Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d501a18-4c61-3899-95ec-7a1de596c4d9.roa
File:                     2d501a18-4c61-3899-95ec-7a1de596c4d9.roa (raw, json)
Hash identifier:          sgQt0ZZ7/xorvPZl5O9FOJYLPUzfRR0RrdGIrpxl/h4=
Subject key identifier:   09:06:82:98:5F:A5:73:4D:40:8C:34:EC:A1:97:F3:09:7E:8D:BC:05
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6617301B9CED28A3C11B3D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d501a18-4c61-3899-95ec-7a1de596c4d9.roa
Signing time:             Mon 05 Oct 2026 07:14:37 +0000
ROA not before:           Mon 05 Oct 2026 07:14:37 +0000
ROA not after:            Thu 31 Dec 2026 11:48:26 +0000
asID:                     402227
IP address blocks:        82.111.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:17:30:1b:9c:ed:28:a3:c1:1b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  5 07:14:37 2026 GMT
            Not After : Dec 31 11:48:26 2026 GMT
        Subject: CN=98c6fc88-7e5c-484c-8c09-dfdfeed9e8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:86:eb:67:f6:c8:54:e1:6b:af:67:1c:ff:
                    ba:1a:e4:eb:a7:39:29:9c:4f:cf:27:fe:9b:54:d5:
                    7c:f0:38:bb:c0:0c:77:38:57:fd:78:d1:1b:af:b7:
                    74:77:0c:8a:10:68:ed:5a:42:5d:0e:be:5a:b2:c5:
                    8a:e5:55:ff:6c:b3:85:5d:bf:5e:b5:34:d1:55:5c:
                    88:ca:e7:35:c1:04:90:6c:03:e6:3b:2e:e7:af:a3:
                    43:1c:48:c7:a4:b5:37:df:18:8e:f2:0d:e6:66:7e:
                    c4:ad:60:46:d2:bc:a8:c7:7b:13:e5:80:bb:1d:8d:
                    79:83:4e:59:d7:4c:fa:d7:d3:25:70:65:00:69:40:
                    ba:5c:5d:59:a7:bd:86:4c:90:d9:0e:2f:04:b3:c3:
                    48:f3:d5:93:4e:fe:1e:63:a9:fc:5f:d1:d7:56:61:
                    b4:02:e4:85:06:d6:5d:0f:e8:c0:31:55:f3:03:0d:
                    3a:1b:39:39:1f:1c:90:93:d7:38:c1:af:72:0c:2e:
                    91:2f:4d:97:b0:f6:9a:74:8d:e7:a8:6c:ee:2d:61:
                    43:9a:41:6f:13:ac:8c:88:75:da:b2:4d:61:39:21:
                    f5:6b:ef:59:a6:f2:f6:fd:dd:13:c8:53:07:85:2b:
                    f5:7f:5a:ff:bd:5f:10:9e:41:7a:98:eb:52:5c:df:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:82:98:5F:A5:73:4D:40:8C:34:EC:A1:97:F3:09:7E:8D:BC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d501a18-4c61-3899-95ec-7a1de596c4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.111.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:dd:58:c0:6a:8c:ca:ee:ae:71:a5:d0:26:ce:6d:27:02:
         b0:d3:a3:41:f0:ac:06:b7:7a:64:db:fc:c2:02:a3:f0:77:92:
         12:14:a5:75:e2:07:44:9d:71:97:99:26:17:91:4e:a8:a6:fa:
         2d:a5:f7:21:85:49:d9:3b:5d:e7:cd:1e:87:68:37:9f:f6:40:
         47:11:db:9e:88:5d:f4:17:2b:34:2e:7c:6a:7e:95:08:c2:9c:
         d6:47:3a:b9:74:5f:fd:90:c9:12:61:a4:d7:fc:4b:e1:84:80:
         e7:c0:5d:6d:64:c2:7a:95:9c:33:39:70:1b:b4:25:1f:29:84:
         cb:8c:29:a1:1a:20:cc:6a:f1:3d:03:c4:0d:7e:a0:d5:ec:31:
         50:43:43:28:bb:81:91:93:c1:0b:69:37:c3:4f:ae:13:3c:d5:
         a4:40:30:09:70:28:84:24:4a:fe:7f:2a:6b:bb:6a:22:fb:63:
         fd:ee:72:3b:cc:37:8c:c3:54:c0:b7:b0:58:02:e2:8b:dd:ac:
         d7:2e:09:07:0b:08:4a:6b:d7:85:e3:4a:25:b4:73:87:86:84:
         e5:ce:08:33:79:ce:c7:72:fa:c6:03:5a:7e:93:c1:34:c4:09:
         14:e0:5c:5c:33:03:b8:75:f3:6c:b4:65:f4:c5:62:bd:d3:29:
         a0:7a:9c:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mFzAbnO0oo8EbPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAwNTA3MTQzN1oXDTI2MTIzMTExNDgyNlowLzEtMCsGA1UEAxMk
OThjNmZjODgtN2U1Yy00ODRjLThjMDktZGZkZmVlZDllOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgCG62f2yFTha69nHP+6GuTrpzkpnE/PJ/6b
VNV88Di7wAx3OFf9eNEbr7d0dwyKEGjtWkJdDr5assWK5VX/bLOFXb9etTTRVVyI
yuc1wQSQbAPmOy7nr6NDHEjHpLU33xiO8g3mZn7ErWBG0ryox3sT5YC7HY15g05Z
10z619MlcGUAaUC6XF1Zp72GTJDZDi8Es8NI89WTTv4eY6n8X9HXVmG0AuSFBtZd
D+jAMVXzAw06Gzk5HxyQk9c4wa9yDC6RL02XsPaadI3nqGzuLWFDmkFvE6yMiHXa
sk1hOSH1a+9ZpvL2/d0TyFMHhSv1f1r/vV8QnkF6mOtSXN9VOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkGgphfpXNNQIw07KGX8wl+jbwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmQ1MDFhMTgtNGM2MS0z
ODk5LTk1ZWMtN2ExZGU1OTZjNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUm/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCI3VjAaozK7q5xpdAmzm0nArDTo0HwrAa3emTb/MICo/B3khIUpXXi
B0SdcZeZJheRTqim+i2l9yGFSdk7XefNHodoN5/2QEcR256IXfQXKzQufGp+lQjC
nNZHOrl0X/2QyRJhpNf8S+GEgOfAXW1kwnqVnDM5cBu0JR8phMuMKaEaIMxq8T0D
xA1+oNXsMVBDQyi7gZGTwQtpN8NPrhM81aRAMAlwKIQkSv5/Kmu7aiL7Y/3ucjvM
N4zDVMC3sFgC4ovdrNcuCQcLCEpr14XjSiW0c4eGhOXOCDN5zsdy+sYDWn6TwTTE
CRTgXFwzA7h182y0ZfTFYr3TKaB6nIU=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:31:37 2026 by rpki-client