Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/d63bbe9a-887c-35bd-8fc1-dc3e37239092.roa
File:                     d63bbe9a-887c-35bd-8fc1-dc3e37239092.roa (raw, json)
Hash identifier:          SC6itm1obnf6Pyi3sWtUYUcBt+MMP1CkAkKpJ070eY8=
Subject key identifier:   11:A9:73:9F:5F:D9:20:D8:82:82:AA:E6:66:6E:67:5D:61:CD:96:A6
Certificate issuer:       /CN=071e752e-c5a0-48d4-bcbf-b8f7a628f094
Certificate serial:       010D0C9F4328584F83EEA9A6C2E18E67EA8B3A60
Authority key identifier: BB:68:CC:DC:D5:B7:17:61:BB:A7:67:EF:51:84:7F:BB:92:53:E1:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/d63bbe9a-887c-35bd-8fc1-dc3e37239092.roa
Signing time:             Thu 15 Oct 2026 23:47:13 +0000
ROA not before:           Thu 15 Oct 2026 23:47:13 +0000
ROA not after:            Thu 14 Jan 2027 00:47:13 +0000
asID:                     403084
IP address blocks:        198.134.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/071e752e-c5a0-48d4-bcbf-b8f7a628f094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/071e752e-c5a0-48d4-bcbf-b8f7a628f094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:83:ee:a9:a6:c2:e1:8e:67:ea:8b:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071e752e-c5a0-48d4-bcbf-b8f7a628f094
        Validity
            Not Before: Oct 15 23:47:13 2026 GMT
            Not After : Jan 14 00:47:13 2027 GMT
        Subject: CN=df452334-c72f-45bc-96fb-9da7c4bf7a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:6c:be:37:25:d1:fc:d4:db:76:24:5e:81:
                    2d:ee:ea:15:79:47:b9:aa:9f:24:b2:55:7e:09:b1:
                    ee:2e:7c:6c:2b:e2:67:84:16:98:fe:66:f1:fb:bf:
                    7b:68:bf:19:58:88:18:e1:eb:fb:0b:36:d2:a0:0d:
                    77:83:06:de:ee:f3:ff:e0:fa:42:61:5a:38:75:93:
                    a6:7d:89:e3:2c:aa:a5:c9:83:8e:19:c2:2f:09:83:
                    d8:a4:62:cf:5d:59:71:f0:58:e1:50:86:b0:42:79:
                    da:34:98:b0:c0:d0:d7:a9:05:e3:7f:13:ce:42:a7:
                    93:ed:b2:d3:1c:29:e1:61:5e:4c:f6:29:48:51:2b:
                    f8:05:1f:a4:e8:85:cf:81:05:33:f0:7f:bf:a7:0d:
                    ac:ac:0e:1f:58:f7:1b:55:54:62:9d:90:20:e6:9e:
                    e7:81:66:70:5a:bb:55:71:df:a3:bb:10:b5:05:e0:
                    6c:b1:94:ed:c7:7a:df:28:f4:a8:8a:2b:e2:8e:ed:
                    e1:f6:84:91:0e:1b:cd:2f:c0:67:19:9a:64:4c:c2:
                    9d:c8:ef:84:c5:8b:5c:7d:a0:5b:dc:69:13:ef:08:
                    5e:55:4a:76:ee:d0:29:03:96:51:84:86:18:4d:66:
                    2d:2b:e0:f1:02:51:97:69:df:f8:0f:ee:1f:28:4d:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:73:9F:5F:D9:20:D8:82:82:AA:E6:66:6E:67:5D:61:CD:96:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/d63bbe9a-887c-35bd-8fc1-dc3e37239092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/071e752e-c5a0-48d4-bcbf-b8f7a628f094.crl

