Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
File:                     14842e5d-ad09-3b78-bf54-277a31112e14.roa (raw, json)
Hash identifier:          mYBY/bnGhQ/zPQNy+KmK93LHzWTe9eYKC6quwxulLbo=
Subject key identifier:   E1:A0:9E:0A:E9:7B:18:16:97:19:93:D0:89:F2:EC:BC:0D:22:67:94
Certificate issuer:       /CN=857f4763-aacf-4784-828d-557ab7b55809
Certificate serial:       010D0C9F4328584F374D2E6229905ADF5E7B0BA0
Authority key identifier: 60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     393811
IP address blocks:        192.67.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2e:62:29:90:5a:df:5e:7b:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857f4763-aacf-4784-828d-557ab7b55809
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=80cfec02-6dc9-4c64-a715-356c2d8e163c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:ce:41:64:3b:f8:e7:44:a7:4e:75:c8:1c:
                    9f:e1:16:cf:fa:44:18:03:33:b9:cf:2e:31:b0:f4:
                    b2:4b:e9:54:15:b4:3a:a4:aa:ba:91:b3:31:2c:4a:
                    1a:a2:47:be:e0:4f:f6:67:9e:2e:d7:5e:c9:b6:39:
                    cc:3a:d9:87:55:48:7d:bd:05:c1:d4:08:5c:f2:b9:
                    d0:7e:86:dc:92:1c:26:3b:72:0e:1d:61:4b:6f:ae:
                    c8:c2:c8:f1:7b:b0:b0:5e:3b:92:3e:2b:cf:34:ca:
                    d8:d8:42:98:94:ba:c9:f0:3c:01:3b:f0:85:c7:74:
                    ef:38:93:83:ec:af:f7:a9:d7:31:39:88:fe:4e:01:
                    c2:3a:12:d6:de:0c:1a:42:b7:b2:e7:2b:ad:7e:1c:
                    46:15:51:23:d7:27:30:6b:77:df:4d:05:bf:4e:71:
                    17:97:8d:da:fa:29:68:ee:2a:8d:99:7b:93:a2:58:
                    6c:67:c8:0f:e5:ab:c7:f6:7a:77:9a:84:e6:e6:90:
                    e6:83:56:71:ff:ee:9e:98:ed:3d:d4:82:13:a0:47:
                    5b:60:e9:3b:78:e5:88:2a:46:5f:72:3e:8a:80:0f:
                    4f:cc:0c:42:52:26:7a:f2:c6:c7:18:d2:ce:6b:f5:
                    9a:92:cd:a3:69:30:b1:1e:d2:2d:48:a1:3d:8f:a8:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:9E:0A:E9:7B:18:16:97:19:93:D0:89:F2:EC:BC:0D:22:67:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl

            X509v3 Authority Key Identifier:
                keyid:60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:1e:c9:68:85:09:21:4d:75:75:96:31:e5:53:68:65:53:
         31:8c:7a:30:6a:b2:df:2d:90:4e:c5:2a:7d:12:6a:a8:cf:5a:
         bd:3f:12:8f:a3:21:22:02:e9:94:4d:9e:22:d3:fd:f1:4b:db:
         b6:61:60:42:f5:95:40:6b:c6:3f:3f:e2:33:5c:21:27:1c:10:
         98:7d:63:bb:f0:e7:c2:f8:b6:e2:0e:d4:90:df:fe:e2:6d:73:
         56:55:30:fa:04:c5:d5:17:2b:65:e1:cf:25:9a:50:d6:bb:18:
         88:0c:87:a3:49:d2:24:d3:ac:79:c4:21:7a:ac:8f:91:ca:f7:
         93:44:89:5d:c5:e2:d5:d9:07:86:8e:f6:78:69:d5:57:91:bf:
         46:60:70:37:08:7c:13:d6:b7:96:85:7d:bd:61:c6:ed:ea:06:
         05:0a:96:d2:41:25:75:f4:25:95:4e:4b:ac:d3:ec:b3:95:b4:
         fc:dd:a3:39:1f:9a:dd:8a:a5:9f:53:da:36:31:26:19:64:ac:
         4f:2a:eb:80:aa:c6:3a:ee:28:b9:ad:43:6c:7f:7f:b4:80:9f:
         e2:4f:43:4a:20:49:b7:1c:23:ac:92:23:31:d8:00:d4:e7:cf:
         ab:e4:a4:95:0b:42:88:1c:2f:0f:93:34:c1:99:4a:8f:a3:b4:
         33:22:a9:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS5iKZBa3157C6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODU3ZjQ3NjMtYWFjZi00Nzg0LTgyOGQtNTU3YWI3YjU1
ODA5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
ODBjZmVjMDItNmRjOS00YzY0LWE3MTUtMzU2YzJkOGUxNjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf3OQWQ7+OdEp051yByf4RbP+kQYAzO5zy4x
sPSyS+lUFbQ6pKq6kbMxLEoaoke+4E/2Z54u117JtjnMOtmHVUh9vQXB1Ahc8rnQ
fobckhwmO3IOHWFLb67Iwsjxe7CwXjuSPivPNMrY2EKYlLrJ8DwBO/CFx3TvOJOD
7K/3qdcxOYj+TgHCOhLW3gwaQrey5yutfhxGFVEj1ycwa3ffTQW/TnEXl43a+ilo
7iqNmXuTolhsZ8gP5avH9np3moTm5pDmg1Zx/+6emO091IIToEdbYOk7eOWIKkZf
cj6KgA9PzAxCUiZ68sbHGNLOa/Waks2jaTCxHtItSKE9j6jk/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGgngrpexgWlxmT0Iny7LwNImeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTdm
NDc2My1hYWNmLTQ3ODQtODI4ZC01NTdhYjdiNTU4MDkvMTQ4NDJlNWQtYWQwOS0z
Yjc4LWJmNTQtMjc3YTMxMTEyZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODU3ZjQ3NjMtYWFjZi00Nzg0LTgy
OGQtNTU3YWI3YjU1ODA5Lzg1N2Y0NzYzLWFhY2YtNDc4NC04MjhkLTU1N2FiN2I1
NTgwOS5jcmwwHwYDVR0jBBgwFoAUYG6pa4BHOETb3RCmcnBtC5fccukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTdmNDc2My1hYWNmLTQ3ODQtODI4ZC01NTdh
YjdiNTU4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlfHslohQkhTXV1ljHlU2hlUzGMejBqst8tkE7FKn0SaqjPWr0/Eo+j
ISIC6ZRNniLT/fFL27ZhYEL1lUBrxj8/4jNcISccEJh9Y7vw58L4tuIO1JDf/uJt
c1ZVMPoExdUXK2XhzyWaUNa7GIgMh6NJ0iTTrHnEIXqsj5HK95NEiV3F4tXZB4aO
9nhp1VeRv0ZgcDcIfBPWt5aFfb1hxu3qBgUKltJBJXX0JZVOS6zT7LOVtPzdozkf
mt2KpZ9T2jYxJhlkrE8q64CqxjruKLmtQ2x/f7SAn+JPQ0ogSbccI6ySIzHYANTn
z6vkpJULQogcLw+TNMGZSo+jtDMiqak=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:59:28 2026 by rpki-client