Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa
File:                     e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa (raw, json)
Hash identifier:          yb3nbHzaLZpoJ0nVesTaH6uYyHgQM9wCoH7yqjhZ9F4=
Subject key identifier:   33:6D:B7:BA:96:6E:94:25:63:76:D4:95:08:9A:23:32:4E:3C:BE:1D
Certificate issuer:       /CN=c8b92d93-b32b-4aac-af77-5c47575a646e
Certificate serial:       010D0C9F4328584ECE9C71647F67215F5D4A8400
Authority key identifier: 85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     402087
IP address blocks:        216.235.208.0/24 maxlen: 24
                          2602:f51f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:71:64:7f:67:21:5f:5d:4a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8b92d93-b32b-4aac-af77-5c47575a646e
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=66f5ab7d-ec78-472c-a430-824a71269381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:53:d7:f3:a7:66:58:04:72:34:60:71:41:
                    d3:65:29:9b:dd:a4:5a:49:22:d2:f3:3b:e2:d1:44:
                    e1:d5:69:d3:43:f8:6d:d2:da:79:32:90:59:99:e6:
                    56:44:5e:d0:23:c2:6c:4b:a2:1e:b8:7e:9a:98:a8:
                    5d:f1:fa:f5:ba:d3:0c:b4:b4:91:fb:37:19:3b:b1:
                    b2:65:80:d3:f8:f1:d9:2e:b6:50:95:d9:f3:e5:7a:
                    03:0c:be:9e:e4:dd:44:09:20:42:dc:11:55:36:18:
                    db:72:75:27:30:60:33:47:41:33:ad:fa:e2:31:58:
                    bc:bc:72:0d:9a:a8:15:7c:f2:47:a8:4f:41:61:2a:
                    99:54:f1:e0:40:01:8d:48:a2:fe:74:d5:11:62:43:
                    3b:08:81:95:2b:f5:25:54:05:93:6f:7a:bd:d0:5e:
                    75:f9:ce:3f:6f:47:94:bb:fd:c4:55:7f:4c:12:43:
                    50:7a:f7:52:b3:47:f4:26:9e:37:ad:14:4b:9a:06:
                    2d:50:95:cd:cd:36:32:5e:64:bd:fc:ab:88:bc:b6:
                    d4:00:b3:e2:56:29:44:bd:7c:64:6b:75:83:ac:db:
                    b0:b8:47:8a:7b:97:12:3f:b0:1b:c4:ac:b6:42:07:
                    03:13:cb:b7:3d:e1:33:80:82:61:47:eb:e5:f6:04:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:B7:BA:96:6E:94:25:63:76:D4:95:08:9A:23:32:4E:3C:BE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl

            X509v3 Authority Key Identifier:
                keyid:85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.208.0/24
                IPv6:
                  2602:f51f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:bb:1f:19:c2:dd:56:b6:78:26:12:8f:5a:97:29:41:0b:
         83:bd:8e:eb:7f:5a:96:3d:6c:0a:48:86:9c:cc:53:57:17:08:
         1c:64:71:76:54:b8:5c:0c:3f:6f:54:30:18:b2:4d:e1:13:46:
         57:5b:fa:da:45:b8:90:ca:38:e0:b3:07:22:e4:c7:a8:30:71:
         7d:94:7b:9f:66:aa:bc:ce:d4:02:d8:0c:b4:c6:a0:32:91:5f:
         b8:34:62:b9:e1:4b:4e:46:f3:a8:ef:5a:ad:2e:c0:f2:da:36:
         2c:ed:e3:9a:2d:80:3e:c5:24:a6:5b:6e:6e:14:cf:eb:87:5c:
         1d:4b:5c:2b:56:ca:3e:31:a2:66:22:82:dc:e5:9c:0b:b8:2d:
         8a:95:72:5d:eb:42:c6:14:86:aa:9b:60:fa:9d:8e:1d:a1:a7:
         2a:58:84:1c:9a:81:e7:f0:80:5e:b4:78:14:c1:d7:52:e2:7f:
         d0:d4:46:15:33:23:80:6d:ca:15:d8:95:93:53:3f:71:f3:a3:
         8c:52:06:15:7d:01:21:c5:af:fb:56:b1:f4:17:e2:c7:2e:f8:
         d2:45:fd:1e:81:92:ec:d7:ff:be:bc:cb:3a:86:40:8a:44:88:
         81:52:17:28:a1:a5:91:37:8c:db:5b:ab:ac:38:18:80:ff:1e:
         55:ba:1e:1b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7OnHFkf2chX11KhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhiOTJkOTMtYjMyYi00YWFjLWFmNzctNWM0NzU3NWE2
NDZlMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
NjZmNWFiN2QtZWM3OC00NzJjLWE0MzAtODI0YTcxMjY5MzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH5T1/OnZlgEcjRgcUHTZSmb3aRaSSLS8zvi
0UTh1WnTQ/ht0tp5MpBZmeZWRF7QI8JsS6IeuH6amKhd8fr1utMMtLSR+zcZO7Gy
ZYDT+PHZLrZQldnz5XoDDL6e5N1ECSBC3BFVNhjbcnUnMGAzR0EzrfriMVi8vHIN
mqgVfPJHqE9BYSqZVPHgQAGNSKL+dNURYkM7CIGVK/UlVAWTb3q90F51+c4/b0eU
u/3EVX9MEkNQevdSs0f0Jp43rRRLmgYtUJXNzTYyXmS9/KuIvLbUALPiVilEvXxk
a3WDrNuwuEeKe5cSP7AbxKy2QgcDE8u3PeEzgIJhR+vl9gREAwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFDNtt7qWbpQlY3bUlQiaIzJOPL4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGI5
MmQ5My1iMzJiLTRhYWMtYWY3Ny01YzQ3NTc1YTY0NmUvZTBmZGVlYWUtY2JlNS0z
ZmM2LThiNzItM2FjN2U4MjJhMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhiOTJkOTMtYjMyYi00YWFjLWFm
NzctNWM0NzU3NWE2NDZlL2M4YjkyZDkzLWIzMmItNGFhYy1hZjc3LTVjNDc1NzVh
NjQ2ZS5jcmwwHwYDVR0jBBgwFoAUhcdY2SBSpbrKDms5fzH2xTuFM34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGI5MmQ5My1iMzJiLTRhYWMtYWY3Ny01YzQ3
NTc1YTY0NmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2OvQMA4E
AgACMAgDBgQmAvUfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAb5rsfGcLdVrZ4JhKPWpcpQQuDvY7rf1qW
PWwKSIaczFNXFwgcZHF2VLhcDD9vVDAYsk3hE0ZXW/raRbiQyjjgswci5MeoMHF9
lHufZqq8ztQC2Ay0xqAykV+4NGK54UtORvOo71qtLsDy2jYs7eOaLYA+xSSmW25u
FM/rh1wdS1wrVso+MaJmIoLc5ZwLuC2KlXJd60LGFIaqm2D6nY4doacqWIQcmoHn
8IBetHgUwddS4n/Q1EYVMyOAbcoV2JWTUz9x86OMUgYVfQEhxa/7VrH0F+LHLvjS
Rf0egZLs1/++vMs6hkCKRIiBUhcooaWRN4zbW6usOBiA/x5Vuh4b
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:19 2026 by rpki-client