Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
File:                     8bccc4c6-312e-323b-8801-038f17a9eac0.roa (raw, json)
Hash identifier:          nQOPeyKMIkKspkWblxVo5Git7qPXLjkeJO5uVIcLhgM=
Subject key identifier:   01:4B:47:E8:31:68:65:EF:12:C8:12:13:2B:E7:41:00:16:12:FA:91
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584F1E2CF9277B904B0FE80C4140
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     212374
IP address blocks:        69.168.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f9:27:7b:90:4b:0f:e8:0c:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=df686e9f-874f-4768-aef4-f7bd848d79d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:4c:62:15:2d:2d:5b:e2:6f:56:59:4b:f4:
                    ce:17:21:7e:f7:8e:e0:a6:3a:83:e8:36:7e:ee:b8:
                    12:17:f1:24:ad:99:96:4c:6d:4e:2f:7a:53:db:23:
                    50:13:9e:5c:92:88:b6:2c:bd:be:ed:f9:d6:c1:9e:
                    42:06:b8:d5:3f:13:a8:04:fd:0b:49:a6:d6:7a:ba:
                    b1:e3:f3:54:93:5b:e4:0f:77:bc:2f:5a:9c:ac:e2:
                    31:25:6e:d3:e1:e2:54:b1:11:ee:dc:16:e3:ea:91:
                    e8:54:b7:c9:fc:a0:24:45:66:69:09:ab:96:8c:cb:
                    30:cc:06:9f:77:0e:2d:26:e6:e5:6d:04:3c:13:31:
                    dc:12:9e:47:de:79:02:8f:c1:a0:0c:f2:ce:3f:0e:
                    01:48:19:b5:01:a3:e8:bd:13:41:66:d5:bf:32:42:
                    81:39:72:c8:f3:3b:b2:6d:ad:8c:e6:b3:af:70:56:
                    e4:f0:a4:af:2d:46:9a:68:12:69:93:60:f9:11:5c:
                    6e:17:82:f7:55:97:63:4d:40:1c:26:c5:5e:08:0b:
                    0e:8f:fc:f6:e0:ba:58:46:60:17:5d:54:23:b2:c4:
                    58:fe:5f:7c:a4:55:f5:0c:47:8b:5f:ca:ff:1e:32:
                    5d:dd:da:c0:0f:cb:4c:0c:06:b8:95:21:c9:5f:1f:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:47:E8:31:68:65:EF:12:C8:12:13:2B:E7:41:00:16:12:FA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:0f:46:b4:75:2b:09:e0:4c:5f:eb:bd:b2:1b:c0:c2:25:
         b4:dc:20:07:e7:0a:97:8b:cb:90:e6:e2:c5:36:cc:50:37:2d:
         d4:97:59:53:c1:59:91:ce:81:2c:f6:dd:b3:68:06:e9:a4:94:
         69:f6:2a:8a:15:98:75:71:9d:5b:6e:0e:3d:50:a5:78:a0:93:
         1d:e6:df:25:f4:ee:c3:5e:93:40:ac:4d:c5:55:e6:ab:b2:1a:
         bc:83:45:1a:fb:f5:52:99:d1:1d:0e:bb:de:e2:69:6b:88:24:
         c3:af:c8:69:c2:2e:19:52:f7:87:d0:58:96:3f:41:bf:b7:0e:
         3c:22:25:01:f0:81:18:63:03:04:73:ff:2f:a1:1d:ae:3a:d6:
         8f:95:81:be:c1:ed:c4:bb:65:a2:42:2e:8e:77:a2:80:e3:a9:
         77:dc:5b:46:bf:f7:95:b0:a6:d0:bc:92:cf:05:21:fc:9e:89:
         64:4a:6e:b0:da:d3:a4:a8:87:b8:66:d5:b7:5c:2c:eb:e9:41:
         73:16:b9:1e:4b:a0:95:54:54:13:74:90:d2:02:61:fa:67:1d:
         6a:8c:25:77:14:7a:6a:8d:12:15:5c:b5:8b:34:c7:19:b6:8b:
         bb:68:54:49:21:15:0e:d2:03:30:7d:cd:80:e4:54:00:9e:9c:
         d3:e8:71:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPkne5BLD+gMQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
ZGY2ODZlOWYtODc0Zi00NzY4LWFlZjQtZjdiZDg0OGQ3OWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo55MYhUtLVvib1ZZS/TOFyF+947gpjqD6DZ+
7rgSF/EkrZmWTG1OL3pT2yNQE55ckoi2LL2+7fnWwZ5CBrjVPxOoBP0LSabWerqx
4/NUk1vkD3e8L1qcrOIxJW7T4eJUsRHu3Bbj6pHoVLfJ/KAkRWZpCauWjMswzAaf
dw4tJublbQQ8EzHcEp5H3nkCj8GgDPLOPw4BSBm1AaPovRNBZtW/MkKBOXLI8zuy
ba2M5rOvcFbk8KSvLUaaaBJpk2D5EVxuF4L3VZdjTUAcJsVeCAsOj/z24LpYRmAX
XVQjssRY/l98pFX1DEeLX8r/HjJd3drAD8tMDAa4lSHJXx+0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFLR+gxaGXvEsgSEyvnQQAWEvqRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvOGJjY2M0YzYtMzEyZS0z
MjNiLTg4MDEtMDM4ZjE3YTllYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFH2D0a0dSsJ4Exf672yG8DCJbTcIAfnCpeLy5Dm4sU2zFA3LdSXWVPB
WZHOgSz23bNoBumklGn2KooVmHVxnVtuDj1QpXigkx3m3yX07sNek0CsTcVV5quy
GryDRRr79VKZ0R0Ou97iaWuIJMOvyGnCLhlS94fQWJY/Qb+3DjwiJQHwgRhjAwRz
/y+hHa461o+Vgb7B7cS7ZaJCLo53ooDjqXfcW0a/95WwptC8ks8FIfyeiWRKbrDa
06Soh7hm1bdcLOvpQXMWuR5LoJVUVBN0kNICYfpnHWqMJXcUemqNEhVctYs0xxm2
i7toVEkhFQ7SAzB9zYDkVACenNPocWc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:39:18 2026 by rpki-client