            X509v3 Authority Key Identifier:
                keyid:BB:68:CC:DC:D5:B7:17:61:BB:A7:67:EF:51:84:7F:BB:92:53:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:be:cd:c8:d6:cc:fe:fd:a7:a3:89:c4:8c:e6:7f:b2:bc:
         0c:a6:d8:38:1d:98:b2:df:87:9d:f8:e3:20:16:59:58:3d:9f:
         1e:bf:1b:59:98:a1:12:62:1d:6a:d3:aa:8c:eb:d5:34:87:6b:
         7e:28:2c:f7:15:ff:46:e9:d5:cc:6d:56:49:67:16:c7:83:e7:
         82:11:6b:fa:c3:cf:ff:52:a6:48:79:dd:4b:36:e3:e9:b1:9c:
         f2:06:ef:9a:e1:77:f2:3f:05:39:8a:a2:44:52:04:a0:3f:73:
         7a:86:0c:6e:03:10:72:29:7f:63:c2:3f:7b:5b:71:81:a1:5e:
         da:8f:51:80:e2:f8:9c:50:ea:c3:36:51:3b:c0:f2:79:2a:f8:
         7e:73:02:ef:02:1b:2e:95:2a:f3:f2:f7:8c:7f:b4:cd:85:48:
         6d:11:1f:6e:46:ff:f1:bb:e7:44:af:f1:0e:e5:76:6a:c8:65:
         66:0b:d5:84:21:6c:d7:ea:c8:4e:52:c8:1b:50:7e:e6:19:b0:
         f2:f8:ba:cc:71:86:0c:af:97:46:08:cb:ad:ec:10:2d:98:d3:
         c0:c1:a7:dd:64:eb:92:b2:ef:75:44:bb:bb:f9:93:70:9f:34:
         3e:84:f7:09:59:4f:8f:52:1b:e6:71:79:0a:19:53:71:60:17:
         fe:62:cd:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+D7qmmwuGOZ+qLOmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDcxZTc1MmUtYzVhMC00OGQ0LWJjYmYtYjhmN2E2Mjhm
MDk0MB4XDTI2MTAxNTIzNDcxM1oXDTI3MDExNDAwNDcxM1owLzEtMCsGA1UEAxMk
ZGY0NTIzMzQtYzcyZi00NWJjLTk2ZmItOWRhN2M0YmY3YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ktsvjcl0fzU23YkXoEt7uoVeUe5qp8kslV+
CbHuLnxsK+JnhBaY/mbx+797aL8ZWIgY4ev7CzbSoA13gwbe7vP/4PpCYVo4dZOm
fYnjLKqlyYOOGcIvCYPYpGLPXVlx8FjhUIawQnnaNJiwwNDXqQXjfxPOQqeT7bLT
HCnhYV5M9ilIUSv4BR+k6IXPgQUz8H+/pw2srA4fWPcbVVRinZAg5p7ngWZwWrtV
cd+juxC1BeBssZTtx3rfKPSoiiviju3h9oSRDhvNL8BnGZpkTMKdyO+ExYtcfaBb
3GkT7wheVUp27tApA5ZRhIYYTWYtK+DxAlGXad/4D+4fKE1aTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGpc59f2SDYgoKq5mZuZ11hzZamMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wNzFl
NzUyZS1jNWEwLTQ4ZDQtYmNiZi1iOGY3YTYyOGYwOTQvZDYzYmJlOWEtODg3Yy0z
NWJkLThmYzEtZGMzZTM3MjM5MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDcxZTc1MmUtYzVhMC00OGQ0LWJj
YmYtYjhmN2E2MjhmMDk0LzA3MWU3NTJlLWM1YTAtNDhkNC1iY2JmLWI4ZjdhNjI4
ZjA5NC5jcmwwHwYDVR0jBBgwFoAUu2jM3NW3F2G7p2fvUYR/u5JT4RIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8wNzFlNzUyZS1jNWEwLTQ4ZDQtYmNiZi1iOGY3
YTYyOGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoalMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXqvs3I1sz+/aejicSM5n+yvAym2DgdmLLfh5344yAWWVg9nx6/G1mY
oRJiHWrTqozr1TSHa34oLPcV/0bp1cxtVklnFseD54IRa/rDz/9Spkh53Us24+mx
nPIG75rhd/I/BTmKokRSBKA/c3qGDG4DEHIpf2PCP3tbcYGhXtqPUYDi+JxQ6sM2
UTvA8nkq+H5zAu8CGy6VKvPy94x/tM2FSG0RH25G//G750Sv8Q7ldmrIZWYL1YQh
bNfqyE5SyBtQfuYZsPL4usxxhgyvl0YIy63sEC2Y08DBp91k65Ky73VEu7v5k3Cf
ND6E9wlZT49SG+ZxeQoZU3FgF/5izQ0=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:51 2026 by rpki-client