Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1e36b120-5df6-3612-9e15-4677179c274b.roa
File:                     1e36b120-5df6-3612-9e15-4677179c274b.roa (raw, json)
Hash identifier:          maHwvE3nrB65DjLig017SH+XZeGYINJ3nxjWf/xSwzI=
Subject key identifier:   03:E9:B5:54:53:DC:7E:D7:A9:8A:1A:84:B8:BE:2A:45:9A:8E:80:4F
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584EC9071C575F31014CD3509C80
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1e36b120-5df6-3612-9e15-4677179c274b.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     393383
IP address blocks:        216.227.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1c:57:5f:31:01:4c:d3:50:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=8ddc5f3f-4dbd-451c-9d6c-288e66948dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:87:17:7e:95:e2:39:96:2a:97:07:07:fb:
                    32:4a:ea:a1:f1:ab:29:6f:3b:19:3f:da:31:d8:36:
                    11:cf:81:af:e2:e2:75:32:50:11:24:c3:c2:b6:50:
                    ad:a8:45:a9:4e:48:8a:76:94:8f:48:0c:1c:39:85:
                    ae:1f:1f:0c:6a:3c:11:f4:41:8b:3b:70:dd:99:e3:
                    75:9e:3b:f1:c9:07:8b:31:74:b5:72:40:c2:0d:d1:
                    7f:2b:5d:f7:e6:8f:83:df:e1:d6:76:2c:7a:8f:70:
                    dc:b9:ce:1e:f8:98:f9:d9:d4:ee:48:3b:ee:c7:91:
                    93:1a:ce:b6:e0:fb:50:1c:3f:e7:02:8b:97:8a:0d:
                    b6:98:13:3a:5b:be:d9:07:24:c2:b3:a1:2b:73:17:
                    13:5f:a8:c7:38:97:b4:6e:48:c3:4f:63:76:75:1f:
                    7a:e7:74:5d:4c:ee:dd:ed:c2:02:9d:cc:0c:5b:df:
                    36:bb:bf:ae:1e:e5:1d:9f:33:88:6a:df:b6:ee:07:
                    18:43:72:4a:f6:8d:3e:e6:6e:89:8e:47:47:e1:3d:
                    98:b7:0c:ae:f1:d4:08:96:49:89:22:74:a1:fc:d4:
                    ab:97:95:98:ca:4d:8b:d2:71:88:70:00:f9:0e:31:
                    34:0d:6c:81:03:f8:7c:a6:4e:77:0f:32:9c:0c:be:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E9:B5:54:53:DC:7E:D7:A9:8A:1A:84:B8:BE:2A:45:9A:8E:80:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1e36b120-5df6-3612-9e15-4677179c274b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:e7:44:a4:25:9c:e1:a4:cd:7b:49:dd:27:a6:cb:d8:92:
         0b:79:98:2f:c3:4f:05:c4:a4:80:03:93:37:67:72:ba:02:27:
         45:21:85:e8:0a:a7:14:35:6f:1a:27:2a:2a:88:da:ad:44:dc:
         8f:83:1b:75:fa:60:2f:ab:76:3e:ed:4f:19:3a:ef:29:9c:7c:
         da:0c:ae:2d:5c:9e:8c:c0:99:34:8e:aa:8b:ed:6a:1c:f5:90:
         e5:91:6c:8d:88:ef:e5:81:50:f5:ae:59:35:e5:23:ec:52:8a:
         4f:f0:cf:aa:f4:aa:03:01:17:19:33:3f:fc:13:f3:76:3d:0e:
         79:b6:e7:2d:47:10:9a:e5:26:4a:52:3b:4a:92:9f:77:ac:92:
         55:5b:fa:02:aa:b1:00:a7:00:79:75:ba:13:83:2e:9b:9b:03:
         f3:b7:c1:fc:5f:a9:9d:3e:24:e5:49:dd:16:39:65:7d:95:f4:
         ae:ce:a6:4d:2a:8f:ad:cd:f4:63:93:cb:72:f9:89:99:43:1e:
         10:d9:69:1c:aa:4d:20:0e:ff:98:0b:9f:df:0b:b1:a0:04:e4:
         e2:8b:40:0a:ac:cb:de:8c:a3:77:cf:6b:79:cc:13:03:d5:36:
         bd:0e:89:62:c6:5a:a9:0a:10:6f:b3:6f:d8:56:03:fe:bd:f3:
         34:23:29:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxxXXzEBTNNQnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz
ZjExMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
OGRkYzVmM2YtNGRiZC00NTFjLTlkNmMtMjg4ZTY2OTQ4ZGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOaHF36V4jmWKpcHB/sySuqh8aspbzsZP9ox
2DYRz4Gv4uJ1MlARJMPCtlCtqEWpTkiKdpSPSAwcOYWuHx8MajwR9EGLO3DdmeN1
njvxyQeLMXS1ckDCDdF/K1335o+D3+HWdix6j3Dcuc4e+Jj52dTuSDvux5GTGs62
4PtQHD/nAouXig22mBM6W77ZByTCs6ErcxcTX6jHOJe0bkjDT2N2dR9653RdTO7d
7cICncwMW982u7+uHuUdnzOIat+27gcYQ3JK9o0+5m6JjkdH4T2Ytwyu8dQIlkmJ
InSh/NSrl5WYyk2L0nGIcAD5DjE0DWyBA/h8pk53DzKcDL5GTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPptVRT3H7XqYoahLi+KkWajoBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh
NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMWUzNmIxMjAtNWRmNi0z
NjEyLTllMTUtNDY3NzE3OWMyNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj
NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm
M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw
YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlc50SkJZzhpM17Sd0npsvYkgt5mC/DTwXEpIADkzdncroCJ0UhhegK
pxQ1bxonKiqI2q1E3I+DG3X6YC+rdj7tTxk67ymcfNoMri1cnozAmTSOqovtahz1
kOWRbI2I7+WBUPWuWTXlI+xSik/wz6r0qgMBFxkzP/wT83Y9Dnm25y1HEJrlJkpS
O0qSn3esklVb+gKqsQCnAHl1uhODLpubA/O3wfxfqZ0+JOVJ3RY5ZX2V9K7Opk0q
j63N9GOTy3L5iZlDHhDZaRyqTSAO/5gLn98LsaAE5OKLQAqsy96Mo3fPa3nMEwPV
Nr0OiWLGWqkKEG+zb9hWA/698zQjKdY=
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:42:41 2026 by rpki-client