Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/88727eac-def2-3a3c-9679-de5de7a9a33b.roa
File:                     88727eac-def2-3a3c-9679-de5de7a9a33b.roa (raw, json)
Hash identifier:          yiKsLxDfYIxrrPoibRfkjgC9JcjG6K0E+KlSPahOQNk=
Subject key identifier:   05:D6:BD:58:4D:83:DD:A5:AF:D0:4E:54:20:FE:CA:05:A1:24:CE:69
Certificate issuer:       /CN=dc1e9fec-2dac-415e-bb76-593d78f18126
Certificate serial:       010D0C9F4328584F78E82F384CDA2AF264B2CF00
Authority key identifier: 57:24:C3:7B:94:28:AC:60:2C:BB:D7:53:70:2C:A8:C9:F5:73:A3:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/88727eac-def2-3a3c-9679-de5de7a9a33b.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     62807
IP address blocks:        192.188.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2f:38:4c:da:2a:f2:64:b2:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1e9fec-2dac-415e-bb76-593d78f18126
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=28ae1818-50ad-4c38-9c16-3213defa9382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:f7:d9:98:43:75:dd:2f:61:76:5a:41:69:
                    22:ba:f7:34:de:7e:7d:02:a2:99:f8:64:11:1d:d5:
                    90:f8:29:4c:33:ab:64:07:85:78:80:e6:77:9e:3c:
                    9e:3c:5c:13:b7:40:6c:24:d2:87:28:be:9c:71:5e:
                    11:e7:09:31:0f:67:f2:68:72:a6:ff:8c:df:46:be:
                    e0:4c:47:f6:f5:e5:fa:43:f4:2a:70:04:23:ae:67:
                    cb:9c:a1:e7:8c:6c:38:98:90:9d:fb:63:3c:c7:88:
                    de:1a:f5:b2:83:29:38:72:b5:e2:8d:40:30:67:6f:
                    b6:ed:2e:67:e2:86:05:cc:a1:26:b8:9d:2c:39:5b:
                    63:84:e7:6a:41:1a:df:6c:5b:97:0f:de:08:db:5b:
                    19:de:46:aa:2f:20:40:ba:b1:67:20:81:99:b9:33:
                    25:f7:8a:e2:e8:e5:10:b7:f1:70:01:4f:5e:06:f2:
                    db:99:97:02:f7:04:42:f7:9a:25:bb:4c:c6:fd:ac:
                    5f:f6:06:9a:78:58:fa:b2:8c:78:a0:1a:64:94:8d:
                    5a:68:ac:d1:53:67:c6:bf:e5:90:f5:1a:42:46:2c:
                    54:fc:d6:53:99:da:f8:b4:a3:43:8d:97:f2:d8:97:
                    2a:ec:f9:e0:6f:6f:d1:9a:9f:ac:4b:9e:be:43:c2:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:BD:58:4D:83:DD:A5:AF:D0:4E:54:20:FE:CA:05:A1:24:CE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/88727eac-def2-3a3c-9679-de5de7a9a33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.crl

            X509v3 Authority Key Identifier:
                keyid:57:24:C3:7B:94:28:AC:60:2C:BB:D7:53:70:2C:A8:C9:F5:73:A3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:92:62:1b:a5:7a:07:ef:4b:ba:f9:db:05:3c:99:b9:3b:b3:
