Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa
File:                     9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa (raw, json)
Hash identifier:          LflFeiPge8BRDK6dDR/E7hqSPTVG3vZetOvmzwyZXWo=
Subject key identifier:   94:6F:9D:5D:88:82:2E:51:47:CF:5C:50:9E:67:D6:93:0F:18:EF:D6
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F49766AE01C870604FB8AF280
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.52.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6a:e0:1c:87:06:04:fb:8a:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=387efa95-62fc-4856-a742-f5521a275e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3b:d3:54:04:e4:3f:1c:39:c3:eb:5f:d2:b9:
                    92:3b:d6:e3:1c:23:c1:cd:a9:19:bd:97:21:1a:28:
                    3d:77:d7:35:be:89:cc:2d:da:59:04:b5:f5:88:f5:
                    65:96:be:0e:c9:0a:3d:3d:cb:b0:f8:3a:dc:6d:0e:
                    b0:bd:16:b1:bf:3b:d0:11:47:99:a8:4f:94:22:6b:
                    5c:50:9e:e2:16:fd:22:ae:29:41:d6:71:c2:b0:b8:
                    fa:78:8d:ef:de:f6:fb:8a:bb:a0:54:c8:49:60:b4:
                    87:6b:82:7e:47:b1:46:35:d8:3c:2d:34:cb:5f:aa:
                    d2:44:3c:da:bc:ff:d0:9d:6e:6a:fe:ff:00:2c:50:
                    d7:01:cc:10:45:12:db:ec:4a:91:b3:7c:71:30:81:
                    d4:b8:cf:4b:01:78:79:14:4d:16:62:0a:d7:9d:32:
                    85:0d:d7:3b:5c:0a:ac:e8:08:a3:1c:39:c3:d7:c4:
                    a3:ad:a3:91:4d:b8:be:02:ad:70:e3:75:e3:75:6b:
                    52:80:15:1f:95:f4:51:7d:dd:c8:f1:c1:ce:ef:3c:
                    86:6d:c1:78:6f:4a:e6:4e:ef:dc:c9:fd:65:5d:9f:
                    4f:6e:20:12:33:7d:33:f1:20:09:7d:9a:7a:96:5f:
                    2d:d8:7a:3c:93:be:63:81:9d:ec:9c:2d:7b:cc:fb:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6F:9D:5D:88:82:2E:51:47:CF:5C:50:9E:67:D6:93:0F:18:EF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/9cfcf47f-f6b1-3982-a15d-5d97479fccde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:b3:27:1a:6f:25:69:c6:45:aa:50:c0:ff:76:08:a2:e0:
         57:4a:7a:84:f8:7f:4f:78:73:ca:a8:b7:20:49:a3:31:9c:1c:
         55:02:92:66:d8:a7:78:54:d2:c7:df:03:1a:e5:b4:d3:10:16:
         22:f9:b8:f2:38:cb:20:61:de:19:c4:95:e1:73:39:d2:e5:58:
         85:d0:c4:47:0c:2b:b4:44:be:1e:70:7f:ac:db:c6:1f:f7:5c:
         c3:90:a5:ec:79:7d:2f:49:20:58:e8:87:67:9d:56:c1:84:d5:
         cd:48:e9:c2:59:de:c7:73:4b:6b:1e:fc:2e:4d:b9:57:2d:26:
         a8:4d:ba:05:63:e7:77:f5:08:ab:c7:24:1c:7d:f2:32:1e:1f:
         18:df:cf:e8:f6:23:ca:69:e1:90:03:34:d0:de:d1:a3:fc:a2:
         bc:06:05:ef:1f:7b:fb:a8:75:c7:b3:b4:76:5e:c3:0b:5a:a2:
         5e:2d:d0:05:10:a3:78:86:2b:d1:b2:df:ed:2c:5b:7a:9e:3d:
         55:1c:48:07:0a:e5:97:71:aa:ad:3f:ba:61:ce:81:98:09:22:
         44:f1:6a:3d:12:8b:ea:80:30:3f:0a:d0:6c:a6:59:6d:d7:b8:
         6a:a6:fd:b0:58:c9:b6:f5:e5:f9:02:14:bc:0f:e4:d8:97:a1:
         13:5e:42:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmrgHIcGBPuK8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl
NWVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mzg3ZWZhOTUtNjJmYy00ODU2LWE3NDItZjU1MjFhMjc1ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTvTVATkPxw5w+tf0rmSO9bjHCPBzakZvZch
Gig9d9c1vonMLdpZBLX1iPVllr4OyQo9Pcuw+DrcbQ6wvRaxvzvQEUeZqE+UImtc
UJ7iFv0irilB1nHCsLj6eI3v3vb7irugVMhJYLSHa4J+R7FGNdg8LTTLX6rSRDza
vP/QnW5q/v8ALFDXAcwQRRLb7EqRs3xxMIHUuM9LAXh5FE0WYgrXnTKFDdc7XAqs
6AijHDnD18SjraORTbi+Aq1w43XjdWtSgBUflfRRfd3I8cHO7zyGbcF4b0rmTu/c
yf1lXZ9PbiASM30z8SAJfZp6ll8t2Ho8k75jgZ3snC17zPt29QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRvnV2Igi5RR89cUJ5n1pMPGO/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4
ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvOWNmY2Y0N2YtZjZiMS0z
OTgyLWExNWQtNWQ5NzQ3OWZjY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk
NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4
ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj
MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DQMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnusycabyVpxkWqUMD/dgii4FdKeoT4f094c8qotyBJozGcHFUCkmbY
p3hU0sffAxrltNMQFiL5uPI4yyBh3hnEleFzOdLlWIXQxEcMK7REvh5wf6zbxh/3
XMOQpex5fS9JIFjoh2edVsGE1c1I6cJZ3sdzS2se/C5NuVctJqhNugVj53f1CKvH
JBx98jIeHxjfz+j2I8pp4ZADNNDe0aP8orwGBe8fe/uodceztHZewwtaol4t0AUQ
o3iGK9Gy3+0sW3qePVUcSAcK5Zdxqq0/umHOgZgJIkTxaj0Si+qAMD8K0GymWW3X
uGqm/bBYybb15fkCFLwP5NiXoRNeQv4=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:39:13 2026 by rpki-client