Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa
File:                     fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa (raw, json)
Hash identifier:          6pnxRPYGK1IXEtxTdzp59PqZKrNdhNBpb7me+3/Vt9s=
Subject key identifier:   81:5B:9E:C4:0C:15:CB:5B:D4:C4:61:F7:B1:D4:34:3B:09:E1:0A:F9
Certificate issuer:       /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72
Certificate serial:       010D0C9F4328584EA78864D6E27E1A24EF4C6C60
Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18108
IP address blocks:        216.14.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:64:d6:e2:7e:1a:24:ef:4c:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=095e53b4-e22d-450e-b630-1de723a7b0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:92:d1:5e:32:40:9f:e8:0b:68:b9:3a:dd:
                    cb:e1:8d:a9:f0:2c:94:f1:45:67:90:7f:3a:96:58:
                    62:a6:85:a1:18:d9:35:87:2e:12:bf:c9:4a:3b:44:
                    59:1f:13:11:f6:70:c7:55:e0:e4:d3:1f:ca:f4:32:
                    f6:d4:ee:ad:81:aa:64:b4:a5:6f:9d:f4:04:94:d3:
                    b7:2f:47:10:6c:19:39:a0:11:4a:f0:40:96:cf:7b:
                    37:86:d8:8d:88:3e:2e:6b:60:f6:a2:40:57:83:28:
                    9b:05:bb:0a:71:c5:bf:6c:bc:df:58:f4:78:c7:e2:
                    33:a8:11:27:ee:ee:0b:4f:40:c3:87:5d:2c:e0:81:
                    a0:8d:01:c8:b7:5c:1b:e9:cd:86:35:7d:4a:01:25:
                    7b:4d:62:3b:2c:b4:76:05:70:47:9b:4e:db:e2:cc:
                    87:68:68:8b:73:5a:38:24:0c:cd:47:f5:e9:f4:7c:
                    a0:39:0e:f5:6d:6b:38:dc:da:d8:f7:b3:0f:e1:b6:
                    d1:5f:88:69:6b:79:02:7d:3c:f6:e7:2a:3b:8f:df:
                    1b:7e:8c:dd:7f:ab:da:cb:79:61:65:f1:da:87:21:
                    5b:ec:db:9a:14:37:1a:1b:fd:e0:67:26:dc:26:a7:
                    1e:2f:42:7e:da:d5:f4:53:07:a0:8d:1c:af:19:c7:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:9E:C4:0C:15:CB:5B:D4:C4:61:F7:B1:D4:34:3B:09:E1:0A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl

            X509v3 Authority Key Identifier:
                keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:00:b6:34:35:8f:f3:fd:d1:67:90:77:cd:b4:25:a2:5c:a9:
         42:50:dd:89:e3:fa:c1:00:4b:11:00:0e:23:09:97:15:12:31:
         e4:42:0f:e9:f1:a9:af:45:16:7c:12:8c:31:d8:f9:99:c6:11:
         dd:47:47:4a:48:d5:df:28:08:47:27:8d:0f:ca:59:19:f1:1c:
         af:73:d4:95:36:cc:98:27:6c:d8:2b:5e:0e:0a:3d:f1:fd:f9:
         be:b6:30:af:d9:1e:eb:58:6d:73:34:92:bf:24:74:da:b0:dc:
         4b:02:01:f8:b0:ec:d0:05:26:b7:ae:da:ac:af:90:fd:76:6e:
         f1:30:9a:51:be:14:68:a0:b7:50:66:73:e8:6e:0d:22:35:e5:
         91:6c:01:6e:a4:12:44:1a:6f:5f:f9:25:60:96:45:4a:b5:fe:
         8a:41:8f:5a:24:ad:55:27:ea:24:dd:33:e2:14:6e:37:2f:92:
         34:25:73:fc:0b:15:9e:06:e0:82:46:60:ff:1f:a5:7a:d3:dd:
         1c:20:ea:ff:0e:25:60:44:fb:1a:44:f4:3c:8d:8e:e9:6e:95:
         23:1a:6b:c4:b1:36:62:55:5e:f8:62:a5:38:32:d9:7b:1c:10:
         3e:1b:19:21:a5:fd:71:f9:94:70:b7:51:28:a1:98:2b:64:f8:
         9a:df:53:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGTW4n4aJO9MbGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez
ZTcyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDk1ZTUzYjQtZTIyZC00NTBlLWI2MzAtMWRlNzIzYTdiMGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprmS0V4yQJ/oC2i5Ot3L4Y2p8CyU8UVnkH86
llhipoWhGNk1hy4Sv8lKO0RZHxMR9nDHVeDk0x/K9DL21O6tgapktKVvnfQElNO3
L0cQbBk5oBFK8ECWz3s3htiNiD4ua2D2okBXgyibBbsKccW/bLzfWPR4x+IzqBEn
7u4LT0DDh10s4IGgjQHIt1wb6c2GNX1KASV7TWI7LLR2BXBHm07b4syHaGiLc1o4
JAzNR/Xp9HygOQ71bWs43NrY97MP4bbRX4hpa3kCfTz25yo7j98bfozdf6vay3lh
ZfHahyFb7NuaFDcaG/3gZybcJqceL0J+2tX0UwegjRyvGccagwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFbnsQMFctb1MRh97HUNDsJ4Qr5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj
MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvZmVjYmMzZTUtZWIzOC0z
OTE3LTk1ZWUtNGMyY2VhNDZlNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk
NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh
M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl
NjkzYTNlNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2A7GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEAtjQ1j/P90WeQd820JaJcqUJQ3Ynj+sEASxEADiMJlxUSMeRCD+nx
qa9FFnwSjDHY+ZnGEd1HR0pI1d8oCEcnjQ/KWRnxHK9z1JU2zJgnbNgrXg4KPfH9
+b62MK/ZHutYbXM0kr8kdNqw3EsCAfiw7NAFJreu2qyvkP12bvEwmlG+FGigt1Bm
c+huDSI15ZFsAW6kEkQab1/5JWCWRUq1/opBj1okrVUn6iTdM+IUbjcvkjQlc/wL
FZ4G4IJGYP8fpXrT3Rwg6v8OJWBE+xpE9DyNjululSMaa8SxNmJVXvhipTgy2Xsc
ED4bGSGl/XH5lHC3USihmCtk+JrfUzM=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:23 2026 by rpki-client