Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2d38c061-a212-3c2c-83ed-aa7324602112.roa
File:                     2d38c061-a212-3c2c-83ed-aa7324602112.roa (raw, json)
Hash identifier:          9zyhu3d5YRQeG0glSLmBIjAry+uF7EjB3dbm8m4jc14=
Subject key identifier:   AE:0F:6C:35:69:94:1E:F4:2B:28:2C:EC:C6:37:55:89:80:F2:3B:C0
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584F9BCDE3BD7E38E7AB8468F480
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2d38c061-a212-3c2c-83ed-aa7324602112.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     36231
IP address blocks:        205.178.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:e3:bd:7e:38:e7:ab:84:68:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=cd9c904e-a3bc-4b65-bdb0-80ebfc24fd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:5e:5d:c6:cb:14:9f:79:a7:b4:b7:41:79:
                    6d:70:4b:88:7f:1a:a2:58:f9:b1:10:81:88:53:3b:
                    12:f9:c0:d1:67:c1:1a:59:7b:98:42:5d:b3:7e:94:
                    19:93:d1:9c:f5:98:dd:d0:13:5f:a3:62:86:fa:75:
                    91:cf:ee:ae:5c:c8:35:e2:b0:3a:f0:00:99:03:db:
                    77:64:39:7f:f7:e0:8a:f8:ae:10:c7:bd:10:b2:36:
                    aa:f6:dc:66:72:e7:54:99:50:c5:3c:ff:4d:3d:7a:
                    9f:ee:2e:be:a8:e1:ab:70:f9:59:a7:52:b8:f8:a5:
                    7b:1c:45:1f:9d:f2:1b:cd:7e:b3:58:47:b6:29:0b:
                    a8:78:aa:b0:11:37:39:bf:7c:85:11:1b:a5:01:4d:
                    9b:53:66:14:37:35:71:bd:fe:17:5f:f6:cb:93:fe:
                    c6:08:cd:80:c8:73:30:cb:99:27:fc:0a:c9:2b:1c:
                    ab:1a:e9:14:91:ef:2a:da:83:cf:4e:00:02:f3:7a:
                    cc:00:a1:2c:ea:c2:8d:e8:81:89:5d:d8:b0:bb:39:
                    98:5d:9c:48:d9:ab:b4:36:b4:ed:1e:72:8c:e9:d9:
                    3e:a1:d9:08:0d:21:22:8a:2d:41:8d:d0:88:3f:d1:
                    9c:1b:39:fd:8f:b2:60:11:58:7e:8c:8f:e6:89:5e:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:6C:35:69:94:1E:F4:2B:28:2C:EC:C6:37:55:89:80:F2:3B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2d38c061-a212-3c2c-83ed-aa7324602112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:dd:8b:7d:fb:a0:60:a4:a2:19:cb:f5:9e:d7:3c:1b:03:
         70:86:84:53:29:1b:37:60:60:b5:28:d5:6c:57:67:d0:9a:f4:
         d3:ee:7c:86:5f:bb:81:c8:04:ef:62:7c:7f:cd:3f:b6:76:f4:
         9d:1e:96:9b:df:65:19:e9:91:e5:90:84:21:4d:e0:12:3d:62:
         0d:37:b7:09:d5:ad:6f:21:e1:6b:f2:1a:9d:83:7a:0c:fb:99:
         0c:4c:fe:25:5a:a3:ae:47:55:8d:bd:64:06:e4:a6:69:84:c0:
         78:c2:ec:e8:ba:db:8b:ac:b0:52:d7:2c:a9:01:f7:33:06:a9:
         ce:6f:35:75:e3:02:a0:1e:a6:2a:1f:c7:11:02:c5:be:3c:b8:
         35:99:26:25:7c:b2:60:a4:3f:9f:27:2c:22:5c:a1:e7:89:5c:
         cf:64:19:0e:a6:db:38:02:1d:f9:38:b3:64:7c:21:72:40:50:
         61:86:88:3b:88:f7:04:ba:5f:d0:3b:95:83:09:74:f1:43:e1:
         18:dd:a6:87:8a:b9:74:8f:d8:eb:f0:f0:ff:22:38:1c:ce:80:
         78:e1:4a:64:40:fa:2e:87:37:ec:15:85:48:cc:bf:fc:7c:9d:
         74:22:7a:7d:b0:fe:b7:97:ad:3a:4e:4e:d4:ca:da:02:f1:1e:
         1c:71:49:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeO9fjjnq4Ro9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
Y2Q5YzkwNGUtYTNiYy00YjY1LWJkYjAtODBlYmZjMjRmZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaZeXcbLFJ95p7S3QXltcEuIfxqiWPmxEIGI
UzsS+cDRZ8EaWXuYQl2zfpQZk9Gc9Zjd0BNfo2KG+nWRz+6uXMg14rA68ACZA9t3
ZDl/9+CK+K4Qx70Qsjaq9txmcudUmVDFPP9NPXqf7i6+qOGrcPlZp1K4+KV7HEUf
nfIbzX6zWEe2KQuoeKqwETc5v3yFERulAU2bU2YUNzVxvf4XX/bLk/7GCM2AyHMw
y5kn/ArJKxyrGukUke8q2oPPTgAC83rMAKEs6sKN6IGJXdiwuzmYXZxI2au0NrTt
HnKM6dk+odkIDSEiii1BjdCIP9GcGzn9j7JgEVh+jI/miV4nWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4PbDVplB70Kygs7MY3VYmA8jvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMmQzOGMwNjEtYTIxMi0z
YzJjLTgzZWQtYWE3MzI0NjAyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbK3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMa3Yt9+6BgpKIZy/We1zwbA3CGhFMpGzdgYLUo1WxXZ9Ca9NPufIZf
u4HIBO9ifH/NP7Z29J0elpvfZRnpkeWQhCFN4BI9Yg03twnVrW8h4WvyGp2Degz7
mQxM/iVao65HVY29ZAbkpmmEwHjC7Oi624ussFLXLKkB9zMGqc5vNXXjAqAepiof
xxECxb48uDWZJiV8smCkP58nLCJcoeeJXM9kGQ6m2zgCHfk4s2R8IXJAUGGGiDuI
9wS6X9A7lYMJdPFD4RjdpoeKuXSP2Ovw8P8iOBzOgHjhSmRA+i6HN+wVhUjMv/x8
nXQien2w/reXrTpOTtTK2gLxHhxxSf8=
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:42:05 2026 by rpki-client