Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/fca4cbc4-c154-3807-87d5-e3573bb3cdfb.roa
File:                     fca4cbc4-c154-3807-87d5-e3573bb3cdfb.roa (raw, json)
Hash identifier:          Z8VuaYX7ySZCD/nBE+BaX6wMolHhqbaMlf0c9vHhAg8=
Subject key identifier:   68:A4:82:9D:13:F1:FC:55:83:92:19:CC:F4:8D:61:86:C3:03:FF:B7
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584F30527A96BB0AA7EE3EA36CD0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/fca4cbc4-c154-3807-87d5-e3573bb3cdfb.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     30823
IP address blocks:        216.126.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7a:96:bb:0a:a7:ee:3e:a3:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=ae2fff73-51d1-44ee-92aa-b968c0eb1488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:11:b9:d0:68:a8:0d:ac:05:53:2c:0a:cc:
                    1b:22:11:aa:86:64:da:a5:6a:22:6c:f5:de:3f:92:
                    e1:da:8b:f0:da:cb:ef:cf:9a:b3:e9:bb:e5:ef:8f:
                    7b:e8:79:bf:10:8c:06:2e:ef:31:21:a8:95:1f:27:
                    e7:20:01:2e:bd:db:1c:67:3e:95:6a:51:2c:de:de:
                    05:19:c3:df:80:0a:46:3b:ff:50:5b:b3:8a:6e:af:
                    e9:28:95:27:3b:f2:ee:d0:0b:04:94:23:75:bf:c3:
                    cd:dd:38:6f:d7:3e:a3:12:ab:67:db:aa:97:b0:a6:
                    93:f2:03:93:9e:10:61:d2:7f:8b:bb:42:94:dd:0f:
                    41:82:a7:cb:03:97:3a:52:03:ee:14:e0:96:6f:fc:
                    d5:5d:0b:ff:b7:f2:2a:77:d5:51:88:a9:e9:f4:41:
                    03:a1:54:da:d3:51:6e:79:58:4e:ff:27:07:bd:2f:
                    fb:7e:9e:cf:d6:1d:d4:2f:75:9c:25:df:44:3a:2e:
                    03:06:91:2a:32:6a:5e:7b:31:8f:e8:21:1d:a9:b2:
                    0a:25:c7:36:cb:a3:62:f9:c3:a0:74:26:3a:e0:74:
                    a6:18:ae:91:8e:ed:6e:04:89:c7:1a:34:4a:37:07:
                    18:a7:d2:8e:56:03:e8:a3:4a:bc:b8:e2:0f:7d:dc:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:82:9D:13:F1:FC:55:83:92:19:CC:F4:8D:61:86:C3:03:FF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/fca4cbc4-c154-3807-87d5-e3573bb3cdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:87:34:a1:42:92:5c:1b:0a:39:46:a3:31:04:4b:36:5c:cb:
         82:24:b0:c3:2e:af:d3:e5:39:1b:ea:53:59:bf:ee:ed:0f:15:
         4b:9f:35:d3:9c:0a:6f:9e:18:d8:18:3f:33:5b:3a:ea:9b:67:
         10:46:38:6d:a6:b8:dc:be:1b:35:dd:32:a6:63:41:4c:43:df:
         72:09:87:b5:cc:0c:1d:f7:1b:0e:91:66:1d:d4:73:ed:79:a6:
         dc:eb:14:82:08:10:dd:08:91:d1:bd:99:2d:f0:32:36:f9:40:
         2f:14:75:09:f0:4a:33:80:96:22:cd:9f:1c:2b:0b:51:55:d5:
         bf:25:ce:3d:d1:2f:17:54:2c:6e:b8:2f:66:0c:28:bf:b9:81:
         7f:4b:c8:fa:6c:59:5b:db:d7:ed:5c:24:f6:0b:49:fb:8a:b6:
         d7:0d:87:eb:aa:7a:00:d5:92:37:b0:be:3b:ca:21:55:44:ae:
         d7:c0:c7:0d:71:b5:9a:ea:72:8d:b9:55:c9:75:d0:be:de:b5:
         29:c7:1b:be:b3:53:a2:9e:b9:ba:a6:91:93:26:6d:c1:00:21:
         44:8b:14:73:96:51:34:fd:de:62:01:44:e6:dc:09:16:a4:08:
         2b:f5:fe:e4:91:c8:f1:2d:01:f0:65:13:80:8d:f7:8b:1e:df:
         df:50:14:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnqWuwqn7j6jbNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
YWUyZmZmNzMtNTFkMS00NGVlLTkyYWEtYjk2OGMwZWIxNDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAQRudBoqA2sBVMsCswbIhGqhmTapWoibPXe
P5Lh2ovw2svvz5qz6bvl74976Hm/EIwGLu8xIaiVHyfnIAEuvdscZz6ValEs3t4F
GcPfgApGO/9QW7OKbq/pKJUnO/Lu0AsElCN1v8PN3Thv1z6jEqtn26qXsKaT8gOT
nhBh0n+Lu0KU3Q9BgqfLA5c6UgPuFOCWb/zVXQv/t/Iqd9VRiKnp9EEDoVTa01Fu
eVhO/ycHvS/7fp7P1h3UL3WcJd9EOi4DBpEqMmpeezGP6CEdqbIKJcc2y6Ni+cOg
dCY64HSmGK6Rju1uBInHGjRKNwcYp9KOVgPoo0q8uOIPfdw7vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGikgp0T8fxVg5IZzPSNYYbDA/+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZmNhNGNiYzQtYzE1NC0z
ODA3LTg3ZDUtZTM1NzNiYjNjZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H7mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyHNKFCklwbCjlGozEESzZcy4IksMMur9PlORvqU1m/7u0PFUufNdOc
Cm+eGNgYPzNbOuqbZxBGOG2muNy+GzXdMqZjQUxD33IJh7XMDB33Gw6RZh3Uc+15
ptzrFIIIEN0IkdG9mS3wMjb5QC8UdQnwSjOAliLNnxwrC1FV1b8lzj3RLxdULG64
L2YMKL+5gX9LyPpsWVvb1+1cJPYLSfuKttcNh+uqegDVkjewvjvKIVVErtfAxw1x
tZrqco25Vcl10L7etSnHG76zU6KeubqmkZMmbcEAIUSLFHOWUTT93mIBRObcCRak
CCv1/uSRyPEtAfBlE4CN94se399QFL8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:53:29 2026 by rpki-client