Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/3659f7ff-7533-3c9d-8bb7-b6969892f2e4.roa
File:                     3659f7ff-7533-3c9d-8bb7-b6969892f2e4.roa (raw, json)
Hash identifier:          Cz3airnT752B6DdnzlBYGTWijcHn/beMZoS9pwVyLPY=
Subject key identifier:   C1:02:AF:EA:FA:1F:EB:DF:D4:EF:30:A1:98:4D:94:AC:84:26:6A:5D
Certificate issuer:       /CN=d855d262-92b1-4917-b40d-2e856e2f20ea
Certificate serial:       010D0C9F4328584ED6FC80974A42F93C23A630D8
Authority key identifier: 82:60:D2:47:F2:3A:BF:B2:7E:6B:3A:4E:98:8B:CB:51:91:4A:3F:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/3659f7ff-7533-3c9d-8bb7-b6969892f2e4.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     64265
IP address blocks:        128.254.216.0/22 maxlen: 24
                          198.140.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/d855d262-92b1-4917-b40d-2e856e2f20ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/d855d262-92b1-4917-b40d-2e856e2f20ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:80:97:4a:42:f9:3c:23:a6:30:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d855d262-92b1-4917-b40d-2e856e2f20ea
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=6e4ff454-4862-47c7-8fc8-6596a726c95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:1a:b1:46:f7:4a:68:f6:d8:8d:25:b3:87:
                    34:c5:24:df:df:ba:fa:12:e4:3f:52:c0:5d:b7:5f:
                    6a:4d:72:9b:02:9a:48:fa:a6:bb:0d:60:17:a6:81:
                    79:76:a6:a5:93:c7:a6:c5:8e:c4:55:33:42:90:44:
                    a1:16:e2:c7:52:b2:b3:85:86:8f:08:55:3c:12:76:
                    7c:a5:01:90:71:1d:6e:35:fd:ab:5d:08:67:ab:14:
                    22:c3:c1:2e:1a:2c:88:12:be:d7:f5:37:3f:b0:5d:
                    ce:61:90:bb:f4:67:44:c2:f5:59:cf:48:e8:2b:d5:
                    f6:9d:e5:05:ff:eb:83:e1:bc:bc:e2:d2:4e:6f:27:
                    da:26:7e:44:15:81:e7:db:2b:84:69:4c:8a:fe:c6:
                    a9:94:6b:a5:8f:94:8b:23:0b:6b:18:85:62:82:14:
                    7a:db:32:5d:38:91:35:37:cb:80:d8:2d:9f:44:90:
                    eb:3f:14:22:f4:36:0b:70:52:3e:7d:0c:a8:91:8d:
                    1b:fb:04:53:35:25:ef:02:0f:5d:5f:30:98:a0:3a:
                    36:74:53:c6:46:25:8d:f8:65:5b:31:9c:e5:e6:b2:
                    6b:dc:8b:6d:c6:e6:39:32:74:76:e3:57:c4:84:fe:
                    0d:e0:a7:ba:89:7b:b2:82:f8:31:54:61:1a:a0:3a:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:02:AF:EA:FA:1F:EB:DF:D4:EF:30:A1:98:4D:94:AC:84:26:6A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/3659f7ff-7533-3c9d-8bb7-b6969892f2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea/d855d262-92b1-4917-b40d-2e856e2f20ea.crl

            X509v3 Authority Key Identifier:
                keyid:82:60:D2:47:F2:3A:BF:B2:7E:6B:3A:4E:98:8B:CB:51:91:4A:3F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d855d262-92b1-4917-b40d-2e856e2f20ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.216.0/22
