Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/1110d3f3-3af9-3b97-b16a-2fcf0e8b3dcb.roa
File:                     1110d3f3-3af9-3b97-b16a-2fcf0e8b3dcb.roa (raw, json)
Hash identifier:          TPrNc/5OsUfmQUm50lmZGzIPlhyxu5oEVbZPqCzMHR4=
Subject key identifier:   0A:1A:BD:DF:11:97:B0:16:10:DB:54:66:EF:63:15:45:CA:08:71:66
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328584EA787D2D47B2F12D4922FA640
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/1110d3f3-3af9-3b97-b16a-2fcf0e8b3dcb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        192.245.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d2:d4:7b:2f:12:d4:92:2f:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6706dec9-2adb-4c7c-ad56-b34a90009ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:00:67:31:bf:de:a9:60:88:f3:3a:f0:5a:
                    9d:b8:68:89:da:c9:f0:0b:4d:c1:4b:e5:82:81:87:
                    30:32:7d:9e:6c:b9:92:7d:74:ce:91:d3:2b:3e:c8:
                    66:2a:3d:e0:1a:38:4c:8a:69:8c:02:ff:6d:c5:ba:
                    e9:d6:1a:cb:94:54:87:4e:d3:38:7e:2c:45:82:9f:
                    c6:18:f6:4f:bf:ad:29:97:7d:3f:0c:87:24:83:84:
                    39:97:08:a6:67:23:8b:df:32:d7:53:fa:ba:da:b9:
                    ac:9e:30:c1:6a:ca:d4:d2:07:34:64:e5:23:d9:5e:
                    55:a7:08:30:5a:81:a6:d6:53:5b:25:d6:f4:72:e2:
                    f6:cd:1b:1d:1c:c5:04:1c:d7:72:f5:ae:30:c1:78:
                    7b:70:63:6c:aa:44:af:23:3b:ff:78:67:86:88:f4:
                    22:6b:c0:d5:4c:7a:8c:00:f5:fb:7e:33:33:c0:e6:
                    96:2c:70:60:eb:83:c3:cb:70:22:8b:9f:2f:80:e9:
                    94:bc:b9:47:76:26:96:ce:2c:6b:4d:8b:3e:d5:d4:
                    ed:9a:61:f9:de:88:95:48:83:c9:05:9a:91:28:ff:
                    7a:c0:19:13:8e:11:ed:73:9b:c7:b8:b5:a8:fe:36:
                    a4:d4:b2:fe:0a:f9:ac:fa:96:a8:69:5d:27:9a:e5:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:BD:DF:11:97:B0:16:10:DB:54:66:EF:63:15:45:CA:08:71:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/1110d3f3-3af9-3b97-b16a-2fcf0e8b3dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:31:20:ed:e9:dd:f6:1c:7a:3c:d9:f6:33:bd:8d:2f:ff:
         6c:f2:4a:27:f2:31:6e:0b:c7:8e:5a:74:65:df:12:42:0b:6b:
         3a:75:8a:6d:f0:6d:39:66:18:42:49:fe:fb:b3:8d:f0:f1:ee:
         ab:33:22:e0:52:38:5b:59:be:93:5b:ed:4c:88:7e:a7:80:b8:
         57:b0:84:ba:fc:04:a7:e5:dc:08:fb:00:09:87:23:30:b7:53:
         9e:5a:fc:24:a8:48:f2:eb:0d:02:60:31:03:ef:36:14:7c:45:
         d6:e3:b7:ec:59:4d:67:91:af:96:52:16:d6:b9:32:3b:67:38:
         12:55:f5:0e:51:fc:7d:8f:76:99:3d:74:1c:96:f8:1e:22:b5:
         36:f6:18:e7:83:03:c4:6c:ec:42:88:be:88:53:1b:b7:ae:6b:
         46:e1:c6:e0:ab:1a:1a:e8:8e:a8:b3:1b:9b:40:15:cb:15:ed:
         c4:80:ad:5f:e2:9c:2c:3c:e7:04:b3:bd:31:99:b1:c3:90:b8:
         98:e9:cf:72:b5:0a:79:85:44:1e:e0:40:d4:f8:c1:03:fd:01:
         bf:bf:98:a7:5c:e0:f3:b8:8b:2e:cb:c1:eb:8c:82:1c:e8:07:
         d3:66:88:44:65:67:3d:82:35:1d:e3:f1:e8:ba:f2:03:dd:cc:
         23:c2:80:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9LUey8S1JIvpkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQwZmJlZTctNWRhZS00YTVkLWE3OWItY2Y2MGNkNzNl
NDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjcwNmRlYzktMmFkYi00YzdjLWFkNTYtYjM0YTkwMDA5ZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh0AZzG/3qlgiPM68FqduGiJ2snwC03BS+WC
gYcwMn2ebLmSfXTOkdMrPshmKj3gGjhMimmMAv9txbrp1hrLlFSHTtM4fixFgp/G
GPZPv60pl30/DIckg4Q5lwimZyOL3zLXU/q62rmsnjDBasrU0gc0ZOUj2V5Vpwgw
WoGm1lNbJdb0cuL2zRsdHMUEHNdy9a4wwXh7cGNsqkSvIzv/eGeGiPQia8DVTHqM
APX7fjMzwOaWLHBg64PDy3Aii58vgOmUvLlHdiaWzixrTYs+1dTtmmH53oiVSIPJ
BZqRKP96wBkTjhHtc5vHuLWo/jak1LL+Cvms+paoaV0nmuUGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoavd8Rl7AWENtUZu9jFUXKCHFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNDBm
YmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYwY2Q3M2U0OWQvMTExMGQzZjMtM2FmOS0z
Yjk3LWIxNmEtMmZjZjBlOGIzZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTQwZmJlZTctNWRhZS00YTVkLWE3
OWItY2Y2MGNkNzNlNDlkL2E0MGZiZWU3LTVkYWUtNGE1ZC1hNzliLWNmNjBjZDcz
ZTQ5ZC5jcmwwHwYDVR0jBBgwFoAUcq7Wey8nLWcSbsWxANL4JQjgAOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNDBmYmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYw
Y2Q3M2U0OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPXDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIL+MSDt6d32HHo82fYzvY0v/2zySifyMW4Lx45adGXfEkILazp1im3w
bTlmGEJJ/vuzjfDx7qszIuBSOFtZvpNb7UyIfqeAuFewhLr8BKfl3Aj7AAmHIzC3
U55a/CSoSPLrDQJgMQPvNhR8Rdbjt+xZTWeRr5ZSFta5MjtnOBJV9Q5R/H2Pdpk9
dByW+B4itTb2GOeDA8Rs7EKIvohTG7eua0bhxuCrGhrojqizG5tAFcsV7cSArV/i
nCw85wSzvTGZscOQuJjpz3K1CnmFRB7gQNT4wQP9Ab+/mKdc4PO4iy7LweuMghzo
B9NmiERlZz2CNR3j8ei68gPdzCPCgDg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:38 2026 by rpki-client