Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f65af9f7-bf6f-37ca-bb7a-8a3a8a4d1b3a.roa
File:                     f65af9f7-bf6f-37ca-bb7a-8a3a8a4d1b3a.roa (raw, json)
Hash identifier:          RT53HEX6Mw4Lb3mNdwUweehr1kENNGr6YbJiIjmVSVc=
Subject key identifier:   06:C5:32:42:39:D5:2A:89:42:44:8C:4F:67:2A:D1:6B:FD:38:8B:2C
Certificate issuer:       /CN=f7ffd1ec-df7d-4777-b55e-4e4d58dc9367
Certificate serial:       010D0C9F4328584FC9FBCAE2523CB3FD1E8E4FD8
Authority key identifier: 91:29:2A:A8:C3:FC:FD:AC:B3:3C:A6:42:32:AD:81:4D:97:3E:6F:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f65af9f7-bf6f-37ca-bb7a-8a3a8a4d1b3a.roa
Signing time:             Tue 10 Nov 2026 02:00:13 +0000
ROA not before:           Tue 10 Nov 2026 02:00:13 +0000
ROA not after:            Mon 08 Feb 2027 02:00:13 +0000
asID:                     399088
IP address blocks:        192.206.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:fb:ca:e2:52:3c:b3:fd:1e:8e:4f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ffd1ec-df7d-4777-b55e-4e4d58dc9367
        Validity
            Not Before: Nov 10 02:00:13 2026 GMT
            Not After : Feb  8 02:00:13 2027 GMT
        Subject: CN=c82b9189-9d02-4082-b24c-914fbff8f609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:57:56:4c:0b:22:dc:53:0e:6a:78:e2:fe:
                    de:20:9d:2b:c4:ef:46:f4:ba:9a:7b:a1:fa:57:ab:
                    52:aa:76:53:a7:52:bb:56:fc:ba:3d:bb:5e:72:bb:
                    39:63:4e:e8:4d:ae:0a:4c:46:1c:80:d4:c4:ac:f0:
                    85:c6:ad:f3:e0:be:a3:8e:e1:6b:ce:12:f7:26:ab:
                    e7:b5:40:d6:61:db:70:0d:7f:90:ab:5d:a5:a6:12:
                    b9:57:23:6c:15:b2:db:9a:15:79:ef:e0:e9:45:34:
                    95:7a:3f:33:7e:f8:ff:1b:00:1b:ec:00:9e:63:fe:
                    53:6c:f2:15:42:cd:31:4d:f6:c3:33:eb:63:9a:10:
                    93:87:d9:69:9c:a0:3c:04:7c:94:eb:32:7c:f1:aa:
                    b9:ae:59:62:f4:d9:0c:70:a6:75:6e:ec:12:cd:63:
                    7b:6e:88:b7:e2:2d:68:07:eb:3e:35:53:ea:28:d1:
                    1d:22:50:19:9f:99:70:72:e0:21:29:37:bf:c8:f4:
                    0e:09:94:56:6b:94:09:74:e1:35:d8:2c:ca:c3:7c:
                    79:6b:79:d8:d3:86:80:e0:b8:19:1c:fc:a5:1a:01:
                    c4:9f:5f:36:9e:aa:0f:5e:be:6c:2c:8c:2e:d7:27:
                    d1:7b:bc:bf:c4:9e:64:37:8b:6e:b2:46:f4:1f:4e:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:32:42:39:D5:2A:89:42:44:8C:4F:67:2A:D1:6B:FD:38:8B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f65af9f7-bf6f-37ca-bb7a-8a3a8a4d1b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.crl

            X509v3 Authority Key Identifier:
