Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa
File:                     a572488a-72c8-3bec-b84b-dab0319da2f0.roa (raw, json)
Hash identifier:          FxDGuaLKI2jDayCOPVj2FqUGhT7dvvSRqrahNKh3QKA=
Subject key identifier:   2F:6B:D8:D1:AD:2C:C7:34:0D:85:99:57:FB:D5:92:30:1D:3D:75:E5
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584F63F81EAE13C824F4926BD5F0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     11641
IP address blocks:        206.225.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1e:ae:13:c8:24:f4:92:6b:d5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=9159b952-5141-4506-9d89-d8def162c3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:40:73:bf:1b:42:fa:2b:d4:bc:dd:1b:d3:
                    a9:bf:2d:74:db:1b:c1:5d:56:c3:67:56:77:ed:d4:
                    ff:f7:4f:6d:84:31:2a:f8:e1:71:12:96:78:77:2d:
                    aa:94:d4:1f:92:9f:72:56:67:10:ae:2f:52:d9:ba:
                    d5:dd:4b:89:fc:32:e0:6e:a1:01:f6:d3:54:a4:84:
                    67:ab:a8:84:6d:e9:f3:5b:23:bd:18:d1:8b:38:b3:
                    a4:f3:c9:8b:a3:18:d4:9e:2a:e4:45:a4:ce:64:24:
                    19:1f:01:6a:e3:a5:66:18:eb:ea:b4:37:1d:d7:36:
                    5a:10:64:6f:f0:f0:d1:b6:07:ed:3c:cd:d8:6c:44:
                    fe:9d:51:13:45:b8:5d:d2:ef:98:28:a6:71:84:9a:
                    d6:5b:2c:8e:9d:bd:23:b4:7c:75:f3:14:a9:a8:0f:
                    48:ca:0b:2d:92:99:12:d8:bc:60:30:35:63:94:3b:
                    56:9b:07:8a:9a:f7:ed:77:dd:b1:d3:d1:3d:a9:34:
                    0e:d2:53:6d:11:f3:14:bc:e2:12:49:33:0f:1e:ee:
                    3d:3d:6e:60:dd:c6:55:ad:f4:d0:a2:12:12:47:8b:
                    e6:d7:02:f4:c7:8b:df:5a:d5:11:ef:6f:0d:35:a4:
                    05:30:5e:05:fc:9d:09:f0:ee:00:e9:0d:46:4f:ec:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:D8:D1:AD:2C:C7:34:0D:85:99:57:FB:D5:92:30:1D:3D:75:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:05:de:da:a6:72:48:74:f6:91:3a:f5:6f:54:d9:21:75:
         79:43:21:55:ac:10:f5:23:d6:2f:0e:b0:ea:5e:70:09:db:9b:
         92:2d:d9:68:0f:41:c2:5d:44:21:9f:62:3f:5e:24:c8:58:b0:
         d0:c1:b8:73:30:b2:8f:c5:df:c6:3a:05:cf:2d:b5:2e:51:b7:
         32:f9:77:1e:ab:15:84:10:c6:3a:ca:b9:29:22:06:2d:06:d7:
         f6:50:f1:f5:d6:3f:3a:43:fa:71:23:46:34:91:c9:55:fc:ae:
         5b:b8:1f:39:b5:7b:ad:76:a6:11:38:f8:69:27:be:85:0b:47:
         cb:56:62:1e:e1:f1:89:d6:ee:79:e5:c3:76:26:64:6b:ea:ac:
         59:ad:48:cf:75:53:f2:d8:69:f3:f5:d5:90:16:26:6b:36:21:
         a5:e5:6e:a6:25:87:6d:12:b9:8f:b4:b2:ad:71:1c:4c:c3:33:
         0d:35:69:8e:54:24:fd:c1:f2:99:c2:c4:48:f1:01:50:20:3b:
         a9:f8:5f:8c:2b:66:fc:8a:6d:ec:f9:8c:81:95:4b:d3:79:c3:
         90:e7:4c:f1:ea:1e:ca:6b:4f:9f:e0:9c:59:46:47:81:61:58:
         2a:96:ab:53:3f:64:c4:3f:3d:2e:b6:6b:8a:0f:ee:c4:a1:c3:
         96:df:36:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+B6uE8gk9JJr1fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
OTE1OWI5NTItNTE0MS00NTA2LTlkODktZDhkZWYxNjJjM2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRlAc78bQvor1LzdG9Opvy102xvBXVbDZ1Z3
7dT/909thDEq+OFxEpZ4dy2qlNQfkp9yVmcQri9S2brV3UuJ/DLgbqEB9tNUpIRn
q6iEbenzWyO9GNGLOLOk88mLoxjUnirkRaTOZCQZHwFq46VmGOvqtDcd1zZaEGRv
8PDRtgftPM3YbET+nVETRbhd0u+YKKZxhJrWWyyOnb0jtHx18xSpqA9IygstkpkS
2LxgMDVjlDtWmweKmvftd92x09E9qTQO0lNtEfMUvOISSTMPHu49PW5g3cZVrfTQ
ohISR4vm1wL0x4vfWtUR728NNaQFMF4F/J0J8O4A6Q1GT+zW6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9r2NGtLMc0DYWZV/vVkjAdPXXlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvYTU3MjQ4OGEtNzJjOC0z
YmVjLWI4NGItZGFiMDMxOWRhMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzuHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4SBd7apnJIdPaROvVvVNkhdXlDIVWsEPUj1i8OsOpecAnbm5It2WgP
QcJdRCGfYj9eJMhYsNDBuHMwso/F38Y6Bc8ttS5RtzL5dx6rFYQQxjrKuSkiBi0G
1/ZQ8fXWPzpD+nEjRjSRyVX8rlu4Hzm1e612phE4+GknvoULR8tWYh7h8YnW7nnl
w3YmZGvqrFmtSM91U/LYafP11ZAWJms2IaXlbqYlh20SuY+0sq1xHEzDMw01aY5U
JP3B8pnCxEjxAVAgO6n4X4wrZvyKbez5jIGVS9N5w5DnTPHqHsprT5/gnFlGR4Fh
WCqWq1M/ZMQ/PS62a4oP7sShw5bfNuY=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:10:07 2026 by rpki-client