Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa
File:                     b019afb5-422e-3f8a-bb16-3035ee439f20.roa (raw, json)
Hash identifier:          xPeYOr41h0YSsTKcsTDHW3A7gbD8YsgGUHs4vCogors=
Subject key identifier:   2B:DD:DE:47:A2:08:12:75:A3:D2:04:91:4E:07:A5:82:B8:39:8C:D5
Certificate issuer:       /CN=6e310dbe-729b-489e-8806-73d3be6c974a
Certificate serial:       010D0C9F4328584F3A17D23AFE0678D43CF74C80
Authority key identifier: 43:3B:3C:87:BD:7E:52:87:45:B0:62:F7:23:66:B1:18:4D:A4:28:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     54869
IP address blocks:        162.210.76.0/22 maxlen: 22
                          198.105.224.0/21 maxlen: 21
                          216.126.215.0/24 maxlen: 24
                          2602:fff4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d2:3a:fe:06:78:d4:3c:f7:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e310dbe-729b-489e-8806-73d3be6c974a
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=abe039fa-155f-46c3-9c18-59a3b1826b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:84:2e:d1:82:49:ae:2e:d8:48:fc:9e:a6:
                    37:0f:68:05:e3:e6:8c:9a:6d:b7:e9:83:02:fa:ad:
                    32:f9:11:76:d3:40:95:14:c2:7c:d5:9e:7d:d2:7b:
                    c0:cf:f3:c6:d2:a8:1f:3c:cb:a9:6a:28:6e:16:6d:
                    d0:e8:e3:b5:e6:b1:51:c0:6a:c1:bd:50:0f:82:e6:
                    d9:85:39:67:3c:24:b7:bd:e7:b2:ff:aa:9d:65:96:
                    99:27:54:08:71:3d:5f:a9:dd:11:7b:9b:26:80:75:
                    4e:39:87:97:e9:65:a3:4e:5e:fa:a8:52:2c:e2:8e:
                    e3:16:30:8e:98:8f:6a:60:44:91:80:3a:be:94:bc:
                    5c:da:d9:21:29:1c:e1:c5:9e:00:13:d2:bf:71:97:
                    a0:36:b3:b1:52:6d:45:ae:95:e2:ae:e3:7f:c3:bb:
                    a0:a2:9c:6b:f1:3a:ba:13:21:82:ff:8c:07:cb:23:
                    34:2b:50:4d:07:0b:60:c2:87:de:ee:82:23:76:1c:
                    44:8c:ac:a9:5d:a4:11:0e:1c:58:c4:6d:83:15:73:
                    8b:d3:7f:74:ca:e4:5e:15:00:54:aa:e0:da:3b:af:
                    4a:15:4a:ca:4d:8c:a3:b1:29:ab:aa:c6:b4:d1:2b:
                    b0:fa:1a:7f:1e:1b:8e:33:ce:6f:fa:5e:96:ac:45:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DD:DE:47:A2:08:12:75:A3:D2:04:91:4E:07:A5:82:B8:39:8C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.crl

            X509v3 Authority Key Identifier:
                keyid:43:3B:3C:87:BD:7E:52:87:45:B0:62:F7:23:66:B1:18:4D:A4:28:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.76.0/22
                  198.105.224.0/21
                  216.126.215.0/24
                IPv6:
                  2602:fff4::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:70:83:70:d3:77:34:50:6a:ca:1a:92:55:f0:de:a5:1a:b8:
