Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
File:                     b6aef4d5-7853-36ff-91b5-a441b0020316.roa (raw, json)
Hash identifier:          hSaPhwJhLubiuvs5CAzY+2LXateH2VpSBeHRxpGe6SI=
Subject key identifier:   B7:E8:E8:66:99:87:30:14:88:BD:FF:60:AA:39:19:DF:CC:00:81:3E
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584EC20C6DA3204B677509D07DE0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1403
IP address blocks:        96.127.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6d:a3:20:4b:67:75:09:d0:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=9be8f166-6dab-4eee-b854-fec7f0b1aaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:95:6e:68:e2:1a:b3:fa:34:5f:80:76:cc:
                    f7:3b:7c:c4:8d:f0:e9:55:29:7e:34:ca:64:fc:d4:
                    09:f4:e7:d9:c0:0a:72:c9:0b:62:4c:4b:0c:7e:cf:
                    ce:3a:6f:a6:f7:c2:2d:df:78:d9:9c:15:dd:d4:39:
                    0c:c2:a3:34:61:7a:77:86:05:15:e5:b1:49:81:37:
                    bb:59:04:e9:4e:8b:dc:fd:c8:b3:26:b2:d7:41:ec:
                    e1:46:3d:aa:2e:9e:eb:16:74:09:7f:8d:70:3c:9b:
                    b1:2f:7b:f6:9a:41:6c:18:9c:e0:0c:67:8c:79:62:
                    44:25:36:0b:f7:09:02:d0:6e:60:d0:b2:32:af:0f:
                    1f:ae:f5:95:08:1c:e1:d8:60:05:55:77:25:49:99:
                    2f:c1:3a:06:91:1e:61:9c:4d:84:59:d4:23:01:f2:
                    e8:9f:00:56:de:f0:bd:02:9d:84:bf:cb:2f:b3:bd:
                    76:92:3c:be:4c:a5:fb:f3:08:08:47:b5:72:31:f9:
                    04:1d:00:9c:58:84:cd:79:78:e0:e4:0a:72:13:c2:
                    6f:0b:92:06:23:e2:23:8d:2a:eb:1b:90:38:f9:87:
                    91:b6:62:c9:b3:83:60:5b:87:a4:e8:f3:c3:61:47:
                    32:d3:8c:88:34:12:89:69:a7:f3:be:b8:65:37:68:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:E8:66:99:87:30:14:88:BD:FF:60:AA:39:19:DF:CC:00:81:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:85:00:e6:ba:e1:6b:a6:5a:d4:29:c1:60:a8:19:f7:77:ef:
         2f:c6:42:12:74:5a:60:9e:75:aa:4d:09:e5:8e:00:88:b3:15:
         8c:ba:0d:90:2a:0e:c1:60:70:17:10:70:df:62:80:65:86:2c:
         bc:89:b8:aa:53:74:d4:27:27:f9:1c:0c:7a:74:2c:15:6f:3e:
         54:23:8b:9f:2e:81:0c:88:e5:ab:27:e9:a2:4a:b9:e5:d9:8c:
         87:21:52:0a:aa:ac:14:80:ca:ae:ea:31:fe:9e:04:15:b8:a6:
         37:92:ff:26:f1:66:3f:7d:26:67:0f:2d:e5:6d:26:20:72:b4:
         29:fa:5c:16:c5:4e:b2:df:aa:6b:c2:08:83:e3:05:e8:76:b2:
         1e:99:9e:9a:fe:fc:0a:de:d6:c1:79:90:c6:c9:6d:6c:93:8f:
         ac:8a:95:a5:64:12:be:af:3f:8a:fb:e5:0b:0f:88:8b:eb:eb:
         36:80:fe:bf:fc:a5:fe:bd:90:9d:1a:29:95:9c:c7:1f:1d:ed:
         a2:0b:ec:2c:c9:4f:d6:13:5e:06:40:1f:c2:59:6c:2e:8e:cf:
         f9:44:5b:f9:50:5e:57:46:5a:1b:a8:60:eb:40:54:1b:95:d9:
         9c:e7:88:d8:2e:41:be:87:d3:1c:ff:52:45:f5:fe:30:29:76:
         a3:89:3c:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDG2jIEtndQnQfeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
OWJlOGYxNjYtNmRhYi00ZWVlLWI4NTQtZmVjN2YwYjFhYWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy+VbmjiGrP6NF+Adsz3O3zEjfDpVSl+NMpk
/NQJ9OfZwApyyQtiTEsMfs/OOm+m98It33jZnBXd1DkMwqM0YXp3hgUV5bFJgTe7
WQTpTovc/cizJrLXQezhRj2qLp7rFnQJf41wPJuxL3v2mkFsGJzgDGeMeWJEJTYL
9wkC0G5g0LIyrw8frvWVCBzh2GAFVXclSZkvwToGkR5hnE2EWdQjAfLonwBW3vC9
Ap2Ev8svs712kjy+TKX78wgIR7VyMfkEHQCcWITNeXjg5ApyE8JvC5IGI+IjjSrr
G5A4+YeRtmLJs4NgW4ek6PPDYUcy04yINBKJaafzvrhlN2gu9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfo6GaZhzAUiL3/YKo5Gd/MAIE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYjZhZWY0ZDUtNzg1My0z
NmZmLTkxYjUtYTQ0MWIwMDIwMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYH/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKFAOa64WumWtQpwWCoGfd37y/GQhJ0WmCedapNCeWOAIizFYy6DZAq
DsFgcBcQcN9igGWGLLyJuKpTdNQnJ/kcDHp0LBVvPlQji58ugQyI5asn6aJKueXZ
jIchUgqqrBSAyq7qMf6eBBW4pjeS/ybxZj99JmcPLeVtJiBytCn6XBbFTrLfqmvC
CIPjBeh2sh6Znpr+/Are1sF5kMbJbWyTj6yKlaVkEr6vP4r75QsPiIvr6zaA/r/8
pf69kJ0aKZWcxx8d7aIL7CzJT9YTXgZAH8JZbC6Oz/lEW/lQXldGWhuoYOtAVBuV
2ZzniNguQb6H0xz/UkX1/jApdqOJPEk=
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:59:12 2026 by rpki-client