Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
File:                     ab0417bd-e109-3009-93c0-f235c176e944.roa (raw, json)
Hash identifier:          MaVbzNisIQ8+WtnyHIJPFb6D5p3MVe5f9zBNWTGk340=
Subject key identifier:   B6:A6:08:AD:E9:DC:07:69:19:B0:7C:BE:B4:FC:CE:91:60:B8:47:10
Certificate issuer:       /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
Certificate serial:       010D0C9F4328584F62931EFAFA808500752BE080
Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     62830
IP address blocks:        198.62.201.0/24 maxlen: 24
                          2620:52:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1e:fa:fa:80:85:00:75:2b:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=cf668798-c3be-40ce-bf8c-bc28d55bf7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:01:fa:3d:fe:25:f4:b2:d5:95:6f:ab:1b:
                    e6:b2:c3:aa:41:25:23:8e:5d:7a:06:f6:7b:8b:35:
                    ad:b4:e3:cc:a0:c3:97:0d:93:a5:bb:34:ea:f0:cf:
                    5d:41:00:5f:fe:39:7c:fc:8b:be:49:e4:8e:f8:c2:
                    bc:ec:73:6a:b4:1c:fd:ac:32:55:9c:f6:42:46:47:
                    d9:b9:c0:24:57:0e:c8:8a:3a:2c:3b:44:48:59:87:
                    ee:f2:db:73:9a:32:ef:cb:bd:c0:cb:57:f5:d4:1d:
                    ec:8e:58:ee:77:65:d5:a2:db:ff:ba:62:81:0f:e4:
                    ff:76:7d:27:4b:5a:53:6e:ee:c3:2e:ae:07:f8:99:
                    2b:64:5a:52:de:4f:d2:0c:2f:9b:ad:08:56:8a:d1:
                    cc:1f:f6:87:07:e5:91:eb:b4:43:0a:4a:fd:85:b6:
                    51:6b:3c:32:14:0d:6b:61:fb:83:1f:e6:1a:3c:64:
                    dd:53:98:ba:12:ad:18:47:79:3e:ad:ea:31:27:98:
                    55:d9:9a:d4:36:e5:08:28:c3:b9:4b:d8:ca:9a:9d:
                    22:40:29:58:c1:b8:7a:14:a1:8d:b3:92:09:6a:63:
                    aa:2a:52:ae:f5:5a:49:b6:54:e2:d5:91:93:a3:f7:
                    31:e0:76:79:90:61:91:32:34:0e:4a:a4:20:85:46:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:08:AD:E9:DC:07:69:19:B0:7C:BE:B4:FC:CE:91:60:B8:47:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.201.0/24
                IPv6:
                  2620:52:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:4a:43:cb:6f:08:04:ba:0a:9e:2c:d9:3f:80:78:fa:ae:
         d0:0b:3b:eb:69:ee:29:d9:53:1d:05:4d:46:26:33:7e:a2:e8:
         81:54:0a:02:ac:33:3a:de:6d:85:1a:60:35:1e:5f:21:bd:b7:
         95:02:fe:8d:b4:5d:a7:2a:9a:49:86:01:f9:d4:2d:75:7a:78:
         d6:e4:18:ab:8a:8c:a1:84:03:b3:94:b7:ad:8e:ee:06:8a:a0:
         3b:bb:11:c7:0f:22:45:40:51:b3:02:d1:c6:56:2b:42:24:4b:
         85:34:b5:35:72:26:95:c8:67:9a:39:9f:46:a9:20:76:84:e9:
         0a:6f:af:66:12:82:4c:3f:f7:ec:e4:57:59:6c:4b:f1:2c:4d:
         da:8f:dc:85:f9:f0:d6:48:7d:4e:5c:fb:4b:b5:70:d3:87:51:
         0b:f0:0f:1e:8f:8c:fc:f5:fd:a6:74:2b:0e:f8:3a:42:dd:87:
         18:e2:19:5b:a5:a9:72:34:36:cf:03:b9:08:91:a5:d6:2a:92:
         4d:b4:7d:5d:e0:31:57:4c:e4:52:06:e7:fc:64:c9:74:57:ff:
         6a:7b:2c:68:a5:b9:7f:e6:9c:e2:46:f2:80:bb:67:fa:6a:a9:
         e7:3e:c3:7c:4e:b2:ff:9c:c3:12:59:6e:0d:e9:37:6e:93:5c:
         bd:0d:67:ba
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9ikx76+oCFAHUr4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjMyODM3YjQtMGEzNi00ODk2LTlmZGYtY2E0MWUzYzg0
OGYzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
Y2Y2Njg3OTgtYzNiZS00MGNlLWJmOGMtYmMyOGQ1NWJmN2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTAB+j3+JfSy1ZVvqxvmssOqQSUjjl16BvZ7
izWttOPMoMOXDZOluzTq8M9dQQBf/jl8/Iu+SeSO+MK87HNqtBz9rDJVnPZCRkfZ
ucAkVw7IijosO0RIWYfu8ttzmjLvy73Ay1f11B3sjljud2XVotv/umKBD+T/dn0n
S1pTbu7DLq4H+JkrZFpS3k/SDC+brQhWitHMH/aHB+WR67RDCkr9hbZRazwyFA1r
YfuDH+YaPGTdU5i6Eq0YR3k+reoxJ5hV2ZrUNuUIKMO5S9jKmp0iQClYwbh6FKGN
s5IJamOqKlKu9VpJtlTi1ZGTo/cx4HZ5kGGRMjQOSqQghUYlkwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLamCK3p3AdpGbB8vrT8zpFguEcQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4
MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQxZTNjODQ4ZjMvYWIwNDE3YmQtZTEwOS0z
MDA5LTkzYzAtZjIzNWMxNzZlOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjMyODM3YjQtMGEzNi00ODk2LTlm
ZGYtY2E0MWUzYzg0OGYzL2YzMjgzN2I0LTBhMzYtNDg5Ni05ZmRmLWNhNDFlM2M4
NDhmMy5jcmwwHwYDVR0jBBgwFoAU5PVEJeqICzg61XA0fN7IgT9NQNgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQx
ZTNjODQ4ZjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxj7JMA8E
AgACMAkDBwAmIABSQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFQ1KQ8tvCAS6Cp4s2T+AePqu0As762nu
KdlTHQVNRiYzfqLogVQKAqwzOt5thRpgNR5fIb23lQL+jbRdpyqaSYYB+dQtdXp4
1uQYq4qMoYQDs5S3rY7uBoqgO7sRxw8iRUBRswLRxlYrQiRLhTS1NXImlchnmjmf
RqkgdoTpCm+vZhKCTD/37ORXWWxL8SxN2o/chfnw1kh9Tlz7S7Vw04dRC/APHo+M
/PX9pnQrDvg6Qt2HGOIZW6WpcjQ2zwO5CJGl1iqSTbR9XeAxV0zkUgbn/GTJdFf/
anssaKW5f+ac4kbygLtn+mqp5z7DfE6y/5zDElluDek3bpNcvQ1nug==
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:53:29 2026 by rpki-client