Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
File:                     1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa (raw, json)
Hash identifier:          WPfCCJ5NJR/DPG/XzOOtt5pCfSb9wUdce8MAPfM4i9g=
Subject key identifier:   1D:89:6D:4D:62:C8:DC:5B:D0:20:EA:E2:82:30:AF:9A:85:A6:26:68
Certificate issuer:       /CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
Certificate serial:       010D0C9F4328584F093CE619CF48C52225EE1B00
Authority key identifier: 4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     18948
IP address blocks:        64.118.208.0/20 maxlen: 20
                          74.123.168.0/21 maxlen: 21
                          74.123.168.0/22 maxlen: 22
                          74.123.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e6:19:cf:48:c5:22:25:ee:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=213fd5dd-a7f6-4200-b411-ba8a0c663777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:c1:46:c0:e3:d7:65:2f:1d:73:4f:5a:40:
                    98:1c:65:54:bc:cb:1f:5a:f2:6d:d9:91:b8:b9:ff:
                    cb:c8:2e:9a:95:fd:6d:3b:8b:33:f5:49:e6:62:26:
                    df:dc:a3:5c:83:06:26:c2:85:c1:ac:05:51:41:bf:
                    b2:44:82:f4:05:b4:13:7a:c4:36:f3:9b:e6:a9:44:
                    4f:23:1b:e0:d5:7e:b1:34:fe:32:b9:a7:96:40:00:
                    26:4f:18:9f:3c:61:d0:3d:38:b7:a8:79:e1:74:9a:
                    64:6b:49:61:fd:60:2b:e0:71:f6:ed:28:ca:24:ae:
                    9f:b7:cb:8b:10:e7:7a:fa:8c:58:23:be:06:36:84:
                    e1:02:ac:b8:27:83:11:7b:17:50:16:44:66:2d:8a:
                    79:01:d1:6f:91:66:a4:49:cb:3c:d1:33:c4:ca:eb:
                    3c:d1:e6:1a:8f:dd:73:0e:e6:7b:52:58:98:bc:c1:
                    c4:13:a5:dc:80:46:88:a5:d8:6b:f2:6a:24:45:9b:
                    39:1b:41:65:d0:04:b7:d3:ab:fc:c6:30:0f:b7:2a:
                    5d:b7:f2:ab:b9:e6:f4:08:53:ad:23:db:85:a8:ee:
                    3b:37:86:65:a0:7d:12:40:52:b5:57:cb:92:e5:6f:
                    67:2a:c5:5c:6b:3c:a0:10:8e:c1:e5:34:7d:e1:3a:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:89:6D:4D:62:C8:DC:5B:D0:20:EA:E2:82:30:AF:9A:85:A6:26:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.208.0/20
                  74.123.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:26:f1:09:74:23:e8:32:b1:a3:99:25:2a:a1:e7:12:b3:
         23:b0:60:36:12:44:4a:f7:7e:de:41:3f:50:bd:79:b0:5e:60:
         af:10:ac:4f:aa:b6:ce:bb:27:34:42:1a:02:d9:62:39:43:40:
         10:7a:e0:19:63:8a:14:0a:da:9f:03:f3:d6:7e:9b:50:a7:97:
         5a:57:ca:98:72:fd:5e:c7:f8:d2:89:0e:7c:ac:ed:71:19:5d:
         41:22:41:fc:8a:15:d1:b7:50:68:bf:19:4e:2a:6e:33:9d:e8:
         99:da:95:d8:4f:99:41:78:7b:01:50:9a:80:cf:cd:6c:d7:28:
         fb:c9:03:55:bb:0e:77:8b:13:af:d1:7b:18:1d:c5:2b:4a:b9:
         b6:3a:4f:e2:42:89:ef:ff:7a:4a:61:89:19:3a:58:4b:39:59:
         e9:6e:67:0c:0d:fb:2d:bc:27:7f:51:ca:d1:2e:6f:ad:72:f9:
         c5:4b:68:6e:d6:5a:55:34:8d:17:30:bd:36:6b:6b:38:50:37:
         28:8c:1c:9c:73:54:d0:55:7a:23:f7:0f:42:78:61:cd:0b:80:
         0a:97:8e:6e:90:04:85:8a:24:cc:0d:09:81:8d:c2:36:fd:3a:
         a1:37:94:29:12:de:d5:e9:cf:e9:63:0f:09:d3:b7:4c:4a:1f:
         88:67:33:28
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8JPOYZz0jFIiXuGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmJiNTVhZTgtOTdhYi00M2RmLThjMWEtYzAyYmQxZmI2
NGVjMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
MjEzZmQ1ZGQtYTdmNi00MjAwLWI0MTEtYmE4YTBjNjYzNzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yLBRsDj12UvHXNPWkCYHGVUvMsfWvJt2ZG4
uf/LyC6alf1tO4sz9UnmYibf3KNcgwYmwoXBrAVRQb+yRIL0BbQTesQ285vmqURP
Ixvg1X6xNP4yuaeWQAAmTxifPGHQPTi3qHnhdJpka0lh/WAr4HH27SjKJK6ft8uL
EOd6+oxYI74GNoThAqy4J4MRexdQFkRmLYp5AdFvkWakScs80TPEyus80eYaj91z
DuZ7UliYvMHEE6XcgEaIpdhr8mokRZs5G0Fl0AS306v8xjAPtypdt/Krueb0CFOt
I9uFqO47N4ZloH0SQFK1V8uS5W9nKsVcazygEI7B5TR94ToV0QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB2JbU1iyNxb0CDq4oIwr5qFpiZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYmI1
NWFlOC05N2FiLTQzZGYtOGMxYS1jMDJiZDFmYjY0ZWMvMWZlMTE0YzQtNWE3My0z
YTgzLTljOTItNTQxMGFmYzcxYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmJiNTVhZTgtOTdhYi00M2RmLThj
MWEtYzAyYmQxZmI2NGVjL2JiYjU1YWU4LTk3YWItNDNkZi04YzFhLWMwMmJkMWZi
NjRlYy5jcmwwHwYDVR0jBBgwFoAUTeA6/Vs038PUn1LrA68JWozci4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYmI1NWFlOC05N2FiLTQzZGYtOGMxYS1jMDJi
ZDFmYjY0ZWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQHbQAwQD
SnuoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADctJvEJdCPoMrGjmSUqoecSsyOwYDYSREr3ft5BP1C9ebBe
YK8QrE+qts67JzRCGgLZYjlDQBB64BljihQK2p8D89Z+m1Cnl1pXyphy/V7H+NKJ
Dnys7XEZXUEiQfyKFdG3UGi/GU4qbjOd6JnaldhPmUF4ewFQmoDPzWzXKPvJA1W7
DneLE6/RexgdxStKubY6T+JCie//ekphiRk6WEs5WeluZwwN+y28J39RytEub61y
+cVLaG7WWlU0jRcwvTZrazhQNyiMHJxzVNBVeiP3D0J4Yc0LgAqXjm6QBIWKJMwN
CYGNwjb9OqE3lCkS3tXpz+ljDwnTt0xKH4hnMyg=
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:50:00 2026 by rpki-client