         79:5d:5e:8e:b9:46:e4:09:95:13:75:07:50:59:25:db:60:1c:
         fe:ba:4f:b0:3f:44:d2:51:bd:95:c2:c4:31:f9:a6:b9:b1:5a:
         dd:8d:e0:ad:38:fa:b1:5e:84:83:bf:38:58:1e:4d:0d:72:d9:
         e5:5e:ce:67:65:82:3a:80:61:04:27:91:12:33:a6:8a:82:26:
         1e:5c:e0:c1:85:a9:84:7a:36:50:03:7b:50:f2:f6:ba:0c:4e:
         d5:4b:12:39:e8:88:a4:56:1d:ed:f3:f4:a9:4f:39:2b:9b:59:
         cc:1e:4a:b2:51:75:73:6f:f5:f3:5c:d3:69:6e:62:7e:a2:7c:
         86:1c:56:d0:96:2c:0c:ae:f3:c9:ed:3f:95:2a:63:b6:0d:19:
         5c:de:3c:e8:87:f9:14:5d:f6:5b:c7:03:f8:ad:e9:36:45:3a:
         3e:c3:e7:94:44:af:5b:9c:79:44:69:cd:ce:f5:a7:26:32:1d:
         a0:2b:fc:08:55:fa:2d:3e:f9:2c:c6:fc:0c:8c:29:20:c5:1b:
         c3:ab:a4:f0:a3:7d:be:b7:76:30:1a:5f:23:9e:68:dc:ad:ae:
         65:13:4a:bb:a4:14:5f:b4:ad:70:69:7f:04:37:32:73:99:a9:
         7d:34:3c:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946C84TNoq8mSyzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGMxZTlmZWMtMmRhYy00MTVlLWJiNzYtNTkzZDc4ZjE4
MTI2MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk
MjhhZTE4MTgtNTBhZC00YzM4LTljMTYtMzIxM2RlZmE5MzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh/32ZhDdd0vYXZaQWkiuvc03n59AqKZ+GQR
HdWQ+ClMM6tkB4V4gOZ3njyePFwTt0BsJNKHKL6ccV4R5wkxD2fyaHKm/4zfRr7g
TEf29eX6Q/QqcAQjrmfLnKHnjGw4mJCd+2M8x4jeGvWygyk4crXijUAwZ2+27S5n
4oYFzKEmuJ0sOVtjhOdqQRrfbFuXD94I21sZ3kaqLyBAurFnIIGZuTMl94ri6OUQ
t/FwAU9eBvLbmZcC9wRC95olu0zG/axf9gaaeFj6sox4oBpklI1aaKzRU2fGv+WQ
9RpCRixU/NZTmdr4tKNDjZfy2Jcq7Pngb2/Rmp+sS56+Q8JAWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXWvVhNg92lr9BOVCD+ygWhJM5pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kYzFl
OWZlYy0yZGFjLTQxNWUtYmI3Ni01OTNkNzhmMTgxMjYvODg3MjdlYWMtZGVmMi0z
YTNjLTk2NzktZGU1ZGU3YTlhMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGMxZTlmZWMtMmRhYy00MTVlLWJi
NzYtNTkzZDc4ZjE4MTI2L2RjMWU5ZmVjLTJkYWMtNDE1ZS1iYjc2LTU5M2Q3OGYx
ODEyNi5jcmwwHwYDVR0jBBgwFoAUVyTDe5QorGAsu9dTcCyoyfVzo78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9kYzFlOWZlYy0yZGFjLTQxNWUtYmI3Ni01OTNk
NzhmMTgxMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLzJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSSYhulegfvS7r52wU8mbk7s3ldXo65RuQJlRN1B1BZJdtgHP66T7A/
RNJRvZXCxDH5prmxWt2N4K04+rFehIO/OFgeTQ1y2eVezmdlgjqAYQQnkRIzpoqC
Jh5c4MGFqYR6NlADe1Dy9roMTtVLEjnoiKRWHe3z9KlPOSubWcweSrJRdXNv9fNc
02luYn6ifIYcVtCWLAyu88ntP5UqY7YNGVzePOiH+RRd9lvHA/it6TZFOj7D55RE
r1uceURpzc71pyYyHaAr/AhV+i0++SzG/AyMKSDFG8OrpPCjfb63djAaXyOeaNyt
rmUTSrukFF+0rXBpfwQ3MnOZqX00PCg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:59 2026 by rpki-client