Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
File:                     3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa (raw, json)
Hash identifier:          /ceAkF8oHxbBCWs4B6JK9m/aab0Tr0CAK+gLKRiaIXM=
Subject key identifier:   78:26:CF:FA:52:CC:04:BE:5A:FD:42:14:99:47:FF:F6:2E:37:D8:13
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F497540585384511C94301A00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        206.192.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:40:58:53:84:51:1c:94:30:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=65513bb8-9d53-4884-acf1-8a3dd62e5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:84:3d:3d:c8:ba:a9:bb:6d:21:ce:93:26:
                    84:c5:7a:40:f1:25:c2:c1:99:2f:7d:11:9a:7d:fd:
                    5c:64:dd:e5:68:bf:5b:7d:8c:5d:c1:e8:3f:71:3a:
                    c1:05:ae:ac:a2:dc:6d:72:88:bc:0f:bd:c4:d1:b2:
                    45:e3:7b:e4:13:3b:31:43:63:92:2e:e0:1b:24:4c:
                    a4:57:e2:6d:a0:4c:15:7b:ec:07:2a:ec:99:9a:8b:
                    43:0b:d7:05:01:62:9e:26:8e:c2:96:df:a3:e1:28:
                    b0:19:4e:e5:5f:fe:ca:bb:56:b9:55:86:f0:7b:25:
                    34:68:6a:a1:18:9f:86:b3:d6:ea:e1:d2:e5:88:e8:
                    73:a4:9f:d6:fc:7e:af:2f:6c:75:74:8d:22:da:8f:
                    d5:d2:41:65:0e:64:85:bc:70:ec:13:c7:f5:92:fd:
                    09:7e:ee:e9:3b:5e:ad:11:80:42:61:03:25:ec:98:
                    54:53:1e:b2:a0:a9:96:49:0a:ca:4e:8d:b3:11:3d:
                    ca:30:5c:39:c4:2b:c6:08:0a:3e:bc:be:0c:d0:d3:
                    74:6f:58:8a:2c:b1:fb:eb:ea:e2:d8:9e:c2:1b:bb:
                    1c:81:0f:0d:a6:5f:3c:bb:35:c8:4b:2f:0f:2a:4b:
                    76:43:20:90:91:ac:52:d6:48:1c:1a:7b:ed:3b:fe:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:CF:FA:52:CC:04:BE:5A:FD:42:14:99:47:FF:F6:2E:37:D8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:72:ce:1a:d5:8a:1c:42:b6:32:dc:3e:ad:e9:62:4c:bd:bf:
         6e:5a:ea:7a:bc:ad:4f:b8:92:5c:39:03:71:41:71:6c:9b:89:
         10:ec:49:a2:01:3c:93:15:f9:7a:b7:62:cb:11:fd:b0:4c:a7:
         99:fc:f8:42:25:2b:f0:3f:56:6e:0b:3e:1a:d5:66:de:c9:30:
         1e:bb:39:53:7b:c4:b2:67:30:88:35:d2:34:4d:dc:c6:ab:4e:
         80:e7:df:6b:ed:ac:9a:34:3b:24:9f:07:8e:35:04:a4:87:05:
         25:0d:72:c8:d2:f5:6f:eb:7f:87:3e:c9:bc:df:c6:25:53:31:
         c0:28:8f:ac:66:e6:55:c7:4a:2d:a8:67:50:14:c9:9d:c2:d3:
         fe:e2:84:49:95:46:3e:a9:f4:6b:87:30:f0:9a:6d:88:3b:9f:
         d3:23:db:43:a1:5b:1e:b6:71:32:16:1a:d4:a1:98:56:53:f0:
         fc:0a:ea:e4:23:67:50:af:72:0d:37:a4:bb:f9:17:20:d8:0e:
         78:13:2d:bf:cb:91:1e:89:c5:9b:77:aa:6a:ae:0b:34:7f:c3:
         2c:85:f2:7f:f7:64:7f:b2:4b:79:66:1d:4e:49:24:50:71:d2:
         a8:b5:47:fd:bc:b5:a4:67:16:ad:8f:f5:a3:fb:ed:43:e4:62:
         b7:0f:a9:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUBYU4RRHJQwGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjU1MTNiYjgtOWQ1My00ODg0LWFjZjEtOGEzZGQ2MmU1NTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA2EPT3Iuqm7bSHOkyaExXpA8SXCwZkvfRGa
ff1cZN3laL9bfYxdweg/cTrBBa6sotxtcoi8D73E0bJF43vkEzsxQ2OSLuAbJEyk
V+JtoEwVe+wHKuyZmotDC9cFAWKeJo7Clt+j4SiwGU7lX/7Ku1a5VYbweyU0aGqh
GJ+Gs9bq4dLliOhzpJ/W/H6vL2x1dI0i2o/V0kFlDmSFvHDsE8f1kv0Jfu7pO16t
EYBCYQMl7JhUUx6yoKmWSQrKTo2zET3KMFw5xCvGCAo+vL4M0NN0b1iKLLH76+ri
2J7CG7scgQ8Npl88uzXISy8PKkt2QyCQkaxS1kgcGnvtO/6v+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgmz/pSzAS+Wv1CFJlH//YuN9gTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMzg5NmQzYWYtMDI2NC0z
NWJhLThkYmYtMDY4ZGRjOGIyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsDoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFyzhrVihxCtjLcPq3pYky9v25a6nq8rU+4klw5A3FBcWybiRDsSaIB
PJMV+Xq3YssR/bBMp5n8+EIlK/A/Vm4LPhrVZt7JMB67OVN7xLJnMIg10jRN3Mar
ToDn32vtrJo0OySfB441BKSHBSUNcsjS9W/rf4c+ybzfxiVTMcAoj6xm5lXHSi2o
Z1AUyZ3C0/7ihEmVRj6p9GuHMPCabYg7n9Mj20OhWx62cTIWGtShmFZT8PwK6uQj
Z1Cvcg03pLv5FyDYDngTLb/LkR6JxZt3qmquCzR/wyyF8n/3ZH+yS3lmHU5JJFBx
0qi1R/28taRnFq2P9aP77UPkYrcPqTM=
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:37:06 2026 by rpki-client