Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa
File:                     a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa (raw, json)
Hash identifier:          C+HDaqlgLISsh+p97iUGeZdFex91kISP/h/L24E7yXw=
Subject key identifier:   6E:F6:52:56:5F:68:B7:85:07:4B:49:84:10:D3:04:82:E5:52:65:21
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584F348276749EEBBA6FCA894D48
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     11290
IP address blocks:        205.151.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:76:74:9e:eb:ba:6f:ca:89:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=471bc214-ab49-4b40-a89e-f6bf999ccc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:6f:d1:34:b2:cc:99:7b:1f:4f:a1:e7:7a:
                    af:64:9f:0c:18:da:1c:f0:47:85:ae:33:bd:8e:4a:
                    f3:59:a4:d4:29:e2:e5:7c:36:9f:67:01:8b:e3:07:
                    6a:58:5e:5b:f5:11:d2:8e:e5:af:65:7f:70:ae:64:
                    6b:83:74:75:54:9c:40:d6:fd:17:f9:ae:cd:46:31:
                    e3:9d:55:e8:cc:e2:f2:a7:75:f6:ed:e8:80:58:5e:
                    1f:51:fd:9a:ea:f9:7b:25:ad:68:8f:5f:4e:ef:eb:
                    23:7a:0d:02:81:d1:3d:4e:4c:6c:fb:79:31:28:22:
                    48:58:80:6c:79:93:4f:ec:57:dd:8f:e4:3e:f6:a9:
                    13:13:ca:5e:83:28:6d:41:42:53:34:e6:df:87:2d:
                    84:26:cf:4b:23:58:da:e4:63:d6:73:52:12:5b:9f:
                    51:ac:5c:75:2c:db:5e:be:d2:be:41:42:92:db:b3:
                    2a:7e:01:02:a7:37:b1:96:9e:c4:e9:70:f5:a2:f0:
                    04:3b:d8:96:3f:26:03:94:a3:16:bc:cb:56:95:12:
                    8c:66:7a:ea:3b:6d:78:a2:a2:2e:24:4c:00:d8:4d:
                    d5:29:67:91:05:5d:49:2f:c6:95:f1:e6:da:49:bf:
                    b0:45:92:2a:d1:30:9d:90:1c:17:47:a2:c8:e3:d3:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:52:56:5F:68:B7:85:07:4B:49:84:10:D3:04:82:E5:52:65:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:69:d2:21:22:f0:b2:de:44:b7:ee:5b:35:0d:5e:2f:08:
         95:78:dd:ae:2d:9a:70:f1:fd:dd:40:d3:d8:5b:18:40:28:9f:
         ac:47:5f:f0:7b:73:eb:9d:20:5a:9e:00:b3:89:dd:1b:f7:3e:
         3c:3d:30:c9:4e:7a:90:ae:b4:38:01:d8:3c:58:66:b7:cf:b6:
         42:70:1d:d1:df:df:55:aa:14:d1:0f:d8:ad:b4:cf:b5:1f:6f:
         da:60:4f:6f:fb:58:3d:4a:0c:75:36:6d:9d:4a:46:3c:66:77:
         10:df:a1:84:a1:54:ef:94:b4:75:84:be:80:ba:6a:82:f3:09:
         2d:ff:da:5a:91:e3:8a:80:39:a2:c3:aa:a0:50:53:4c:de:15:
         cc:0f:53:ef:66:d5:87:e1:06:02:c1:97:d0:0d:7e:b9:5f:5c:
         ce:95:7e:32:0d:dc:e7:46:02:82:fa:33:fd:80:e8:89:47:42:
         fe:a8:41:93:b6:5d:70:7f:1b:04:e5:24:56:2f:1a:0f:d5:bb:
         b4:98:7d:53:a3:5b:32:ea:b0:a1:f3:66:b5:d9:1c:21:71:1c:
         50:88:34:e0:f8:39:ae:9c:e9:b0:14:ef:c2:72:5f:dd:7b:de:
         08:65:6e:1b:3a:2d:86:16:db:a1:37:95:67:11:ee:8e:cd:33:
         0e:e4:0d:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnZ0nuu6b8qJTUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
NDcxYmMyMTQtYWI0OS00YjQwLWE4OWUtZjZiZjk5OWNjYzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydNv0TSyzJl7H0+h53qvZJ8MGNoc8EeFrjO9
jkrzWaTUKeLlfDafZwGL4wdqWF5b9RHSjuWvZX9wrmRrg3R1VJxA1v0X+a7NRjHj
nVXozOLyp3X27eiAWF4fUf2a6vl7Ja1oj19O7+sjeg0CgdE9Tkxs+3kxKCJIWIBs
eZNP7Ffdj+Q+9qkTE8pegyhtQUJTNObfhy2EJs9LI1ja5GPWc1ISW59RrFx1LNte
vtK+QUKS27MqfgECpzexlp7E6XD1ovAEO9iWPyYDlKMWvMtWlRKMZnrqO214oqIu
JEwA2E3VKWeRBV1JL8aV8ebaSb+wRZIq0TCdkBwXR6LI49MjMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG72UlZfaLeFB0tJhBDTBILlUmUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYTg1NThhOTUtNmQzNC0z
NTk5LWI1OWQtZjZiZGUxYmM4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZc9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB97adIhIvCy3kS37ls1DV4vCJV43a4tmnDx/d1A09hbGEAon6xHX/B7
c+udIFqeALOJ3Rv3Pjw9MMlOepCutDgB2DxYZrfPtkJwHdHf31WqFNEP2K20z7Uf
b9pgT2/7WD1KDHU2bZ1KRjxmdxDfoYShVO+UtHWEvoC6aoLzCS3/2lqR44qAOaLD
qqBQU0zeFcwPU+9m1YfhBgLBl9ANfrlfXM6VfjIN3OdGAoL6M/2A6IlHQv6oQZO2
XXB/GwTlJFYvGg/Vu7SYfVOjWzLqsKHzZrXZHCFxHFCINOD4Oa6c6bAU78JyX917
3ghlbhs6LYYW26E3lWcR7o7NMw7kDaA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:27:38 2026 by rpki-client