Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
File:                     86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (raw, json)
Hash identifier:          kSdOdY/mnOiVIaVefguPktbzOa7NbPxQvpNEtNc54L0=
Subject key identifier:   60:D9:49:9F:10:61:CB:30:17:B3:16:2F:C9:8A:40:40:C3:C3:28:C8
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584F4976C5BDAB2DF22A4E215000
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46450
IP address blocks:        199.34.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c5:bd:ab:2d:f2:2a:4e:21:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e4e61ac8-529c-4668-b85b-9f4e6ae963bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:df:ef:12:d9:49:ef:f1:8a:ec:47:c0:6e:
                    25:f0:42:2a:4b:48:a6:48:08:f8:65:fd:da:92:23:
                    68:32:c2:90:8e:39:a5:b0:27:0a:aa:3a:4e:35:fb:
                    46:89:60:cb:3b:b8:c5:1b:b9:1d:d9:6a:50:65:07:
                    dc:4d:bc:7a:5c:bd:40:81:a8:f3:45:62:01:b3:9f:
                    f2:29:df:65:30:87:d9:ea:d3:2d:12:f9:74:9d:9a:
                    5c:a5:af:54:4f:20:4a:7d:19:cb:ee:d8:b1:77:14:
                    b0:c6:be:e9:e5:bd:5f:fe:f8:ea:81:d6:df:0a:5f:
                    65:27:18:f3:55:bb:94:5c:c0:3a:7b:bf:28:86:62:
                    5a:f3:93:81:8e:a8:26:7e:2d:69:88:c0:a2:05:40:
                    24:fc:8c:ae:c2:ec:23:c2:44:ed:d0:4a:71:d4:c8:
                    6c:83:e6:ee:d0:9d:22:a1:6a:86:8f:cd:b8:f9:76:
                    f5:ea:92:c3:d6:55:69:12:68:86:69:90:5d:92:55:
                    e9:6a:38:32:65:13:71:b3:c5:4a:77:7d:e2:78:69:
                    9d:35:d8:37:1c:3c:d6:54:b4:83:8f:5e:a2:75:d1:
                    67:e5:bd:85:06:01:84:c9:cb:ab:6b:3e:7d:60:fc:
                    f3:e8:0d:83:93:65:64:68:5d:27:e7:27:30:df:3b:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:49:9F:10:61:CB:30:17:B3:16:2F:C9:8A:40:40:C3:C3:28:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:2f:92:f5:b1:3e:16:e9:1a:bd:18:49:e6:30:62:c9:8b:
         ff:7d:5c:ad:89:57:27:23:64:d0:b8:60:d3:eb:49:9b:24:5e:
         f4:04:05:c2:48:de:0b:5e:55:48:b9:70:79:db:ec:1c:fe:e4:
         eb:56:d5:cd:5a:d0:ae:1a:12:94:a3:c0:82:08:5f:81:ec:71:
         fb:3e:c7:d4:62:f2:db:d5:b4:4d:b0:8d:c9:58:64:d3:73:49:
         da:ef:a0:0e:8c:ee:29:6f:d6:fd:c3:8a:3f:3d:37:ac:61:71:
         f5:6d:f7:1b:b6:83:88:41:92:f1:59:12:b4:83:ef:37:f9:5f:
         e2:18:ab:4e:63:10:59:99:08:12:7d:c3:f3:c0:01:18:80:4c:
         7d:57:43:91:58:63:04:8a:ac:2b:e5:37:b8:ff:3b:1b:e0:a2:
         10:5c:0d:ed:fd:a0:3a:51:17:7d:3e:e7:59:7d:ef:f0:76:cf:
         bd:8c:de:7c:7f:a8:43:07:2d:9c:d6:86:8b:8b:13:12:e2:2a:
         f4:95:f3:cd:ab:1a:41:72:6c:13:81:5b:fa:78:a3:de:7d:8d:
         40:b1:88:4a:f1:2a:da:5f:8b:56:57:53:98:fc:55:d7:ee:3d:
         20:64:b0:b7:16:81:ad:e1:bb:31:f2:3b:7f:ee:bb:3d:03:e4:
         28:7f:77:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdsW9qy3yKk4hUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5
ZGMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTRlNjFhYzgtNTI5Yy00NjY4LWI4NWItOWY0ZTZhZTk2M2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbjf7xLZSe/xiuxHwG4l8EIqS0imSAj4Zf3a
kiNoMsKQjjmlsCcKqjpONftGiWDLO7jFG7kd2WpQZQfcTbx6XL1AgajzRWIBs5/y
Kd9lMIfZ6tMtEvl0nZpcpa9UTyBKfRnL7tixdxSwxr7p5b1f/vjqgdbfCl9lJxjz
VbuUXMA6e78ohmJa85OBjqgmfi1piMCiBUAk/IyuwuwjwkTt0Epx1Mhsg+bu0J0i
oWqGj824+Xb16pLD1lVpEmiGaZBdklXpajgyZRNxs8VKd33ieGmdNdg3HDzWVLSD
j16iddFn5b2FBgGEycuraz59YPzz6A2Dk2VkaF0n5ycw3zv0ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDZSZ8QYcswF7MWL8mKQEDDwyjIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw
MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvODZiMTMwMmYtYmJkOC0z
ZGQ1LWJlYTYtYjQ2ZWFlYzQ1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3
YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0
OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh
ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxAL5L1sT4W6Rq9GEnmMGLJi/99XK2JVycjZNC4YNPrSZskXvQEBcJI
3gteVUi5cHnb7Bz+5OtW1c1a0K4aEpSjwIIIX4Hscfs+x9Ri8tvVtE2wjclYZNNz
SdrvoA6M7ilv1v3Dij89N6xhcfVt9xu2g4hBkvFZErSD7zf5X+IYq05jEFmZCBJ9
w/PAARiATH1XQ5FYYwSKrCvlN7j/OxvgohBcDe39oDpRF30+51l97/B2z72M3nx/
qEMHLZzWhouLExLiKvSV882rGkFybBOBW/p4o959jUCxiErxKtpfi1ZXU5j8Vdfu
PSBksLcWga3huzHyO3/uuz0D5Ch/d60=
-----END CERTIFICATE-----
Generated at Fri Oct 30 03:20:44 2026 by rpki-client