPh08oarD15otgFY8+eVkpKXoj7qAeOj7CjZtupHJqWUH
H87z7eGl8kNajM0cpIjMxkzj2OIwAKZH7ca3dX+Jy1en/5Ru6UM67j0hT8OH7L9D
h1ysR7ayhe1XVxnOvLsYbD662O2t9ThsHN8KO39KiAiEOqf3sMAg157z/dWeA7/B
d2JDvNehZwQHNG0EdlOiw3ucp2lGz2RUQrAjI+51WQG74q5zgq/eNXaGXPq7uPwg
bZ/ITZAWi7DcmxouDg7QSIo7gMIkg+ZMI5LuEK0Eqna/JoWDaSWeCjFAGtt0W6J2
QCfskJDJEn0E5QEuAlVVU+1ryexXX2c=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:46:47 2026 by rpki-client