Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/06b2299c-458b-3f42-b184-e051215ceb09.roa
File:                     06b2299c-458b-3f42-b184-e051215ceb09.roa (raw, json)
Hash identifier:          1Lm+1GFJfP2SAOvOdhXnxhB17VQb/6SuzdvsaB1gxX4=
Subject key identifier:   F6:36:76:3A:27:91:07:FC:9D:D4:E7:27:4F:AE:C6:B3:7F:61:C2:63
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F6F98A62459867C11632E8F40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/06b2299c-458b-3f42-b184-e051215ceb09.roa
Signing time:             Thu 08 Oct 2026 16:57:45 +0000
ROA not before:           Thu 08 Oct 2026 16:57:45 +0000
ROA not after:            Sun 27 Dec 2026 17:43:08 +0000
asID:                     199707
IP address blocks:        192.82.169.0/24 maxlen: 24
                          192.132.106.0/24 maxlen: 24
                          192.132.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:98:a6:24:59:86:7c:11:63:2e:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct  8 16:57:45 2026 GMT
            Not After : Dec 27 17:43:08 2026 GMT
        Subject: CN=80cffe05-5301-48a9-b8c0-de45729afc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:dd:e1:17:eb:d8:ec:14:6c:b5:dc:a8:50:
                    55:4e:bd:df:b5:77:05:a7:b2:ec:4a:21:ad:aa:05:
                    10:82:2a:f6:c2:73:5c:6a:c6:68:dc:b2:00:f3:72:
                    9e:a8:29:71:9a:e5:fd:bd:6e:6d:34:59:8b:0c:89:
                    34:b2:b3:a5:74:65:73:f1:1c:81:09:87:62:cc:5b:
                    5b:5e:5b:79:68:0e:ae:37:e3:2c:6a:27:b3:d8:f6:
                    ec:84:c0:05:47:71:d0:25:1c:32:77:90:36:d0:d3:
                    d3:03:ed:4f:39:6c:bb:31:a5:dd:5a:97:0b:8d:d1:
                    58:7d:9c:b9:b8:fc:30:36:10:58:0b:59:cd:e2:a1:
                    bb:49:4a:d2:7a:4d:82:d7:b1:a6:eb:0d:f3:fd:9c:
                    3a:6c:0d:c7:99:c1:b8:2c:0d:30:b8:2a:f5:05:49:
                    c4:08:be:1a:fb:9f:3e:52:42:4d:fc:e0:2b:02:3a:
                    71:51:16:2f:9e:8c:2a:47:5e:bf:1d:14:47:3e:dd:
                    a5:3b:2f:26:9a:68:25:f1:d4:e6:d0:26:e1:47:5c:
                    b8:a5:de:40:b3:88:9a:60:92:45:13:de:fd:42:ff:
                    70:d3:8d:8f:9b:47:12:64:54:f1:46:40:ad:1d:9b:
                    c6:e4:6a:eb:23:33:aa:f1:f1:38:ff:5d:5a:6d:44:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:76:3A:27:91:07:FC:9D:D4:E7:27:4F:AE:C6:B3:7F:61:C2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/06b2299c-458b-3f42-b184-e051215ceb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.169.0/24
                  192.132.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:a9:29:ab:41:9c:99:47:2c:f8:10:4f:b7:16:8a:fd:a2:
         ef:1d:b2:10:5c:d4:88:b9:b4:9c:21:61:c7:6f:38:5e:9a:d8:
         fd:d0:1f:0f:c6:b9:99:63:aa:13:fd:69:c3:23:4a:4e:8e:2d:
         d9:ae:6a:a5:03:9a:8a:b6:ce:99:be:c9:eb:3b:d1:57:ca:64:
         17:ec:37:3a:07:7d:0f:99:c5:2e:48:88:0b:e4:8b:39:e4:85:
         77:0e:e1:10:bf:6a:c0:cb:71:22:90:18:29:0d:33:c2:7a:f8:
         2a:f0:b4:4d:e2:3b:10:77:f7:3f:cc:88:7f:d3:30:a8:76:c0:
         2a:9e:3c:5d:e1:fb:d3:16:46:fa:79:5c:05:69:ab:6c:c3:01:
         c6:1f:df:58:63:9c:31:c8:66:78:9f:2c:b5:11:44:fe:2f:43:
         2a:40:74:54:ec:ba:6b:d0:88:94:13:37:fb:8c:4c:47:13:c1:
         93:03:eb:b3:8b:5c:a3:9b:80:ca:ca:a0:e7:5c:fe:0b:2a:96:
         da:40:80:0c:ef:8f:13:50:8c:89:e7:95:3e:6c:57:6e:5a:17:
         fd:ec:ee:75:90:90:66:bd:aa:14:25:e8:2d:44:28:13:bc:9a:
         ed:62:73:1d:cb:2c:88:42:ee:a5:4c:4b:ff:9d:c2:1c:08:c7:
         3e:ef:47:31
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9vmKYkWYZ8EWMuj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MTAwODE2NTc0NVoXDTI2MTIyNzE3NDMwOFowLzEtMCsGA1UEAxMk
ODBjZmZlMDUtNTMwMS00OGE5LWI4YzAtZGU0NTcyOWFmYzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCHd4Rfr2OwUbLXcqFBVTr3ftXcFp7LsSiGt
qgUQgir2wnNcasZo3LIA83KeqClxmuX9vW5tNFmLDIk0srOldGVz8RyBCYdizFtb
Xlt5aA6uN+Msaiez2PbshMAFR3HQJRwyd5A20NPTA+1POWy7MaXdWpcLjdFYfZy5
uPwwNhBYC1nN4qG7SUrSek2C17Gm6w3z/Zw6bA3HmcG4LA0wuCr1BUnECL4a+58+
UkJN/OArAjpxURYvnowqR16/HRRHPt2lOy8mmmgl8dTm0CbhR1y4pd5As4iaYJJF
E979Qv9w042Pm0cSZFTxRkCtHZvG5GrrIzOq8fE4/11abUQ4LQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPY2djonkQf8ndTnJ0+uxrN/YcJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMDZiMjI5OWMtNDU4Yi0z
ZjQyLWIxODQtZTA1MTIxNWNlYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFKpAwQB
wIRqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAETyqSmrQZyZRyz4EE+3For9ou8dshBc1Ii5tJwhYcdvOF6a
2P3QHw/GuZljqhP9acMjSk6OLdmuaqUDmoq2zpm+yes70VfKZBfsNzoHfQ+ZxS5I
iAvkiznkhXcO4RC/asDLcSKQGCkNM8J6+CrwtE3iOxB39z/MiH/TMKh2wCqePF3h
+9MWRvp5XAVpq2zDAcYf31hjnDHIZnifLLURRP4vQypAdFTsumvQiJQTN/uMTEcT
wZMD67OLXKObgMrKoOdc/gsqltpAgAzvjxNQjInnlT5sV25aF/3s7nWQkGa9qhQl
6C1EKBO8mu1icx3LLIhC7qVMS/+dwhwIxz7vRzE=
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:53:31 2026 by rpki-client