Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa
File:                     0f7f6459-9a9b-3619-afd9-067a05684fe4.roa (raw, json)
Hash identifier:          5vb97i6DCOPhJsmO7h8akHB6zr/w341/839C4yvFerQ=
Subject key identifier:   D0:BB:BE:9F:A3:F5:91:CD:E3:81:ED:5B:93:15:21:F4:9C:0C:C9:6F
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584F119D125B59444747A2357700
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     32482
IP address blocks:        216.82.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:12:5b:59:44:47:47:a2:35:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=06afc3c0-2f8f-438e-9e34-75908a008493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:43:5d:8b:a1:d4:74:54:21:ec:68:39:6e:
                    c7:3e:5e:b5:64:5c:a8:51:fb:d5:49:4e:5a:db:5d:
                    77:5b:03:34:52:4f:d8:83:3f:b5:f5:e3:4c:91:3f:
                    48:83:58:20:76:9d:49:df:73:ae:60:fd:72:ca:07:
                    62:b6:e5:9d:f0:13:08:9d:0a:10:f7:dd:c0:4e:63:
                    b6:b0:9e:bc:26:a0:57:99:ce:26:47:e6:76:ec:58:
                    65:dd:dd:92:a8:62:95:b4:90:fe:5c:d3:d6:32:ba:
                    a2:05:57:bc:8b:99:ff:26:f6:99:41:41:65:3d:b7:
                    e6:ca:e5:cc:4a:da:c4:12:bb:b7:a2:7a:65:7a:1b:
                    b6:2b:9b:91:53:20:af:37:a3:f3:7a:a0:b1:e3:c7:
                    ec:9a:7b:50:ac:28:1c:37:3e:f4:38:6a:e0:ca:c7:
                    54:3c:f5:f7:a7:21:47:b4:15:cf:ed:0f:b5:7b:cc:
                    49:c8:6f:7d:31:10:f3:ed:e6:3d:74:6e:8e:26:90:
                    1b:49:02:b6:22:5b:c8:66:e6:3a:15:7f:b0:8b:63:
                    6d:d5:5a:ce:a2:4b:1e:b3:f2:40:69:0e:b0:da:1d:
                    95:34:bd:0c:d8:2b:88:b8:69:39:4d:e3:7f:71:cc:
                    b4:c1:da:ee:0e:c6:2e:33:e4:c2:0f:c8:30:1a:77:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:BE:9F:A3:F5:91:CD:E3:81:ED:5B:93:15:21:F4:9C:0C:C9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:09:59:80:27:0c:82:1f:40:01:9c:26:91:a5:07:db:30:
         83:57:87:d8:04:a3:d8:fe:a3:be:e9:23:e7:8a:8f:ab:57:78:
         ce:e2:63:2a:d0:02:fe:08:71:91:bc:82:ee:21:91:c7:1f:73:
         b6:2b:90:61:f9:05:07:64:91:4e:5f:e8:cb:d1:ed:03:21:b6:
         db:42:30:7e:9f:13:b6:3e:06:c8:0e:27:49:f4:d0:f4:8a:00:
         20:39:4a:a9:97:9d:4f:7f:05:83:2f:6c:bd:1d:6b:3c:76:88:
         04:90:6c:d2:70:a1:53:86:56:49:3c:5c:47:01:99:c2:13:1a:
         81:9a:c9:38:55:a8:e2:c1:f6:c6:bb:14:bc:f6:ae:59:2b:5f:
         a3:63:21:3e:31:7a:38:c2:c1:4e:bc:e5:f9:68:8b:ac:48:ab:
         9c:50:1c:7b:d4:eb:6f:90:69:21:76:9f:69:f1:95:32:aa:79:
         da:6d:3a:05:19:9e:0b:94:d5:6e:ce:51:25:ab:20:fb:b5:29:
         10:07:7c:17:37:85:e7:7f:3a:ee:bb:6e:c1:76:3a:f3:9e:43:
         5c:a7:bd:d5:21:9b:19:01:d6:0a:24:72:33:9b:cf:e4:21:cf:
         06:66:d7:a6:2b:fe:4e:8f:3f:be:c0:80:68:b9:07:be:61:c9:
         22:37:d8:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRJbWURHR6I1dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDZhZmMzYzAtMmY4Zi00MzhlLTllMzQtNzU5MDhhMDA4NDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL5DXYuh1HRUIexoOW7HPl61ZFyoUfvVSU5a
2113WwM0Uk/Ygz+19eNMkT9Ig1ggdp1J33OuYP1yygdituWd8BMInQoQ993ATmO2
sJ68JqBXmc4mR+Z27Fhl3d2SqGKVtJD+XNPWMrqiBVe8i5n/JvaZQUFlPbfmyuXM
StrEEru3onplehu2K5uRUyCvN6PzeqCx48fsmntQrCgcNz70OGrgysdUPPX3pyFH
tBXP7Q+1e8xJyG99MRDz7eY9dG6OJpAbSQK2IlvIZuY6FX+wi2Nt1VrOokses/JA
aQ6w2h2VNL0M2CuIuGk5TeN/ccy0wdruDsYuM+TCD8gwGndMZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNC7vp+j9ZHN44HtW5MVIfScDMlvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvMGY3ZjY0NTktOWE5Yi0z
NjE5LWFmZDktMDY3YTA1Njg0ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNNCVmAJwyCH0ABnCaRpQfbMINXh9gEo9j+o77pI+eKj6tXeM7iYyrQ
Av4IcZG8gu4hkccfc7YrkGH5BQdkkU5f6MvR7QMhtttCMH6fE7Y+BsgOJ0n00PSK
ACA5SqmXnU9/BYMvbL0dazx2iASQbNJwoVOGVkk8XEcBmcITGoGayThVqOLB9sa7
FLz2rlkrX6NjIT4xejjCwU685floi6xIq5xQHHvU62+QaSF2n2nxlTKqedptOgUZ
nguU1W7OUSWrIPu1KRAHfBc3hed/Ou67bsF2OvOeQ1ynvdUhmxkB1gokcjObz+Qh
zwZm16Yr/k6PP77AgGi5B75hySI32Ek=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:28:13 2026 by rpki-client