Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/4fde3cde-ea90-3bfc-a0de-190f27a35e47.roa
File:                     4fde3cde-ea90-3bfc-a0de-190f27a35e47.roa (raw, json)
Hash identifier:          4nKiFqnt76P8UXfqBU0KyqF7FedlR3HYqDxyKYzx5N0=
Subject key identifier:   B9:E1:12:79:3D:44:38:FE:99:31:2C:74:51:C7:DC:5C:05:AA:3B:21
Certificate issuer:       /CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
Certificate serial:       010D0C9F4328584F5F75199BE1E7683C2321C980
Authority key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/4fde3cde-ea90-3bfc-a0de-190f27a35e47.roa
Signing time:             Fri 02 Oct 2026 22:13:11 +0000
ROA not before:           Fri 02 Oct 2026 22:13:11 +0000
ROA not after:            Thu 31 Dec 2026 23:13:11 +0000
asID:                     15830
IP address blocks:        134.49.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:75:19:9b:e1:e7:68:3c:23:21:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
        Validity
            Not Before: Oct  2 22:13:11 2026 GMT
            Not After : Dec 31 23:13:11 2026 GMT
        Subject: CN=0d61bd76-8326-4c95-b61b-758515aeb988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:38:52:ae:c0:85:52:61:ad:14:f3:18:01:
                    76:b7:65:e7:34:f5:ef:93:9e:08:4d:29:a2:2e:bb:
                    ca:0b:58:41:e5:4b:12:da:92:79:eb:89:66:1b:5a:
                    b9:fc:c1:03:8c:94:c5:d6:25:d9:a5:66:b6:d2:92:
                    5b:de:a8:e1:7c:5f:04:db:84:33:4c:d4:c6:08:5b:
                    dd:46:d7:89:c1:9c:27:de:fa:cc:6f:f0:fc:7d:05:
                    14:24:3c:67:dd:15:a0:79:36:19:54:ab:30:41:c9:
                    2e:f8:f1:a5:8e:b8:34:91:5e:c3:8f:c4:dd:bc:42:
                    42:1c:5b:a5:c4:2e:ac:47:ee:f8:9f:80:e1:57:1b:
                    d4:ac:06:3d:9b:27:2a:f8:07:8d:85:56:73:27:e2:
                    cd:e7:96:78:18:46:58:0b:24:ec:48:56:1a:6d:ca:
                    5f:dd:48:9b:0f:b6:62:e8:b5:36:87:0f:de:93:3b:
                    6a:27:03:5c:53:b6:77:04:d8:cc:85:de:ac:37:e5:
                    ea:40:94:f9:9c:ea:56:19:e8:08:00:74:0d:65:91:
                    fe:f9:f6:43:8e:7a:50:ec:82:ba:18:a7:a9:58:8d:
                    6a:1e:fe:b9:62:1b:99:62:d7:97:6f:cc:ac:d3:b1:
                    a6:96:80:f3:b5:9f:a7:c4:ef:a6:58:95:bc:e0:f9:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:12:79:3D:44:38:FE:99:31:2C:74:51:C7:DC:5C:05:AA:3B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/4fde3cde-ea90-3bfc-a0de-190f27a35e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl

            X509v3 Authority Key Identifier:
                keyid:1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:68:eb:0b:96:1f:67:0b:07:4a:1c:05:ff:1c:ed:55:5f:
