Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/86133ae1-cde9-3c74-a2a3-a1ad132f80eb.roa
File:                     86133ae1-cde9-3c74-a2a3-a1ad132f80eb.roa (raw, json)
Hash identifier:          U8VLrY6laSMhH4mpjhOh9bBhp5K9s9/Qpzd0mompvF8=
Subject key identifier:   6F:68:3E:CB:21:85:53:74:F9:E1:CE:73:04:34:A1:FC:27:47:58:16
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F4984F3AD60BBE5AAA9939180
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/86133ae1-cde9-3c74-a2a3-a1ad132f80eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        208.117.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:f3:ad:60:bb:e5:aa:a9:93:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1a1c1443-f238-4f0e-a260-425794a6ec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:95:92:f6:94:21:49:f5:9f:40:5e:5e:0d:42:
                    55:ee:44:17:da:0a:bd:0e:23:55:48:00:bd:bc:36:
                    6b:98:1a:ba:13:75:43:9d:62:ed:f2:be:79:6a:c6:
                    7b:14:16:ef:92:c5:b3:dd:31:59:cc:66:a7:12:f1:
                    81:cb:83:40:8d:09:0c:7a:70:51:1a:f2:2e:5e:a1:
                    d8:67:82:97:49:46:5a:6b:8d:91:60:03:f4:25:8b:
                    c4:5d:32:77:18:c4:07:cc:75:bb:4a:32:4d:ab:49:
                    ac:b9:02:bc:ed:b9:f5:6d:95:ae:94:50:af:0b:16:
                    64:83:a1:96:72:cf:3e:01:f2:22:97:1e:0b:b8:11:
                    e8:62:9b:a2:6c:11:8c:0d:70:28:94:49:0b:aa:e2:
                    3e:ba:67:14:61:d0:e2:41:57:13:cf:6d:98:17:b3:
                    3a:b4:ad:e8:d5:41:55:36:ab:aa:0f:90:dc:fb:1a:
                    65:55:a0:64:34:87:7e:a5:06:ca:0b:69:6f:ab:d8:
                    9c:16:17:1d:df:bf:10:de:98:c8:54:18:06:f0:c1:
                    c0:55:b1:74:b2:5f:0d:83:a5:55:e1:15:b6:8e:85:
                    59:5a:c5:c2:8c:27:e3:11:8f:4a:d5:37:62:3e:cb:
                    6e:e7:a3:b7:e7:a5:2d:6b:0f:64:d1:08:92:02:80:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:3E:CB:21:85:53:74:F9:E1:CE:73:04:34:A1:FC:27:47:58:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/86133ae1-cde9-3c74-a2a3-a1ad132f80eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:48:90:59:fe:44:d0:c9:37:c0:44:2c:b7:96:dc:9f:c8:
         53:ed:f9:e4:0a:ef:90:60:aa:06:83:4c:c4:11:67:3b:ac:b7:
         f5:bd:fc:8e:f4:b6:5d:38:9d:95:10:a1:4e:ec:e3:20:fd:ce:
         8b:80:d4:9c:6f:d0:40:28:f6:7d:0e:a9:25:49:6a:d7:50:5e:
         f6:3c:f5:01:2e:b8:e2:8a:f5:55:0f:69:fc:64:df:7a:20:70:
         f5:91:fe:9d:1a:0c:70:af:ef:56:f4:42:29:77:13:dd:20:86:
         0c:d4:c1:46:71:68:4a:60:9a:43:ef:fc:57:f3:67:87:23:02:
         f5:68:03:60:4e:fd:47:e0:f0:37:89:92:6f:70:f7:23:6f:f8:
         b9:ea:5a:e7:c7:f2:21:70:41:3e:dc:46:43:9e:8f:df:19:62:
         b5:5d:2f:d7:5f:c0:39:3e:7c:99:df:52:47:32:2e:8e:66:b9:
         e7:13:5e:90:8b:11:c4:f4:98:cc:dc:04:7f:29:49:fc:aa:ef:
         c2:f9:fe:80:74:6e:df:f9:e7:a1:4b:38:53:95:ff:c1:49:6f:
         82:a3:96:57:bd:7e:b5:5f:2d:f0:95:22:25:7d:c3:46:a2:ee:
         4a:37:f2:91:53:f9:ef:d5:29:1f:9b:de:e0:ac:32:e8:93:15:
         06:86:09:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPOtYLvlqqmTkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWExYzE0NDMtZjIzOC00ZjBlLWEyNjAtNDI1Nzk0YTZlYzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZWS9pQhSfWfQF5eDUJV7kQX2gq9DiNVSAC9
vDZrmBq6E3VDnWLt8r55asZ7FBbvksWz3TFZzGanEvGBy4NAjQkMenBRGvIuXqHY
Z4KXSUZaa42RYAP0JYvEXTJ3GMQHzHW7SjJNq0msuQK87bn1bZWulFCvCxZkg6GW
cs8+AfIilx4LuBHoYpuibBGMDXAolEkLquI+umcUYdDiQVcTz22YF7M6tK3o1UFV
NquqD5Dc+xplVaBkNId+pQbKC2lvq9icFhcd378Q3pjIVBgG8MHAVbF0sl8Ng6VV
4RW2joVZWsXCjCfjEY9K1TdiPstu56O356Utaw9k0QiSAoCUpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9oPsshhVN0+eHOcwQ0ofwnR1gWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvODYxMzNhZTEtY2RlOS0z
Yzc0LWEyYTMtYTFhZDEzMmY4MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/3SJBZ/kTQyTfARCy3ltyfyFPt+eQK75BgqgaDTMQRZzust/W9/I70
tl04nZUQoU7s4yD9zouA1Jxv0EAo9n0OqSVJatdQXvY89QEuuOKK9VUPafxk33og
cPWR/p0aDHCv71b0Qil3E90ghgzUwUZxaEpgmkPv/FfzZ4cjAvVoA2BO/Ufg8DeJ
km9w9yNv+LnqWufH8iFwQT7cRkOej98ZYrVdL9dfwDk+fJnfUkcyLo5muecTXpCL
EcT0mMzcBH8pSfyq78L5/oB0bt/556FLOFOV/8FJb4Kjlle9frVfLfCVIiV9w0ai
7ko38pFT+e/VKR+b3uCsMuiTFQaGCco=
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:32:40 2026 by rpki-client