Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa
File:                     c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa (raw, json)
Hash identifier:          3XsV1frURgOsrYnldd5eB3VTkqSQdTIXS0z0p0xsgIc=
Subject key identifier:   65:14:C9:50:A5:8A:5D:9E:54:DE:B5:91:97:2B:32:69:09:64:6E:4E
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584DEDE0A13B550931E7A4EA1BC0
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     10497
IP address blocks:        192.86.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:a1:3b:55:09:31:e7:a4:ea:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=608c0a1a-703e-4749-adb4-b5ddc40155b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:40:fd:ca:da:fc:0d:83:a3:48:d5:1e:dd:
                    2c:e5:1e:1d:5a:30:30:b8:b6:0c:f2:0b:9f:f0:ce:
                    f7:b5:bb:d3:c7:05:ec:9f:aa:9c:15:2e:e6:2b:f3:
                    4f:d3:3a:19:da:c9:53:03:0a:8b:43:35:38:fb:3d:
                    2d:51:3b:0a:8f:cc:5d:91:84:75:b8:98:ee:5b:36:
                    fa:6f:62:e7:49:ae:91:4d:52:4c:a0:08:89:45:4d:
                    30:e3:bb:34:74:17:f4:79:9b:e6:c8:40:d6:07:ed:
                    0c:c0:9e:34:21:1e:46:b5:f4:11:1a:29:f1:b2:38:
                    39:f0:d0:cc:04:b9:7e:52:8b:84:b6:97:68:30:c7:
                    08:5e:ea:b9:c7:e8:22:5a:b9:c0:da:83:6e:ed:5a:
                    2c:c4:70:74:e6:1a:3e:71:a9:3e:fe:9a:73:5c:88:
                    90:c0:78:9b:55:a0:e4:bd:3e:9b:f3:5b:44:5c:f9:
                    30:e1:fe:e6:2c:4d:1f:b0:17:ab:25:64:e5:f1:72:
                    6e:c7:e9:83:19:22:fd:46:a6:94:94:d7:00:3d:c0:
                    e4:70:be:1f:45:73:a7:00:04:6c:e3:43:05:b1:92:
                    c8:84:2e:34:3f:b7:80:72:da:25:a1:e3:62:31:a0:
                    73:00:13:ae:4f:1b:40:dd:87:57:34:19:51:f5:2c:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:C9:50:A5:8A:5D:9E:54:DE:B5:91:97:2B:32:69:09:64:6E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:17:ab:e9:7d:ef:ad:bb:15:32:ad:08:b0:e0:a8:9a:7a:ad:
         a8:48:24:98:3f:a2:e1:21:c8:79:4a:08:c5:df:8e:ab:92:c5:
         86:24:05:dc:19:03:45:13:32:07:f8:f1:56:44:0e:56:f9:4e:
         d6:e3:71:44:a4:51:4d:3e:62:fc:3a:59:26:93:a2:2b:e1:b4:
         1d:63:80:fe:fa:c1:3d:aa:01:18:26:de:a3:be:52:77:49:27:
         41:61:0e:cc:84:2b:b6:fe:61:43:77:99:29:dd:c9:7d:92:db:
         7a:11:82:b5:57:7a:fe:f1:7a:41:e0:ac:04:1e:14:5f:d2:8c:
         5b:51:45:67:97:84:4f:c2:a4:bc:e1:4d:fa:a6:67:c8:1d:89:
         0f:9b:e2:e7:95:8d:61:3c:76:73:0f:3a:53:1d:0b:c9:ab:c4:
         9c:1b:79:e1:c3:1d:90:39:38:f7:c8:af:e0:b2:e1:84:ca:87:
         71:3a:62:4e:18:7f:e1:1b:b6:de:26:16:26:ee:79:7a:4a:e3:
         e5:7a:9d:79:40:54:33:7e:1c:9a:9a:f1:b0:0a:ce:8d:ee:35:
         09:5c:13:7a:98:f8:28:24:c3:c7:22:e7:ae:de:39:42:4c:77:
         0c:e1:b4:37:76:ce:bb:5c:0e:8c:91:3a:c4:26:57:cc:24:2f:
         e8:de:47:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4KE7VQkx56TqG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk
Y2RjMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
NjA4YzBhMWEtNzAzZS00NzQ5LWFkYjQtYjVkZGM0MDE1NWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijNA/cra/A2Do0jVHt0s5R4dWjAwuLYM8guf
8M73tbvTxwXsn6qcFS7mK/NP0zoZ2slTAwqLQzU4+z0tUTsKj8xdkYR1uJjuWzb6
b2LnSa6RTVJMoAiJRU0w47s0dBf0eZvmyEDWB+0MwJ40IR5GtfQRGinxsjg58NDM
BLl+UouEtpdoMMcIXuq5x+giWrnA2oNu7VosxHB05ho+cak+/ppzXIiQwHibVaDk
vT6b81tEXPkw4f7mLE0fsBerJWTl8XJux+mDGSL9RqaUlNcAPcDkcL4fRXOnAARs
40MFsZLIhC40P7eActoloeNiMaBzABOuTxtA3YdXNBlR9SyCdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUUyVClil2eVN61kZcrMmkJZG5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz
NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvYzY1MGJlOGQtMjljOC0z
ZDMxLTljNjQtOTE3MmQ3MWY4ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm
OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz
ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1
MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkXq+l97627FTKtCLDgqJp6rahIJJg/ouEhyHlKCMXfjquSxYYkBdwZ
A0UTMgf48VZEDlb5TtbjcUSkUU0+Yvw6WSaToivhtB1jgP76wT2qARgm3qO+UndJ
J0FhDsyEK7b+YUN3mSndyX2S23oRgrVXev7xekHgrAQeFF/SjFtRRWeXhE/CpLzh
TfqmZ8gdiQ+b4ueVjWE8dnMPOlMdC8mrxJwbeeHDHZA5OPfIr+Cy4YTKh3E6Yk4Y
f+Ebtt4mFibueXpK4+V6nXlAVDN+HJqa8bAKzo3uNQlcE3qY+Cgkw8ci567eOUJM
dwzhtDd2zrtcDoyROsQmV8wkL+jeR6g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:17 2026 by rpki-client