Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
File:                     101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa (raw, json)
Hash identifier:          k1Cs3TmY47euN7Sb/XbM1ul65wI0DKBhuvTBHmaFJsc=
Subject key identifier:   A3:69:48:00:71:6A:69:68:B6:71:21:3B:47:8E:0C:6C:BA:5B:C4:1A
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584F3CE29DF63846730EB17EDD40
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     109
IP address blocks:        192.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9d:f6:38:46:73:0e:b1:7e:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=6e049fe6-5c31-48c9-9651-5f9c69b545a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:2b:26:33:f5:70:32:c9:82:b5:f7:2b:d6:
                    79:ed:19:83:c7:f0:9c:41:4e:f2:9c:e2:73:fd:6d:
                    33:49:56:51:3d:84:47:a7:98:cf:8a:8a:c5:3b:81:
                    cf:2b:ba:70:af:b4:db:e4:63:18:56:b4:5f:b6:83:
                    55:a3:ce:8d:16:51:d8:83:3d:dc:ec:9f:bd:87:34:
                    3e:23:9c:86:aa:84:e6:bd:ff:de:38:c6:6f:47:ce:
                    7e:7d:54:08:0b:e6:bd:9d:88:c8:4d:ec:56:8b:00:
                    d3:0f:ac:51:fd:8c:ce:f8:f7:d3:82:5b:da:f2:9b:
                    09:08:8e:7f:1d:e0:ec:5a:08:e7:62:ab:18:ed:dc:
                    44:5d:e1:5d:71:78:e6:09:61:77:ac:49:92:8c:ac:
                    5d:4b:48:28:39:eb:f7:8e:d8:2b:76:9a:b1:d6:05:
                    50:68:fb:24:cb:b9:d3:05:fe:5d:2b:fd:80:0f:e9:
                    4d:0b:64:e1:29:67:49:3b:9b:e9:1c:5f:fc:a2:0b:
                    08:b7:2c:6f:8a:2e:5a:56:07:eb:71:ec:4b:d3:9c:
                    02:da:f6:11:5a:be:78:fc:01:fd:bc:70:b8:9a:5c:
                    53:0f:21:be:ec:7e:66:0e:11:c7:90:1f:3b:0f:96:
                    66:c8:01:44:9d:ba:a1:8f:fa:97:ae:89:6b:bd:1d:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:48:00:71:6A:69:68:B6:71:21:3B:47:8E:0C:6C:BA:5B:C4:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e7:0f:4a:d5:e7:ee:c2:eb:4b:fc:e3:b2:bf:e8:51:51:cb:
         01:4a:3d:16:4a:d1:b8:65:b3:df:d0:73:f2:35:9e:eb:30:cd:
         1b:b4:4b:75:32:f8:fa:35:26:64:63:75:d0:88:50:cd:35:f1:
         0a:6c:cb:46:c3:16:f7:3f:6d:1e:e4:ec:e7:39:07:dd:46:09:
         f9:5e:05:9a:90:9e:72:21:10:ca:4c:f8:c9:10:c1:a8:b9:6d:
         c4:25:6c:2a:43:b2:90:1a:23:54:a9:43:7b:8e:c6:ad:3e:4a:
         ad:64:60:2b:b2:b7:bd:0b:39:f3:15:42:a2:22:b5:c9:01:55:
         58:6d:90:e9:45:70:73:9d:fe:63:e5:5e:7d:1a:83:d3:7d:4e:
         75:7c:d9:ea:bc:f1:b4:df:a0:d8:c1:87:66:97:e8:25:7c:a0:
         04:f8:f0:31:02:18:b9:a6:df:63:fd:f5:76:b8:09:3c:31:43:
         64:2e:a5:7b:14:a0:d7:20:35:84:5d:68:ac:f4:6d:2c:ae:19:
         77:48:82:9a:8d:28:b6:95:1c:58:75:21:86:41:42:59:e4:1e:
         ca:f9:7b:17:09:5e:5f:1e:8b:94:28:54:80:22:71:9a:46:4a:
         53:16:7d:04:e1:af:2f:27:a4:62:0b:36:f4:06:d3:6e:97:3d:
         7a:51:b4:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p32OEZzDrF+3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
NmUwNDlmZTYtNWMzMS00OGM5LTk2NTEtNWY5YzY5YjU0NWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTErJjP1cDLJgrX3K9Z57RmDx/CcQU7ynOJz
/W0zSVZRPYRHp5jPiorFO4HPK7pwr7Tb5GMYVrRftoNVo86NFlHYgz3c7J+9hzQ+
I5yGqoTmvf/eOMZvR85+fVQIC+a9nYjITexWiwDTD6xR/YzO+PfTglva8psJCI5/
HeDsWgjnYqsY7dxEXeFdcXjmCWF3rEmSjKxdS0goOev3jtgrdpqx1gVQaPsky7nT
Bf5dK/2AD+lNC2ThKWdJO5vpHF/8ogsItyxvii5aVgfrcexL05wC2vYRWr54/AH9
vHC4mlxTDyG+7H5mDhHHkB87D5ZmyAFEnbqhj/qXrolrvR1TGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNpSABxamlotnEhO0eODGy6W8QaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMTAxZTg0YWEtOGFmYy0z
ZGQ1LThmYzAtMGM5YmU2ZDFhZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIf6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDnD0rV5+7C60v847K/6FFRywFKPRZK0bhls9/Qc/I1nuswzRu0S3Uy
+Po1JmRjddCIUM018Qpsy0bDFvc/bR7k7Oc5B91GCfleBZqQnnIhEMpM+MkQwai5
bcQlbCpDspAaI1SpQ3uOxq0+Sq1kYCuyt70LOfMVQqIitckBVVhtkOlFcHOd/mPl
Xn0ag9N9TnV82eq88bTfoNjBh2aX6CV8oAT48DECGLmm32P99Xa4CTwxQ2QupXsU
oNcgNYRdaKz0bSyuGXdIgpqNKLaVHFh1IYZBQlnkHsr5excJXl8ei5QoVIAicZpG
SlMWfQThry8npGILNvQG026XPXpRtCU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:12:08 2026 by rpki-client