Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/c8e6dc6e-7b4c-3d13-9c8b-f6c60ba03e16.roa
File:                     c8e6dc6e-7b4c-3d13-9c8b-f6c60ba03e16.roa (raw, json)
Hash identifier:          h0wocxfnK4KH65uw0FhFpgZbrdxsI9+7PrJhDvr4SDM=
Subject key identifier:   C4:12:DD:E4:DA:81:3D:39:92:E3:F2:45:C3:3D:56:AD:C7:99:DC:98
Certificate issuer:       /CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
Certificate serial:       010D0C9F4328584ED001C4FC169D545928BAF500
Authority key identifier: DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/c8e6dc6e-7b4c-3d13-9c8b-f6c60ba03e16.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     46433
IP address blocks:        162.217.88.0/24 maxlen: 24
                          162.217.89.0/24 maxlen: 24
                          162.217.90.0/24 maxlen: 24
                          162.217.91.0/24 maxlen: 24
                          162.217.92.0/24 maxlen: 24
                          162.217.93.0/24 maxlen: 24
                          162.217.94.0/24 maxlen: 24
                          162.217.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:c4:fc:16:9d:54:59:28:ba:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=77dbcc8e-9dd0-4a6a-9c3d-16013527abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:a5:65:6a:97:02:1a:2c:21:21:cc:f5:da:
                    e9:3f:0b:7f:94:2e:ae:be:86:8e:12:2e:14:c7:9b:
                    66:00:e5:94:ac:9d:11:86:3b:f8:0b:fa:24:ec:bc:
                    06:17:8f:91:8a:99:61:af:4b:4a:4b:7c:80:bc:df:
                    c4:ae:1c:4d:58:5c:eb:1c:b5:74:b9:73:02:fa:09:
                    a9:ca:b1:32:42:d6:f5:0f:1b:a2:64:b3:4b:61:5f:
                    cf:66:76:4d:a5:45:32:35:31:4f:de:8a:92:ad:84:
                    9b:ab:a3:e6:5e:a6:3c:1a:43:89:53:f0:c5:e5:14:
                    3d:1d:30:66:4b:30:0c:c0:5e:c1:87:a7:f9:b2:c2:
                    59:7b:bb:c7:25:3c:d5:3e:01:49:2e:f2:b8:b5:bb:
                    82:a7:35:26:21:4d:79:a8:a5:36:cd:fa:bd:77:19:
                    d8:97:57:de:df:ab:83:cf:fb:2b:22:57:6b:40:4f:
                    5b:14:16:8e:04:c7:49:40:c4:04:45:e5:40:5b:52:
                    31:94:98:d7:fd:97:07:6c:48:11:c9:e5:c5:c3:4a:
                    2f:82:88:1e:4d:29:3e:b3:ec:f3:99:d2:b8:32:07:
                    72:97:f1:55:e6:2f:f8:5b:a0:25:5e:87:f1:f6:3f:
                    46:3f:1a:e3:1d:c8:ac:3c:4d:ff:65:14:d0:17:61:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:12:DD:E4:DA:81:3D:39:92:E3:F2:45:C3:3D:56:AD:C7:99:DC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/c8e6dc6e-7b4c-3d13-9c8b-f6c60ba03e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:02:d0:4e:61:06:03:62:b4:37:26:e4:46:5a:ee:15:c3:5f:
         bf:0d:27:9c:52:bf:40:d6:25:64:0f:b0:38:2d:09:ca:d2:f4:
         66:1b:b9:b5:1e:0d:97:0e:53:3f:12:2a:b5:d2:1f:16:b3:40:
         93:73:8c:11:99:d5:04:6b:40:be:8f:56:a0:26:06:7a:bf:75:
         4a:53:b5:6a:67:f3:7f:8a:94:cc:ee:a2:e2:aa:75:d0:1a:77:
         96:af:1e:eb:f5:bd:f9:c6:ce:fa:8a:44:bc:75:26:74:c7:f8:
         51:1b:16:80:83:d9:22:34:cc:fb:0d:18:33:36:ad:90:69:ee:
         57:15:4c:54:78:71:c0:0e:d2:9c:9c:09:70:0f:e2:d4:3e:79:
         ec:48:28:d2:c1:a8:b1:7f:0b:bf:df:89:44:e6:6b:7b:7d:74:
         36:72:9e:da:35:61:e4:79:be:c7:0c:d6:6f:ef:bb:1e:6f:6e:
         88:2a:36:81:ea:76:49:99:52:d1:b6:2f:b4:14:3a:60:fd:87:
         d2:28:6a:77:5a:36:0b:7a:15:33:a5:b0:4c:5e:72:45:e1:44:
         d7:88:72:52:93:6b:d9:3f:63:7a:06:0b:67:43:8a:00:47:c0:
         95:9a:ef:e9:43:a3:49:e1:b2:e9:f6:11:78:64:78:1b:3a:55:
         1f:ae:c6:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAcT8Fp1UWSi69QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjExODc4ZmUtNzNjNS00YTE1LWI4MmUtMWQxOWMyZmY1
NDJjMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NzdkYmNjOGUtOWRkMC00YTZhLTljM2QtMTYwMTM1MjdhYmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj92lZWqXAhosISHM9drpPwt/lC6uvoaOEi4U
x5tmAOWUrJ0Rhjv4C/ok7LwGF4+Riplhr0tKS3yAvN/ErhxNWFzrHLV0uXMC+gmp
yrEyQtb1DxuiZLNLYV/PZnZNpUUyNTFP3oqSrYSbq6PmXqY8GkOJU/DF5RQ9HTBm
SzAMwF7Bh6f5ssJZe7vHJTzVPgFJLvK4tbuCpzUmIU15qKU2zfq9dxnYl1fe36uD
z/srIldrQE9bFBaOBMdJQMQEReVAW1IxlJjX/ZcHbEgRyeXFw0ovgogeTSk+s+zz
mdK4Mgdyl/FV5i/4W6AlXofx9j9GPxrjHcisPE3/ZRTQF2GsmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQS3eTagT05kuPyRcM9Vq3HmdyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yMTE4
NzhmZS03M2M1LTRhMTUtYjgyZS0xZDE5YzJmZjU0MmMvYzhlNmRjNmUtN2I0Yy0z
ZDEzLTljOGItZjZjNjBiYTAzZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjExODc4ZmUtNzNjNS00YTE1LWI4
MmUtMWQxOWMyZmY1NDJjLzIxMTg3OGZlLTczYzUtNGExNS1iODJlLTFkMTljMmZm
NTQyYy5jcmwwHwYDVR0jBBgwFoAU3opXPwpUGkNDfwz9C691r8KFwDQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yMTE4NzhmZS03M2M1LTRhMTUtYjgyZS0xZDE5
YzJmZjU0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAC0E5hBgNitDcm5EZa7hXDX78NJ5xSv0DWJWQPsDgtCcrS9GYbubUe
DZcOUz8SKrXSHxazQJNzjBGZ1QRrQL6PVqAmBnq/dUpTtWpn83+KlMzuouKqddAa
d5avHuv1vfnGzvqKRLx1JnTH+FEbFoCD2SI0zPsNGDM2rZBp7lcVTFR4ccAO0pyc
CXAP4tQ+eexIKNLBqLF/C7/fiUTma3t9dDZynto1YeR5vscM1m/vux5vbogqNoHq
dkmZUtG2L7QUOmD9h9IoandaNgt6FTOlsExeckXhRNeIclKTa9k/Y3oGC2dDigBH
wJWa7+lDo0nhsun2EXhkeBs6VR+uxnQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:37:37 2026 by rpki-client