                keyid:91:29:2A:A8:C3:FC:FD:AC:B3:3C:A6:42:32:AD:81:4D:97:3E:6F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7ffd1ec-df7d-4777-b55e-4e4d58dc9367.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:82:e6:a5:c4:b0:09:55:05:9e:22:70:08:33:3d:f7:92:e5:
         ed:aa:cc:f4:2a:5d:90:b9:ac:de:2c:8a:1c:a7:9e:97:48:c9:
         4f:ab:33:b2:d2:fc:81:b8:75:3a:7b:eb:e5:df:80:8f:ad:e9:
         8e:1e:56:bd:4c:99:d8:d9:80:a2:5f:09:a5:ad:31:6c:4e:5c:
         55:9b:80:67:1c:c9:51:52:c3:d9:18:4a:37:d3:88:95:72:c5:
         90:cd:ec:dd:ec:1b:05:b3:2c:35:ab:4d:29:62:d5:54:97:b7:
         f9:9c:31:f7:05:86:39:c8:57:a2:8a:95:50:d1:94:f3:7b:12:
         3d:53:b0:08:e9:91:8d:c1:35:76:6d:a3:e8:b3:43:21:dd:78:
         83:e5:98:59:ea:1e:14:6d:f3:f6:ba:ea:8c:ca:85:70:1f:7e:
         8c:63:ea:c4:cd:36:53:82:b5:8e:5d:ab:00:32:d0:0c:9e:40:
         d8:2a:59:92:c4:2b:cb:a4:28:bc:05:b8:dd:a9:4a:24:92:d0:
         27:0a:32:af:15:d5:75:3b:ab:dc:a5:3c:92:8c:ff:bc:70:a0:
         4a:b9:7b:74:eb:6f:43:34:4e:49:90:4a:ee:c9:b1:e7:5f:83:
         2e:e7:11:bd:5a:72:f0:b1:d8:82:a9:34:44:6f:10:fe:c4:a7:
         94:7c:59:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/J+8riUjyz/R6OT9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdmZmQxZWMtZGY3ZC00Nzc3LWI1NWUtNGU0ZDU4ZGM5
MzY3MB4XDTI2MTExMDAyMDAxM1oXDTI3MDIwODAyMDAxM1owLzEtMCsGA1UEAxMk
YzgyYjkxODktOWQwMi00MDgyLWIyNGMtOTE0ZmJmZjhmNjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvABXVkwLItxTDmp44v7eIJ0rxO9G9Lqae6H6
V6tSqnZTp1K7Vvy6Pbtecrs5Y07oTa4KTEYcgNTErPCFxq3z4L6jjuFrzhL3Jqvn
tUDWYdtwDX+Qq12lphK5VyNsFbLbmhV57+DpRTSVej8zfvj/GwAb7ACeY/5TbPIV
Qs0xTfbDM+tjmhCTh9lpnKA8BHyU6zJ88aq5rlli9NkMcKZ1buwSzWN7boi34i1o
B+s+NVPqKNEdIlAZn5lwcuAhKTe/yPQOCZRWa5QJdOE12CzKw3x5a3nY04aA4LgZ
HPylGgHEn182nqoPXr5sLIwu1yfRe7y/xJ5kN4tuskb0H04IhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbFMkI51SqJQkSMT2cq0Wv9OIssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mN2Zm
ZDFlYy1kZjdkLTQ3NzctYjU1ZS00ZTRkNThkYzkzNjcvZjY1YWY5ZjctYmY2Zi0z
N2NhLWJiN2EtOGEzYThhNGQxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjdmZmQxZWMtZGY3ZC00Nzc3LWI1
NWUtNGU0ZDU4ZGM5MzY3L2Y3ZmZkMWVjLWRmN2QtNDc3Ny1iNTVlLTRlNGQ1OGRj
OTM2Ny5jcmwwHwYDVR0jBBgwFoAUkSkqqMP8/ayzPKZCMq2BTZc+b5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mN2ZmZDFlYy1kZjdkLTQ3NzctYjU1ZS00ZTRk
NThkYzkzNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM60MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKC5qXEsAlVBZ4icAgzPfeS5e2qzPQqXZC5rN4sihynnpdIyU+rM7LS
/IG4dTp76+XfgI+t6Y4eVr1MmdjZgKJfCaWtMWxOXFWbgGccyVFSw9kYSjfTiJVy
xZDN7N3sGwWzLDWrTSli1VSXt/mcMfcFhjnIV6KKlVDRlPN7Ej1TsAjpkY3BNXZt
o+izQyHdeIPlmFnqHhRt8/a66ozKhXAffoxj6sTNNlOCtY5dqwAy0AyeQNgqWZLE
K8ukKLwFuN2pSiSS0CcKMq8V1XU7q9ylPJKM/7xwoEq5e3Trb0M0TkmQSu7Jsedf
gy7nEb1acvCx2IKpNERvEP7Ep5R8WdY=
-----END CERTIFICATE-----
Generated at Tue Nov 10 09:25:44 2026 by rpki-client