Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3ff4eb85-a35d-3c58-a2e0-f0bb0e784b01.roa
File:                     3ff4eb85-a35d-3c58-a2e0-f0bb0e784b01.roa (raw, json)
Hash identifier:          MHeVUcHhEyW/Dlc73BaZ9L6wlZmyniVEAXKbgBseA1g=
Subject key identifier:   6C:F6:37:DD:9C:28:34:72:6A:1A:D2:8B:5D:67:B3:82:0D:AD:E7:86
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F822050427A292377F0606000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3ff4eb85-a35d-3c58-a2e0-f0bb0e784b01.roa
Signing time:             Thu 15 Oct 2026 08:15:39 +0000
ROA not before:           Thu 15 Oct 2026 08:15:39 +0000
ROA not after:            Wed 13 Jan 2027 09:15:39 +0000
asID:                     62610
IP address blocks:        128.1.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:20:50:42:7a:29:23:77:f0:60:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 15 08:15:39 2026 GMT
            Not After : Jan 13 09:15:39 2027 GMT
        Subject: CN=a9096334-9477-4571-9219-1c472cdfcb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:07:70:78:be:da:1c:43:a4:7d:ca:94:ab:
                    b4:ff:84:86:5a:68:97:ce:4d:1e:7b:db:d1:c1:d9:
                    79:1a:2e:96:cd:50:dc:65:f7:99:2e:b6:59:cd:90:
                    b9:f0:80:58:ff:bd:00:7c:f9:b4:78:7a:b7:f5:73:
                    a7:13:92:e2:49:fa:6e:db:a5:5c:8d:98:8f:ef:d3:
                    f1:e9:5b:06:69:f7:2e:a5:5b:64:90:e4:c2:1e:3d:
                    f6:5b:12:df:f1:03:83:bd:eb:c7:4a:4d:ab:a6:0a:
                    c0:b5:b7:fb:76:ab:0d:58:f8:ea:e9:61:38:74:c2:
                    f3:b5:dd:62:a0:e5:79:bb:e6:b8:13:cb:2a:1a:79:
                    c1:b9:38:94:ce:9a:84:1f:11:91:d5:6c:91:78:6b:
                    5d:0e:3c:d7:e2:ce:fe:46:48:96:56:40:75:60:91:
                    59:c3:f1:12:bc:a1:b3:ff:7a:52:10:cf:84:c2:02:
                    e8:38:99:06:a7:1a:2f:14:44:ea:32:e0:8e:07:02:
                    6e:6a:5d:fe:95:d0:be:4d:48:52:46:8b:05:dd:5b:
                    26:17:85:01:4f:c0:6d:64:6a:3f:89:41:cc:2e:ff:
                    6c:d6:af:bf:96:8b:9d:03:1e:84:a7:9d:93:73:bf:
                    62:c4:7e:60:c2:41:04:44:8b:55:88:c5:17:bd:bd:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:37:DD:9C:28:34:72:6A:1A:D2:8B:5D:67:B3:82:0D:AD:E7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3ff4eb85-a35d-3c58-a2e0-f0bb0e784b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:2f:9e:c2:e6:05:24:0a:fa:5f:2d:e4:f4:6e:b3:87:70:
         a7:d8:6a:92:ac:32:c6:95:f7:ef:5e:bb:c2:6d:cb:55:17:c4:
         8b:35:e3:a9:9a:df:90:5d:c9:da:79:e2:a5:2c:de:1a:90:61:
         33:be:5e:3e:24:d7:0d:22:84:32:95:21:36:d6:eb:63:8d:2e:
         f0:33:ae:41:28:63:39:6c:45:b1:6d:9b:ac:f9:8d:bd:5b:7a:
         37:76:c5:5b:2f:fa:41:e4:7f:40:28:52:1a:36:a7:ec:ff:b4:
         07:93:b7:d6:d6:51:60:34:bb:f7:f7:86:03:83:aa:fc:1a:7f:
         02:0f:6c:77:b4:9f:eb:f9:61:a4:3e:17:d3:5b:3b:25:cc:5d:
         bd:b9:4b:68:89:73:31:c3:a8:7c:fd:00:68:b0:fe:60:b3:93:
         55:20:3f:4e:10:34:cc:4d:52:25:80:51:a2:2a:2d:8b:22:d3:
         91:63:35:21:1b:ce:4d:9f:1e:5a:a6:f2:ef:0d:9e:93:c7:87:
         b9:70:ce:34:a0:f1:65:85:44:c1:7d:bc:8a:b6:13:80:1d:cf:
         c3:af:5a:d2:82:9f:c1:c1:6d:ec:96:7c:ca:0e:42:8c:86:c6:
         4a:0d:9d:26:f7:90:ee:fc:bb:3b:05:9e:01:4b:72:0f:32:8f:
         9c:48:2e:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CIFBCeikjd/BgYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MTAxNTA4MTUzOVoXDTI3MDExMzA5MTUzOVowLzEtMCsGA1UEAxMk
YTkwOTYzMzQtOTQ3Ny00NTcxLTkyMTktMWM0NzJjZGZjYjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2cHcHi+2hxDpH3KlKu0/4SGWmiXzk0ee9vR
wdl5Gi6WzVDcZfeZLrZZzZC58IBY/70AfPm0eHq39XOnE5LiSfpu26VcjZiP79Px
6VsGafcupVtkkOTCHj32WxLf8QODvevHSk2rpgrAtbf7dqsNWPjq6WE4dMLztd1i
oOV5u+a4E8sqGnnBuTiUzpqEHxGR1WyReGtdDjzX4s7+RkiWVkB1YJFZw/ESvKGz
/3pSEM+EwgLoOJkGpxovFETqMuCOBwJual3+ldC+TUhSRosF3VsmF4UBT8BtZGo/
iUHMLv9s1q+/loudAx6Ep52Tc79ixH5gwkEERItViMUXvb0+GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGz2N92cKDRyahrSi11ns4INreeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvM2ZmNGViODUtYTM1ZC0z
YzU4LWEyZTAtZjBiYjBlNzg0YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAFvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQvL57C5gUkCvpfLeT0brOHcKfYapKsMsaV9+9eu8Jty1UXxIs146ma
35Bdydp54qUs3hqQYTO+Xj4k1w0ihDKVITbW62ONLvAzrkEoYzlsRbFtm6z5jb1b
ejd2xVsv+kHkf0AoUho2p+z/tAeTt9bWUWA0u/f3hgODqvwafwIPbHe0n+v5YaQ+
F9NbOyXMXb25S2iJczHDqHz9AGiw/mCzk1UgP04QNMxNUiWAUaIqLYsi05FjNSEb
zk2fHlqm8u8NnpPHh7lwzjSg8WWFRMF9vIq2E4Adz8OvWtKCn8HBbeyWfMoOQoyG
xkoNnSb3kO78uzsFngFLcg8yj5xILqI=
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:53 2026 by rpki-client