         e1:77:52:94:ad:09:7c:1e:15:cc:7d:5e:44:50:a6:cf:d5:44:
         b6:e8:22:fd:18:50:77:0a:8d:e7:6f:2d:dd:3b:23:f4:77:e7:
         cb:02:97:a2:f6:f2:69:ba:ff:6c:42:0d:66:26:7d:d1:da:87:
         b4:45:2f:dd:67:1c:1f:ff:be:a8:c6:c2:6d:5a:7e:26:44:ec:
         1d:d8:35:ee:78:5d:aa:23:6d:3b:cb:57:ec:4f:f5:7d:7e:0c:
         6d:1b:4b:10:54:05:ac:a0:1d:e2:37:ee:88:82:74:16:e0:70:
         79:f1:45:e1:40:5c:2d:5a:8f:e0:1d:d7:44:57:ef:fc:3f:c7:
         cb:92:64:2b:f9:1a:21:80:3e:12:38:8a:fa:da:43:c8:3a:87:
         47:fc:8d:65:ea:06:f6:ea:fe:31:7a:72:77:f5:ea:71:8c:54:
         31:54:04:56:37:8a:c4:e4:51:79:2a:a3:e6:06:0b:01:bd:f6:
         f9:e4:c5:07:fa:47:ea:98:4d:f0:62:38:f0:42:32:8c:f9:77:
         e6:9b:fc:d6:ec:e2:a1:35:14:75:30:8b:a3:53:23:64:b5:22:
         af:e7:77:9e:08:91:6b:10:bf:49:0b:27:cd:6e:ee:2a:ba:a3:
         66:fe:3a:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fdRmb4edoPCMhyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY2YmMzYjItZTYyMS00MjcyLWI2MDQtMTBlZDVkYmI0
ZWMxMB4XDTI2MTAwMjIyMTMxMVoXDTI2MTIzMTIzMTMxMVowLzEtMCsGA1UEAxMk
MGQ2MWJkNzYtODMyNi00Yzk1LWI2MWItNzU4NTE1YWViOTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLU4Uq7AhVJhrRTzGAF2t2XnNPXvk54ITSmi
LrvKC1hB5UsS2pJ564lmG1q5/MEDjJTF1iXZpWa20pJb3qjhfF8E24QzTNTGCFvd
RteJwZwn3vrMb/D8fQUUJDxn3RWgeTYZVKswQcku+PGljrg0kV7Dj8TdvEJCHFul
xC6sR+74n4DhVxvUrAY9mycq+AeNhVZzJ+LN55Z4GEZYCyTsSFYabcpf3UibD7Zi
6LU2hw/ekztqJwNcU7Z3BNjMhd6sN+XqQJT5nOpWGegIAHQNZZH++fZDjnpQ7IK6
GKepWI1qHv65YhuZYteXb8ys07GmloDztZ+nxO+mWJW84PlLoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnhEnk9RDj+mTEsdFHH3FwFqjshMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZjZi
YzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRiYjRlYzEvNGZkZTNjZGUtZWE5MC0z
YmZjLWEwZGUtMTkwZjI3YTM1ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGY2YmMzYjItZTYyMS00MjcyLWI2
MDQtMTBlZDVkYmI0ZWMxL2RmNmJjM2IyLWU2MjEtNDI3Mi1iNjA0LTEwZWQ1ZGJi
NGVjMS5jcmwwHwYDVR0jBBgwFoAUHbzuz2fzaXVgghaLRvzxi44vCacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9kZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVk
NWRiYjRlYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhjHkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICcaOsLlh9nCwdKHAX/HO1VX+F3UpStCXweFcx9XkRQps/VRLboIv0Y
UHcKjedvLd07I/R358sCl6L28mm6/2xCDWYmfdHah7RFL91nHB//vqjGwm1afiZE
7B3YNe54XaojbTvLV+xP9X1+DG0bSxBUBaygHeI37oiCdBbgcHnxReFAXC1aj+Ad
10RX7/w/x8uSZCv5GiGAPhI4ivraQ8g6h0f8jWXqBvbq/jF6cnf16nGMVDFUBFY3
isTkUXkqo+YGCwG99vnkxQf6R+qYTfBiOPBCMoz5d+ab/Nbs4qE1FHUwi6NTI2S1
Iq/nd54IkWsQv0kLJ81u7iq6o2b+OkE=
-----END CERTIFICATE-----
Generated at Fri Oct 16 13:37:21 2026 by rpki-client