Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/8f815620-27f9-3462-a8eb-aa6b6ab9b70b.roa
File:                     8f815620-27f9-3462-a8eb-aa6b6ab9b70b.roa (raw, json)
Hash identifier:          J9tNf9zX06cB8XlGdStbFprfH0zdvPwD4aBS9VJygac=
Subject key identifier:   F5:73:4C:2F:8B:66:0C:E7:96:49:F5:71:01:E2:BC:42:4B:98:AF:14
Certificate issuer:       /CN=4d27930b-741d-4ae6-bd83-43a90236e57c
Certificate serial:       010D0C9F4328584FA51D560A99C9D0CC32DE9280
Authority key identifier: 70:61:5C:35:93:BA:06:AB:60:C1:87:FA:80:BE:D0:7A:1F:AF:C4:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/8f815620-27f9-3462-a8eb-aa6b6ab9b70b.roa
Signing time:             Tue 27 Oct 2026 21:02:56 +0000
ROA not before:           Tue 27 Oct 2026 21:02:56 +0000
ROA not after:            Mon 25 Jan 2027 22:02:56 +0000
asID:                     40405
IP address blocks:        199.192.108.0/22 maxlen: 22
                          206.53.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/4d27930b-741d-4ae6-bd83-43a90236e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/4d27930b-741d-4ae6-bd83-43a90236e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:1d:56:0a:99:c9:d0:cc:32:de:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d27930b-741d-4ae6-bd83-43a90236e57c
        Validity
            Not Before: Oct 27 21:02:56 2026 GMT
            Not After : Jan 25 22:02:56 2027 GMT
        Subject: CN=7fee8fcd-7ab2-4d23-8c9e-9ee98b2a0c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:b2:a9:7e:2c:ad:fb:18:24:5b:1a:cc:1f:
                    be:20:03:7c:6c:1a:58:92:09:8b:fe:cc:e1:12:14:
                    82:a5:49:21:34:03:c3:8d:ec:a5:29:26:f4:c6:b3:
                    db:f3:b9:42:55:a6:0d:78:01:28:d9:df:43:e3:56:
                    65:b1:0b:71:9d:f3:18:4e:4c:66:34:7c:f8:ec:75:
                    8c:00:76:89:26:e6:9f:e3:64:7d:b3:a8:69:81:cf:
                    f2:97:af:a7:2b:c1:e0:67:e6:28:10:f3:f4:c0:c9:
                    77:6d:d1:ad:ee:99:46:43:88:36:4b:59:eb:11:91:
                    79:53:24:dd:e2:c3:fd:50:c1:38:98:46:3e:6e:32:
                    e1:c7:bd:6c:bc:5c:28:a4:0a:81:7f:be:38:df:c8:
                    d0:f8:14:1a:09:cb:08:35:98:98:7b:ee:28:e4:4a:
                    43:8d:fb:50:ee:14:c1:98:40:1d:41:26:ae:88:f5:
                    c2:74:d7:98:5e:31:0b:06:1f:06:9b:12:ca:bf:37:
                    7b:b5:1e:68:96:03:0f:31:85:33:60:7d:2f:29:37:
                    64:64:d1:e8:cf:dd:ab:6a:f5:90:f0:9f:a2:ce:59:
                    38:fe:35:69:7c:22:19:16:05:81:8c:ae:f1:5f:e7:
                    87:e1:af:f3:d7:a7:fd:6b:e1:2b:d6:9d:ba:e2:79:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:4C:2F:8B:66:0C:E7:96:49:F5:71:01:E2:BC:42:4B:98:AF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/8f815620-27f9-3462-a8eb-aa6b6ab9b70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c/4d27930b-741d-4ae6-bd83-43a90236e57c.crl

            X509v3 Authority Key Identifier:
