Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/d6c28e3d-b8e1-3c7c-999d-577c8668716f.roa
File:                     d6c28e3d-b8e1-3c7c-999d-577c8668716f.roa (raw, json)
Hash identifier:          dnfjwgz2u5DZIDHpkhELG26WEGE9IJ2vMMpU3Z3JkQg=
Subject key identifier:   C1:22:0A:72:B8:AC:F6:CE:90:B0:4B:6E:15:79:AD:A5:23:35:7E:F2
Certificate issuer:       /CN=e4bcb77a-7cff-42a0-95b3-9a5c9aee766d
Certificate serial:       010D0C9F4328584FC19BBD40B3293A93C7677900
Authority key identifier: D8:64:D4:CB:A9:3A:71:63:DB:26:96:20:C0:AE:85:C5:79:BE:18:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/d6c28e3d-b8e1-3c7c-999d-577c8668716f.roa
Signing time:             Sat 07 Nov 2026 02:00:13 +0000
ROA not before:           Sat 07 Nov 2026 02:00:13 +0000
ROA not after:            Fri 05 Feb 2027 02:00:13 +0000
asID:                     13335
IP address blocks:        216.231.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c1:9b:bd:40:b3:29:3a:93:c7:67:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bcb77a-7cff-42a0-95b3-9a5c9aee766d
        Validity
            Not Before: Nov  7 02:00:13 2026 GMT
            Not After : Feb  5 02:00:13 2027 GMT
        Subject: CN=b65f3ba3-0631-431a-877e-ee0ce8b47988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:7e:33:8b:bd:5b:99:7b:ab:00:6e:94:6b:
                    99:5a:7f:d8:b0:3c:48:3e:d5:41:d0:ee:e9:19:18:
                    e7:05:4b:5d:9b:52:c0:b1:a8:66:88:7e:59:c0:b0:
                    ac:c7:50:87:d3:c4:5a:54:06:6b:80:dd:b3:36:7f:
                    76:fd:ce:94:87:70:3e:8f:9f:79:d9:f5:2f:b2:cb:
                    d6:a2:c5:2a:2f:cd:83:ed:bb:f7:1e:70:72:02:2a:
                    d4:a2:0d:0e:c4:4a:44:50:d6:45:83:b4:41:86:96:
                    2e:83:18:79:b9:60:09:ed:d7:cb:39:ee:53:08:d8:
                    6d:6a:3a:b1:f5:43:ec:6e:a4:b2:aa:96:77:73:26:
                    5e:c9:c0:41:3d:0b:84:a7:d6:bc:4e:3b:e1:66:ec:
                    48:05:16:ff:31:cd:f4:df:82:23:c5:64:95:46:6f:
                    b2:4e:27:fc:53:56:b6:7c:aa:14:58:62:d3:1b:85:
                    6f:06:8d:27:d9:9c:b9:4c:ef:34:d5:62:bb:50:96:
                    40:92:ba:9f:d2:bd:92:89:15:41:5e:f8:ed:3b:d5:
                    86:8a:2d:99:ee:6f:94:99:cb:ad:cf:55:08:17:1c:
                    7d:89:6c:d2:3d:0b:1e:46:38:0c:7e:6a:a0:30:4e:
                    b4:51:15:aa:61:73:db:4e:5f:03:60:1c:88:e5:e3:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:0A:72:B8:AC:F6:CE:90:B0:4B:6E:15:79:AD:A5:23:35:7E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/d6c28e3d-b8e1-3c7c-999d-577c8668716f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.crl

            X509v3 Authority Key Identifier:
