Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/86f17309-cce6-3d74-b1b2-4a6281b09ca2.roa
File:                     86f17309-cce6-3d74-b1b2-4a6281b09ca2.roa (raw, json)
Hash identifier:          gEBlwSdJbnmtN8g1yXaFwfFCnqDXGSkvAYwz2SQk/34=
Subject key identifier:   5E:F9:6A:4A:AB:99:88:F2:98:EB:4A:7F:21:57:EE:64:3A:68:47:B4
Certificate issuer:       /CN=2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a
Certificate serial:       010D0C9F4328584F1E2CECB3EF70C0551A5B5D00
Authority key identifier: 68:81:83:2A:07:13:49:65:6E:43:D7:DD:87:FE:72:3E:E7:D9:CF:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/86f17309-cce6-3d74-b1b2-4a6281b09ca2.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     401000
IP address blocks:        130.12.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ec:b3:ef:70:c0:55:1a:5b:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=32b3025d-5db8-45c9-9686-438998d489df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:8c:f8:8a:fa:7f:3e:f5:4f:72:c7:7c:a9:
                    7a:61:16:d3:59:23:78:af:b4:c1:6d:79:ea:a1:de:
                    c0:9c:3f:7a:8f:f7:ac:24:53:bc:7b:73:5f:82:ab:
                    25:7e:cd:1d:a1:cc:fb:41:94:77:cd:4f:a5:63:42:
                    ff:1e:61:a3:5e:4e:f7:e2:77:99:31:ef:12:22:ab:
                    e1:7a:92:b6:b3:34:7c:1c:d9:58:95:4c:f7:79:52:
                    07:13:61:27:83:5d:c1:d8:b2:0e:34:ce:76:f3:c2:
                    d5:05:c7:99:f0:cf:c1:b1:14:f2:95:55:27:ff:3a:
                    3a:fe:90:7b:cc:c0:58:3b:cc:f0:03:32:b3:20:c1:
                    88:f6:52:63:66:55:8f:be:b5:d4:ed:13:28:8c:18:
                    cb:b3:d9:af:c8:f4:bc:23:a1:93:7b:4a:67:a3:4f:
                    dd:9a:33:c6:9d:c3:b1:20:27:89:f1:1d:82:b9:3b:
                    ad:d4:1e:97:82:59:e2:06:f9:b6:cb:8d:0d:a3:08:
                    88:91:ff:77:e3:e3:fa:cf:bf:72:94:58:de:22:6a:
                    6f:90:61:79:cd:19:9a:1a:a5:c9:18:dc:bf:1b:4e:
                    a6:ea:d0:a3:56:12:e6:fc:aa:01:0c:1a:38:20:77:
                    80:a0:61:e5:cc:1e:4c:2a:f9:dc:ba:1c:17:63:99:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F9:6A:4A:AB:99:88:F2:98:EB:4A:7F:21:57:EE:64:3A:68:47:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/86f17309-cce6-3d74-b1b2-4a6281b09ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.crl

            X509v3 Authority Key Identifier:
                keyid:68:81:83:2A:07:13:49:65:6E:43:D7:DD:87:FE:72:3E:E7:D9:CF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fdfc1ab-7caa-4d47-a3bb-c4928e4b871a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:29:ad:42:94:75:7f:c4:d1:25:b5:a2:0e:ab:ea:3f:da:
         45:3b:9b:94:f3:9e:4d:20:24:64:f0:6d:a3:03:3f:48:12:6d:
         3e:8a:c5:4f:e8:64:18:61:49:39:b1:ba:02:bf:24:78:50:b0:
         8b:ad:5a:68:b5:4b:03:fc:96:dc:99:84:0a:55:e1:56:ad:f8:
         0e:35:2d:c6:5a:41:a3:74:76:b7:f5:a2:f1:3e:05:39:ad:3f:
         c6:a8:39:51:41:54:38:d0:ff:f0:0f:b6:eb:97:83:31:5c:d8:
         f4:26:ac:d4:d4:3f:a9:48:a1:5b:18:e8:f6:e8:05:12:b8:09:
         bf:91:33:8e:c0:bb:ac:12:95:9d:48:7a:8c:a8:38:5c:18:1c:
         5e:78:3b:c4:9c:81:25:f6:42:1c:4f:a9:fa:25:56:1e:b4:3d:
         39:bf:47:d2:9d:27:16:da:26:2b:a6:0b:73:c9:97:d8:9e:ba:
         2e:e6:7b:ce:e1:db:19:f6:d3:cf:dd:08:b3:f8:78:6b:9f:84:
         98:1a:9f:ed:4e:57:70:3a:26:cb:fe:d3:65:9d:94:fc:cb:1a:
         61:41:2f:e2:9f:42:26:27:de:06:1b:26:c3:e3:72:80:60:1e:
         51:59:f9:18:5d:62:fc:af:78:d4:07:9b:73:99:14:b0:97:5f:
         7b:b6:68:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLOyz73DAVRpbXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkZmMxYWItN2NhYS00ZDQ3LWEzYmItYzQ5MjhlNGI4
NzFhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
MzJiMzAyNWQtNWRiOC00NWM5LTk2ODYtNDM4OTk4ZDQ4OWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseuM+Ir6fz71T3LHfKl6YRbTWSN4r7TBbXnq
od7AnD96j/esJFO8e3Nfgqslfs0docz7QZR3zU+lY0L/HmGjXk734neZMe8SIqvh
epK2szR8HNlYlUz3eVIHE2Eng13B2LIONM5288LVBceZ8M/BsRTylVUn/zo6/pB7
zMBYO8zwAzKzIMGI9lJjZlWPvrXU7RMojBjLs9mvyPS8I6GTe0pno0/dmjPGncOx
ICeJ8R2CuTut1B6XglniBvm2y40NowiIkf934+P6z79ylFjeImpvkGF5zRmaGqXJ
GNy/G06m6tCjVhLm/KoBDBo4IHeAoGHlzB5MKvncuhwXY5n6uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF75akqrmYjymOtKfyFX7mQ6aEe0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmRm
YzFhYi03Y2FhLTRkNDctYTNiYi1jNDkyOGU0Yjg3MWEvODZmMTczMDktY2NlNi0z
ZDc0LWIxYjItNGE2MjgxYjA5Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkZmMxYWItN2NhYS00ZDQ3LWEz
YmItYzQ5MjhlNGI4NzFhLzJmZGZjMWFiLTdjYWEtNGQ0Ny1hM2JiLWM0OTI4ZTRi
ODcxYS5jcmwwHwYDVR0jBBgwFoAUaIGDKgcTSWVuQ9fdh/5yPufZz6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmRmYzFhYi03Y2FhLTRkNDctYTNiYi1jNDky
OGU0Yjg3MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZfKa1ClHV/xNEltaIOq+o/2kU7m5Tznk0gJGTwbaMDP0gSbT6KxU/o
ZBhhSTmxugK/JHhQsIutWmi1SwP8ltyZhApV4Vat+A41LcZaQaN0drf1ovE+BTmt
P8aoOVFBVDjQ//APtuuXgzFc2PQmrNTUP6lIoVsY6PboBRK4Cb+RM47Au6wSlZ1I
eoyoOFwYHF54O8ScgSX2QhxPqfolVh60PTm/R9KdJxbaJiumC3PJl9ieui7me87h
2xn208/dCLP4eGufhJgan+1OV3A6Jsv+02WdlPzLGmFBL+KfQiYn3gYbJsPjcoBg
HlFZ+RhdYvyveNQHm3OZFLCXX3u2aBg=
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:44 2026 by rpki-client