Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/e0fffc6b-adbd-35ca-bd5c-97fbe0642e39.roa
File:                     e0fffc6b-adbd-35ca-bd5c-97fbe0642e39.roa (raw, json)
Hash identifier:          I5uYSPtYKtTinFIfHw/FP2glGsjFgTgfyKnjqyuDL1U=
Subject key identifier:   58:73:67:C0:3F:6A:79:48:CA:7C:CC:13:CC:6C:DE:15:7F:A9:AB:D6
Certificate issuer:       /CN=49a07cb7-883d-4863-97b1-047ae5e20018
Certificate serial:       010D0C9F4328584F0672981F4205B80307E58A00
Authority key identifier: F6:71:1F:A7:40:80:05:5D:27:4D:3B:F7:40:03:CA:10:CE:2D:64:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/e0fffc6b-adbd-35ca-bd5c-97fbe0642e39.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     17150
IP address blocks:        199.242.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:98:1f:42:05:b8:03:07:e5:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a07cb7-883d-4863-97b1-047ae5e20018
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b339c8c1-e7c8-440e-8993-d40f949e9828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:e3:61:15:bb:8d:ca:8b:b9:15:0f:cb:80:
                    2e:04:cc:4e:b2:28:b9:e3:1a:35:f3:6a:06:b0:3b:
                    f5:f6:4b:c7:a8:40:cc:4c:b5:b4:38:bf:c2:62:45:
                    bd:c6:cf:03:c2:0c:78:3b:ef:e1:72:9c:58:d7:4f:
                    5e:41:ca:ea:62:88:87:25:fa:34:6c:fb:a7:e1:29:
                    4a:ac:04:07:0e:45:be:60:92:38:02:39:52:5f:93:
                    05:15:8e:9c:fd:0d:19:dc:2b:d4:33:5c:45:7b:f8:
                    01:4b:10:e9:0c:04:f4:fc:a4:0f:76:4d:23:50:bf:
                    85:15:95:16:83:26:d1:12:14:7a:db:99:c2:82:fa:
                    2a:51:76:ac:a4:4a:31:88:ed:ee:56:4d:f6:0f:d4:
                    67:98:94:50:36:7c:f8:00:ef:1a:2d:86:a0:e2:8b:
                    9f:7b:82:12:11:b4:43:24:aa:35:96:c1:6f:05:7e:
                    bc:34:cc:fb:0c:6d:67:18:48:50:ef:df:7e:c6:f4:
                    74:1c:3a:c6:12:34:54:3c:01:f0:40:17:93:d5:99:
                    13:da:e6:c2:08:a4:a9:0c:d8:a5:c0:ae:5a:fe:1d:
                    df:4d:b2:4a:62:50:c9:fd:c0:38:c2:51:93:dd:45:
                    51:7a:ea:9e:4a:a5:e7:d5:5e:2c:10:f6:4a:9d:50:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:67:C0:3F:6A:79:48:CA:7C:CC:13:CC:6C:DE:15:7F:A9:AB:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/e0fffc6b-adbd-35ca-bd5c-97fbe0642e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.crl

            X509v3 Authority Key Identifier:
                keyid:F6:71:1F:A7:40:80:05:5D:27:4D:3B:F7:40:03:CA:10:CE:2D:64:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:0b:19:f8:e7:82:20:3c:35:fc:21:fd:de:04:db:75:63:
