Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
File:                     e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa (raw, json)
Hash identifier:          497BonAHqoSueftPR8TzfueqYr6PDAYO9KoeauSPJ78=
Subject key identifier:   39:1C:64:79:B7:E9:DC:E2:9A:20:DB:FB:89:DF:71:67:E4:4C:BE:32
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584F49765BE769B002EE7D0CEE70
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        192.243.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:5b:e7:69:b0:02:ee:7d:0c:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4c33568c-d2bf-4732-9c38-5c34ac16423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:90:24:e4:a7:72:d5:72:20:5c:51:2c:34:
                    6f:30:4f:bc:a9:fc:12:4d:36:b4:61:f5:1e:5d:65:
                    fe:1b:6d:19:94:e4:fe:94:a4:17:a1:ad:47:d2:2f:
                    48:d6:9d:91:2e:88:07:57:49:0f:6f:01:c8:24:79:
                    34:df:1d:3c:d4:25:20:cc:86:04:31:5e:c1:9f:72:
                    77:ed:f5:ad:f2:bf:95:d6:f1:fa:cd:45:33:38:2e:
                    88:a0:2f:f5:ae:21:3f:25:8e:84:2a:04:57:0f:76:
                    7f:e9:f2:69:78:da:75:e7:11:b0:7f:d5:d4:a1:0a:
                    a8:29:36:ba:66:a6:00:a1:74:87:d6:6b:7f:13:82:
                    7d:9e:fe:c8:af:72:47:64:d6:b7:fc:f1:28:74:74:
                    f8:61:55:54:aa:c6:eb:6c:75:ce:0c:b6:2a:4e:f3:
                    5e:db:b5:69:72:2d:9c:a8:93:c0:61:7f:97:6e:bf:
                    9b:f6:9e:0b:26:fe:58:58:c5:1f:de:47:60:65:e8:
                    8c:43:fa:00:4c:07:a6:bd:38:19:27:34:a9:f8:d9:
                    21:c1:9a:dc:16:50:72:00:4f:eb:e0:65:cb:4a:27:
                    07:64:98:e9:91:f3:26:6f:e5:d9:b4:4e:8f:aa:25:
                    7b:86:c0:e5:ee:03:f6:97:80:f8:f7:82:71:d2:c0:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:64:79:B7:E9:DC:E2:9A:20:DB:FB:89:DF:71:67:E4:4C:BE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:0f:9a:5d:b7:86:53:53:ba:b4:92:81:b2:39:f7:01:3c:
         b4:33:57:20:5e:94:00:9b:07:73:ba:a2:71:90:a0:f1:63:5a:
         a3:41:ea:18:1a:fc:66:f5:4b:9f:91:64:00:34:1c:c8:3a:dd:
         0c:a3:e1:3b:df:41:57:fc:97:7f:6d:75:f4:80:db:38:fc:b7:
         99:87:fd:95:83:b5:7c:31:8c:ba:36:cc:68:7e:2b:aa:d1:71:
         28:3e:17:70:70:b6:90:58:f5:4f:99:0e:48:12:df:58:3f:e3:
         fe:7f:28:7a:ca:ce:35:6c:ab:ae:d1:ea:ac:bb:1a:fd:cf:a3:
         0a:ba:34:7c:65:51:bd:e4:c1:9a:78:78:5f:a9:99:a4:f2:8c:
         5a:3e:04:60:d0:31:0e:0c:bd:e3:8f:ba:b3:e6:55:13:55:0f:
         25:04:23:89:be:17:ac:be:0e:24:0b:23:ae:2d:e4:34:26:c7:
         11:0f:fa:a4:dd:26:67:00:97:33:f9:f3:46:f9:0f:5f:7f:f2:
         6f:80:6c:13:7e:2e:b9:26:49:64:d3:8e:c4:c3:9b:f4:72:16:
         19:43:ec:f6:72:46:7d:e4:c2:46:65:3c:d4:b0:b0:71:0f:ec:
         bb:b3:b8:54:49:fe:42:53:19:1a:ac:aa:78:2f:ea:ea:ea:ea:
         df:53:bc:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdlvnabAC7n0M7nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQzMDRiNmEtY2Q0YS00MGYyLWIxNDItNWY0NGU4MjRi
NTQ3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGMzMzU2OGMtZDJiZi00NzMyLTljMzgtNWMzNGFjMTY0MjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eiQJOSnctVyIFxRLDRvME+8qfwSTTa0YfUe
XWX+G20ZlOT+lKQXoa1H0i9I1p2RLogHV0kPbwHIJHk03x081CUgzIYEMV7Bn3J3
7fWt8r+V1vH6zUUzOC6IoC/1riE/JY6EKgRXD3Z/6fJpeNp15xGwf9XUoQqoKTa6
ZqYAoXSH1mt/E4J9nv7Ir3JHZNa3/PEodHT4YVVUqsbrbHXODLYqTvNe27Vpci2c
qJPAYX+Xbr+b9p4LJv5YWMUf3kdgZeiMQ/oATAemvTgZJzSp+NkhwZrcFlByAE/r
4GXLSicHZJjpkfMmb+XZtE6PqiV7hsDl7gP2l4D494Jx0sA+7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkcZHm36dzimiDb+4nfcWfkTL4yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDMw
NGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0ZTgyNGI1NDcvZTZhYTViMGUtMGZmYS0z
MjUwLTg2ZTQtMmU0MmVmMTQ4MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQzMDRiNmEtY2Q0YS00MGYyLWIx
NDItNWY0NGU4MjRiNTQ3Lzg0MzA0YjZhLWNkNGEtNDBmMi1iMTQyLTVmNDRlODI0
YjU0Ny5jcmwwHwYDVR0jBBgwFoAUPf1lkVOGZzUg0FsqvFPFF6iUjVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDMwNGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0
ZTgyNGI1NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPNWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEM7D5pdt4ZTU7q0koGyOfcBPLQzVyBelACbB3O6onGQoPFjWqNB6hga
/Gb1S5+RZAA0HMg63Qyj4TvfQVf8l39tdfSA2zj8t5mH/ZWDtXwxjLo2zGh+K6rR
cSg+F3BwtpBY9U+ZDkgS31g/4/5/KHrKzjVsq67R6qy7Gv3Powq6NHxlUb3kwZp4
eF+pmaTyjFo+BGDQMQ4MveOPurPmVRNVDyUEI4m+F6y+DiQLI64t5DQmxxEP+qTd
JmcAlzP580b5D19/8m+AbBN+LrkmSWTTjsTDm/RyFhlD7PZyRn3kwkZlPNSwsHEP
7LuzuFRJ/kJTGRqsqngv6urq6t9TvGA=
-----END CERTIFICATE-----
Generated at Wed Oct 21 13:30:41 2026 by rpki-client