                keyid:70:61:5C:35:93:BA:06:AB:60:C1:87:FA:80:BE:D0:7A:1F:AF:C4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d27930b-741d-4ae6-bd83-43a90236e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.108.0/22
                  206.53.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:bc:f6:03:5d:89:b3:0c:a4:ee:35:c9:02:6e:3f:43:11:
         62:71:b7:86:db:3a:34:08:87:d5:ec:b4:00:27:83:6c:be:77:
         76:d6:8b:e7:7d:ba:b0:94:d5:59:c8:9b:49:12:d2:42:83:98:
         06:27:30:48:c1:f5:00:f3:05:a5:5b:2c:8e:33:23:17:a0:0e:
         52:e0:24:57:e6:db:bc:51:0d:0d:e7:a0:7c:10:65:9c:69:f8:
         79:75:9c:7c:44:f1:73:b5:aa:63:24:ee:92:de:0d:31:a4:99:
         26:76:e6:0f:ef:29:96:4a:70:2b:86:4c:1a:c5:0b:47:c1:c4:
         47:ff:2a:d0:89:4d:35:ae:1c:6f:98:79:73:b1:c0:a7:5a:f3:
         37:ef:8e:fa:b2:6e:86:35:4e:b5:eb:d6:82:72:64:d9:c3:a2:
         0a:f3:b6:cd:9f:92:55:3f:84:09:08:4a:0b:ed:33:a6:75:4f:
         c3:ba:e5:db:bb:65:1c:a6:f9:b9:f3:71:70:68:ee:45:38:d7:
         ad:d3:3f:18:9d:ac:fa:9d:ba:37:1b:c0:9a:50:5f:8d:11:b1:
         75:db:a5:34:6c:d3:7e:70:4e:93:1f:c3:2d:3e:e9:12:a4:ca:
         09:7d:51:64:32:fe:56:50:7e:bd:5f:ed:57:d3:a5:45:0e:44:
         d8:cf:b1:a8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+lHVYKmcnQzDLekoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyNzkzMGItNzQxZC00YWU2LWJkODMtNDNhOTAyMzZl
NTdjMB4XDTI2MTAyNzIxMDI1NloXDTI3MDEyNTIyMDI1NlowLzEtMCsGA1UEAxMk
N2ZlZThmY2QtN2FiMi00ZDIzLThjOWUtOWVlOThiMmEwYzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaKyqX4srfsYJFsazB++IAN8bBpYkgmL/szh
EhSCpUkhNAPDjeylKSb0xrPb87lCVaYNeAEo2d9D41ZlsQtxnfMYTkxmNHz47HWM
AHaJJuaf42R9s6hpgc/yl6+nK8HgZ+YoEPP0wMl3bdGt7plGQ4g2S1nrEZF5UyTd
4sP9UME4mEY+bjLhx71svFwopAqBf74438jQ+BQaCcsINZiYe+4o5EpDjftQ7hTB
mEAdQSauiPXCdNeYXjELBh8GmxLKvzd7tR5olgMPMYUzYH0vKTdkZNHoz92ravWQ
8J+izlk4/jVpfCIZFgWBjK7xX+eH4a/z16f9a+Er1p264nmuNwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPVzTC+LZgznlkn1cQHivEJLmK8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80ZDI3
OTMwYi03NDFkLTRhZTYtYmQ4My00M2E5MDIzNmU1N2MvOGY4MTU2MjAtMjdmOS0z
NDYyLWE4ZWItYWE2YjZhYjliNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNGQyNzkzMGItNzQxZC00YWU2LWJk
ODMtNDNhOTAyMzZlNTdjLzRkMjc5MzBiLTc0MWQtNGFlNi1iZDgzLTQzYTkwMjM2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUcGFcNZO6BqtgwYf6gL7Qeh+vxJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS80ZDI3OTMwYi03NDFkLTRhZTYtYmQ4My00M2E5
MDIzNmU1N2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx8BsAwQD
zjUIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACtWvPYDXYmzDKTuNckCbj9DEWJxt4bbOjQIh9XstAAng2y+
d3bWi+d9urCU1VnIm0kS0kKDmAYnMEjB9QDzBaVbLI4zIxegDlLgJFfm27xRDQ3n
oHwQZZxp+Hl1nHxE8XO1qmMk7pLeDTGkmSZ25g/vKZZKcCuGTBrFC0fBxEf/KtCJ
TTWuHG+YeXOxwKda8zfvjvqyboY1TrXr1oJyZNnDogrzts2fklU/hAkISgvtM6Z1
T8O65du7ZRym+bnzcXBo7kU4163TPxidrPqdujcbwJpQX40RsXXbpTRs035wTpMf
wy0+6RKkygl9UWQy/lZQfr1f7VfTpUUORNjPsag=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:15:27 2026 by rpki-client