Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
File:                     fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa (raw, json)
Hash identifier:          Wc7gPniUSuOz2ryA2LAUkvwgYpH2ysu92HEAkndqeow=
Subject key identifier:   7D:B7:2B:69:D0:7B:33:2F:A0:4E:A2:DE:DC:9D:FA:F5:DF:4D:BF:54
Certificate issuer:       /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial:       010D0C9F4328584F0D6CDFA591D9DBCBB2339EC0
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     13959
IP address blocks:        216.150.43.0/24 maxlen: 24
                          216.150.44.0/24 maxlen: 24
                          216.150.45.0/24 maxlen: 24
                          216.150.46.0/24 maxlen: 24
                          216.150.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:df:a5:91:d9:db:cb:b2:33:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=c27f65f5-b658-4712-987d-57262702d3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:75:10:66:52:86:ed:41:88:25:52:81:37:
                    d6:b5:ed:27:e7:3e:78:b3:87:ae:8e:3f:a4:9e:69:
                    90:37:92:68:cc:39:8d:7e:0a:08:ba:05:c5:f5:c4:
                    50:f5:73:b0:71:66:0c:67:49:49:2a:c8:af:32:ce:
                    ec:47:56:99:06:f5:1e:e5:83:c2:6f:99:0e:f9:06:
                    b2:ef:ff:82:c1:5f:d0:62:f5:0e:a3:09:54:ce:8c:
                    c1:23:5c:59:36:93:cc:6e:f0:ee:79:8d:61:f3:5d:
                    82:fc:36:fb:bb:ff:a2:5b:99:24:5b:a7:8a:c6:73:
                    d6:b6:45:44:61:8d:53:f8:10:b6:fc:99:d5:a6:59:
                    15:47:da:ef:c0:d8:f6:cc:ad:46:56:53:6a:5c:13:
                    bd:24:a7:b2:92:3e:76:78:6d:54:de:c5:2a:db:11:
                    7c:28:89:86:6d:b7:72:bd:1b:55:d7:ed:18:ea:77:
                    e5:48:2e:f3:4f:49:ec:5c:ed:a0:a6:98:65:c4:fd:
                    70:39:aa:95:99:70:b4:cf:31:55:03:59:f6:7b:38:
                    4c:79:26:18:73:41:e3:57:13:46:7b:dd:bf:c3:6c:
                    75:ad:0d:58:20:f8:00:07:e1:c3:f3:17:95:37:61:
                    6e:63:cf:ca:aa:4a:d1:bd:e8:dc:ad:89:f2:f2:6e:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B7:2B:69:D0:7B:33:2F:A0:4E:A2:DE:DC:9D:FA:F5:DF:4D:BF:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl

            X509v3 Authority Key Identifier:
                keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.43.0-216.150.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:73:7f:73:2f:90:99:ba:21:71:c5:6f:90:42:8f:ee:6b:9a:
         09:21:15:be:a4:87:cc:18:9c:75:81:51:58:89:f0:61:a9:b8:
         92:88:09:4c:c7:fc:30:93:bb:22:bf:79:9c:cb:31:5e:ae:d5:
         c6:ce:d9:6a:a1:9f:3c:28:1a:bb:34:b8:6f:1e:f2:6a:f5:e6:
         8d:f3:36:19:92:c4:3d:99:56:92:bb:a3:02:f3:62:a5:3e:db:
         48:12:68:33:33:1e:08:7b:0b:84:69:9f:69:4c:33:1e:c0:4b:
         17:27:02:bd:6e:49:a6:64:2f:db:ca:40:14:c2:a1:91:b1:77:
         75:cb:03:a8:f5:10:33:67:73:99:3b:94:33:2d:9d:64:04:0d:
         48:3c:2f:a2:8c:7b:93:8a:58:85:48:f3:6b:17:42:d2:ab:de:
         f2:33:93:db:16:b2:95:c1:4c:b7:43:7d:27:64:19:e5:2e:1d:
         92:c3:8c:38:28:2f:e8:c3:14:62:82:9c:2a:2e:74:30:6f:4f:
         6d:03:dc:3e:f8:4a:dd:be:8a:b4:46:0f:5b:c6:bf:01:d8:f4:
         95:fb:c0:ce:fd:22:e0:c2:6e:2f:84:89:90:d9:b3:e9:6c:aa:
         e9:9f:59:eb:02:f3:42:ff:57:12:df:75:e2:25:05:8b:87:d3:
         05:91:59:0f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8NbN+lkdnby7IznsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZlOGE5NDItNWFjMi00MWU4LWFhODktN2RkY2ZkMGJi
NmFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
YzI3ZjY1ZjUtYjY1OC00NzEyLTk4N2QtNTcyNjI3MDJkM2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj551EGZShu1BiCVSgTfWte0n5z54s4eujj+k
nmmQN5JozDmNfgoIugXF9cRQ9XOwcWYMZ0lJKsivMs7sR1aZBvUe5YPCb5kO+Qay
7/+CwV/QYvUOowlUzozBI1xZNpPMbvDueY1h812C/Db7u/+iW5kkW6eKxnPWtkVE
YY1T+BC2/JnVplkVR9rvwNj2zK1GVlNqXBO9JKeykj52eG1U3sUq2xF8KImGbbdy
vRtV1+0Y6nflSC7zT0nsXO2gpphlxP1wOaqVmXC0zzFVA1n2ezhMeSYYc0HjVxNG
e92/w2x1rQ1YIPgAB+HD8xeVN2FuY8/KqkrRvejcrYny8m6iTQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH23K2nQezMvoE6i3tyd+vXfTb9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4
YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRjZmQwYmI2YWQvZmNiODVmNWMtMGFjNi0z
MjY4LTkyZWUtNjYxMDNlYWEwNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWZlOGE5NDItNWFjMi00MWU4LWFh
ODktN2RkY2ZkMGJiNmFkL2FmZThhOTQyLTVhYzItNDFlOC1hYTg5LTdkZGNmZDBi
YjZhZC5jcmwwHwYDVR0jBBgwFoAUX9vLCQSsI6jASrDynFopVAP/iRkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRj
ZmQwYmI2YWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYlisD
BATYliAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAe3N/cy+QmbohccVvkEKP7muaCSEVvqSHzBicdYFRWInw
Yam4kogJTMf8MJO7Ir95nMsxXq7Vxs7ZaqGfPCgauzS4bx7yavXmjfM2GZLEPZlW
krujAvNipT7bSBJoMzMeCHsLhGmfaUwzHsBLFycCvW5JpmQv28pAFMKhkbF3dcsD
qPUQM2dzmTuUMy2dZAQNSDwvoox7k4pYhUjzaxdC0qve8jOT2xaylcFMt0N9J2QZ
5S4dksOMOCgv6MMUYoKcKi50MG9PbQPcPvhK3b6KtEYPW8a/Adj0lfvAzv0i4MJu
L4SJkNmz6Wyq6Z9Z6wLzQv9XEt914iUFi4fTBZFZDw==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:29:38 2026 by rpki-client