Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/3a023371-bc93-31e0-8f75-f221b9743bb1.roa
File:                     3a023371-bc93-31e0-8f75-f221b9743bb1.roa (raw, json)
Hash identifier:          5aJ5KbuC5HrEuBomxyP9C6tI7IWDeLYhnwQh3Cf9g14=
Subject key identifier:   AA:94:37:07:F8:48:CA:CF:48:23:CB:CA:B3:E3:B8:15:F0:82:0F:1C
Certificate issuer:       /CN=68677a92-18fb-44c0-8de6-e0e703359347
Certificate serial:       010D0C9F4328584F7ADB2364F566B635AA006400
Authority key identifier: 47:41:99:8B:7F:43:3A:1D:6C:79:DA:65:C4:9A:2A:98:1A:B0:0F:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/3a023371-bc93-31e0-8f75-f221b9743bb1.roa
Signing time:             Mon 12 Oct 2026 17:45:36 +0000
ROA not before:           Mon 12 Oct 2026 17:45:36 +0000
ROA not after:            Sun 10 Jan 2027 18:45:36 +0000
asID:                     19635
IP address blocks:        96.45.96.0/24 maxlen: 24
                          96.45.97.0/24 maxlen: 24
                          96.45.98.0/24 maxlen: 24
                          96.45.99.0/24 maxlen: 24
                          96.45.100.0/24 maxlen: 24
                          96.45.101.0/24 maxlen: 24
                          96.45.102.0/24 maxlen: 24
                          96.45.103.0/24 maxlen: 24
                          96.45.104.0/24 maxlen: 24
                          96.45.105.0/24 maxlen: 24
                          96.45.106.0/24 maxlen: 24
                          96.45.107.0/24 maxlen: 24
                          96.45.108.0/24 maxlen: 24
                          96.45.109.0/24 maxlen: 24
                          96.45.110.0/24 maxlen: 24
                          96.45.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/68677a92-18fb-44c0-8de6-e0e703359347.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/68677a92-18fb-44c0-8de6-e0e703359347.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:db:23:64:f5:66:b6:35:aa:00:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68677a92-18fb-44c0-8de6-e0e703359347
        Validity
            Not Before: Oct 12 17:45:36 2026 GMT
            Not After : Jan 10 18:45:36 2027 GMT
        Subject: CN=3a2a682d-b46c-4c82-a946-f3dc5048ab18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ca:97:30:fa:cf:6f:5f:5a:92:48:30:3e:14:
                    87:3f:9a:93:0b:d3:d8:c2:c2:00:83:b3:a5:c5:10:
                    92:ab:66:31:3a:fe:a0:96:90:3e:28:f7:cb:9a:ac:
                    0e:1f:74:54:9a:c9:37:e1:bb:ab:0a:bd:92:2e:2f:
                    19:c0:6e:ff:e9:c9:ed:5d:dd:4d:74:cd:95:3f:c9:
                    0f:3b:d2:fd:f3:65:f1:e6:d1:a0:63:14:a1:d9:cc:
                    c6:4f:31:97:78:75:f1:d3:e4:ed:00:fe:11:43:a4:
                    36:9e:64:1d:9c:1b:84:ba:ed:52:26:ed:2f:0b:3c:
                    de:ca:c8:20:21:06:e2:8e:39:23:bf:94:98:7d:7f:
                    58:f2:2b:0d:9d:d8:62:07:4e:7e:05:e1:06:65:7f:
                    07:e8:5b:f3:1b:65:6d:9b:2f:8b:48:ee:3c:8c:1e:
                    49:c2:3c:d8:71:ed:bc:68:15:8a:85:f2:f5:ed:cd:
                    99:94:2d:96:82:69:eb:21:cf:9b:f8:a1:35:c2:02:
                    85:cc:be:e8:80:ca:b6:b4:ac:5a:db:3b:53:03:15:
                    69:43:8f:8e:68:9b:d2:1c:85:d8:c0:bd:4a:98:e2:
