Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa
File:                     c474fd3e-335b-3835-9e74-bcc4f785d18f.roa (raw, json)
Hash identifier:          XHUsBbX7pmWzcdY5CPpQ3e3MjD/VJDClKdt4nemERH0=
Subject key identifier:   48:E9:C4:55:86:67:85:D5:6D:4C:71:F8:7D:E5:D2:63:C2:8F:A4:92
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584EF1820566DA8CF81FBD642E80
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     212374
IP address blocks:        199.115.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:05:66:da:8c:f8:1f:bd:64:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=0a165ecd-7805-4629-bdac-c53bd84f917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:d9:6a:29:19:87:40:f4:cf:91:1c:89:ea:
                    ad:0b:dc:c4:99:a7:27:6e:58:d9:64:f4:5f:cd:52:
                    47:b0:59:c3:fd:92:34:78:5a:8f:46:55:66:99:f6:
                    a7:93:60:03:a4:7e:23:88:43:c4:fd:90:e6:43:58:
                    32:b9:47:77:b7:9a:43:32:bb:c7:f3:e2:70:f9:17:
                    34:5a:18:6b:d5:13:32:10:c5:38:f2:88:fb:5b:25:
                    97:f7:65:28:f8:53:87:c7:f7:3d:4c:cf:04:57:cd:
                    dc:e9:41:96:23:61:2e:24:74:09:6d:55:78:dd:69:
                    08:5e:21:e3:e2:37:36:b9:82:3d:db:ea:18:f9:9b:
                    62:f6:74:11:5a:2c:88:c5:ae:46:f8:a7:f5:e0:54:
                    b7:40:09:92:a4:9d:bc:95:78:93:db:7d:b8:03:c2:
                    19:cd:8a:68:90:51:82:48:66:11:29:3a:15:f7:e2:
                    fe:85:df:3a:1a:82:3d:8e:0f:5b:d0:49:79:21:41:
                    15:7a:c8:7e:ee:5d:74:4f:0a:c3:4b:74:09:91:74:
                    f1:a1:b8:17:02:a0:89:1d:78:2d:e5:84:cd:58:42:
                    7f:9a:c8:d3:57:40:7b:af:ee:a1:c6:79:c9:79:48:
                    d6:3e:9d:00:1d:c0:8b:2a:7d:c7:81:6f:f4:94:14:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:C4:55:86:67:85:D5:6D:4C:71:F8:7D:E5:D2:63:C2:8F:A4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:b8:80:71:17:52:33:4c:0a:b5:f6:fc:a6:2e:22:cd:5b:
         f9:da:e8:d6:08:b6:c6:c4:a9:d7:88:21:d7:69:79:cb:4a:0d:
         dc:65:d9:dd:90:f4:5e:dc:8f:ad:c9:bc:5e:d2:ec:4a:9d:37:
         e6:de:79:f9:32:e7:5d:a4:a0:5f:9b:4a:f0:1d:d0:e5:ff:5c:
         eb:79:a1:2c:07:9f:b8:e4:9d:03:fa:14:18:cf:7f:c1:be:5e:
         e1:74:25:c4:9a:d5:45:7b:28:48:e0:1a:ef:20:63:e2:ac:76:
         45:16:23:cc:b9:fd:f0:19:03:ab:ee:87:d0:4d:2f:1d:28:0d:
         ca:2b:71:da:3f:ce:89:4e:66:e8:cf:42:12:f5:9e:fb:86:08:
         9b:c6:bb:9e:59:91:38:78:52:61:75:17:db:c3:70:90:97:ab:
         05:2f:aa:f9:10:da:e8:94:92:d3:10:df:34:45:fe:40:70:fc:
         21:26:14:d4:ec:15:72:31:50:94:0d:9b:f2:6b:75:d5:4d:13:
         bd:f1:d3:83:fa:0f:e5:d5:2c:b6:44:8e:b2:83:88:13:60:52:
         9a:e8:05:e0:a7:83:d7:ee:74:c9:b8:b7:2c:9e:23:69:25:78:
         a8:86:da:5d:17:58:88:de:e7:d0:47:d8:f5:69:72:b6:39:86:
         b3:f6:06:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggVm2oz4H71kLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
MGExNjVlY2QtNzgwNS00NjI5LWJkYWMtYzUzYmQ4NGY5MTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/vZaikZh0D0z5EcieqtC9zEmacnbljZZPRf
zVJHsFnD/ZI0eFqPRlVmmfank2ADpH4jiEPE/ZDmQ1gyuUd3t5pDMrvH8+Jw+Rc0
Whhr1RMyEMU48oj7WyWX92Uo+FOHx/c9TM8EV83c6UGWI2EuJHQJbVV43WkIXiHj
4jc2uYI92+oY+Zti9nQRWiyIxa5G+Kf14FS3QAmSpJ28lXiT2324A8IZzYpokFGC
SGYRKToV9+L+hd86GoI9jg9b0El5IUEVesh+7l10TwrDS3QJkXTxobgXAqCJHXgt
5YTNWEJ/msjTV0B7r+6hxnnJeUjWPp0AHcCLKn3HgW/0lBTUXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjpxFWGZ4XVbUxx+H3l0mPCj6SSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvYzQ3NGZkM2UtMzM1Yi0z
ODM1LTllNzQtYmNjNGY3ODVkMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3NpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpVuIBxF1IzTAq19vymLiLNW/na6NYItsbEqdeIIddpectKDdxl2d2Q
9F7cj63JvF7S7EqdN+beefky512koF+bSvAd0OX/XOt5oSwHn7jknQP6FBjPf8G+
XuF0JcSa1UV7KEjgGu8gY+KsdkUWI8y5/fAZA6vuh9BNLx0oDcorcdo/zolOZujP
QhL1nvuGCJvGu55ZkTh4UmF1F9vDcJCXqwUvqvkQ2uiUktMQ3zRF/kBw/CEmFNTs
FXIxUJQNm/JrddVNE73x04P6D+XVLLZEjrKDiBNgUproBeCng9fudMm4tyyeI2kl
eKiG2l0XWIje59BH2PVpcrY5hrP2Blg=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:42:26 2026 by rpki-client