Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa
File:                     d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa (raw, json)
Hash identifier:          L8ZA6zrn8iZLp5fug5itQE2hDI0mdaDc10LcSPPXlrE=
Subject key identifier:   19:D4:5B:43:40:08:CF:D0:E6:D4:BB:36:B6:72:E1:DA:82:69:90:87
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584F56D688BBE621A8CA635AAE80
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa
Signing time:             Tue 29 Sep 2026 20:07:14 +0000
ROA not before:           Tue 29 Sep 2026 20:07:14 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46293
IP address blocks:        104.254.184.0/22 maxlen: 22
                          206.167.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:d6:88:bb:e6:21:a8:ca:63:5a:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Sep 29 20:07:14 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=40d66360-1fe6-4ec7-a2d8-ff13c59729d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:b1:bf:05:98:85:a9:35:50:a9:04:d8:95:
                    ae:2d:eb:98:70:0a:b4:56:ba:05:64:77:a6:d9:87:
                    80:ac:72:e0:c4:79:00:ff:67:29:88:3e:9a:87:8b:
                    b7:43:9a:ef:cc:0f:a2:6e:b6:2d:59:4e:ac:40:65:
                    87:35:34:19:17:58:12:57:bc:d9:f7:fe:e4:35:45:
                    a4:b6:11:7b:66:fe:4e:b0:5d:e9:8f:cd:a5:a0:b4:
                    9d:3d:6f:43:15:7a:b9:a9:10:4e:25:e7:ef:f7:2f:
                    28:78:ec:77:de:1e:47:2d:9a:48:b7:10:0d:8a:5b:
                    fd:12:6c:88:c9:32:2a:00:8c:4d:b1:94:b5:7e:9f:
                    54:df:9f:ad:a1:52:5f:7b:62:54:83:e6:e9:b9:c6:
                    8b:5f:21:e2:38:65:30:ad:21:ba:f0:82:bd:4f:5f:
                    a7:2c:5b:11:f7:2e:66:33:44:88:65:8d:43:2f:d0:
                    1d:66:f0:27:fe:75:4f:c4:30:10:42:be:8e:30:cd:
                    8a:0c:37:6c:c6:88:d5:cf:e4:88:61:b5:69:4f:89:
                    75:63:bc:0f:89:21:4e:d5:46:fa:f3:cf:94:f5:63:
                    9e:28:ef:7f:99:2d:4a:c6:6c:80:46:00:25:3e:ae:
                    9b:ff:79:36:87:3f:50:f4:e6:2f:f9:ef:f8:87:85:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D4:5B:43:40:08:CF:D0:E6:D4:BB:36:B6:72:E1:DA:82:69:90:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.184.0/22
                  206.167.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:f6:05:3c:57:db:87:16:05:2b:01:ce:bc:e5:f3:4d:8f:
         c6:08:ca:68:1c:60:ec:04:3c:dd:bd:42:a7:b0:a3:a1:7b:0a:
         93:c0:3f:81:dc:b6:86:6c:a1:3c:7d:25:2c:e4:90:6b:ce:af:
         68:66:4a:45:e4:a2:ad:32:aa:3f:4d:1e:6e:45:ba:79:de:c9:
         cc:8b:75:81:f1:72:e7:83:3c:fd:0c:c2:ce:91:5c:27:db:52:
         63:57:21:8e:e8:5e:3d:d5:ec:06:24:c9:74:1f:98:be:3b:c0:
         7c:5b:1f:fb:de:71:f3:8c:62:57:70:47:92:55:b5:6e:f7:86:
         47:a6:80:0f:a2:a2:b8:f9:64:5e:65:b6:17:69:a5:1d:35:30:
         40:d0:92:53:55:37:66:3d:de:2e:81:95:5e:70:36:24:49:82:
         e2:6d:3a:32:2e:dd:bd:57:50:5d:af:36:b0:ae:ed:d8:10:b7:
         dc:63:ad:6a:d3:5e:61:bf:21:14:f7:a7:62:9f:0a:3d:ab:a4:
         d4:ea:fa:a3:ac:32:32:4f:37:d2:5c:50:84:09:45:3e:21:b4:
         85:77:8a:5c:47:12:0e:fb:6d:61:51:32:85:27:47:f9:11:1a:
         ff:ab:82:3a:b8:11:07:e9:0f:f1:fc:d0:74:0a:bc:8a:95:5a:
         ac:ea:da:7e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9W1oi75iGoymNaroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNlNTg3OTAtODg4Ny00ZWFlLTk5NjUtODBlM2E3MGJk
Zjk3MB4XDTI2MDkyOTIwMDcxNFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDBkNjYzNjAtMWZlNi00ZWM3LWEyZDgtZmYxM2M1OTcyOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq96xvwWYhak1UKkE2JWuLeuYcAq0VroFZHem
2YeArHLgxHkA/2cpiD6ah4u3Q5rvzA+ibrYtWU6sQGWHNTQZF1gSV7zZ9/7kNUWk
thF7Zv5OsF3pj82loLSdPW9DFXq5qRBOJefv9y8oeOx33h5HLZpItxANilv9EmyI
yTIqAIxNsZS1fp9U35+toVJfe2JUg+bpucaLXyHiOGUwrSG68IK9T1+nLFsR9y5m
M0SIZY1DL9AdZvAn/nVPxDAQQr6OMM2KDDdsxojVz+SIYbVpT4l1Y7wPiSFO1Ub6
88+U9WOeKO9/mS1KxmyARgAlPq6b/3k2hz9Q9OYv+e/4h4WFkwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBnUW0NACM/Q5tS7NrZy4dqCaZCHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2U1
ODc5MC04ODg3LTRlYWUtOTk2NS04MGUzYTcwYmRmOTcvZDhjYWNiZjYtZjE3OS0z
MWYwLWIwZjctMWJhNmUyYTdiMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNlNTg3OTAtODg4Ny00ZWFlLTk5
NjUtODBlM2E3MGJkZjk3LzAzZTU4NzkwLTg4ODctNGVhZS05OTY1LTgwZTNhNzBi
ZGY5Ny5jcmwwHwYDVR0jBBgwFoAUUyoRRgDyP0Kq6z7Dsin1AvGX9fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2U1ODc5MC04ODg3LTRlYWUtOTk2NS04MGUz
YTcwYmRmOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaP64AwQB
zqdGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFZc9gU8V9uHFgUrAc685fNNj8YIymgcYOwEPN29Qqewo6F7
CpPAP4HctoZsoTx9JSzkkGvOr2hmSkXkoq0yqj9NHm5FunneycyLdYHxcueDPP0M
ws6RXCfbUmNXIY7oXj3V7AYkyXQfmL47wHxbH/vecfOMYldwR5JVtW73hkemgA+i
orj5ZF5lthdppR01MEDQklNVN2Y93i6BlV5wNiRJguJtOjIu3b1XUF2vNrCu7dgQ
t9xjrWrTXmG/IRT3p2KfCj2rpNTq+qOsMjJPN9JcUIQJRT4htIV3ilxHEg77bWFR
MoUnR/kRGv+rgjq4EQfpD/H80HQKvIqVWqzq2n4=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:26:34 2026 by rpki-client