                    17:36:f1:c8:4e:65:40:43:99:56:aa:30:5d:e1:7a:
                    29:a5:c5:1d:92:31:32:ff:66:56:8d:9a:7f:21:94:
                    1c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:94:37:07:F8:48:CA:CF:48:23:CB:CA:B3:E3:B8:15:F0:82:0F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/3a023371-bc93-31e0-8f75-f221b9743bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/68677a92-18fb-44c0-8de6-e0e703359347.crl

            X509v3 Authority Key Identifier:
                keyid:47:41:99:8B:7F:43:3A:1D:6C:79:DA:65:C4:9A:2A:98:1A:B0:0F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:04:13:0f:6b:db:b4:48:4a:6d:43:cd:f9:1d:01:dc:5f:
         49:fe:4f:8d:9e:a0:8e:0f:b3:4d:82:13:08:c7:4e:d3:5c:aa:
         b9:39:0f:99:6d:bf:45:c3:e9:e8:96:96:ab:29:cd:64:fa:01:
         12:25:ea:41:3f:7d:2f:9b:fe:e9:26:47:30:d7:af:18:85:36:
         9b:65:db:0a:9e:16:ab:13:1d:91:c6:51:d0:26:1d:69:38:b3:
         84:6b:e6:a8:4e:18:c3:a2:fd:35:c2:66:0a:69:89:2a:28:52:
         49:f0:58:7d:aa:85:43:b4:8e:fd:4f:0a:22:2b:83:0b:b7:ad:
         71:5c:de:fb:8b:47:17:91:b4:f6:29:a6:e3:59:36:11:b2:fb:
         ba:97:f4:39:3b:a1:65:cf:df:10:20:11:46:8a:22:84:32:4a:
         ba:ff:51:d7:38:fe:4c:f5:d1:15:aa:1b:96:f1:e7:28:8f:ca:
         a6:9c:41:b9:33:97:3d:36:fa:a1:0a:f7:44:be:d9:a9:e7:8b:
         e9:fe:97:b1:ee:68:29:7e:37:17:73:db:cd:a5:f1:4b:50:0b:
         a7:ec:dd:01:5e:1b:37:0a:8f:ba:13:3c:f0:c4:ca:04:43:c3:
         9d:f6:87:97:87:35:5e:5d:0a:af:33:ec:20:70:64:db:cf:59:
         d3:92:a1:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE962yNk9Wa2NaoAZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg2NzdhOTItMThmYi00NGMwLThkZTYtZTBlNzAzMzU5
MzQ3MB4XDTI2MTAxMjE3NDUzNloXDTI3MDExMDE4NDUzNlowLzEtMCsGA1UEAxMk
M2EyYTY4MmQtYjQ2Yy00YzgyLWE5NDYtZjNkYzUwNDhhYjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MqXMPrPb19akkgwPhSHP5qTC9PYwsIAg7Ol
xRCSq2YxOv6glpA+KPfLmqwOH3RUmsk34burCr2SLi8ZwG7/6cntXd1NdM2VP8kP
O9L982Xx5tGgYxSh2czGTzGXeHXx0+TtAP4RQ6Q2nmQdnBuEuu1SJu0vCzzeysgg
IQbijjkjv5SYfX9Y8isNndhiB05+BeEGZX8H6FvzG2Vtmy+LSO48jB5JwjzYce28
aBWKhfL17c2ZlC2WgmnrIc+b+KE1wgKFzL7ogMq2tKxa2ztTAxVpQ4+OaJvSHIXY
wL1KmOIXNvHITmVAQ5lWqjBd4XoppcUdkjEy/2ZWjZp/IZQcsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqUNwf4SMrPSCPLyrPjuBXwgg8cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82ODY3
N2E5Mi0xOGZiLTQ0YzAtOGRlNi1lMGU3MDMzNTkzNDcvM2EwMjMzNzEtYmM5My0z
MWUwLThmNzUtZjIyMWI5NzQzYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNjg2NzdhOTItMThmYi00NGMwLThk
ZTYtZTBlNzAzMzU5MzQ3LzY4Njc3YTkyLTE4ZmItNDRjMC04ZGU2LWUwZTcwMzM1
OTM0Ny5jcmwwHwYDVR0jBBgwFoAUR0GZi39DOh1sedplxJoqmBqwD+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS82ODY3N2E5Mi0xOGZiLTQ0YzAtOGRlNi1lMGU3
MDMzNTkzNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmxBBMPa9u0SEptQ835HQHcX0n+T42eoI4Ps02CEwjHTtNcqrk5D5lt
v0XD6eiWlqspzWT6ARIl6kE/fS+b/ukmRzDXrxiFNptl2wqeFqsTHZHGUdAmHWk4
s4Rr5qhOGMOi/TXCZgppiSooUknwWH2qhUO0jv1PCiIrgwu3rXFc3vuLRxeRtPYp
puNZNhGy+7qX9Dk7oWXP3xAgEUaKIoQySrr/Udc4/kz10RWqG5bx5yiPyqacQbkz
lz02+qEK90S+2anni+n+l7HuaCl+Nxdz282l8UtQC6fs3QFeGzcKj7oTPPDEygRD
w532h5eHNV5dCq8z7CBwZNvPWdOSoRc=
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:28 2026 by rpki-client