                  198.140.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:81:e5:86:ab:f7:2f:c9:b0:03:d4:3a:e7:a5:18:f4:62:80:
         4c:47:ae:41:08:98:10:18:90:82:9d:69:74:b7:69:2d:84:0d:
         d7:ec:4a:01:c9:fa:fa:4d:6f:e0:63:53:27:bc:fa:de:ff:93:
         6c:27:9c:6f:72:79:cb:f6:43:e5:b2:96:1d:04:2b:08:41:3f:
         6d:74:45:7f:d9:12:05:d7:28:20:8b:79:2b:d0:c0:18:40:c7:
         5e:51:d7:4e:f7:1b:9e:b0:64:f1:a0:9f:96:23:88:5c:46:53:
         29:e7:c2:fa:42:f9:99:91:f2:ad:39:c2:7d:c5:5a:22:9e:ce:
         07:55:e8:e3:5e:0b:a4:55:78:1b:29:c8:a1:e1:e6:55:62:29:
         cf:dd:61:23:94:79:6b:21:9a:f0:e6:db:02:cc:30:45:01:0a:
         1d:33:b5:01:9f:ea:f7:00:a6:8a:79:9a:99:36:72:8a:f0:8e:
         7f:6e:f2:1a:ce:1b:c8:97:db:e0:6c:bd:5e:e9:d4:08:dc:0b:
         29:8e:25:3e:27:0f:6e:4c:2d:4c:6d:bc:14:18:8e:fa:59:e2:
         54:2a:8f:c6:ea:8c:ef:11:92:d9:6c:ce:b1:a3:db:13:cd:50:
         bc:58:b0:33:d7:4e:79:10:67:2c:9f:e3:0c:ee:fe:4e:e5:fd:
         a3:9a:78:71
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7W/ICXSkL5PCOmMNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDg1NWQyNjItOTJiMS00OTE3LWI0MGQtMmU4NTZlMmYy
MGVhMB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk
NmU0ZmY0NTQtNDg2Mi00N2M3LThmYzgtNjU5NmE3MjZjOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRwasUb3Smj22I0ls4c0xSTf37r6EuQ/UsBd
t19qTXKbAppI+qa7DWAXpoF5dqalk8emxY7EVTNCkEShFuLHUrKzhYaPCFU8EnZ8
pQGQcR1uNf2rXQhnqxQiw8EuGiyIEr7X9Tc/sF3OYZC79GdEwvVZz0joK9X2neUF
/+uD4by84tJObyfaJn5EFYHn2yuEaUyK/saplGulj5SLIwtrGIVighR62zJdOJE1
N8uA2C2fRJDrPxQi9DYLcFI+fQyokY0b+wRTNSXvAg9dXzCYoDo2dFPGRiWN+GVb
MZzl5rJr3IttxuY5MnR241fEhP4N4Ke6iXuygvgxVGEaoDp7gQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMECr+r6H+vf1O8woZhNlKyEJmpdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODU1
ZDI2Mi05MmIxLTQ5MTctYjQwZC0yZTg1NmUyZjIwZWEvMzY1OWY3ZmYtNzUzMy0z
YzlkLThiYjctYjY5Njk4OTJmMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDg1NWQyNjItOTJiMS00OTE3LWI0
MGQtMmU4NTZlMmYyMGVhL2Q4NTVkMjYyLTkyYjEtNDkxNy1iNDBkLTJlODU2ZTJm
MjBlYS5jcmwwHwYDVR0jBBgwFoAUgmDSR/I6v7J+azpOmIvLUZFKPywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9kODU1ZDI2Mi05MmIxLTQ5MTctYjQwZC0yZTg1
NmUyZjIwZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP7YAwQA
xoy2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHKB5Yar9y/JsAPUOuelGPRigExHrkEImBAYkIKdaXS3aS2E
DdfsSgHJ+vpNb+BjUye8+t7/k2wnnG9yecv2Q+Wylh0EKwhBP210RX/ZEgXXKCCL
eSvQwBhAx15R1073G56wZPGgn5YjiFxGUynnwvpC+ZmR8q05wn3FWiKezgdV6ONe
C6RVeBspyKHh5lViKc/dYSOUeWshmvDm2wLMMEUBCh0ztQGf6vcApop5mpk2corw
jn9u8hrOG8iX2+BsvV7p1AjcCymOJT4nD25MLUxtvBQYjvpZ4lQqj8bqjO8Rktls
zrGj2xPNULxYsDPXTnkQZyyf4wzu/k7l/aOaeHE=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:47:22 2026 by rpki-client