Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/35d09092-1897-337c-8d77-1885b4f5f1ef.roa
File:                     35d09092-1897-337c-8d77-1885b4f5f1ef.roa (raw, json)
Hash identifier:          U2afukIoohLe3utrqpJTGM8SLWg9ECuZMkvogqiOOvY=
Subject key identifier:   EF:0F:E3:1E:68:90:7E:AA:D2:3B:3C:0D:76:01:21:E8:5E:A2:19:52
Certificate issuer:       /CN=f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21
Certificate serial:       010D0C9F4328584F00DCBFC374D5B44FFC3D76E0
Authority key identifier: EE:E4:AF:E1:38:76:5A:AE:4B:CF:73:7F:C3:34:62:14:6B:37:06:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/35d09092-1897-337c-8d77-1885b4f5f1ef.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     21869
IP address blocks:        198.246.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bf:c3:74:d5:b4:4f:fc:3d:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=39ebf4e9-a1b8-45dd-af9d-84f51146930b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:25:bc:d4:bc:0f:73:bc:1b:fc:a9:9b:91:
                    df:66:04:ca:da:53:92:54:e5:8d:7f:47:a7:07:b1:
                    8c:76:55:96:71:98:af:fa:22:a4:8b:01:be:3f:e0:
                    c2:14:7c:71:6e:e5:b6:be:51:aa:90:39:c2:6b:6d:
                    69:6f:42:99:85:09:16:c7:8f:e5:47:5f:e7:23:17:
                    2b:60:33:7c:4b:96:f5:a2:ea:6e:ed:c2:b8:0b:06:
                    24:09:60:b0:c9:4c:8a:7c:43:c8:bf:cd:e2:38:08:
                    0a:88:b7:6f:a2:52:40:81:f2:91:88:6f:a7:36:60:
                    86:4f:68:fc:1f:a8:d2:3c:b0:a3:d8:81:95:8c:61:
                    6d:30:2e:b7:07:b5:fd:71:d7:5a:68:e7:0d:f7:2a:
                    1b:52:b2:df:af:5a:35:54:15:e2:20:46:e7:87:c8:
                    b1:58:77:aa:ff:34:d6:f9:e8:23:63:ac:31:49:a7:
                    46:6d:60:5f:dc:e2:72:8a:12:03:e7:2c:1a:02:9b:
                    c4:ea:8f:9f:fe:f7:47:77:10:b0:64:c4:ea:e0:6d:
                    60:3d:a9:bb:96:d1:1b:e9:2b:b6:30:82:cc:cb:bc:
                    84:a4:26:88:24:d1:e1:e7:bd:4d:63:db:3e:f9:70:
                    39:bd:74:15:14:3e:4c:26:09:3c:aa:65:64:0b:b3:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0F:E3:1E:68:90:7E:AA:D2:3B:3C:0D:76:01:21:E8:5E:A2:19:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/35d09092-1897-337c-8d77-1885b4f5f1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.crl

            X509v3 Authority Key Identifier:
                keyid:EE:E4:AF:E1:38:76:5A:AE:4B:CF:73:7F:C3:34:62:14:6B:37:06:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f06b1b6c-aa16-4903-8ea0-6bbc2f82fe21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.246.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b5:f8:48:aa:9f:84:e0:2a:1c:6a:2b:68:b1:a7:07:dc:41:
         a3:aa:9a:8f:1f:97:f5:f1:5c:52:9a:8f:8e:48:f0:e5:61:d4:
         48:c1:6c:92:9e:5c:29:88:c6:1f:8e:11:08:61:7b:65:54:e4:
         db:04:b3:d4:27:df:3b:9d:60:fe:f7:b3:73:91:a7:f0:e2:6a:
         76:1e:ce:f8:5c:f0:25:91:5f:07:4e:49:41:f3:28:9e:8f:01:
         1e:0e:21:c8:fd:7f:2b:fd:cc:95:e6:78:05:b3:2a:9f:af:26:
         7b:ed:7f:eb:8e:c7:85:13:eb:a4:62:9d:47:c6:46:ad:f6:ce:
         22:9a:38:4b:8a:14:b7:40:1b:31:d3:26:61:49:f5:d7:0a:30:
         4e:dc:ba:b8:ad:0a:0d:90:b1:61:d0:a9:a7:1a:af:c5:a0:05:
         55:d0:49:b2:fe:3f:b7:c1:29:cd:92:8e:8c:5f:bd:3c:00:54:
         17:d5:83:85:70:65:10:99:22:22:d4:83:6e:0d:6b:b2:53:ba:
         c0:a8:5a:2f:54:3d:6c:6e:0f:50:fa:82:50:a5:15:ff:09:a1:
         be:36:fd:9a:1b:80:00:68:b0:12:e6:20:e3:54:75:60:47:4a:
         d9:0b:20:76:0d:2c:2c:dc:bb:27:9f:76:dc:f4:c6:31:7c:75:
         71:8f:55:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3L/DdNW0T/w9duAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA2YjFiNmMtYWExNi00OTAzLThlYTAtNmJiYzJmODJm
ZTIxMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
MzllYmY0ZTktYTFiOC00NWRkLWFmOWQtODRmNTExNDY5MzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfclvNS8D3O8G/ypm5HfZgTK2lOSVOWNf0en
B7GMdlWWcZiv+iKkiwG+P+DCFHxxbuW2vlGqkDnCa21pb0KZhQkWx4/lR1/nIxcr
YDN8S5b1oupu7cK4CwYkCWCwyUyKfEPIv83iOAgKiLdvolJAgfKRiG+nNmCGT2j8
H6jSPLCj2IGVjGFtMC63B7X9cddaaOcN9yobUrLfr1o1VBXiIEbnh8ixWHeq/zTW
+egjY6wxSadGbWBf3OJyihID5ywaApvE6o+f/vdHdxCwZMTq4G1gPam7ltEb6Su2
MILMy7yEpCaIJNHh571NY9s++XA5vXQVFD5MJgk8qmVkC7OWEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8P4x5okH6q0js8DXYBIeheohlSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMDZi
MWI2Yy1hYTE2LTQ5MDMtOGVhMC02YmJjMmY4MmZlMjEvMzVkMDkwOTItMTg5Ny0z
MzdjLThkNzctMTg4NWI0ZjVmMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjA2YjFiNmMtYWExNi00OTAzLThl
YTAtNmJiYzJmODJmZTIxL2YwNmIxYjZjLWFhMTYtNDkwMy04ZWEwLTZiYmMyZjgy
ZmUyMS5jcmwwHwYDVR0jBBgwFoAU7uSv4Th2Wq5Lz3N/wzRiFGs3BoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMDZiMWI2Yy1hYTE2LTQ5MDMtOGVhMC02YmJj
MmY4MmZlMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvabMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW1+Eiqn4TgKhxqK2ixpwfcQaOqmo8fl/XxXFKaj45I8OVh1EjBbJKe
XCmIxh+OEQhhe2VU5NsEs9Qn3zudYP73s3ORp/DianYezvhc8CWRXwdOSUHzKJ6P
AR4OIcj9fyv9zJXmeAWzKp+vJnvtf+uOx4UT66RinUfGRq32ziKaOEuKFLdAGzHT
JmFJ9dcKME7curitCg2QsWHQqacar8WgBVXQSbL+P7fBKc2SjoxfvTwAVBfVg4Vw
ZRCZIiLUg24Na7JTusCoWi9UPWxuD1D6glClFf8Job42/ZobgABosBLmIONUdWBH
StkLIHYNLCzcuyefdtz0xjF8dXGPVRE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:41 2026 by rpki-client