Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa
File:                     45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json)
Hash identifier:          cNOqZHWICldSpM8cc1o+7L6GKaY8xwcmgcPtzkxghh0=
Subject key identifier:   DB:33:AF:C9:0E:B7:EA:50:38:8B:3B:CE:2B:9B:72:63:BB:28:C8:11
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584EDC91FCA3CAB212160F412300
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        208.70.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fc:a3:ca:b2:12:16:0f:41:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cc938e44-d613-4e66-85a4-6c0afffd6b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:e7:fb:34:3a:88:dc:a0:c1:7c:05:dc:f5:
                    ca:1e:30:75:c3:45:43:d5:14:ed:57:bd:75:44:01:
                    5d:ec:c5:d3:f1:e8:ff:ec:7a:cf:e1:f7:b1:f6:28:
                    6c:2d:33:4f:53:b3:7d:51:31:4c:0e:9e:57:c0:52:
                    c1:8c:66:5b:c8:a5:92:74:d8:10:00:ec:77:70:79:
                    41:1a:f4:7d:ad:0b:52:a2:41:26:ee:d6:96:ad:b6:
                    d0:3b:a3:ab:b2:b7:f8:cc:24:86:8e:fb:5c:9d:03:
                    c3:c2:91:9b:ea:ad:43:7a:8c:e3:9e:13:e8:74:79:
                    b4:7a:29:a0:2f:d7:22:3c:73:0f:e0:01:e0:1b:c8:
                    8b:f3:94:2e:b2:7a:34:01:f7:ca:8e:a7:ff:fd:ef:
                    f7:33:b8:a1:3f:54:40:0e:73:87:1b:f7:47:dd:84:
                    19:50:f1:80:a7:db:b3:8a:5b:cc:fe:61:2f:77:4e:
                    12:56:96:50:b7:3b:b4:7e:3a:dc:d4:be:fb:8f:98:
                    8f:bb:4d:bd:35:35:79:f9:35:9a:17:08:34:86:b7:
                    ca:c0:56:d0:9b:f1:79:a5:04:c0:97:2a:94:8a:b8:
                    3f:db:6e:44:a8:47:71:29:2f:92:c1:c2:5c:51:e5:
                    00:89:e4:45:bb:de:17:97:3a:0f:94:40:45:20:ef:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:AF:C9:0E:B7:EA:50:38:8B:3B:CE:2B:9B:72:63:BB:28:C8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:08:88:f8:04:4c:d1:da:6b:bf:5e:4d:10:66:ed:2a:62:
         d5:29:69:53:c2:36:1c:3f:46:8f:7a:78:bc:ec:08:b3:31:a4:
         c1:e7:bd:82:10:a5:43:9e:36:27:7b:2a:d8:f8:b0:31:8c:d9:
         25:75:74:ff:3c:63:c2:56:61:2c:1d:0f:96:7e:0e:f3:22:bd:
         d6:04:ec:62:e5:92:a6:95:82:18:f2:09:37:e3:12:1f:54:5e:
         c8:dc:47:fb:1b:da:39:77:bf:34:1f:24:c0:fd:9b:51:34:ff:
         78:ab:b6:08:86:b2:ab:24:7f:67:21:c8:62:83:bd:65:4e:5d:
         b9:76:db:db:6f:7a:3e:82:dc:9c:91:77:a6:42:85:ca:ef:ea:
         d5:e9:f6:ec:26:2a:5f:2a:f9:1f:8e:12:29:6f:e4:68:54:7c:
         cb:23:fe:39:4e:a8:46:d1:82:a1:3a:ed:18:3e:6c:16:d6:c2:
         f5:e7:76:83:4b:17:97:8d:ca:75:f5:02:10:69:4f:aa:ea:e0:
         36:f7:dd:28:14:81:2d:9d:07:c0:95:fc:a6:20:33:2b:db:e9:
         20:b2:7b:45:e6:9d:66:84:e3:57:7a:7c:9d:10:0f:8f:e7:06:
         d3:05:b7:93:e9:e0:14:85:f4:c5:e0:13:45:18:61:5e:67:b9:
         b3:77:a6:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfyjyrISFg9BIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
Y2M5MzhlNDQtZDYxMy00ZTY2LTg1YTQtNmMwYWZmZmQ2YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOvn+zQ6iNygwXwF3PXKHjB1w0VD1RTtV711
RAFd7MXT8ej/7HrP4fex9ihsLTNPU7N9UTFMDp5XwFLBjGZbyKWSdNgQAOx3cHlB
GvR9rQtSokEm7taWrbbQO6Orsrf4zCSGjvtcnQPDwpGb6q1DeozjnhPodHm0eimg
L9ciPHMP4AHgG8iL85Qusno0AffKjqf//e/3M7ihP1RADnOHG/dH3YQZUPGAp9uz
ilvM/mEvd04SVpZQtzu0fjrc1L77j5iPu029NTV5+TWaFwg0hrfKwFbQm/F5pQTA
lyqUirg/225EqEdxKS+SwcJcUeUAieRFu94XlzoPlEBFIO/AtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNszr8kOt+pQOIs7ziubcmO7KMgRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z
M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXpCIj4BEzR2mu/Xk0QZu0qYtUpaVPCNhw/Ro96eLzsCLMxpMHnvYIQ
pUOeNid7Ktj4sDGM2SV1dP88Y8JWYSwdD5Z+DvMivdYE7GLlkqaVghjyCTfjEh9U
XsjcR/sb2jl3vzQfJMD9m1E0/3irtgiGsqskf2chyGKDvWVOXbl229tvej6C3JyR
d6ZChcrv6tXp9uwmKl8q+R+OEilv5GhUfMsj/jlOqEbRgqE67Rg+bBbWwvXndoNL
F5eNynX1AhBpT6rq4Db33SgUgS2dB8CV/KYgMyvb6SCye0XmnWaE41d6fJ0QD4/n
BtMFt5Pp4BSF9MXgE0UYYV5nubN3prM=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:47:48 2026 by rpki-client