Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa
File:                     30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa (raw, json)
Hash identifier:          FkDqp33ngv9I+/1sHOxMymwo6JaACwuVkfGIUbPzmXE=
Subject key identifier:   AB:B2:0A:2E:70:DD:5E:E7:8B:09:0E:62:0D:98:33:C4:A2:16:A8:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62DE432B782607E35CB720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     401729
IP address blocks:        208.222.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:de:43:2b:78:26:07:e3:5c:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=546fe9e2-dce5-417b-b6ef-a70b6576770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:d6:65:35:ef:7c:fa:75:67:95:ce:56:c1:
                    28:00:55:fa:f2:d0:28:07:c8:ea:f3:dc:6c:7c:c8:
                    5c:72:0a:78:fa:6f:ae:5f:84:b2:a5:06:26:85:9d:
                    2d:d4:df:a6:b9:cd:de:bd:3e:03:b3:4c:2a:1e:f7:
                    c1:37:d9:38:fd:6f:4e:ec:e2:08:35:2b:6d:35:c5:
                    3c:9d:73:be:38:e7:67:28:c4:9f:94:d2:47:d7:dd:
                    51:97:86:cf:0e:ea:4c:20:05:ba:ae:04:af:80:fa:
                    43:f3:49:87:8a:9f:aa:13:73:b7:05:7e:25:59:8a:
                    62:e9:70:62:0a:af:99:b3:25:82:63:79:c1:6d:00:
                    5d:cd:6d:23:57:e9:e4:c4:25:5b:57:bf:15:39:cd:
                    dc:cd:1d:90:ac:a6:22:55:47:fe:93:80:e5:de:10:
                    2d:4f:e6:13:a1:11:e2:35:81:c3:88:9e:73:6a:1a:
                    11:43:4a:b4:78:bf:b1:98:82:d1:25:23:07:27:b6:
                    cb:33:65:28:e0:de:31:f7:c3:ae:82:59:91:56:fd:
                    49:ef:0f:8c:dc:24:2e:d8:e0:0d:90:88:d6:45:a1:
                    ce:91:0b:f1:1c:8c:3f:a5:d5:82:b9:4a:cc:17:d4:
                    33:50:82:67:be:be:3d:1d:17:35:da:ae:8e:d5:1e:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B2:0A:2E:70:DD:5E:E7:8B:09:0E:62:0D:98:33:C4:A2:16:A8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.222.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:54:92:1b:5d:88:a8:fd:f4:02:13:87:62:d2:c5:30:a5:64:
         74:fa:53:0b:40:47:c1:df:fb:17:aa:c7:23:d5:7c:ab:60:de:
         8f:03:d1:4d:f9:45:61:4c:45:24:fe:48:d0:b6:20:33:f0:54:
         bd:98:3e:e7:5e:33:8e:27:80:52:71:cd:d8:66:17:72:cd:d7:
         48:d8:1b:80:d5:7f:be:b3:6c:76:f2:1d:0a:bf:bb:c7:25:5d:
         4c:d5:ab:c1:ae:5b:02:eb:97:66:85:04:8b:0b:df:db:a7:f5:
         f2:8c:86:6b:e1:e5:57:d5:11:d6:73:ef:46:7c:7b:70:ae:39:
         35:f5:6c:77:67:ad:9e:0a:58:7a:a4:79:2f:c6:ae:b3:a9:32:
         a7:bc:eb:37:9d:06:8f:cf:bd:a3:c2:ff:4b:93:2b:63:c0:fb:
         24:5b:8d:59:ea:93:ce:ad:fc:09:af:bb:52:2d:78:68:20:6c:
         1a:3f:93:50:fb:47:6f:da:cf:80:bf:34:9a:c4:31:73:37:00:
         cb:22:71:52:b0:44:a2:68:42:36:01:54:bc:1b:64:b7:d3:2a:
         b7:d2:bf:3c:55:95:33:c3:1f:e4:67:bb:96:17:ad:1f:a2:7d:
         d6:4f:51:68:7f:6c:93:1b:f4:e9:46:08:6b:09:fd:4b:e9:8c:
         eb:05:59:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYt5DK3gmB+NctyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NTQ2ZmU5ZTItZGNlNS00MTdiLWI2ZWYtYTcwYjY1NzY3NzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxjWZTXvfPp1Z5XOVsEoAFX68tAoB8jq89xs
fMhccgp4+m+uX4SypQYmhZ0t1N+muc3evT4Ds0wqHvfBN9k4/W9O7OIINSttNcU8
nXO+OOdnKMSflNJH191Rl4bPDupMIAW6rgSvgPpD80mHip+qE3O3BX4lWYpi6XBi
Cq+ZsyWCY3nBbQBdzW0jV+nkxCVbV78VOc3czR2QrKYiVUf+k4Dl3hAtT+YToRHi
NYHDiJ5zahoRQ0q0eL+xmILRJSMHJ7bLM2Uo4N4x98OuglmRVv1J7w+M3CQu2OAN
kIjWRaHOkQvxHIw/pdWCuUrMF9QzUIJnvr49HRc12q6O1R59sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuyCi5w3V7niwkOYg2YM8SiFqjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzBlZjBmNTEtM2RiYy0z
ZDZhLWJkYmUtYTYzZTcyMTFmNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0N4DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZUkhtdiKj99AITh2LSxTClZHT6UwtAR8Hf+xeqxyPVfKtg3o8D0U35
RWFMRST+SNC2IDPwVL2YPudeM44ngFJxzdhmF3LN10jYG4DVf76zbHbyHQq/u8cl
XUzVq8GuWwLrl2aFBIsL39un9fKMhmvh5VfVEdZz70Z8e3CuOTX1bHdnrZ4KWHqk
eS/GrrOpMqe86zedBo/PvaPC/0uTK2PA+yRbjVnqk86t/Amvu1IteGggbBo/k1D7
R2/az4C/NJrEMXM3AMsicVKwRKJoQjYBVLwbZLfTKrfSvzxVlTPDH+Rnu5YXrR+i
fdZPUWh/bJMb9OlGCGsJ/UvpjOsFWdI=
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:43:20 2026 by rpki-client