Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
File:                     46f6306b-c2ef-317a-b077-b01c1b216d0e.roa (raw, json)
Hash identifier:          QjD5hkIaFMA24B3IpyWbFAF5AQcTpEJ6XWiDkxahlUw=
Subject key identifier:   34:5F:24:CF:1B:9B:34:56:D2:E4:EF:B3:42:6C:7F:2E:47:07:F6:FE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F2ABD23FB28EE97403EA6EF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.111.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:23:fb:28:ee:97:40:3e:a6:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=f58848ff-a360-4269-9261-272713de3eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:0c:0a:08:c5:af:a6:f5:ed:62:3c:3c:03:
                    09:41:55:52:ba:b5:0c:14:43:a6:be:df:d1:fb:25:
                    3c:f7:5d:a8:2e:59:bf:29:27:3b:33:15:4e:39:b2:
                    e3:3e:87:ba:41:6e:25:6d:79:2c:5b:04:29:fb:46:
                    09:40:2a:4e:b2:a1:51:93:aa:d2:da:e8:89:7f:d4:
                    66:f6:f5:12:d5:f1:d0:4a:e7:70:e7:14:cb:93:6d:
                    57:e0:49:c0:00:51:8c:e2:66:fc:5d:2a:b0:d9:78:
                    ce:16:bf:23:bb:7a:5b:00:06:2a:14:e9:d8:52:43:
                    26:2c:ff:b1:6d:81:4e:e1:2d:1f:a6:33:60:96:6b:
                    34:99:33:69:2a:63:db:24:1c:d4:e6:ca:51:d1:24:
                    2f:b2:f2:7b:e7:0c:ef:11:4f:4a:6a:58:45:02:d6:
                    fa:21:2e:60:cc:26:f2:cc:6f:9c:ee:95:28:38:55:
                    e3:9e:78:69:91:4f:1b:c1:f2:61:83:8f:57:08:4c:
                    e7:5c:3f:b4:fa:b1:78:2b:ed:74:75:5d:5b:49:82:
                    a4:03:4f:7e:e7:02:d9:96:4a:a2:89:93:91:fc:38:
                    b6:0b:88:e3:63:15:28:a8:af:f2:ed:98:98:2f:d4:
                    c6:82:d9:c2:1d:94:6f:d2:f4:bc:57:65:87:5a:a6:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5F:24:CF:1B:9B:34:56:D2:E4:EF:B3:42:6C:7F:2E:47:07:F6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:79:3b:b8:19:02:69:c6:3a:bb:34:7f:c4:98:ca:14:21:ff:
         86:5a:a5:8f:01:8e:fb:66:09:79:93:32:fe:cf:37:50:7b:29:
         c7:ce:ec:f4:fa:f7:d9:ed:e4:41:c7:92:4f:fd:4a:a8:7c:cd:
         97:c2:7e:37:b6:55:30:62:b9:37:98:26:40:50:ed:24:b1:04:
         a9:c2:04:da:28:ae:b9:d0:b3:a7:36:67:3d:af:f5:19:cc:45:
         72:7d:88:61:a9:90:6b:d8:f0:99:d1:25:19:51:96:c3:b5:7d:
         26:7e:fb:14:61:f9:6d:42:43:18:ab:df:67:56:e9:7e:bc:cf:
         5f:0f:ad:e1:1c:fa:07:1b:33:02:68:23:58:e8:1d:b3:19:ab:
         9f:4d:c4:f1:00:c8:f3:b7:ea:96:c8:d2:ed:42:49:d7:cd:d7:
         3f:52:ee:5d:63:cc:f0:bc:d0:3b:6c:da:e3:5f:df:c7:b1:0a:
         d3:7d:33:5e:bb:b2:2b:24:47:f7:e8:c3:ce:78:98:0b:30:c4:
         88:59:67:91:00:c0:cb:82:7a:fa:1f:37:37:20:c3:74:b3:2c:
         95:20:b4:d3:15:68:96:a3:8b:67:16:15:92:81:24:55:b7:7d:
         18:f8:97:b0:03:83:4c:c3:ff:11:5f:95:1c:43:e9:30:f6:8b:
         9e:36:73:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSP7KO6XQD6m74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZjU4ODQ4ZmYtYTM2MC00MjY5LTkyNjEtMjcyNzEzZGUzZWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQgMCgjFr6b17WI8PAMJQVVSurUMFEOmvt/R
+yU8912oLlm/KSc7MxVOObLjPoe6QW4lbXksWwQp+0YJQCpOsqFRk6rS2uiJf9Rm
9vUS1fHQSudw5xTLk21X4EnAAFGM4mb8XSqw2XjOFr8ju3pbAAYqFOnYUkMmLP+x
bYFO4S0fpjNglms0mTNpKmPbJBzU5spR0SQvsvJ75wzvEU9KalhFAtb6IS5gzCby
zG+c7pUoOFXjnnhpkU8bwfJhg49XCEznXD+0+rF4K+10dV1bSYKkA09+5wLZlkqi
iZOR/Di2C4jjYxUoqK/y7ZiYL9TGgtnCHZRv0vS8V2WHWqZV5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRfJM8bmzRW0uTvs0Jsfy5HB/b+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDZmNjMwNmItYzJlZi0z
MTdhLWIwNzctYjAxYzFiMjE2ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGV5O7gZAmnGOrs0f8SYyhQh/4ZapY8BjvtmCXmTMv7PN1B7KcfO7PT6
99nt5EHHkk/9Sqh8zZfCfje2VTBiuTeYJkBQ7SSxBKnCBNoorrnQs6c2Zz2v9RnM
RXJ9iGGpkGvY8JnRJRlRlsO1fSZ++xRh+W1CQxir32dW6X68z18PreEc+gcbMwJo
I1joHbMZq59NxPEAyPO36pbI0u1CSdfN1z9S7l1jzPC80Dts2uNf38exCtN9M167
siskR/fow854mAswxIhZZ5EAwMuCevofNzcgw3SzLJUgtNMVaJaji2cWFZKBJFW3
fRj4l7ADg0zD/xFflRxD6TD2i542c+M=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:15:21 2026 by rpki-client