         d6:d2:a7:a0:72:c9:02:d3:89:20:70:03:87:1a:83:12:d0:b9:
         bf:39:ed:22:c1:34:9a:8e:b3:a2:c2:1b:00:39:25:f5:c5:3b:
         ae:3c:2e:a2:82:a9:e6:f4:49:39:3b:95:b8:a8:9e:09:b4:d2:
         31:74:fe:c4:c6:9d:e5:07:67:d2:37:a5:89:a0:6b:69:a3:21:
         d1:cd:b3:01:a5:de:11:ea:3a:9a:d7:f3:ba:b4:0f:49:43:05:
         56:b1:f9:30:9c:34:27:0d:50:8a:18:62:c5:53:0b:ff:db:dc:
         1a:98:24:a1:32:2d:cb:7a:d4:40:e7:15:8a:15:9c:d6:50:39:
         f8:04:69:93:a1:ea:e7:92:2a:32:b4:6a:90:fb:cc:51:ae:33:
         89:8d:93:50:5b:00:4e:11:0b:9f:5e:cd:e3:31:6e:7b:4c:46:
         b7:07:a3:2a:5a:0f:5b:e8:f4:d9:25:b9:29:a0:4d:6f:fd:78:
         1d:e3:d2:4e:2c:d9:20:b8:0c:77:39:ca:f5:ca:40:78:12:1d:
         3a:78:4b:c7:d0:f5:73:1c:01:ff:d4:e2:7b:d4:b2:55:34:f4:
         44:66:3b:91:f2:eb:4d:54:0e:c0:ac:f6:c8:f5:30:66:61:7d:
         eb:c4:c1:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpgfQgW4AwfligAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlhMDdjYjctODgzZC00ODYzLTk3YjEtMDQ3YWU1ZTIw
MDE4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YjMzOWM4YzEtZTdjOC00NDBlLTg5OTMtZDQwZjk0OWU5ODI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDjYRW7jcqLuRUPy4AuBMxOsii54xo182oG
sDv19kvHqEDMTLW0OL/CYkW9xs8Dwgx4O+/hcpxY109eQcrqYoiHJfo0bPun4SlK
rAQHDkW+YJI4AjlSX5MFFY6c/Q0Z3CvUM1xFe/gBSxDpDAT0/KQPdk0jUL+FFZUW
gybREhR625nCgvoqUXaspEoxiO3uVk32D9RnmJRQNnz4AO8aLYag4oufe4ISEbRD
JKo1lsFvBX68NMz7DG1nGEhQ799+xvR0HDrGEjRUPAHwQBeT1ZkT2ubCCKSpDNil
wK5a/h3fTbJKYlDJ/cA4wlGT3UVReuqeSqXn1V4sEPZKnVAJEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhzZ8A/anlIynzME8xs3hV/qavWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWEw
N2NiNy04ODNkLTQ4NjMtOTdiMS0wNDdhZTVlMjAwMTgvZTBmZmZjNmItYWRiZC0z
NWNhLWJkNWMtOTdmYmUwNjQyZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDlhMDdjYjctODgzZC00ODYzLTk3
YjEtMDQ3YWU1ZTIwMDE4LzQ5YTA3Y2I3LTg4M2QtNDg2My05N2IxLTA0N2FlNWUy
MDAxOC5jcmwwHwYDVR0jBBgwFoAU9nEfp0CABV0nTTv3QAPKEM4tZCQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWEwN2NiNy04ODNkLTQ4NjMtOTdiMS0wNDdh
ZTVlMjAwMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/IbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjDCxn454IgPDX8If3eBNt1Y9bSp6ByyQLTiSBwA4cagxLQub857SLB
NJqOs6LCGwA5JfXFO648LqKCqeb0STk7lbiongm00jF0/sTGneUHZ9I3pYmga2mj
IdHNswGl3hHqOprX87q0D0lDBVax+TCcNCcNUIoYYsVTC//b3BqYJKEyLct61EDn
FYoVnNZQOfgEaZOh6ueSKjK0apD7zFGuM4mNk1BbAE4RC59ezeMxbntMRrcHoypa
D1vo9NkluSmgTW/9eB3j0k4s2SC4DHc5yvXKQHgSHTp4S8fQ9XMcAf/U4nvUslU0
9ERmO5Hy601UDsCs9sj1MGZhfevEwQE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:51:28 2026 by rpki-client