Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
File:                     149f19f9-ddf2-32e1-9d07-a184289910a5.roa (raw, json)
Hash identifier:          9I9DOW3AAYFzh2U6C+NmRPtNSG3CTmwaHVVB9nd6QBM=
Subject key identifier:   0A:DF:03:26:A8:89:62:35:E3:A9:1D:4D:21:7F:C4:CA:AB:55:81:5E
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F5E62C0DED1BC9A57FE933080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     397422
IP address blocks:        209.237.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c0:de:d1:bc:9a:57:fe:93:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9910e4bc-0b50-4775-a086-cc7c5d29e50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:cc:f4:f1:07:b8:3b:34:67:df:28:68:87:
                    37:d4:08:88:8b:0b:0f:bd:70:89:2c:24:58:66:15:
                    bd:2d:52:4d:79:10:06:79:a9:1d:f0:b3:8b:2f:75:
                    7c:12:6a:9e:04:21:bf:54:1f:65:1c:34:6f:dc:11:
                    46:c0:3a:4d:94:fd:45:02:b2:ad:d1:62:1f:43:fb:
                    89:5e:51:73:67:48:0c:a0:5e:96:82:26:19:12:bc:
                    a8:d4:f3:f1:e6:38:54:90:1b:b7:e4:ba:9a:d5:a5:
                    1c:2d:04:aa:02:db:85:2d:64:af:f0:dc:ba:77:09:
                    b5:4f:a8:2d:1c:36:39:96:12:0c:6e:59:87:8e:70:
                    95:89:3c:82:ff:e5:b5:51:8c:5e:7f:9f:2b:33:67:
                    76:fc:67:a1:dc:14:ce:12:70:43:2f:1f:ba:39:c1:
                    74:6f:18:e4:76:1c:88:be:3f:7d:25:28:af:d2:b7:
                    6b:a9:28:98:41:3a:94:6c:33:df:34:2b:c2:fa:cf:
                    20:48:43:ba:9b:a2:20:a2:95:a5:c3:28:a9:30:72:
                    45:36:bd:dc:57:43:58:f0:6d:db:5f:9e:d5:30:22:
                    58:9d:01:66:93:6c:24:c4:b5:65:45:ea:a0:4d:15:
                    f2:34:02:c0:10:da:bb:af:3c:8b:b5:86:c3:77:10:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:03:26:A8:89:62:35:E3:A9:1D:4D:21:7F:C4:CA:AB:55:81:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:68:ec:17:63:b9:22:6a:c0:1c:fb:93:e9:36:9a:e7:1f:
         3f:1e:71:b9:ec:a0:7a:7a:95:c1:f7:e7:a2:2e:f2:ae:f6:d8:
         62:f4:2f:a2:dc:5a:32:50:0e:f1:8a:1e:ef:56:f5:cf:3b:8a:
         c5:52:42:b9:cb:f5:b4:7d:f1:e8:35:56:1d:ae:6b:f7:32:72:
         29:61:91:86:40:4f:06:5d:24:64:16:70:4f:ec:54:e1:2b:b4:
         02:00:0f:9e:98:b6:2e:52:e7:ea:80:36:bb:ff:d4:ac:45:9e:
         ad:57:ad:45:5e:ca:d5:84:55:7a:cd:05:c4:48:9d:57:20:df:
         7c:6f:e0:71:c5:99:aa:d2:3d:fd:5b:84:99:ce:7e:db:c0:87:
         9d:45:c1:b9:45:8e:6f:65:d8:ca:95:a0:77:9a:80:4e:14:6c:
         ef:0c:1d:24:40:02:fb:2d:86:f3:3f:a1:bb:1e:21:6a:f3:3c:
         a0:37:35:32:fb:cd:33:d9:9e:16:50:0c:bf:24:4f:4e:0b:ce:
         1d:a7:d2:79:4a:41:3e:06:20:f8:c5:a4:c5:ca:4e:44:82:2e:
         02:cc:a3:2a:31:06:72:21:84:37:96:6c:26:70:de:6d:95:50:
         4f:3b:72:71:37:a2:26:1a:b8:86:2a:cf:34:3a:fd:4b:6b:d4:
         c5:36:b5:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsDe0byaV/6TMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
OTkxMGU0YmMtMGI1MC00Nzc1LWEwODYtY2M3YzVkMjllNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2DM9PEHuDs0Z98oaIc31AiIiwsPvXCJLCRY
ZhW9LVJNeRAGeakd8LOLL3V8EmqeBCG/VB9lHDRv3BFGwDpNlP1FArKt0WIfQ/uJ
XlFzZ0gMoF6WgiYZEryo1PPx5jhUkBu35Lqa1aUcLQSqAtuFLWSv8Ny6dwm1T6gt
HDY5lhIMblmHjnCViTyC/+W1UYxef58rM2d2/Geh3BTOEnBDLx+6OcF0bxjkdhyI
vj99JSiv0rdrqSiYQTqUbDPfNCvC+s8gSEO6m6IgopWlwyipMHJFNr3cV0NY8G3b
X57VMCJYnQFmk2wkxLVlReqgTRXyNALAENq7rzyLtYbDdxCfeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArfAyaoiWI146kdTSF/xMqrVYFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMTQ5ZjE5ZjktZGRmMi0z
MmUxLTlkMDctYTE4NDI4OTkxMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH57aOwXY7kiasAc+5PpNprnHz8ecbnsoHp6lcH356Iu8q722GL0L6Lc
WjJQDvGKHu9W9c87isVSQrnL9bR98eg1Vh2ua/cycilhkYZATwZdJGQWcE/sVOEr
tAIAD56Yti5S5+qANrv/1KxFnq1XrUVeytWEVXrNBcRInVcg33xv4HHFmarSPf1b
hJnOftvAh51FwblFjm9l2MqVoHeagE4UbO8MHSRAAvsthvM/obseIWrzPKA3NTL7
zTPZnhZQDL8kT04Lzh2n0nlKQT4GIPjFpMXKTkSCLgLMoyoxBnIhhDeWbCZw3m2V
UE87cnE3oiYauIYqzzQ6/Utr1MU2tRo=
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:25 2026 by rpki-client