Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/f887a224-ef4b-370b-8166-5e3bcda83729.roa
File:                     f887a224-ef4b-370b-8166-5e3bcda83729.roa (raw, json)
Hash identifier:          7NZ+sCH9amZVsS+onGC/NQxxHwKtyqc337TgxkvnlJQ=
Subject key identifier:   ED:6D:07:C4:6E:43:CD:09:91:BC:07:3E:DD:E0:E5:4E:73:DB:25:55
Certificate issuer:       /CN=0210ce10-0c32-4e4b-84a5-011e17f5ef83
Certificate serial:       010D0C9F4328584F383ACA305FCD30949AA1E0C0
Authority key identifier: EA:B0:02:5B:6E:31:5A:D5:7A:2B:ED:22:E0:1A:5F:01:E0:69:00:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/f887a224-ef4b-370b-8166-5e3bcda83729.roa
Signing time:             Fri 18 Sep 2026 20:59:10 +0000
ROA not before:           Fri 18 Sep 2026 20:59:10 +0000
ROA not after:            Thu 17 Dec 2026 21:59:10 +0000
asID:                     399451
IP address blocks:        198.133.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/0210ce10-0c32-4e4b-84a5-011e17f5ef83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/0210ce10-0c32-4e4b-84a5-011e17f5ef83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:3a:ca:30:5f:cd:30:94:9a:a1:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0210ce10-0c32-4e4b-84a5-011e17f5ef83
        Validity
            Not Before: Sep 18 20:59:10 2026 GMT
            Not After : Dec 17 21:59:10 2026 GMT
        Subject: CN=aae867ff-986d-4365-8e8b-1b2a036b4a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:7c:e9:bb:81:8e:5f:75:6e:80:56:95:aa:
                    bf:b2:1f:b4:a1:51:39:8b:a7:d6:c0:36:0e:d0:76:
                    94:73:1b:15:53:0e:6f:cc:3e:3c:d9:0d:22:5b:2c:
                    fd:d2:f7:46:5e:0c:b7:f0:59:54:a8:3c:a0:2d:d0:
                    25:e9:f2:c0:4f:0d:4e:6d:6c:31:16:e6:0d:15:d1:
                    35:bf:ae:16:f6:74:54:3a:1f:79:d6:58:40:51:67:
                    f7:a7:16:9e:fb:f4:3a:a1:d7:a4:76:23:aa:d5:7b:
                    1e:62:59:03:a0:29:de:b5:26:35:0b:40:f0:bb:3e:
                    34:fd:73:27:31:c4:b4:cf:5b:25:00:73:73:d5:a0:
                    73:5b:19:05:89:ff:e5:5b:29:9d:58:da:21:51:05:
                    17:23:4e:2a:d0:b5:aa:f7:d6:62:6c:7f:81:fc:d6:
                    d8:f1:e1:ee:67:b8:2e:4d:dd:a5:f6:56:90:33:36:
                    db:95:0c:0d:40:6a:a0:40:53:19:62:26:c5:4a:48:
                    90:de:0d:2a:18:7d:8d:5b:3f:7e:20:d3:78:10:b7:
                    de:90:fa:89:48:7d:c1:c3:b5:39:b6:6b:c8:03:8f:
                    f8:e4:67:ce:67:d0:6a:09:a0:d1:b0:8b:7c:f0:8c:
                    ae:5a:84:56:2b:d8:96:1d:9d:b2:c4:80:19:49:2a:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:07:C4:6E:43:CD:09:91:BC:07:3E:DD:E0:E5:4E:73:DB:25:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/f887a224-ef4b-370b-8166-5e3bcda83729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83/0210ce10-0c32-4e4b-84a5-011e17f5ef83.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B0:02:5B:6E:31:5A:D5:7A:2B:ED:22:E0:1A:5F:01:E0:69:00:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0210ce10-0c32-4e4b-84a5-011e17f5ef83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:22:6c:70:72:68:54:bf:d0:6f:92:e6:16:05:02:78:10:
