Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/235072a6-f127-3f85-92f9-7855f08ad2d4.roa
File:                     235072a6-f127-3f85-92f9-7855f08ad2d4.roa (raw, json)
Hash identifier:          dVBRR6BwdFnJQdvQjr69eaaMOdewgpCZQOnhGMRWD1U=
Subject key identifier:   61:8D:5F:B4:35:81:15:3E:8E:44:90:B0:28:82:65:C0:ED:9E:51:ED
Certificate issuer:       /CN=8bc9a13b-d22e-4921-9c6a-e7bbaa73f247
Certificate serial:       010D0C9F4328584F99DA920C06A885B649E09280
Authority key identifier: E3:16:FF:DD:E1:58:8A:FC:C8:B9:2B:14:3C:8D:EC:A5:13:3C:1E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/235072a6-f127-3f85-92f9-7855f08ad2d4.roa
Signing time:             Fri 23 Oct 2026 20:14:31 +0000
ROA not before:           Fri 23 Oct 2026 20:14:31 +0000
ROA not after:            Thu 21 Jan 2027 21:14:31 +0000
asID:                     393216
IP address blocks:        192.245.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:da:92:0c:06:a8:85:b6:49:e0:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc9a13b-d22e-4921-9c6a-e7bbaa73f247
        Validity
            Not Before: Oct 23 20:14:31 2026 GMT
            Not After : Jan 21 21:14:31 2027 GMT
        Subject: CN=143ca386-03a9-4172-8c5a-4b529c879817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:e0:c2:9b:f7:ee:76:8f:66:cd:8b:09:33:
                    3f:88:2b:41:ea:9b:d6:84:dd:01:30:87:cf:50:28:
                    35:70:c2:1a:0f:82:23:bb:e5:b9:07:92:be:eb:52:
                    ec:65:2c:37:40:d6:2a:b1:4e:de:55:fd:7e:de:d2:
                    b9:d2:f4:d7:73:a6:75:80:ca:12:1b:71:18:9c:de:
                    9e:e4:c0:44:b7:0e:e4:ed:12:57:02:6a:75:f9:29:
                    7f:29:8c:70:de:c2:e1:ea:7e:d1:c9:52:e8:30:38:
                    ad:31:1c:7a:96:6c:a3:08:70:ae:bb:52:29:58:f8:
                    bc:dc:92:59:63:aa:d0:d6:1c:94:e7:b4:25:3a:51:
                    e7:9a:6b:ee:6d:70:1d:7d:ad:8d:bc:e0:ec:80:ff:
                    a5:b3:ec:4d:c0:1d:0c:6d:29:85:b5:4d:e5:27:50:
                    71:a7:76:6e:11:10:d1:37:3a:f5:27:f5:9a:1b:26:
                    e0:5a:07:e9:d1:35:f6:49:cd:26:88:f7:f2:bd:16:
                    a6:0b:d8:d1:70:38:f6:95:d0:5e:c6:be:29:a1:f8:
                    cc:26:fd:5d:87:f9:9f:77:5d:b6:5f:f2:0e:71:74:
                    38:ba:60:9c:d2:a1:51:71:a7:0f:30:58:0a:e3:dc:
                    fa:b6:4c:4d:0b:90:f0:87:e4:46:cc:2f:7a:8a:14:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8D:5F:B4:35:81:15:3E:8E:44:90:B0:28:82:65:C0:ED:9E:51:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/235072a6-f127-3f85-92f9-7855f08ad2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.crl

            X509v3 Authority Key Identifier:
