Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa
File:                     2caf07cb-0d21-3238-a345-2f65b0288131.roa (raw, json)
Hash identifier:          EoNCCkaNEkUVkqm2mdN0kF2K3KT/qErc1EIkv23jBCY=
Subject key identifier:   9E:C1:AC:BA:36:1E:CB:C4:69:75:E5:E9:81:75:FD:04:E4:F5:B2:6E
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F31B7C41B05C395FAD4B46900
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     2559
IP address blocks:        198.241.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c4:1b:05:c3:95:fa:d4:b4:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=41025109-4875-4f66-8583-96af81f3b734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:33:10:b4:0e:bd:91:f3:43:14:55:bb:1e:
                    71:48:14:b6:b0:76:7e:76:79:d6:52:7f:99:e4:2f:
                    02:11:f5:07:cc:7a:20:71:74:3a:78:62:5c:4a:22:
                    e4:46:73:0e:5b:da:eb:80:1f:a6:37:25:8a:3f:43:
                    8a:70:35:88:d7:52:f9:a3:dc:d3:27:f6:6c:ca:b3:
                    bc:ca:a7:d1:7c:22:c8:e5:17:f2:52:64:ce:29:14:
                    82:67:33:82:7b:ce:62:15:02:2b:0d:02:28:01:37:
                    40:25:9d:f6:4c:03:34:5c:07:c9:97:d5:a8:29:fd:
                    50:3b:71:50:ff:2f:09:26:27:e2:b9:4c:db:92:15:
                    62:8e:ed:04:e9:9a:2f:e0:b8:e5:71:bb:70:f2:6d:
                    d7:d9:c0:20:40:0f:c4:a4:6a:04:d7:f4:8b:61:46:
                    6b:20:75:5a:3b:24:51:bf:4e:14:77:d1:d7:60:5e:
                    bf:02:ec:ef:59:1c:36:b2:af:0c:03:31:d4:56:96:
                    8f:8d:9c:51:78:65:6d:d7:fd:fd:74:27:57:69:c8:
                    43:d9:f3:b8:63:9d:48:2f:2f:7a:59:a7:ef:36:ad:
                    6a:7e:d1:a0:31:92:14:9f:66:ae:73:09:32:d1:0e:
                    88:4a:64:a4:72:28:44:a9:e5:66:28:bc:07:38:19:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:AC:BA:36:1E:CB:C4:69:75:E5:E9:81:75:FD:04:E4:F5:B2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:83:49:25:a4:98:de:94:e1:05:4c:a8:bb:50:6f:e9:3d:
         5b:be:99:37:8e:29:41:ad:8e:cd:18:e6:dc:d3:c8:55:8e:ff:
         3a:f0:5b:b6:48:5a:cd:b0:f4:aa:56:7c:e2:ae:84:b8:ea:65:
         e5:56:6d:fa:2d:f4:84:29:44:a2:45:d6:ee:60:89:ca:6f:73:
         be:81:16:0d:13:4c:0c:93:d5:5b:92:cd:33:81:a2:25:62:c9:
         7d:59:9f:19:40:2a:49:f1:44:5b:c1:fe:89:ba:23:57:14:05:
         3b:ca:b4:00:21:a7:1c:ae:5a:a6:6e:4e:3f:59:52:79:da:99:
         35:95:cb:3a:37:86:1c:b1:b7:f9:04:88:4e:44:49:90:a0:8e:
         a3:dc:fc:8b:e2:f2:12:ac:9d:9c:42:d5:14:0d:51:9e:3b:a0:
         50:be:53:57:1f:78:90:e7:4a:33:66:f4:a2:fb:cd:1a:09:60:
         4a:2a:e5:b6:46:2b:25:cc:40:12:5d:7d:c2:f6:b9:d7:b5:cf:
         8d:a9:b8:56:13:3c:7f:7d:e8:80:71:08:7f:33:f1:ca:32:ee:
         53:43:47:4b:ac:21:95:3c:93:15:4c:15:8c:69:e0:d8:20:ce:
         7a:1c:04:f3:b5:ba:cd:a9:c2:d2:ed:38:f9:4d:0f:e6:cb:62:
         e4:7d:c2:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8QbBcOV+tS0aQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk
NDEwMjUxMDktNDg3NS00ZjY2LTg1ODMtOTZhZjgxZjNiNzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW4zELQOvZHzQxRVux5xSBS2sHZ+dnnWUn+Z
5C8CEfUHzHogcXQ6eGJcSiLkRnMOW9rrgB+mNyWKP0OKcDWI11L5o9zTJ/ZsyrO8
yqfRfCLI5RfyUmTOKRSCZzOCe85iFQIrDQIoATdAJZ32TAM0XAfJl9WoKf1QO3FQ
/y8JJifiuUzbkhViju0E6Zov4Ljlcbtw8m3X2cAgQA/EpGoE1/SLYUZrIHVaOyRR
v04Ud9HXYF6/AuzvWRw2sq8MAzHUVpaPjZxReGVt1/39dCdXachD2fO4Y51ILy96
WafvNq1qftGgMZIUn2aucwky0Q6ISmSkcihEqeVmKLwHOBlylwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7BrLo2HsvEaXXl6YF1/QTk9bJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMmNhZjA3Y2ItMGQyMS0z
MjM4LWEzNDUtMmY2NWIwMjg4MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJN/g0klpJjelOEFTKi7UG/pPVu+mTeOKUGtjs0Y5tzTyFWO/zrwW7ZI
Ws2w9KpWfOKuhLjqZeVWbfot9IQpRKJF1u5gicpvc76BFg0TTAyT1VuSzTOBoiVi
yX1ZnxlAKknxRFvB/om6I1cUBTvKtAAhpxyuWqZuTj9ZUnnamTWVyzo3hhyxt/kE
iE5ESZCgjqPc/Ivi8hKsnZxC1RQNUZ47oFC+U1cfeJDnSjNm9KL7zRoJYEoq5bZG
KyXMQBJdfcL2ude1z42puFYTPH996IBxCH8z8coy7lNDR0usIZU8kxVMFYxp4Ngg
znocBPO1us2pwtLtOPlND+bLYuR9wuw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:47:47 2026 by rpki-client