Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
File:                     10d866bc-ec9c-3557-be0c-1355d534c8a4.roa (raw, json)
Hash identifier:          s/An/k1JjGeqaRGMovtdgteK6QHhOguogIBlWtk1+UM=
Subject key identifier:   0A:79:51:EF:A9:2D:AF:7E:4B:4B:1D:D7:7C:4B:19:39:AB:B4:CC:90
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584F4988DCEAAC96D6F69EC1AEC0
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54520
IP address blocks:        199.216.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:dc:ea:ac:96:d6:f6:9e:c1:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=85cf58d8-a921-4914-b2a5-38143ebf0057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:a0:06:e9:1e:21:78:12:06:98:08:26:0a:
                    2a:c9:17:f0:dd:c7:51:7a:fe:13:b3:dc:f7:1e:51:
                    b7:dc:09:08:46:ce:d7:cc:4d:57:d9:5f:6a:bb:b2:
                    b7:9f:2c:01:89:8b:6c:78:a6:60:1f:17:41:c1:2f:
                    91:6a:d4:8e:eb:d7:54:83:97:2c:06:e5:72:ce:51:
                    b0:90:c9:a8:46:16:f1:1f:18:ec:14:da:d1:af:cc:
                    5e:b4:78:15:cd:d0:11:ac:8a:19:47:19:bd:7e:74:
                    20:1b:97:a8:2c:53:49:14:d8:de:f3:e5:f6:45:9d:
                    38:b8:f8:44:5e:77:6a:34:e5:ee:f4:b5:5a:94:cf:
                    21:9d:ca:e4:94:40:0a:5e:59:37:1c:cb:7e:b6:c1:
                    da:e5:35:28:2d:c8:9a:85:fa:fb:fc:23:b5:e7:34:
                    ca:44:8e:30:23:3a:23:c3:b0:eb:46:47:c2:fc:9b:
                    a1:64:e9:ae:7b:c1:22:d6:0b:1e:bd:02:bb:b4:f2:
                    aa:b0:25:df:78:6e:a8:1c:00:ff:0f:ab:c5:60:b7:
                    fa:e6:3c:cf:66:d7:5c:56:66:43:0a:89:c8:ac:70:
                    a4:9f:4d:7f:91:60:0d:00:e8:08:89:15:2d:03:a1:
                    1b:b5:ff:9c:75:dd:89:72:3a:12:5e:b7:68:6a:2e:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:51:EF:A9:2D:AF:7E:4B:4B:1D:D7:7C:4B:19:39:AB:B4:CC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:22:cb:ca:a2:98:de:bb:3f:34:d2:81:85:2e:ec:99:6a:9d:
         66:d1:8b:7c:b2:0d:bb:26:a1:a4:2d:d1:32:67:97:a0:78:c5:
         68:66:64:ce:f8:35:e6:97:c7:33:95:62:35:4c:2e:27:64:a3:
         72:4a:6e:de:81:00:12:f3:62:3a:cd:7d:a5:c6:48:b9:47:52:
         9e:af:ce:8c:71:8b:ee:b9:d1:40:05:b9:5e:84:eb:da:ee:84:
         06:c2:60:4e:0a:74:72:75:d1:64:b3:ce:d5:98:fe:3b:3e:a7:
         07:91:98:4c:3d:99:33:d4:ff:f1:9f:bd:34:81:75:9e:4c:b6:
         22:83:37:6d:07:90:d4:cf:b4:1b:75:de:2e:ea:ca:c4:da:3c:
         92:9c:29:c6:79:0e:c7:57:fe:a2:cf:8f:87:8e:ce:32:d7:92:
         46:7e:80:2a:1a:f7:92:ce:10:12:3a:ed:18:6d:5e:18:5e:9e:
         b8:90:ea:f3:fa:78:3f:66:0e:c0:63:77:16:84:f8:b9:43:10:
         5e:24:4a:7d:4f:bf:68:b7:59:f5:a3:2c:37:89:52:6b:63:32:
         f0:dd:f5:56:2d:5f:63:02:d8:e2:aa:fa:b0:e2:10:ad:55:c9:
         27:57:f3:50:67:3b:83:31:39:7f:2b:95:6b:d3:03:d8:16:33:
         45:89:80:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiNzqrJbW9p7BrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODVjZjU4ZDgtYTkyMS00OTE0LWIyYTUtMzgxNDNlYmYwMDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50+gBukeIXgSBpgIJgoqyRfw3cdRev4Ts9z3
HlG33AkIRs7XzE1X2V9qu7K3nywBiYtseKZgHxdBwS+RatSO69dUg5csBuVyzlGw
kMmoRhbxHxjsFNrRr8xetHgVzdARrIoZRxm9fnQgG5eoLFNJFNje8+X2RZ04uPhE
XndqNOXu9LValM8hncrklEAKXlk3HMt+tsHa5TUoLciahfr7/CO15zTKRI4wIzoj
w7DrRkfC/JuhZOmue8Ei1gsevQK7tPKqsCXfeG6oHAD/D6vFYLf65jzPZtdcVmZD
ConIrHCkn01/kWANAOgIiRUtA6Ebtf+cdd2JcjoSXrdoai4pAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp5Ue+pLa9+S0sd13xLGTmrtMyQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMTBkODY2YmMtZWM5Yy0z
NTU3LWJlMGMtMTM1NWQ1MzRjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9guMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYiy8qimN67PzTSgYUu7JlqnWbRi3yyDbsmoaQt0TJnl6B4xWhmZM74
NeaXxzOVYjVMLidko3JKbt6BABLzYjrNfaXGSLlHUp6vzoxxi+650UAFuV6E69ru
hAbCYE4KdHJ10WSzztWY/js+pweRmEw9mTPU//GfvTSBdZ5MtiKDN20HkNTPtBt1
3i7qysTaPJKcKcZ5DsdX/qLPj4eOzjLXkkZ+gCoa95LOEBI67RhtXhhenriQ6vP6
eD9mDsBjdxaE+LlDEF4kSn1Pv2i3WfWjLDeJUmtjMvDd9VYtX2MC2OKq+rDiEK1V
ySdX81BnO4MxOX8rlWvTA9gWM0WJgPo=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:10:29 2026 by rpki-client