                keyid:E3:16:FF:DD:E1:58:8A:FC:C8:B9:2B:14:3C:8D:EC:A5:13:3C:1E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8bc9a13b-d22e-4921-9c6a-e7bbaa73f247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:83:21:24:43:47:83:06:0d:96:d0:35:d1:3c:96:40:12:4d:
         3b:b2:c1:b4:4c:e4:24:a1:27:6e:cb:89:e7:ef:67:ba:ea:06:
         4c:5f:7a:51:28:6b:2d:da:2e:8d:18:ab:fa:37:8a:ca:86:c2:
         93:72:4d:f3:17:bd:e9:a8:b4:d1:70:16:c3:fd:ae:3b:f7:b5:
         94:3d:17:41:5e:3d:00:1c:bb:61:53:da:00:24:79:dd:4e:02:
         69:1b:de:50:c1:a5:ca:1f:79:cc:79:3a:b2:1e:7d:c6:11:40:
         ae:48:62:d3:04:9e:d0:47:a9:36:ac:58:f5:96:83:c8:bb:ff:
         f1:73:bf:8a:95:50:5d:65:da:04:5d:f8:8f:d0:e8:3a:b7:0c:
         1f:85:39:82:ca:39:19:95:bd:f5:17:cb:d7:cb:09:e1:22:57:
         03:f7:a2:2b:81:0b:f4:e4:63:1a:cd:18:00:73:dd:72:0e:59:
         82:27:7f:f8:fa:e4:5a:77:69:83:9c:bc:20:b9:d2:1c:07:ab:
         55:77:f8:b6:f7:1c:1a:f7:38:c1:12:30:ff:9d:b7:40:5c:c8:
         c6:62:33:ad:3f:02:c8:51:4b:fe:48:e3:cc:b9:11:ad:8c:1f:
         fb:0b:bb:60:5c:6e:a1:d4:4d:43:cd:db:2f:9e:13:68:77:f7:
         40:12:2e:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Z2pIMBqiFtkngkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJjOWExM2ItZDIyZS00OTIxLTljNmEtZTdiYmFhNzNm
MjQ3MB4XDTI2MTAyMzIwMTQzMVoXDTI3MDEyMTIxMTQzMVowLzEtMCsGA1UEAxMk
MTQzY2EzODYtMDNhOS00MTcyLThjNWEtNGI1MjljODc5ODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAjgwpv37naPZs2LCTM/iCtB6pvWhN0BMIfP
UCg1cMIaD4Iju+W5B5K+61LsZSw3QNYqsU7eVf1+3tK50vTXc6Z1gMoSG3EYnN6e
5MBEtw7k7RJXAmp1+Sl/KYxw3sLh6n7RyVLoMDitMRx6lmyjCHCuu1IpWPi83JJZ
Y6rQ1hyU57QlOlHnmmvubXAdfa2NvODsgP+ls+xNwB0MbSmFtU3lJ1Bxp3ZuERDR
Nzr1J/WaGybgWgfp0TX2Sc0miPfyvRamC9jRcDj2ldBexr4pofjMJv1dh/mfd122
X/IOcXQ4umCc0qFRcacPMFgK49z6tkxNC5Dwh+RGzC96ihTAxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGNX7Q1gRU+jkSQsCiCZcDtnlHtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84YmM5
YTEzYi1kMjJlLTQ5MjEtOWM2YS1lN2JiYWE3M2YyNDcvMjM1MDcyYTYtZjEyNy0z
Zjg1LTkyZjktNzg1NWYwOGFkMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGJjOWExM2ItZDIyZS00OTIxLTlj
NmEtZTdiYmFhNzNmMjQ3LzhiYzlhMTNiLWQyMmUtNDkyMS05YzZhLWU3YmJhYTcz
ZjI0Ny5jcmwwHwYDVR0jBBgwFoAU4xb/3eFYivzIuSsUPI3spRM8HtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS84YmM5YTEzYi1kMjJlLTQ5MjEtOWM2YS1lN2Ji
YWE3M2YyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSDISRDR4MGDZbQNdE8lkASTTuywbRM5CShJ27LiefvZ7rqBkxfelEo
ay3aLo0Yq/o3isqGwpNyTfMXvemotNFwFsP9rjv3tZQ9F0FePQAcu2FT2gAked1O
Amkb3lDBpcofecx5OrIefcYRQK5IYtMEntBHqTasWPWWg8i7//Fzv4qVUF1l2gRd
+I/Q6Dq3DB+FOYLKORmVvfUXy9fLCeEiVwP3oiuBC/TkYxrNGABz3XIOWYInf/j6
5Fp3aYOcvCC50hwHq1V3+Lb3HBr3OMESMP+dt0BcyMZiM60/AshRS/5I48y5Ea2M
H/sLu2BcbqHUTUPN2y+eE2h390ASLvI=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:56 2026 by rpki-client