Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
File:                     b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa (raw, json)
Hash identifier:          Fwvr3l275ytb0v1MffFrmSyFAAb54PwHvOoUFZ7nNYQ=
Subject key identifier:   F0:DF:E6:E2:91:72:18:61:01:C2:5B:51:71:10:72:DC:F3:7D:53:85
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584F698D7929BC7955432DB6AEC0
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        216.238.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:79:29:bc:79:55:43:2d:b6:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=f6486dca-801a-476a-a79f-896af76c652e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:bc:ed:3a:62:d6:a2:2c:b3:01:be:83:b9:
                    04:c6:8b:f7:7b:74:2f:cc:75:22:3a:4d:ae:ba:a4:
                    d8:6c:ec:b9:55:12:d3:5b:7d:38:91:5d:60:31:fe:
                    f6:55:fa:c9:ca:a7:c7:6f:c8:1e:f2:61:76:22:1c:
                    d4:56:5d:f9:46:01:00:5d:0e:e5:03:a8:46:74:78:
                    98:db:28:fc:9c:1c:57:3a:d8:a4:9f:05:d6:b0:23:
                    82:99:17:07:ab:70:4b:6d:c7:c5:14:55:d0:41:77:
                    ed:56:fb:28:36:bb:73:0c:1a:03:f5:e1:b3:43:dc:
                    bb:a2:5a:f9:56:31:a0:0f:b6:38:06:54:23:b8:44:
                    b1:65:90:53:40:8e:f8:21:79:db:fb:6a:7b:a8:df:
                    2d:94:11:ba:4f:4d:21:16:d0:e9:c4:ce:8b:36:3e:
                    a7:ea:85:95:bf:8f:ea:a3:5c:58:d8:30:3d:0d:32:
                    a1:b4:f6:8a:48:0f:21:97:35:59:eb:33:fd:2c:a4:
                    b1:4b:69:ed:24:d1:d6:cf:4a:fc:3f:b6:93:51:62:
                    ad:76:de:4f:f8:b0:2f:28:0a:98:d8:7b:9a:49:e9:
                    e7:06:38:b7:ba:84:df:93:85:94:d6:33:bf:f3:d5:
                    7e:32:be:0f:64:53:91:92:29:9a:af:da:a3:cb:9e:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:E6:E2:91:72:18:61:01:C2:5B:51:71:10:72:DC:F3:7D:53:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:05:08:3f:98:5e:a7:48:e4:c1:54:cb:f9:81:a5:66:a6:
         08:46:1e:a5:a6:2a:cb:a6:79:74:55:ee:3b:be:d4:38:5a:0f:
         35:30:4b:8f:69:61:4d:64:77:36:10:30:1b:2d:b8:bc:9f:b7:
         13:2a:38:b4:49:c3:dc:c7:9e:c5:d8:d6:92:d4:75:de:23:6e:
         54:8f:73:e8:e4:c2:de:4e:aa:89:78:37:84:0f:f7:9a:97:1a:
         79:86:d1:3c:e2:fa:01:22:81:d2:e5:c7:48:0e:bc:4d:79:b5:
         14:95:47:02:25:23:b2:4d:df:68:af:80:ea:ee:45:e6:7b:72:
         b4:eb:a6:ed:2d:bd:0f:27:e2:23:32:0f:51:35:e8:76:50:4d:
         e8:24:f1:15:1e:a3:89:bf:3c:92:59:3c:94:cc:30:1d:1f:6d:
         56:2d:01:af:19:00:d2:31:5f:ce:23:a3:45:df:ab:d4:0e:96:
         5e:51:83:02:31:29:b6:93:80:7d:bf:df:93:65:11:29:cf:10:
         24:5d:58:86:4b:09:16:87:26:0b:02:93:6e:a0:48:94:f6:73:
         6a:d5:f7:20:f5:81:f7:ea:03:5e:bd:bc:1d:65:0f:a1:87:85:
         3d:c0:c8:2a:a2:46:25:58:c6:f2:88:9e:4c:5c:da:9e:cc:e8:
         b0:5d:1b:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXkpvHlVQy22rsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3
MjM4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
ZjY0ODZkY2EtODAxYS00NzZhLWE3OWYtODk2YWY3NmM2NTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJS87Tpi1qIsswG+g7kExov3e3QvzHUiOk2u
uqTYbOy5VRLTW304kV1gMf72VfrJyqfHb8ge8mF2IhzUVl35RgEAXQ7lA6hGdHiY
2yj8nBxXOtiknwXWsCOCmRcHq3BLbcfFFFXQQXftVvsoNrtzDBoD9eGzQ9y7olr5
VjGgD7Y4BlQjuESxZZBTQI74IXnb+2p7qN8tlBG6T00hFtDpxM6LNj6n6oWVv4/q
o1xY2DA9DTKhtPaKSA8hlzVZ6zP9LKSxS2ntJNHWz0r8P7aTUWKtdt5P+LAvKAqY
2HuaSennBji3uoTfk4WU1jO/89V+Mr4PZFORkimar9qjy56lKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDf5uKRchhhAcJbUXEQctzzfVOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh
ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvYjJjY2RlNzctOTFkMi0z
YWEzLWFhMzYtYWJhYjMwNzMwYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh
MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2
NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3
NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoDBQg/mF6nSOTBVMv5gaVmpghGHqWmKsumeXRV7ju+1DhaDzUwS49p
YU1kdzYQMBstuLyftxMqOLRJw9zHnsXY1pLUdd4jblSPc+jkwt5Oqol4N4QP95qX
GnmG0Tzi+gEigdLlx0gOvE15tRSVRwIlI7JN32ivgOruReZ7crTrpu0tvQ8n4iMy
D1E16HZQTegk8RUeo4m/PJJZPJTMMB0fbVYtAa8ZANIxX84jo0Xfq9QOll5RgwIx
KbaTgH2/35NlESnPECRdWIZLCRaHJgsCk26gSJT2c2rV9yD1gffqA169vB1lD6GH
hT3AyCqiRiVYxvKInkxc2p7M6LBdG74=
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:37:59 2026 by rpki-client