Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa
File:                     bca9cd84-b5a9-34b2-983a-541164ef60ba.roa (raw, json)
Hash identifier:          2/9gV9SStsV6mYn5i9//k0GpRF2bZeRjMS/KO3fxIvM=
Subject key identifier:   D3:A9:1E:04:04:97:F6:12:57:74:5C:47:E1:A3:7D:63:7D:B4:53:0E
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584EA7942A1DE6F7D10830083080
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10497
IP address blocks:        192.86.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:2a:1d:e6:f7:d1:08:30:08:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53f646cc-fc48-4e43-8483-c54358853cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:93:3a:25:20:2a:9c:22:11:18:20:ca:e9:
                    09:be:02:aa:39:dd:28:0c:51:7a:1e:32:0a:42:18:
                    3e:d0:5a:2b:c5:9a:3b:c5:be:82:a2:82:fd:75:49:
                    e3:b9:dc:53:9c:20:be:3e:a9:45:de:1d:f0:b6:87:
                    3c:e5:dc:41:2e:d6:91:dd:a5:8e:c1:89:0b:df:72:
                    f2:47:70:48:b1:2a:d8:d7:4c:3e:eb:4b:05:cc:04:
                    2d:ef:ee:56:3b:26:ca:b1:2b:94:57:ce:70:61:cd:
                    58:2b:b0:5c:f7:8c:75:ed:d1:44:bb:4b:55:a7:ed:
                    1c:ee:e4:00:73:02:f1:32:e5:23:13:1b:dd:32:c2:
                    a5:a6:46:b9:4b:c6:d4:51:23:db:81:71:ca:5c:ea:
                    bc:1b:42:a3:99:b3:61:23:b7:03:0f:ce:c5:f8:e8:
                    79:48:17:68:b0:0c:c2:db:8e:55:62:92:d0:b1:74:
                    00:9b:21:75:39:32:30:77:43:15:bf:c5:71:ad:80:
                    97:e6:1b:7e:8c:67:44:8c:92:78:3d:9f:23:2c:bc:
                    24:32:14:df:f1:7c:40:a5:40:97:10:98:55:f9:fe:
                    19:ec:d8:74:4f:6f:28:f2:a3:10:74:a8:d0:ff:9b:
                    f2:d3:01:63:89:13:6d:c0:42:97:a1:23:a3:d1:8b:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:1E:04:04:97:F6:12:57:74:5C:47:E1:A3:7D:63:7D:B4:53:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/bca9cd84-b5a9-34b2-983a-541164ef60ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:b8:f0:f4:3f:45:dd:b2:a4:80:82:cd:7a:25:93:b2:0d:
         8b:a0:3b:24:e3:f9:5d:4c:ee:9a:b1:40:8f:53:f5:39:6c:e5:
         f3:9d:cf:3c:9a:f2:c1:52:fe:e6:e4:8e:17:cf:25:60:af:29:
         61:cc:0d:10:21:b0:26:f7:76:c7:17:88:f4:29:2a:7e:af:5f:
         ac:fd:35:51:4a:6d:44:59:6f:fe:ac:88:6a:5d:2d:ff:1f:6f:
         dd:b3:34:26:2f:74:10:94:b3:be:d4:63:63:15:a2:b3:09:36:
         bb:22:9f:4f:31:e8:3c:5f:34:00:67:00:78:59:90:89:b3:a5:
         5a:d8:b7:4a:b0:95:4a:31:cf:13:d8:f7:ca:59:d5:fb:fb:a5:
         dd:38:5d:ea:99:13:a8:2b:15:f5:9b:84:55:79:b4:6f:01:e6:
         1f:e2:09:76:37:32:f0:c4:4a:cd:90:d7:70:a1:04:40:15:6c:
         eb:b0:3f:10:93:fb:42:7b:61:e2:4a:cc:b9:e2:77:b4:4b:65:
         3a:34:c8:69:39:52:4e:18:75:d2:9d:85:5d:9e:76:b9:7e:81:
         c6:b3:3c:16:52:39:68:fe:6d:82:6b:df:bb:cb:d8:a0:63:97:
         f5:b8:63:3f:bc:98:44:6f:5c:61:3d:59:b2:8b:da:24:08:7a:
         27:6f:6e:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCod5vfRCDAIMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk
Y2RjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTNmNjQ2Y2MtZmM0OC00ZTQzLTg0ODMtYzU0MzU4ODUzY2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM6TOiUgKpwiERggyukJvgKqOd0oDFF6HjIK
Qhg+0ForxZo7xb6CooL9dUnjudxTnCC+PqlF3h3wtoc85dxBLtaR3aWOwYkL33Ly
R3BIsSrY10w+60sFzAQt7+5WOybKsSuUV85wYc1YK7Bc94x17dFEu0tVp+0c7uQA
cwLxMuUjExvdMsKlpka5S8bUUSPbgXHKXOq8G0KjmbNhI7cDD87F+Oh5SBdosAzC
245VYpLQsXQAmyF1OTIwd0MVv8VxrYCX5ht+jGdEjJJ4PZ8jLLwkMhTf8XxApUCX
EJhV+f4Z7Nh0T28o8qMQdKjQ/5vy0wFjiRNtwEKXoSOj0YvBuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOpHgQEl/YSV3RcR+GjfWN9tFMOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz
NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvYmNhOWNkODQtYjVhOS0z
NGIyLTk4M2EtNTQxMTY0ZWY2MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm
OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz
ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1
MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTwuPD0P0XdsqSAgs16JZOyDYugOyTj+V1M7pqxQI9T9Tls5fOdzzya
8sFS/ubkjhfPJWCvKWHMDRAhsCb3dscXiPQpKn6vX6z9NVFKbURZb/6siGpdLf8f
b92zNCYvdBCUs77UY2MVorMJNrsin08x6DxfNABnAHhZkImzpVrYt0qwlUoxzxPY
98pZ1fv7pd04XeqZE6grFfWbhFV5tG8B5h/iCXY3MvDESs2Q13ChBEAVbOuwPxCT
+0J7YeJKzLnid7RLZTo0yGk5Uk4YddKdhV2edrl+gcazPBZSOWj+bYJr37vL2KBj
l/W4Yz+8mERvXGE9WbKL2iQIeidvbiQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:27 2026 by rpki-client