         21:85:4e:26:46:46:a6:ec:96:4d:39:44:c8:11:f2:b6:92:aa:
         27:35:fe:9d:a7:da:cb:ba:de:07:14:95:7d:76:80:e8:d5:b4:
         f8:c4:70:f0:62:8d:6f:e6:15:6e:36:bd:1d:4d:a4:94:9a:9c:
         6b:68:0e:61:ae:e6:a3:32:6e:e3:0e:f8:7f:37:7a:3a:92:ec:
         5e:09:78:5f:73:9d:83:5e:90:84:c2:96:ea:5d:ec:b9:d1:4b:
         09:6e:80:75:60:8e:d3:bd:1f:21:a8:b0:96:9f:7c:eb:d7:86:
         65:a4:9e:10:68:02:90:8a:33:a4:5f:f8:51:94:fe:7b:09:dc:
         db:57:27:5c:54:92:7b:f9:67:1c:47:7b:51:11:dc:a6:ec:69:
         51:c2:fd:b4:b7:7e:0e:f4:9c:80:08:d1:7c:0e:1c:46:7e:2f:
         c6:40:32:9b:45:b3:85:29:89:a2:02:37:07:d8:55:0c:1a:94:
         b6:5e:ff:db:65:d7:89:dd:29:c9:76:25:e0:fd:69:c1:87:32:
         06:e8:00:07:2c:c1:95:37:4a:94:e3:20:62:60:ac:06:99:09:
         d1:5f:14:80:34:04:88:27:ab:13:29:4a:f0:95:7d:36:c8:35:
         81:2f:00:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84OsowX80wlJqh4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIxMGNlMTAtMGMzMi00ZTRiLTg0YTUtMDExZTE3ZjVl
ZjgzMB4XDTI2MDkxODIwNTkxMFoXDTI2MTIxNzIxNTkxMFowLzEtMCsGA1UEAxMk
YWFlODY3ZmYtOTg2ZC00MzY1LThlOGItMWIyYTAzNmI0YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpR86buBjl91boBWlaq/sh+0oVE5i6fWwDYO
0HaUcxsVUw5vzD482Q0iWyz90vdGXgy38FlUqDygLdAl6fLATw1ObWwxFuYNFdE1
v64W9nRUOh951lhAUWf3pxae+/Q6odekdiOq1XseYlkDoCnetSY1C0Dwuz40/XMn
McS0z1slAHNz1aBzWxkFif/lWymdWNohUQUXI04q0LWq99ZibH+B/NbY8eHuZ7gu
Td2l9laQMzbblQwNQGqgQFMZYibFSkiQ3g0qGH2NWz9+INN4ELfekPqJSH3Bw7U5
tmvIA4/45GfOZ9BqCaDRsIt88IyuWoRWK9iWHZ2yxIAZSSo46wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1tB8RuQ80JkbwHPt3g5U5z2yVVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMjEw
Y2UxMC0wYzMyLTRlNGItODRhNS0wMTFlMTdmNWVmODMvZjg4N2EyMjQtZWY0Yi0z
NzBiLTgxNjYtNWUzYmNkYTgzNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDIxMGNlMTAtMGMzMi00ZTRiLTg0
YTUtMDExZTE3ZjVlZjgzLzAyMTBjZTEwLTBjMzItNGU0Yi04NGE1LTAxMWUxN2Y1
ZWY4My5jcmwwHwYDVR0jBBgwFoAU6rACW24xWtV6K+0i4BpfAeBpADgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wMjEwY2UxMC0wYzMyLTRlNGItODRhNS0wMTFl
MTdmNWVmODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoV9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPIImxwcmhUv9BvkuYWBQJ4ECGFTiZGRqbslk05RMgR8raSqic1/p2n
2su63gcUlX12gOjVtPjEcPBijW/mFW42vR1NpJSanGtoDmGu5qMybuMO+H83ejqS
7F4JeF9znYNekITClupd7LnRSwlugHVgjtO9HyGosJaffOvXhmWknhBoApCKM6Rf
+FGU/nsJ3NtXJ1xUknv5ZxxHe1ER3KbsaVHC/bS3fg70nIAI0XwOHEZ+L8ZAMptF
s4UpiaICNwfYVQwalLZe/9tl14ndKcl2JeD9acGHMgboAAcswZU3SpTjIGJgrAaZ
CdFfFIA0BIgnqxMpSvCVfTbINYEvALA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:52:28 2026 by rpki-client