Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/7fd03af3-fd0e-3df8-9484-92bae1bd09fd.roa
File:                     7fd03af3-fd0e-3df8-9484-92bae1bd09fd.roa (raw, json)
Hash identifier:          TDnSrnj9Cj5HF40NSyd7ncudkQqf9FP53Uhan6UX9so=
Subject key identifier:   5A:AF:B9:CB:40:C5:5F:E7:4D:A0:3A:F4:02:53:77:84:0C:BE:12:40
Certificate issuer:       /CN=4281be58-d566-431e-b0b8-c563e631a010
Certificate serial:       010D0C9F4328584F7FAD38260D56FAAC254C8B80
Authority key identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/7fd03af3-fd0e-3df8-9484-92bae1bd09fd.roa
Signing time:             Wed 14 Oct 2026 11:12:08 +0000
ROA not before:           Wed 14 Oct 2026 11:12:08 +0000
ROA not after:            Tue 12 Jan 2027 12:12:08 +0000
asID:                     174
IP address blocks:        104.192.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:ad:38:26:0d:56:fa:ac:25:4c:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4281be58-d566-431e-b0b8-c563e631a010
        Validity
            Not Before: Oct 14 11:12:08 2026 GMT
            Not After : Jan 12 12:12:08 2027 GMT
        Subject: CN=c44ccdbc-a00a-496d-b107-ea00f061304c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:79:f8:43:80:e3:9e:ab:75:ef:05:48:7d:
                    ba:da:60:dc:c7:f4:d4:ae:95:9e:82:f7:56:10:46:
                    28:dc:35:8c:f3:af:8e:89:77:e4:03:14:50:64:80:
                    a7:93:00:43:47:8d:24:aa:74:51:75:82:1a:84:66:
                    46:d3:e3:fa:20:0d:2f:af:fb:6b:a3:45:37:aa:b1:
                    42:7f:96:7d:be:a5:67:0e:f9:f8:99:bc:04:b8:2b:
                    26:7c:b7:e2:bb:26:88:6f:0c:34:ed:3e:47:18:df:
                    5f:a3:46:3f:a7:e7:a6:db:05:17:aa:3b:4f:f1:77:
                    fd:49:1c:28:4a:6d:3c:d7:fe:42:e6:09:35:4c:7a:
                    b3:97:5b:2c:cd:bd:5d:66:f6:a7:a9:7e:e6:18:b1:
                    ce:18:15:fa:69:b5:de:9e:37:c1:02:f1:c7:27:e6:
                    3d:ef:bc:ab:0e:69:cd:bd:66:d9:33:ec:d9:8f:06:
                    67:13:55:28:88:c2:82:08:6d:4d:cb:22:27:d2:73:
                    a0:b8:95:70:c1:9f:59:ab:ba:a0:4a:8f:57:32:d5:
                    eb:99:c2:4b:22:51:9d:64:e3:e7:70:21:4d:da:a5:
                    39:5d:bc:43:c4:82:3c:53:6e:3a:9b:0f:7c:13:4b:
                    fe:7c:95:3c:41:46:16:8f:16:83:56:0c:e5:8f:a9:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AF:B9:CB:40:C5:5F:E7:4D:A0:3A:F4:02:53:77:84:0C:BE:12:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/7fd03af3-fd0e-3df8-9484-92bae1bd09fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:b4:55:92:db:31:91:62:16:3c:e2:d7:42:d1:d3:69:89:
