Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa
File:                     d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa (raw, json)
Hash identifier:          VhsoY4Xoh1zIwfNlq6izuZ3CPqL5AiSu3d+APB9roks=
Subject key identifier:   C7:39:B2:DE:1D:68:8A:4C:01:BC:67:37:EA:AE:8C:CA:36:5F:D2:88
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584EF5B21229A3496DA5E585A980
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        204.50.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:12:29:a3:49:6d:a5:e5:85:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=2a1179a7-4a5b-4b22-8d41-6cc245be8986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:d2:4c:be:b7:32:cf:5b:e4:c0:4c:4a:a3:
                    d4:c6:00:76:92:fa:11:8f:45:24:32:92:64:52:ea:
                    1e:58:c7:a0:d0:0b:34:bf:d0:3e:02:22:54:ad:22:
                    d4:65:b0:17:e6:73:0f:d1:80:46:88:88:9c:0a:25:
                    60:b9:8f:0a:f5:b6:a1:9f:c1:58:62:a2:2d:46:2a:
                    a5:7b:77:cc:3d:a1:bb:88:fe:94:94:21:f2:17:51:
                    d2:21:52:e7:19:3c:68:27:5e:6b:a3:e2:7a:26:df:
                    f0:e5:e9:50:3b:bd:0e:16:11:cb:f0:ba:73:96:45:
                    04:f4:a3:1f:7e:fa:3a:1d:71:49:28:46:41:5f:c6:
                    7b:1b:f6:60:40:8b:3f:58:6b:b7:0d:af:2a:aa:a6:
                    9a:89:a2:bc:6c:06:a4:1e:f5:e9:af:dd:01:08:5f:
                    ca:a5:b5:85:43:f0:0c:66:44:29:01:df:25:15:e7:
                    2a:10:42:39:97:7f:f8:d3:b6:5a:16:fb:43:32:07:
                    03:52:a3:ae:c2:d9:4c:ed:0f:66:4d:95:e8:f1:eb:
                    b7:a6:ee:d3:1c:0a:66:77:56:eb:cc:07:9c:ae:46:
                    79:44:0e:9a:8e:2f:98:9f:35:0e:08:b9:b6:b2:5f:
                    72:19:16:cd:06:c6:38:12:17:4c:23:cb:a4:4e:dc:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:B2:DE:1D:68:8A:4C:01:BC:67:37:EA:AE:8C:CA:36:5F:D2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.50.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:e2:fd:7f:0a:72:36:19:4b:8b:6b:d5:cb:11:32:9f:f1:
         a8:71:19:1d:13:4b:fc:97:13:fb:ff:ab:c5:8e:95:ab:6a:99:
         9a:d1:c8:ce:5a:97:ed:6a:08:df:76:3d:d9:7e:0d:fd:16:5f:
         13:6f:0f:39:39:23:8b:2c:77:f9:90:9d:92:9f:d5:d6:9c:da:
         56:b0:86:2b:de:6e:14:51:00:e6:04:97:17:73:de:01:cc:60:
         05:6b:4f:53:ca:9d:89:3c:ae:58:1a:9a:02:f1:68:f4:d6:ec:
         f5:6a:f2:02:f2:f9:2d:1a:67:71:0a:a7:f8:d9:45:e0:32:b3:
         0d:51:c8:98:ca:5c:e0:c0:64:b5:b2:98:07:2b:aa:a2:7c:4c:
         56:59:12:15:a8:0c:20:06:9d:4b:e2:52:1d:4a:77:77:e8:03:
         ba:91:65:2d:0b:17:e3:15:8e:6f:19:81:a3:2b:14:d1:50:07:
         3d:d7:ff:c2:28:ce:00:94:ed:11:73:b5:3d:47:7f:88:6f:18:
         88:1a:f8:93:58:ab:0d:af:40:87:47:ff:e5:a9:e8:34:e3:c0:
         cc:77:c8:65:6d:bc:15:66:ff:dc:62:c8:1c:5b:3d:a5:46:d5:
         b9:75:7c:2b:0f:98:15:9b:4a:93:8b:07:e1:d9:f2:57:3c:8e:
         39:12:51:28
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE71shIpo0ltpeWFqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz
ZTJkMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmExMTc5YTctNGE1Yi00YjIyLThkNDEtNmNjMjQ1YmU4OTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqXSTL63Ms9b5MBMSqPUxgB2kvoRj0UkMpJk
UuoeWMeg0As0v9A+AiJUrSLUZbAX5nMP0YBGiIicCiVguY8K9bahn8FYYqItRiql
e3fMPaG7iP6UlCHyF1HSIVLnGTxoJ15ro+J6Jt/w5elQO70OFhHL8LpzlkUE9KMf
fvo6HXFJKEZBX8Z7G/ZgQIs/WGu3Da8qqqaaiaK8bAakHvXpr90BCF/KpbWFQ/AM
ZkQpAd8lFecqEEI5l3/407ZaFvtDMgcDUqOuwtlM7Q9mTZXo8eu3pu7THApmd1br
zAecrkZ5RA6aji+YnzUOCLm2sl9yGRbNBsY4EhdMI8ukTtxcLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMc5st4daIpMAbxnN+qujMo2X9KIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi
Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvZDNlYmMwOGItYTZlYi0z
ZGYzLWJiNzAtYTg2NGEyNTg0YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1
MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw
M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0
OTAzMDNlMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzDIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa1ji/X8KcjYZS4tr1csRMp/xqHEZHRNL/JcT+/+rxY6Vq2qZmtHIzlqX
7WoI33Y92X4N/RZfE28POTkjiyx3+ZCdkp/V1pzaVrCGK95uFFEA5gSXF3PeAcxg
BWtPU8qdiTyuWBqaAvFo9Nbs9WryAvL5LRpncQqn+NlF4DKzDVHImMpc4MBktbKY
ByuqonxMVlkSFagMIAadS+JSHUp3d+gDupFlLQsX4xWObxmBoysU0VAHPdf/wijO
AJTtEXO1PUd/iG8YiBr4k1irDa9Ah0f/5anoNOPAzHfIZW28FWb/3GLIHFs9pUbV
uXV8Kw+YFZtKk4sH4dnyVzyOORJRKA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:58:55 2026 by rpki-client