Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
File:                     6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa (raw, json)
Hash identifier:          HY+3H3LGQHD5yp3ToRf+V30njM4YrrXa3QXQWGTd+ag=
Subject key identifier:   A0:9B:1E:56:FF:E5:AC:47:E8:B8:8A:61:B8:0A:C7:1E:6A:60:DC:4C
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584F1B624BA0B938DFD41CE3B580
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     398210
IP address blocks:        168.220.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4b:a0:b9:38:df:d4:1c:e3:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=0710d80f-8ff6-417a-b6eb-332c8095fc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:a4:01:51:6e:b4:87:e8:9f:71:1a:14:00:
                    45:e9:02:da:25:33:77:ea:eb:8c:10:be:e6:6c:08:
                    b6:e5:9d:44:7f:6c:9c:95:e5:bf:d3:41:5d:97:1a:
                    6c:39:d4:17:00:0f:ed:74:94:32:de:06:04:0a:c6:
                    8c:64:90:2c:ac:e5:40:37:fa:3d:3f:ce:33:15:e1:
                    38:14:3d:f4:45:79:a5:a3:f7:64:9d:4d:20:bc:63:
                    0b:56:84:99:8d:2c:f9:a5:ae:b6:5b:be:52:74:21:
                    15:ca:97:3f:12:ac:f5:a3:d4:bf:88:cf:5b:7f:ea:
                    b4:e6:07:24:88:9a:ac:ec:35:c8:ee:a1:61:d1:cd:
                    5e:64:d4:bd:47:9c:1d:32:c8:f3:86:c1:db:c7:12:
                    25:c8:75:0e:b7:8d:8e:77:55:7e:8c:26:0a:af:0c:
                    a1:d6:40:e0:54:5f:03:10:5e:0e:3e:04:b8:78:31:
                    49:26:aa:98:df:b7:67:90:11:33:fb:a4:47:a5:82:
                    9c:65:0b:a4:3b:f3:03:06:c8:28:94:06:4c:f3:f2:
                    8b:8b:66:94:d1:9b:05:5f:3b:60:9a:d8:fd:b7:09:
                    13:85:76:5f:56:6a:e2:a5:4c:4a:27:b0:fd:87:6e:
                    8f:d6:9d:70:26:f0:ec:8f:43:77:20:b7:74:83:28:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:1E:56:FF:E5:AC:47:E8:B8:8A:61:B8:0A:C7:1E:6A:60:DC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:75:ac:d8:16:99:cd:31:7d:34:ce:24:fd:aa:4a:64:29:26:
         cb:8a:85:8a:9c:ce:55:51:a1:f3:0d:96:99:aa:05:71:cb:f3:
         6d:c9:0e:19:af:3e:fe:01:8a:97:2f:c9:63:d4:c5:8e:4d:40:
         d3:1a:66:54:2c:fe:1c:2e:b1:e4:ba:80:73:1f:d8:a7:79:66:
         fb:c8:21:e9:f2:70:57:62:8c:4c:4b:7f:73:bf:7a:ed:c4:13:
         c8:ed:6f:71:93:0d:11:f7:2a:e9:21:a6:4b:3d:bf:78:26:92:
         04:fd:57:73:e8:07:05:3b:c4:a2:87:2d:a4:1d:e5:cd:21:64:
         1c:e6:60:b9:8c:79:b2:6d:42:e7:a2:20:f5:60:b7:e9:21:b1:
         0e:f5:31:77:4c:39:a4:fd:52:b5:63:0b:74:25:9d:d0:a6:f8:
         ec:40:ad:74:fe:51:cb:77:01:cb:5a:cd:6c:a8:04:87:09:b7:
         9d:b9:6c:c3:54:ed:16:af:fa:74:64:f9:10:2d:5b:55:03:48:
         10:1f:9c:c1:7f:93:3f:6f:e6:0e:f4:f6:f6:eb:ce:61:06:a6:
         1d:73:65:b5:1c:3f:f4:49:40:1a:5d:3f:f8:87:74:4e:ff:f3:
         6e:12:88:b1:66:12:55:d9:d3:6f:4c:f8:56:28:96:bb:03:cf:
         92:2c:d4:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkuguTjf1BzjtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk
MDcxMGQ4MGYtOGZmNi00MTdhLWI2ZWItMzMyYzgwOTVmYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwOkAVFutIfon3EaFABF6QLaJTN36uuMEL7m
bAi25Z1Ef2ycleW/00FdlxpsOdQXAA/tdJQy3gYECsaMZJAsrOVAN/o9P84zFeE4
FD30RXmlo/dknU0gvGMLVoSZjSz5pa62W75SdCEVypc/Eqz1o9S/iM9bf+q05gck
iJqs7DXI7qFh0c1eZNS9R5wdMsjzhsHbxxIlyHUOt42Od1V+jCYKrwyh1kDgVF8D
EF4OPgS4eDFJJqqY37dnkBEz+6RHpYKcZQukO/MDBsgolAZM8/KLi2aU0ZsFXztg
mtj9twkThXZfVmripUxKJ7D9h26P1p1wJvDsj0N3ILd0gyh23wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCbHlb/5axH6LiKYbgKxx5qYNxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNmY0YTllZjAtZmJmZC0z
MDVjLTlkMjItNzYzNDdiYmMwYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ1rNgWmc0xfTTOJP2qSmQpJsuKhYqczlVRofMNlpmqBXHL823JDhmv
Pv4BipcvyWPUxY5NQNMaZlQs/hwuseS6gHMf2Kd5ZvvIIenycFdijExLf3O/eu3E
E8jtb3GTDRH3Kukhpks9v3gmkgT9V3PoBwU7xKKHLaQd5c0hZBzmYLmMebJtQuei
IPVgt+khsQ71MXdMOaT9UrVjC3QlndCm+OxArXT+Uct3ActazWyoBIcJt525bMNU
7Rav+nRk+RAtW1UDSBAfnMF/kz9v5g709vbrzmEGph1zZbUcP/RJQBpdP/iHdE7/
824SiLFmElXZ029M+FYolrsDz5Is1P4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:13 2026 by rpki-client