         64:97:8f:a9:6e:b0:f9:37:16:66:3a:a0:ab:eb:94:30:58:3f:
         e3:4d:a8:0a:7d:70:65:4b:94:dd:40:f9:8a:e9:84:5e:ae:58:
         66:80:59:e7:7d:67:31:b3:0f:3c:55:27:4e:e3:98:71:08:61:
         90:71:6e:52:0f:1e:66:29:f5:24:b7:22:d5:29:28:32:71:d8:
         ea:58:d3:d1:d2:00:07:63:92:2d:cb:72:56:b6:0d:d0:51:67:
         13:2c:36:30:ca:c6:41:cf:98:34:fe:7f:77:98:5c:7a:f1:38:
         66:1d:37:7e:b3:04:24:b5:54:ae:f3:7d:e2:c1:de:7e:2b:c9:
         63:94:76:61:d2:9f:18:5a:5b:bd:b5:1b:62:0f:17:d3:ce:bd:
         93:6f:91:98:a4:13:76:7d:59:ca:39:1c:3b:cc:08:0e:21:01:
         f6:51:be:c7:bd:ff:6d:21:c3:e3:ac:78:92:6f:ae:f6:f9:c1:
         ac:f5:41:f9:c9:30:6a:3a:69:41:05:7b:cc:dc:f4:b8:cf:0b:
         56:2f:79:b1:d5:75:b1:dc:6b:43:d4:fa:23:50:b3:f8:02:54:
         21:33:a6:b3:4f:8c:98:ca:42:62:02:90:f8:97:a5:d6:34:71:
         f0:02:3a:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/rTgmDVb6rCVMi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI4MWJlNTgtZDU2Ni00MzFlLWIwYjgtYzU2M2U2MzFh
MDEwMB4XDTI2MTAxNDExMTIwOFoXDTI3MDExMjEyMTIwOFowLzEtMCsGA1UEAxMk
YzQ0Y2NkYmMtYTAwYS00OTZkLWIxMDctZWEwMGYwNjEzMDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjl5+EOA456rde8FSH262mDcx/TUrpWegvdW
EEYo3DWM86+OiXfkAxRQZICnkwBDR40kqnRRdYIahGZG0+P6IA0vr/tro0U3qrFC
f5Z9vqVnDvn4mbwEuCsmfLfiuyaIbww07T5HGN9fo0Y/p+em2wUXqjtP8Xf9SRwo
Sm081/5C5gk1THqzl1sszb1dZvanqX7mGLHOGBX6abXenjfBAvHHJ+Y977yrDmnN
vWbZM+zZjwZnE1UoiMKCCG1NyyIn0nOguJVwwZ9Zq7qgSo9XMtXrmcJLIlGdZOPn
cCFN2qU5XbxDxII8U246mw98E0v+fJU8QUYWjxaDVgzlj6mbSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqvuctAxV/nTaA69AJTd4QMvhJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Mjgx
YmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYzMWEwMTAvN2ZkMDNhZjMtZmQwZS0z
ZGY4LTk0ODQtOTJiYWUxYmQwOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDI4MWJlNTgtZDU2Ni00MzFlLWIw
YjgtYzU2M2U2MzFhMDEwLzQyODFiZTU4LWQ1NjYtNDMxZS1iMGI4LWM1NjNlNjMx
YTAxMC5jcmwwHwYDVR0jBBgwFoAU6pqAXn34jOIHzTn95b3tM/iz/uowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYz
ZTYzMWEwMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMBdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsdtFWS2zGRYhY84tdC0dNpiWSXj6lusPk3FmY6oKvrlDBYP+NNqAp9
cGVLlN1A+YrphF6uWGaAWed9ZzGzDzxVJ07jmHEIYZBxblIPHmYp9SS3ItUpKDJx
2OpY09HSAAdjki3Lcla2DdBRZxMsNjDKxkHPmDT+f3eYXHrxOGYdN36zBCS1VK7z
feLB3n4ryWOUdmHSnxhaW721G2IPF9POvZNvkZikE3Z9Wco5HDvMCA4hAfZRvse9
/20hw+OseJJvrvb5waz1QfnJMGo6aUEFe8zc9LjPC1YvebHVdbHca0PU+iNQs/gC
VCEzprNPjJjKQmICkPiXpdY0cfACOlM=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:04 2026 by rpki-client