Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8fddf219-52a4-3c90-ae77-8ee4e8b85c87.roa
File:                     8fddf219-52a4-3c90-ae77-8ee4e8b85c87.roa (raw, json)
Hash identifier:          jZHI3xXHkPQBFVuybTt2RdtX6edaSM+cpe0SPfNxd34=
Subject key identifier:   14:81:66:D9:E6:00:BF:AB:4F:5A:59:B4:4C:7D:EE:C0:A7:BC:6B:FC
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584EA79A071EE54746ACA5F8D480
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8fddf219-52a4-3c90-ae77-8ee4e8b85c87.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198805
IP address blocks:        192.6.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:07:1e:e5:47:46:ac:a5:f8:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d6c1662-225a-4f53-aa3b-397c20585217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:59:81:3a:70:74:67:8f:08:fb:64:b1:27:
                    f1:1f:56:ec:28:d0:d7:29:91:53:4c:d6:cf:17:14:
                    21:00:60:5e:fe:ca:a2:1b:b4:bf:d9:68:0e:35:b8:
                    57:01:a4:72:00:a9:33:27:f7:25:91:80:a1:3a:40:
                    7a:97:24:9d:b5:c3:b7:95:85:b4:3e:5a:65:84:be:
                    35:16:39:d3:f1:2f:14:1d:e1:02:46:e7:11:96:04:
                    99:24:4c:9c:81:90:eb:a2:f5:f3:c8:af:29:9c:22:
                    65:5f:ac:66:17:ed:9f:be:b1:9f:59:1a:db:a4:84:
                    cb:55:6b:6b:66:2d:d3:b0:6f:1a:c9:34:53:52:7e:
                    1c:b1:7e:db:77:fc:e7:73:81:08:97:e2:3b:85:aa:
                    ff:55:0a:e4:a1:8c:ca:b7:9a:42:e2:7b:b3:72:5c:
                    89:a0:3f:62:16:7a:32:5e:d8:50:6c:0c:4b:63:65:
                    e4:2a:2d:e5:33:32:f3:95:13:fa:77:1d:2e:7a:9b:
                    c2:ee:d5:d6:32:49:0b:b0:1e:93:2a:3a:bd:53:97:
                    8f:5d:ec:3b:22:3c:f4:4e:fa:d5:09:92:67:30:3a:
                    2f:a1:bd:d0:da:d8:e2:8f:f2:cb:bc:47:d0:61:1c:
                    4a:43:70:bf:a7:9a:7c:4a:95:89:94:d8:fa:ee:24:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:66:D9:E6:00:BF:AB:4F:5A:59:B4:4C:7D:EE:C0:A7:BC:6B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8fddf219-52a4-3c90-ae77-8ee4e8b85c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:19:b9:06:49:b8:3b:fa:0c:ea:0a:db:c0:8f:00:5a:1d:
         86:dc:72:20:48:ff:4a:29:f7:e0:fa:31:93:05:b5:53:66:1c:
         88:b8:02:53:ff:eb:cd:46:3e:73:d7:41:04:5e:b4:bd:03:05:
         c7:e6:27:c2:d6:b7:58:73:be:9e:fb:bc:c1:e5:77:95:c2:47:
         5c:36:49:6b:de:d0:df:b4:e2:42:96:80:45:18:b5:95:9d:83:
         cc:2b:42:cf:71:59:03:3b:06:0b:84:a0:b1:6c:aa:08:11:1f:
         61:2c:8f:43:b7:69:1d:fa:be:cf:d3:f9:6a:d0:87:49:c1:e1:
         25:f3:d6:51:78:3f:4b:24:ff:02:4b:33:ba:d4:ac:31:98:7c:
         e1:d1:a0:a3:df:ae:c4:bf:c8:9c:ba:70:b7:79:00:06:85:10:
         47:98:39:2d:80:1d:7b:b9:f3:55:7a:9a:1c:db:19:78:55:45:
         1c:4b:39:e8:78:de:f7:93:94:4f:a1:b3:d7:77:2a:9e:6b:b7:
         a4:b7:d4:ed:49:62:ba:d4:fa:b6:21:92:ab:8c:c4:f7:11:99:
         31:b9:5c:06:c5:37:d8:1f:a2:41:56:40:b8:16:c8:b4:b3:db:
         60:00:4b:53:43:33:45:d9:a4:da:b8:f6:e8:fc:f2:1a:86:18:
         44:8f:3a:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmgce5UdGrKX41IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2Q2YzE2NjItMjI1YS00ZjUzLWFhM2ItMzk3YzIwNTg1MjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtodZgTpwdGePCPtksSfxH1bsKNDXKZFTTNbP
FxQhAGBe/sqiG7S/2WgONbhXAaRyAKkzJ/clkYChOkB6lySdtcO3lYW0PlplhL41
FjnT8S8UHeECRucRlgSZJEycgZDrovXzyK8pnCJlX6xmF+2fvrGfWRrbpITLVWtr
Zi3TsG8ayTRTUn4csX7bd/znc4EIl+I7har/VQrkoYzKt5pC4nuzclyJoD9iFnoy
XthQbAxLY2XkKi3lMzLzlRP6dx0uepvC7tXWMkkLsB6TKjq9U5ePXew7Ijz0TvrV
CZJnMDovob3Q2tjij/LLvEfQYRxKQ3C/p5p8SpWJlNj67iQZTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSBZtnmAL+rT1pZtEx97sCnvGv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvOGZkZGYyMTktNTJhNC0z
YzkwLWFlNzctOGVlNGU4Yjg1Yzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAabMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUMGbkGSbg7+gzqCtvAjwBaHYbcciBI/0op9+D6MZMFtVNmHIi4AlP/
681GPnPXQQRetL0DBcfmJ8LWt1hzvp77vMHld5XCR1w2SWve0N+04kKWgEUYtZWd
g8wrQs9xWQM7BguEoLFsqggRH2Esj0O3aR36vs/T+WrQh0nB4SXz1lF4P0sk/wJL
M7rUrDGYfOHRoKPfrsS/yJy6cLd5AAaFEEeYOS2AHXu581V6mhzbGXhVRRxLOeh4
3veTlE+hs9d3Kp5rt6S31O1JYrrU+rYhkquMxPcRmTG5XAbFN9gfokFWQLgWyLSz
22AAS1NDM0XZpNq49uj88hqGGESPOpM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:54:49 2026 by rpki-client