Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96c996a6-5d1f-36cf-8797-e9fcc3b4aad8.roa
File:                     96c996a6-5d1f-36cf-8797-e9fcc3b4aad8.roa (raw, json)
Hash identifier:          RhnjPZx0qSJyTosj07wGzLRUNZMcjeY9uDx7nX7uW1w=
Subject key identifier:   89:32:3E:9E:FF:EB:22:1F:DD:F9:A3:38:61:0C:F5:89:7A:48:EE:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6F22F3A84E30E1BA3A342890
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96c996a6-5d1f-36cf-8797-e9fcc3b4aad8.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     396547
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f3:a8:4e:30:e1:ba:3a:34:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=dc7d134b-b9db-4a7d-afa4-467765fd2c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:ac:4a:6f:b9:e4:81:78:68:7a:16:ab:d5:
                    6f:08:7a:1c:61:da:8a:4c:c4:b1:9d:68:4f:98:65:
                    6f:12:69:bc:d1:9e:bf:79:83:0d:6e:25:6c:fe:fd:
                    7c:70:a2:e5:4f:68:2b:d5:bd:8a:c8:9f:17:18:f2:
                    e4:03:77:c2:64:62:a0:90:b6:02:8c:dd:04:16:cc:
                    23:02:16:dd:4b:1c:9c:7e:c5:d1:4f:60:69:9a:d6:
                    d8:a7:49:4d:fb:3d:0f:b6:10:f3:ae:ab:c0:64:5e:
                    ef:c8:42:fe:b5:80:8b:c9:ad:77:92:68:eb:34:11:
                    6a:0a:3f:96:d7:fc:2a:80:73:b9:a9:ad:8e:d0:8e:
                    09:92:3f:ae:36:e3:14:df:b2:e0:de:3f:10:b6:75:
                    ea:69:1c:a3:a6:ad:4f:6c:34:f0:48:a5:82:84:68:
                    47:62:c1:50:2b:2a:67:99:9e:0c:31:97:64:76:1c:
                    90:8d:48:13:a6:7c:cd:b9:aa:ea:f9:bf:f8:b2:2c:
                    38:3e:df:d0:25:ec:68:99:a7:54:92:16:d7:dd:55:
                    52:d1:00:c6:17:0d:df:37:0e:98:4d:70:75:ec:5e:
                    17:31:5b:34:53:60:06:b7:d9:26:f1:ea:71:8e:52:
                    53:8a:a6:75:fc:13:72:5f:0b:a8:a8:24:59:b3:71:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:3E:9E:FF:EB:22:1F:DD:F9:A3:38:61:0C:F5:89:7A:48:EE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96c996a6-5d1f-36cf-8797-e9fcc3b4aad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:68:19:71:12:80:4e:67:ef:1b:ec:42:bc:9e:81:30:a5:
         c4:00:01:5d:45:9b:3c:52:ae:48:91:6a:91:41:9b:af:cb:23:
         a2:3a:5e:07:f8:01:5d:32:d1:5a:f3:83:73:53:79:d3:5e:5c:
         9e:0e:fd:ef:b4:f9:9d:36:c0:45:d0:84:90:82:b9:4a:dc:d8:
         d0:16:ee:a2:0e:76:67:0d:35:65:da:f9:e2:37:01:66:fd:15:
         94:06:3c:84:f2:e7:9b:d3:46:40:f7:e8:90:d8:1b:4b:bd:f2:
         7c:29:f7:72:e5:d4:d6:06:bb:3a:43:d7:3d:eb:f3:35:d0:78:
         cd:e1:92:5b:48:4d:20:41:e0:fc:d4:4f:9f:5b:9b:f8:52:9d:
         ca:a0:19:6d:c4:90:58:34:6d:f4:07:ae:99:d4:ad:8d:6f:e0:
         6a:79:05:f8:fa:eb:e0:54:ba:15:72:89:ed:b2:96:7d:67:56:
         d5:68:ec:7c:f1:a1:fa:05:1d:62:05:70:6b:00:11:41:bc:48:
         b3:ef:aa:6f:a8:e5:a4:8d:66:6f:6f:6f:58:70:87:94:0f:21:
         96:61:57:16:4b:f9:93:f7:36:12:57:75:8a:20:2e:82:cb:3a:
         c9:96:42:71:7f:77:6b:a3:98:65:c1:42:6d:53:8b:22:46:45:
         26:29:57:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvOoTjDhujo0KJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZGM3ZDEzNGItYjlkYi00YTdkLWFmYTQtNDY3NzY1ZmQyYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2sSm+55IF4aHoWq9VvCHocYdqKTMSxnWhP
mGVvEmm80Z6/eYMNbiVs/v18cKLlT2gr1b2KyJ8XGPLkA3fCZGKgkLYCjN0EFswj
AhbdSxycfsXRT2BpmtbYp0lN+z0PthDzrqvAZF7vyEL+tYCLya13kmjrNBFqCj+W
1/wqgHO5qa2O0I4Jkj+uNuMU37Lg3j8QtnXqaRyjpq1PbDTwSKWChGhHYsFQKypn
mZ4MMZdkdhyQjUgTpnzNuarq+b/4siw4Pt/QJexomadUkhbX3VVS0QDGFw3fNw6Y
TXB17F4XMVs0U2AGt9km8epxjlJTiqZ1/BNyXwuoqCRZs3He2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkyPp7/6yIf3fmjOGEM9Yl6SO6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZjOTk2YTYtNWQxZi0z
NmNmLTg3OTctZTlmY2MzYjRhYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjqaBlxEoBOZ+8b7EK8noEwpcQAAV1FmzxSrkiRapFBm6/LI6I6Xgf4
AV0y0Vrzg3NTedNeXJ4O/e+0+Z02wEXQhJCCuUrc2NAW7qIOdmcNNWXa+eI3AWb9
FZQGPITy55vTRkD36JDYG0u98nwp93Ll1NYGuzpD1z3r8zXQeM3hkltITSBB4PzU
T59bm/hSncqgGW3EkFg0bfQHrpnUrY1v4Gp5Bfj66+BUuhVyie2yln1nVtVo7Hzx
ofoFHWIFcGsAEUG8SLPvqm+o5aSNZm9vb1hwh5QPIZZhVxZL+ZP3NhJXdYogLoLL
OsmWQnF/d2ujmGXBQm1TiyJGRSYpV9Q=
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:35:44 2026 by rpki-client