Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/9a97683d-9a30-38f7-a644-c50748017d71.roa
File:                     9a97683d-9a30-38f7-a644-c50748017d71.roa (raw, json)
Hash identifier:          4GbKTaM48pZv+pH1kxT/gkpd4TtEBVxXVKwzTwAxYPE=
Subject key identifier:   74:82:56:43:73:37:F2:43:4B:1E:D6:88:7E:C2:CC:E4:33:2E:2C:27
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F4328584F7FFB85A261B0B1820BE43FC0
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/9a97683d-9a30-38f7-a644-c50748017d71.roa
Signing time:             Wed 14 Oct 2026 13:49:54 +0000
ROA not before:           Wed 14 Oct 2026 13:49:54 +0000
ROA not after:            Tue 12 Jan 2027 14:49:54 +0000
asID:                     14618
IP address blocks:        199.255.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:fb:85:a2:61:b0:b1:82:0b:e4:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Oct 14 13:49:54 2026 GMT
            Not After : Jan 12 14:49:54 2027 GMT
        Subject: CN=a5b5d051-84be-4508-be32-56b172c60cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:77:9b:5c:60:ca:f6:4b:40:b9:c3:38:57:
                    a6:0f:88:4b:48:13:95:e5:8f:0f:e3:d7:e5:d6:93:
                    7d:07:68:1c:32:89:9e:76:9a:11:31:c5:ea:7e:5d:
                    37:5f:d3:a7:56:e0:4c:7a:a7:4f:4f:52:14:67:b3:
                    27:db:01:3b:4d:7d:fb:33:36:41:c2:97:7b:2d:e1:
                    e4:be:f9:3b:47:02:19:45:82:a7:af:6e:0d:64:55:
                    97:f8:a8:66:eb:e3:64:b9:1e:da:cb:26:ee:be:0e:
                    7e:30:f1:bd:38:3f:5c:45:9a:59:aa:fd:34:02:9b:
                    bd:74:0c:cf:de:c6:05:be:0b:9e:4c:5e:4a:43:a3:
                    32:8e:80:22:b7:95:f9:92:96:df:ee:2e:99:54:83:
                    07:4d:b3:d0:64:7f:d5:88:4f:ea:9e:d2:31:05:29:
                    b2:6e:03:15:86:77:79:36:00:3d:aa:52:7b:8d:de:
                    f3:a6:e5:91:cf:e6:2b:b3:ab:6d:a5:f5:90:6a:4d:
                    7f:c5:a5:ff:31:da:2c:09:c5:a0:54:66:cb:57:36:
                    f3:7b:19:18:86:eb:c8:fa:e3:dd:c4:0a:a3:18:24:
                    a0:10:e8:41:fb:e6:80:b6:6c:06:ee:78:95:e5:27:
                    65:1c:06:e7:d5:7a:47:c5:12:96:89:40:50:8a:87:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:56:43:73:37:F2:43:4B:1E:D6:88:7E:C2:CC:E4:33:2E:2C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/9a97683d-9a30-38f7-a644-c50748017d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:a6:dd:15:b0:66:71:b2:2c:9e:86:04:82:ea:64:7d:ef:
         a3:49:43:c7:a6:d4:53:7d:04:c0:f1:ef:32:8c:06:cb:44:3e:
         9d:87:ae:9b:e1:3b:27:81:3e:1a:13:04:cc:c6:25:2a:78:43:
         7c:65:db:2d:dd:37:45:cb:dd:1e:bb:56:60:c3:22:65:dc:64:
         30:26:fe:6e:8f:75:18:20:31:17:02:94:4e:b6:e3:4e:e9:fa:
         2f:04:cc:27:cf:af:cd:f5:30:83:25:ce:64:1a:90:fc:b6:0c:
         60:cf:25:d0:df:8e:93:37:8e:1e:3f:4c:a4:62:c7:ab:67:69:
         5a:03:c8:82:82:d6:52:75:cd:a4:41:f9:2e:a2:52:30:33:d6:
         17:87:9b:9c:64:fe:9a:ad:9c:a2:81:3f:72:ec:00:54:27:9b:
         51:68:4f:69:b2:c1:d3:87:16:5a:cb:8c:52:45:b6:81:c5:1e:
         df:5f:87:68:c3:07:b9:2d:54:fa:ab:01:e8:fe:bf:66:21:1a:
         4c:48:71:97:8a:c5:29:7e:2a:c7:90:19:cf:48:46:36:a8:d5:
         24:b3:b8:bd:59:3a:cf:1d:96:d6:3c:79:8c:f7:2e:d1:42:ef:
         d6:65:a4:f7:7f:82:c7:c5:b9:d6:81:be:ef:09:35:fd:5b:8e:
         02:c2:be:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/+4WiYbCxggvkP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj
MTEzMB4XDTI2MTAxNDEzNDk1NFoXDTI3MDExMjE0NDk1NFowLzEtMCsGA1UEAxMk
YTViNWQwNTEtODRiZS00NTA4LWJlMzItNTZiMTcyYzYwY2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr13m1xgyvZLQLnDOFemD4hLSBOV5Y8P49fl
1pN9B2gcMomedpoRMcXqfl03X9OnVuBMeqdPT1IUZ7Mn2wE7TX37MzZBwpd7LeHk
vvk7RwIZRYKnr24NZFWX+Khm6+NkuR7ayybuvg5+MPG9OD9cRZpZqv00Apu9dAzP
3sYFvgueTF5KQ6MyjoAit5X5kpbf7i6ZVIMHTbPQZH/ViE/qntIxBSmybgMVhnd5
NgA9qlJ7jd7zpuWRz+Yrs6ttpfWQak1/xaX/MdosCcWgVGbLVzbzexkYhuvI+uPd
xAqjGCSgEOhB++aAtmwG7niV5SdlHAbn1XpHxRKWiUBQiodScQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSCVkNzN/JDSx7WiH7CzOQzLiwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0
NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvOWE5NzY4M2QtOWEzMC0z
OGY3LWE2NDQtYzUwNzQ4MDE3ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj
MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1
YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0
YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHXpt0VsGZxsiyehgSC6mR976NJQ8em1FN9BMDx7zKMBstEPp2Hrpvh
OyeBPhoTBMzGJSp4Q3xl2y3dN0XL3R67VmDDImXcZDAm/m6PdRggMRcClE62407p
+i8EzCfPr831MIMlzmQakPy2DGDPJdDfjpM3jh4/TKRix6tnaVoDyIKC1lJ1zaRB
+S6iUjAz1heHm5xk/pqtnKKBP3LsAFQnm1FoT2mywdOHFlrLjFJFtoHFHt9fh2jD
B7ktVPqrAej+v2YhGkxIcZeKxSl+KseQGc9IRjao1SSzuL1ZOs8dltY8eYz3LtFC
79ZlpPd/gsfFudaBvu8JNf1bjgLCvvs=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:29 2026 by rpki-client