         0a:cc:91:41:ce:cd:d3:75:a5:1b:21:ae:24:32:c2:b8:62:7a:
         71:80:61:aa:90:23:4c:b5:0b:e1:e0:0a:a6:42:8d:25:4b:3e:
         10:38:41:82:e7:08:71:12:d9:01:c1:ad:d5:36:e5:67:17:e4:
         5a:a6:cc:e9:79:0e:eb:26:22:f2:82:8f:5e:c4:62:14:47:a5:
         47:07:23:c6:ca:16:e2:01:89:c4:f5:e4:0f:45:9b:f2:f3:32:
         d3:b5:a3:ea:07:43:7e:26:e4:d3:03:21:e0:69:fb:35:82:9e:
         2f:b9:9a:e0:87:df:c2:fb:6e:52:fa:2f:38:91:68:b3:b6:cb:
         f1:cd:d0:9c:b2:3d:9c:54:4d:e6:10:5a:22:6d:89:ea:df:de:
         a6:6d:e4:f3:18:a0:c3:7b:98:57:fd:7c:b6:cd:53:6f:e7:11:
         c4:02:95:41:cb:47:ca:b9:ac:f7:5e:91:e5:91:3c:14:de:ed:
         29:95:d8:9f:20:ca:93:a2:49:c3:92:57:fd:3e:b5:90:46:93:
         7d:52:c5:4a:f7:39:71:a3:d5:ae:01:9d:dc:b5:0b:3b:2a:c1:
         6c:e6:57:52:84:3c:35:78:ca:db:33:f4:b2:68:62:3f:90:89:
         be:f4:2a:3d
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE86F9I6/gZ41Dz3TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUzMTBkYmUtNzI5Yi00ODllLTg4MDYtNzNkM2JlNmM5
NzRhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
YWJlMDM5ZmEtMTU1Zi00NmMzLTljMTgtNTlhM2IxODI2YjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAmELtGCSa4u2Ej8nqY3D2gF4+aMmm236YMC
+q0y+RF200CVFMJ81Z590nvAz/PG0qgfPMupaihuFm3Q6OO15rFRwGrBvVAPgubZ
hTlnPCS3veey/6qdZZaZJ1QIcT1fqd0Re5smgHVOOYeX6WWjTl76qFIs4o7jFjCO
mI9qYESRgDq+lLxc2tkhKRzhxZ4AE9K/cZegNrOxUm1FrpXiruN/w7ugopxr8Tq6
EyGC/4wHyyM0K1BNBwtgwofe7oIjdhxEjKypXaQRDhxYxG2DFXOL0390yuReFQBU
quDaO69KFUrKTYyjsSmrqsa00Suw+hp/HhuOM85v+l6WrEXA1wIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFCvd3keiCBJ1o9IEkU4HpYK4OYzVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZTMx
MGRiZS03MjliLTQ4OWUtODgwNi03M2QzYmU2Yzk3NGEvYjAxOWFmYjUtNDIyZS0z
ZjhhLWJiMTYtMzAzNWVlNDM5ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmUzMTBkYmUtNzI5Yi00ODllLTg4
MDYtNzNkM2JlNmM5NzRhLzZlMzEwZGJlLTcyOWItNDg5ZS04ODA2LTczZDNiZTZj
OTc0YS5jcmwwHwYDVR0jBBgwFoAUQzs8h71+UodFsGL3I2axGE2kKJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82ZTMxMGRiZS03MjliLTQ4OWUtODgwNi03M2Qz
YmU2Yzk3NGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCotJMAwQD
xmngAwQA2H7XMA0EAgACMAcDBQAmAv/0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAClwg3DTdzRQasoaklXw
3qUauArMkUHOzdN1pRshriQywrhienGAYaqQI0y1C+HgCqZCjSVLPhA4QYLnCHES
2QHBrdU25WcX5FqmzOl5DusmIvKCj17EYhRHpUcHI8bKFuIBicT15A9Fm/LzMtO1
o+oHQ34m5NMDIeBp+zWCni+5muCH38L7blL6LziRaLO2y/HN0JyyPZxUTeYQWiJt
ierf3qZt5PMYoMN7mFf9fLbNU2/nEcQClUHLR8q5rPdekeWRPBTe7SmV2J8gypOi
ScOSV/0+tZBGk31SxUr3OXGj1a4Bndy1CzsqwWzmV1KEPDV4ytsz9LJoYj+Qib70
Kj0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:18:57 2026 by rpki-client