                keyid:D8:64:D4:CB:A9:3A:71:63:DB:26:96:20:C0:AE:85:C5:79:BE:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e4bcb77a-7cff-42a0-95b3-9a5c9aee766d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:72:71:64:64:de:c0:bf:44:98:ee:bf:e3:c1:1a:b0:76:
         26:85:ce:71:53:26:3a:d0:21:4a:9c:80:9e:78:c2:d3:9a:c3:
         07:19:67:61:d8:ed:76:02:ff:59:30:84:c9:05:44:9b:61:1a:
         3f:d0:01:5b:fc:22:1c:f8:20:4d:02:af:3b:07:88:d6:8f:3b:
         51:f2:29:b6:f2:7e:ba:9a:7b:2a:74:17:00:64:f6:e5:28:66:
         63:d8:dc:74:41:2d:24:70:57:80:00:37:84:7b:90:41:b6:0a:
         82:27:f1:f7:46:2d:8b:1e:0e:1f:f1:79:9e:c3:df:ba:66:3c:
         09:ba:3f:9f:59:0a:d2:0f:db:9c:93:fa:c6:32:91:28:88:42:
         83:5a:31:22:ed:7e:76:22:98:1c:d2:6c:fc:d1:55:7a:f6:d9:
         b4:59:74:de:c2:82:ac:c0:91:57:37:c8:f5:e0:e2:31:27:77:
         5d:49:19:e7:16:1a:74:59:82:2c:7e:b8:45:3c:57:c4:54:9c:
         ed:ec:cb:33:09:d2:5e:5e:7c:a9:30:e7:f3:8c:bb:4f:98:79:
         81:bb:f5:e9:df:09:ae:90:52:ad:69:b4:65:fd:d6:d8:95:5e:
         2a:07:b4:01:89:04:52:3a:45:74:3c:c5:3c:b9:3d:1f:de:96:
         59:0a:fc:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Bm71Asyk6k8dneQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiY2I3N2EtN2NmZi00MmEwLTk1YjMtOWE1YzlhZWU3
NjZkMB4XDTI2MTEwNzAyMDAxM1oXDTI3MDIwNTAyMDAxM1owLzEtMCsGA1UEAxMk
YjY1ZjNiYTMtMDYzMS00MzFhLTg3N2UtZWUwY2U4YjQ3OTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKR+M4u9W5l7qwBulGuZWn/YsDxIPtVB0O7p
GRjnBUtdm1LAsahmiH5ZwLCsx1CH08RaVAZrgN2zNn92/c6Uh3A+j5952fUvssvW
osUqL82D7bv3HnByAirUog0OxEpEUNZFg7RBhpYugxh5uWAJ7dfLOe5TCNhtajqx
9UPsbqSyqpZ3cyZeycBBPQuEp9a8TjvhZuxIBRb/Mc3034IjxWSVRm+yTif8U1a2
fKoUWGLTG4VvBo0n2Zy5TO801WK7UJZAkrqf0r2SiRVBXvjtO9WGii2Z7m+Umcut
z1UIFxx9iWzSPQseRjgMfmqgME60URWqYXPbTl8DYByI5ePtHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEiCnK4rPbOkLBLbhV5raUjNX7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNGJj
Yjc3YS03Y2ZmLTQyYTAtOTViMy05YTVjOWFlZTc2NmQvZDZjMjhlM2QtYjhlMS0z
YzdjLTk5OWQtNTc3Yzg2Njg3MTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTRiY2I3N2EtN2NmZi00MmEwLTk1
YjMtOWE1YzlhZWU3NjZkL2U0YmNiNzdhLTdjZmYtNDJhMC05NWIzLTlhNWM5YWVl
NzY2ZC5jcmwwHwYDVR0jBBgwFoAU2GTUy6k6cWPbJpYgwK6FxXm+GOEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNGJjYjc3YS03Y2ZmLTQyYTAtOTViMy05YTVj
OWFlZTc2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OeSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+9cnFkZN7Av0SY7r/jwRqwdiaFznFTJjrQIUqcgJ54wtOawwcZZ2HY
7XYC/1kwhMkFRJthGj/QAVv8Ihz4IE0CrzsHiNaPO1HyKbbyfrqaeyp0FwBk9uUo
ZmPY3HRBLSRwV4AAN4R7kEG2CoIn8fdGLYseDh/xeZ7D37pmPAm6P59ZCtIP25yT
+sYykSiIQoNaMSLtfnYimBzSbPzRVXr22bRZdN7CgqzAkVc3yPXg4jEnd11JGecW
GnRZgix+uEU8V8RUnO3syzMJ0l5efKkw5/OMu0+YeYG79enfCa6QUq1ptGX91tiV
XioHtAGJBFI6RXQ8xTy5PR/ellkK/CA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:57 2026 by rpki-client