Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bd9c90e-fb1e-323d-9b4e-8125f2aa411a.roa
File:                     1bd9c90e-fb1e-323d-9b4e-8125f2aa411a.roa (raw, json)
Hash identifier:          ym8XtKSFddf2UxhQw5O/jYCixaHrTMNwiX0IzR+/TvY=
Subject key identifier:   66:8C:E2:4E:F9:C6:D9:80:50:36:61:54:F6:8E:02:09:5D:8B:89:A1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C7398100F77A30A33EE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bd9c90e-fb1e-323d-9b4e-8125f2aa411a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        216.123.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c7:39:81:00:f7:7a:30:a3:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=183921d2-659f-4216-9657-b554122970e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:e9:f6:69:e0:31:85:6a:a5:d9:4b:4f:f3:
                    fb:c4:08:f3:c0:81:66:68:47:f3:94:c0:08:ad:75:
                    a6:0e:1b:25:ef:68:87:17:a2:60:fb:e8:fc:85:db:
                    43:67:4a:d3:50:c5:e8:71:1e:c8:1a:e8:c8:8c:a3:
                    27:9a:a0:39:9a:0a:91:8c:b9:7c:1e:05:a3:33:e4:
                    3b:86:79:da:05:ad:cf:b7:15:3d:60:65:e3:94:0f:
                    2f:f3:8f:68:5a:ca:95:87:e1:f3:6e:f5:52:0c:48:
                    61:d1:d8:4e:53:1d:d5:5e:60:40:4d:da:e9:97:4e:
                    82:6c:0e:4c:9e:00:ca:02:6c:f6:b2:9d:4b:22:07:
                    8c:2e:bf:d9:9f:eb:0d:fd:9b:2f:d5:f0:ac:01:d5:
                    d7:27:03:90:c8:35:cb:ad:76:33:66:00:98:65:0d:
                    88:c8:99:9d:66:82:2c:81:21:6c:d0:e6:52:b1:75:
                    61:bb:23:99:1d:f5:17:82:ef:8f:b1:2f:1b:3f:6e:
                    83:1c:47:d8:6e:dc:f1:62:92:a5:be:6f:87:70:bd:
                    ff:af:5e:0e:d0:40:76:38:4e:09:5c:02:4d:6f:78:
                    d2:f0:80:ff:74:ed:88:b3:b4:4d:ed:64:a9:ea:fe:
                    b0:c9:4c:e2:fe:d4:c3:3b:c0:b4:00:b4:4e:ab:81:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:E2:4E:F9:C6:D9:80:50:36:61:54:F6:8E:02:09:5D:8B:89:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bd9c90e-fb1e-323d-9b4e-8125f2aa411a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:c3:78:7f:98:13:fa:dd:4d:9c:70:02:f0:20:c6:71:7b:
         a6:ee:45:20:99:d6:c0:17:ca:e2:7e:b0:b5:60:37:d5:67:74:
         e9:36:d4:c1:69:4e:5a:84:e1:9c:73:9e:18:2b:92:76:f9:38:
         06:09:e7:7b:e1:a5:f6:31:bb:cb:be:1c:b2:e7:e3:bf:d8:04:
         4c:57:74:52:01:14:74:5c:f6:e3:9c:21:13:c4:89:61:eb:75:
         f6:c9:bb:de:c2:06:f3:9d:1e:cc:2b:fc:fc:44:36:34:c2:a7:
         db:d4:90:74:f7:87:45:06:07:01:77:79:68:84:ed:de:e0:a5:
         6b:64:eb:8e:64:bf:05:9a:e3:82:88:ed:75:08:b3:19:44:78:
         38:d8:f2:2b:8d:44:11:d8:08:e8:63:3d:9d:3f:39:26:ce:d2:
         24:0e:f7:af:af:b0:98:43:62:c3:fe:2b:dd:bb:b2:5f:88:4f:
         01:fa:16:89:eb:3b:31:56:50:69:aa:19:1c:ea:80:a8:e7:e9:
         51:d9:1c:dd:39:53:46:20:19:0e:4f:2b:e4:12:ef:ce:1a:e3:
         8a:39:b5:ca:8e:11:f4:d5:cc:d7:d1:5e:d2:4d:fc:a4:bf:db:
         51:e7:9b:b0:64:4a:b6:20:c1:77:e5:7d:2a:fd:be:c2:9b:e0:
         4d:30:42:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8c5gQD3ejCjPuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTgzOTIxZDItNjU5Zi00MjE2LTk2NTctYjU1NDEyMjk3MGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq97p9mngMYVqpdlLT/P7xAjzwIFmaEfzlMAI
rXWmDhsl72iHF6Jg++j8hdtDZ0rTUMXocR7IGujIjKMnmqA5mgqRjLl8HgWjM+Q7
hnnaBa3PtxU9YGXjlA8v849oWsqVh+HzbvVSDEhh0dhOUx3VXmBATdrpl06CbA5M
ngDKAmz2sp1LIgeMLr/Zn+sN/Zsv1fCsAdXXJwOQyDXLrXYzZgCYZQ2IyJmdZoIs
gSFs0OZSsXVhuyOZHfUXgu+PsS8bP26DHEfYbtzxYpKlvm+HcL3/r14O0EB2OE4J
XAJNb3jS8ID/dO2Is7RN7WSp6v6wyUzi/tTDO8C0ALROq4F1xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaM4k75xtmAUDZhVPaOAgldi4mhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJkOWM5MGUtZmIxZS0z
MjNkLTliNGUtODEyNWYyYWE0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2HvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4Tw3h/mBP63U2ccALwIMZxe6buRSCZ1sAXyuJ+sLVgN9VndOk21MFp
TlqE4Zxznhgrknb5OAYJ53vhpfYxu8u+HLLn47/YBExXdFIBFHRc9uOcIRPEiWHr
dfbJu97CBvOdHswr/PxENjTCp9vUkHT3h0UGBwF3eWiE7d7gpWtk645kvwWa44KI
7XUIsxlEeDjY8iuNRBHYCOhjPZ0/OSbO0iQO96+vsJhDYsP+K927sl+ITwH6Fonr
OzFWUGmqGRzqgKjn6VHZHN05U0YgGQ5PK+QS784a44o5tcqOEfTVzNfRXtJN/KS/
21Hnm7BkSrYgwXflfSr9vsKb4E0wQhA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:19:20 2026 by rpki-client