Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa
File:                     4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa (raw, json)
Hash identifier:          RVHR1BnYsCu+DKZQqLGpviz3Z6ta3EdcY/M0+1UStTo=
Subject key identifier:   6A:D2:2A:D4:A2:B3:B5:EC:19:AD:87:A7:A8:2E:AB:AE:AA:4B:67:41
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F215D1265EB7A99F692E82380
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa
Signing time:             Thu 10 Sep 2026 16:24:39 +0000
ROA not before:           Thu 10 Sep 2026 16:24:39 +0000
ROA not after:            Fri 06 Nov 2026 17:29:46 +0000
asID:                     25198
IP address blocks:        192.6.242.0/24 maxlen: 24
                          192.25.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:5d:12:65:eb:7a:99:f6:92:e8:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 10 16:24:39 2026 GMT
            Not After : Nov  6 17:29:46 2026 GMT
        Subject: CN=52178d24-5c1c-49f1-83a3-41130c30f9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:8d:41:91:2d:95:93:33:b0:8b:3f:ca:52:
                    88:6c:0d:9a:0a:1e:e9:0d:b1:c0:9e:9f:09:9f:a6:
                    16:23:bb:d7:51:bc:2a:8e:27:ef:9c:da:26:15:69:
                    13:5e:19:e7:f5:e4:54:8f:49:33:b5:39:36:dc:57:
                    76:1d:b1:1a:2f:5f:91:29:d6:31:8d:c5:f9:3d:7a:
                    2a:4e:ab:2e:80:bd:d7:26:66:29:3a:eb:12:23:1d:
                    c4:8c:57:04:13:1a:ff:32:ad:a0:50:a0:56:89:2d:
                    5e:e5:9e:72:18:eb:c1:15:be:b0:d3:b6:1c:fd:aa:
                    b3:a2:14:89:05:9d:9c:ce:66:2b:00:f2:a1:3c:07:
                    81:04:53:33:28:36:28:08:03:4c:cb:29:1f:dc:cc:
                    25:d0:15:f0:b8:b3:ee:cd:7d:a6:fe:bb:b8:f2:3b:
                    f5:c2:9c:74:93:5f:6e:96:3a:93:b8:07:ba:81:9b:
                    7a:9c:c2:da:ef:47:9b:8d:7c:14:38:4e:4c:6c:16:
                    51:8e:ad:3b:ac:be:08:ad:db:80:43:83:0e:62:0b:
                    3d:04:2e:83:28:3a:a1:8d:a7:fe:1b:36:cf:49:36:
                    27:41:24:2e:1a:26:b6:90:99:56:3b:44:2b:12:56:
                    00:cc:58:ea:b8:a0:12:a4:8d:e1:a0:58:07:4b:53:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:2A:D4:A2:B3:B5:EC:19:AD:87:A7:A8:2E:AB:AE:AA:4B:67:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.242.0/24
                  192.25.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:42:2f:aa:ef:cc:26:7c:51:92:01:e6:24:86:65:05:8a:
         80:62:62:84:2b:05:6d:77:5c:1f:90:bb:ac:6e:ee:20:b1:aa:
         6b:a5:a3:8e:e5:8e:7f:30:fb:96:d4:81:56:c5:ff:d9:e2:af:
         c1:31:76:c3:7f:94:80:fc:15:7f:0f:85:50:db:6e:b9:96:87:
         d7:d7:92:89:3e:63:79:91:af:25:83:84:5e:a3:0e:a1:cf:42:
         b4:00:2e:56:13:fa:ce:e0:4b:68:e1:43:13:96:b2:78:0e:59:
         35:f7:9f:24:9c:15:35:2d:5b:4e:d2:31:f8:cc:7e:75:98:e9:
         b8:cc:aa:40:65:11:dc:8e:b0:16:f3:24:1d:66:ec:4b:32:8c:
         12:23:95:a8:50:0b:9d:75:47:08:84:9c:6d:46:e6:a6:5b:4b:
         8a:d1:50:21:9d:07:3e:9c:94:7b:65:3f:c5:fe:24:a8:df:72:
         23:ee:9e:0c:1c:74:7d:03:40:32:c7:bc:20:6f:33:12:c8:45:
         f1:9d:af:83:32:49:7b:58:9b:07:0a:46:fc:48:db:c0:e6:77:
         90:cf:eb:97:99:8f:52:4d:70:cf:5f:d6:c8:75:fd:86:6c:7c:
         e0:83:2e:07:a6:73:be:0c:c0:d3:7d:a9:79:d7:de:16:27:3a:
         fc:89:4a:fc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8hXRJl63qZ9pLoI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDkxMDE2MjQzOVoXDTI2MTEwNjE3Mjk0NlowLzEtMCsGA1UEAxMk
NTIxNzhkMjQtNWMxYy00OWYxLTgzYTMtNDExMzBjMzBmOWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmqNQZEtlZMzsIs/ylKIbA2aCh7pDbHAnp8J
n6YWI7vXUbwqjifvnNomFWkTXhnn9eRUj0kztTk23Fd2HbEaL1+RKdYxjcX5PXoq
TqsugL3XJmYpOusSIx3EjFcEExr/Mq2gUKBWiS1e5Z5yGOvBFb6w07Yc/aqzohSJ
BZ2czmYrAPKhPAeBBFMzKDYoCANMyykf3Mwl0BXwuLPuzX2m/ru48jv1wpx0k19u
ljqTuAe6gZt6nMLa70ebjXwUOE5MbBZRjq07rL4IrduAQ4MOYgs9BC6DKDqhjaf+
GzbPSTYnQSQuGia2kJlWO0QrElYAzFjquKASpI3hoFgHS1MrrwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGrSKtSis7XsGa2Hp6guq66qS2dBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvNGE3YjdjOTUtN2EwZC0z
ZmQ0LTlmZTYtMTZmYzMyMTcwYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwAbyAwQA
wBnUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALJPQi+q78wmfFGSAeYkhmUFioBiYoQrBW13XB+Qu6xu7iCx
qmulo47ljn8w+5bUgVbF/9nir8ExdsN/lID8FX8PhVDbbrmWh9fXkok+Y3mRryWD
hF6jDqHPQrQALlYT+s7gS2jhQxOWsngOWTX3nyScFTUtW07SMfjMfnWY6bjMqkBl
EdyOsBbzJB1m7EsyjBIjlahQC511RwiEnG1G5qZbS4rRUCGdBz6clHtlP8X+JKjf
ciPungwcdH0DQDLHvCBvMxLIRfGdr4MySXtYmwcKRvxI28Dmd5DP65eZj1JNcM9f
1sh1/YZsfOCDLgemc74MwNN9qXnX3hYnOvyJSvw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:23 2026 by rpki-client