Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa
File:                     8d16e8b6-023d-31c2-b651-81c42ca8072b.roa (raw, json)
Hash identifier:          yj7tCrECW2jJFgLSjYtJO2U8jx8U1AO/pIQNpzD3pCY=
Subject key identifier:   95:51:28:20:21:D3:19:49:E1:BF:18:5E:8E:4E:44:18:EE:F5:F1:89
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584F698D83B9C3CC3216A086D600
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     35847
IP address blocks:        146.85.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:83:b9:c3:cc:32:16:a0:86:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=eb102fe0-df63-424d-b324-562f1f061d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:d2:70:6c:05:46:f6:57:74:51:a1:05:89:
                    59:c6:ec:07:7d:1b:27:38:a5:bf:c0:d9:e0:26:bd:
                    cc:dc:10:bc:07:07:a2:3c:50:bf:65:44:f9:28:b1:
                    99:98:d0:f4:42:ff:6a:5b:25:fe:03:21:0f:b5:18:
                    c9:92:51:1a:00:63:e7:57:c9:2e:9f:f7:48:ca:01:
                    14:9b:48:67:ae:96:39:44:c7:3d:cb:1b:e0:f5:3d:
                    e6:df:d2:26:a0:88:30:f1:ba:b1:46:53:91:fb:c5:
                    13:90:48:da:24:17:95:77:fc:03:77:a6:6f:8f:57:
                    d2:59:fd:92:31:62:12:88:36:81:cf:33:ee:33:ec:
                    2c:e5:0e:f4:6d:f2:8f:00:86:4e:4a:f0:af:a0:f2:
                    9c:3e:27:9b:72:3b:50:f5:4b:48:e0:67:dd:8b:b3:
                    97:94:b6:15:ae:43:bf:fe:95:82:eb:eb:7a:5f:eb:
                    bd:9c:1f:f5:4e:c0:af:93:22:bd:91:f0:44:a4:40:
                    20:7a:ff:a8:0d:5b:19:7b:81:93:80:d7:80:b3:2d:
                    24:08:95:36:e2:dd:2f:52:f6:69:ae:4b:46:d4:6d:
                    65:ec:08:bc:15:57:e0:d1:f3:f9:76:90:6a:a0:7c:
                    f5:20:08:37:ad:85:0a:0b:7b:77:06:25:fb:cb:10:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:28:20:21:D3:19:49:E1:BF:18:5E:8E:4E:44:18:EE:F5:F1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.85.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:76:3e:22:99:73:80:55:cb:33:a8:3d:2c:36:af:2a:6a:93:
         e3:07:05:fc:71:ef:0b:e5:4a:2f:8b:2e:79:97:1f:b7:1d:15:
         99:d7:cb:93:72:b0:43:70:a4:87:1b:c9:43:4e:99:7a:81:d7:
         72:98:1c:00:38:00:32:c1:b4:ed:0d:ae:a4:fc:51:db:47:6d:
         3e:8c:02:5a:5c:d0:da:17:7d:f5:3e:ae:71:54:00:22:e7:5e:
         d2:cd:70:2e:48:d6:e2:49:78:16:1d:a5:cc:59:85:4e:a5:32:
         8f:1d:62:2a:39:9c:9e:5f:8c:21:5e:d4:5b:93:e2:60:35:df:
         57:5a:ac:13:3c:ff:ce:2c:c6:89:a9:78:90:3d:b5:a3:c3:a1:
         ab:90:4f:01:cb:3c:f0:91:68:c4:71:a0:d5:4e:37:2e:67:db:
         e7:19:f1:d0:bf:32:03:4b:e2:38:13:6d:16:2c:97:c0:1f:5c:
         bd:22:ad:76:60:92:2c:e6:82:8f:45:aa:32:1c:9d:a1:e5:bb:
         de:83:db:e3:c4:4f:21:be:bf:7e:ce:f7:08:cf:cf:af:8e:a4:
         97:b0:9c:07:1c:58:b9:6b:75:1c:ae:76:2e:b5:15:3d:b8:e2:
         ad:fc:be:ca:b5:d0:fa:21:93:8c:45:f4:82:0c:c9:34:38:57:
         12:13:38:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYO5w8wyFqCG1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz
ZjExMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
ZWIxMDJmZTAtZGY2My00MjRkLWIzMjQtNTYyZjFmMDYxZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLDScGwFRvZXdFGhBYlZxuwHfRsnOKW/wNng
Jr3M3BC8BweiPFC/ZUT5KLGZmND0Qv9qWyX+AyEPtRjJklEaAGPnV8kun/dIygEU
m0hnrpY5RMc9yxvg9T3m39ImoIgw8bqxRlOR+8UTkEjaJBeVd/wDd6Zvj1fSWf2S
MWISiDaBzzPuM+ws5Q70bfKPAIZOSvCvoPKcPiebcjtQ9UtI4Gfdi7OXlLYVrkO/
/pWC6+t6X+u9nB/1TsCvkyK9kfBEpEAgev+oDVsZe4GTgNeAsy0kCJU24t0vUvZp
rktG1G1l7Ai8FVfg0fP5dpBqoHz1IAg3rYUKC3t3BiX7yxAt9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVRKCAh0xlJ4b8YXo5ORBju9fGJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh
NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvOGQxNmU4YjYtMDIzZC0z
MWMyLWI2NTEtODFjNDJjYTgwNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj
NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm
M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw
YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFklWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFB2PiKZc4BVyzOoPSw2rypqk+MHBfxx7wvlSi+LLnmXH7cdFZnXy5Ny
sENwpIcbyUNOmXqB13KYHAA4ADLBtO0NrqT8UdtHbT6MAlpc0NoXffU+rnFUACLn
XtLNcC5I1uJJeBYdpcxZhU6lMo8dYio5nJ5fjCFe1FuT4mA131darBM8/84sxomp
eJA9taPDoauQTwHLPPCRaMRxoNVONy5n2+cZ8dC/MgNL4jgTbRYsl8AfXL0irXZg
kizmgo9FqjIcnaHlu96D2+PETyG+v37O9wjPz6+OpJewnAccWLlrdRyudi61FT24
4q38vsq10Pohk4xF9IIMyTQ4VxITONs=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:14:40 2026 by rpki-client