Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6463e755-17e8-3e4a-903c-68910792e864.roa
File:                     6463e755-17e8-3e4a-903c-68910792e864.roa (raw, json)
Hash identifier:          dQuIOZXnrAZryMa+HPHntcMdqQ2wa5O1NZGWjc++dR0=
Subject key identifier:   E1:A3:22:6E:03:06:75:CD:A2:31:F4:DD:69:1B:2B:32:18:DC:4D:43
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD5AA891A83CFB70871E80
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6463e755-17e8-3e4a-903c-68910792e864.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        216.129.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:5a:a8:91:a8:3c:fb:70:87:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=1d5961b4-34b5-463a-8967-17db380990e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:b1:f0:39:22:4b:49:64:b1:e3:1e:15:2d:
                    92:5c:5f:38:00:8b:c6:7c:96:30:87:82:41:5a:62:
                    3c:1f:42:36:55:64:4e:c9:02:a6:0d:18:6b:dd:6a:
                    e4:d0:4c:61:30:64:5b:4d:88:53:7b:1f:a5:b4:7d:
                    2d:6e:13:7a:55:fd:51:0d:fd:00:a9:12:53:32:76:
                    ca:3f:1d:e7:ab:bd:13:72:31:05:27:ce:09:0a:19:
                    ea:e8:f5:f6:36:73:59:74:59:aa:3c:92:64:fa:ef:
                    cd:0a:fd:a8:3c:69:d2:a7:8b:ea:f3:ab:44:4c:f8:
                    de:2e:2b:e2:89:37:79:81:ab:78:3a:60:fc:e3:3e:
                    cb:0e:d6:bb:30:9f:22:3c:ac:bd:9b:b1:e0:9c:cc:
                    6b:78:7c:3b:4b:9b:83:f1:e6:79:78:3c:b6:76:c1:
                    1f:8a:9b:b3:18:41:80:20:4f:5f:a1:ad:4c:49:96:
                    85:02:d8:aa:71:71:50:11:7e:35:da:9c:9d:94:de:
                    b9:be:0f:3a:cf:14:bb:87:66:65:30:9c:40:b5:df:
                    e2:2a:35:76:23:2f:51:37:6d:34:6e:97:e5:27:b4:
                    c4:55:46:4b:d6:f0:71:a4:4b:2f:78:c4:80:16:91:
                    39:6a:52:40:b9:43:2a:6c:6a:63:8b:21:a7:3a:6a:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:22:6E:03:06:75:CD:A2:31:F4:DD:69:1B:2B:32:18:DC:4D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6463e755-17e8-3e4a-903c-68910792e864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:5d:d9:7d:c3:f8:a7:eb:9a:de:52:59:b1:38:48:2f:b7:88:
         c4:9f:f2:8c:2f:f3:f9:a2:4c:47:38:c7:58:7f:65:ec:78:fd:
         ad:72:ec:d5:97:bc:71:0b:67:37:ac:51:00:d3:e9:7c:8f:54:
         b5:34:77:19:ba:3d:91:67:06:a2:08:51:73:f7:4f:5c:76:47:
         e1:7f:9d:11:22:f9:76:39:e8:05:3e:c8:e8:05:29:2e:bb:7e:
         96:a5:0a:f8:9f:a3:91:08:de:a0:7b:09:49:fc:af:06:fc:0f:
         3c:3e:a5:85:73:17:91:21:3a:16:3b:72:55:7a:14:91:41:db:
         63:8b:ef:15:c2:54:55:76:3c:38:17:54:07:ed:e9:e6:eb:a1:
         f6:88:53:a1:d4:b0:3e:37:35:dd:ce:70:59:6b:47:0e:d7:45:
         38:fa:37:01:92:4b:53:ed:a6:f9:0b:f0:97:b6:53:6f:96:7b:
         71:84:58:cf:1d:9d:67:b8:0e:39:6f:14:d3:ac:10:7d:96:8e:
         8a:e4:0f:22:a2:b3:ba:e4:b1:f7:2f:f0:0e:56:42:ce:9c:55:
         05:eb:cb:2a:a3:5c:47:21:38:40:39:9f:64:e7:56:dd:9e:c7:
         29:6a:80:6d:36:6f:6d:78:68:b6:50:2a:d2:d9:42:11:ef:0f:
         62:59:1b:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/Vqokag8+3CHHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk
MWQ1OTYxYjQtMzRiNS00NjNhLTg5NjctMTdkYjM4MDk5MGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv2x8DkiS0lkseMeFS2SXF84AIvGfJYwh4JB
WmI8H0I2VWROyQKmDRhr3Wrk0ExhMGRbTYhTex+ltH0tbhN6Vf1RDf0AqRJTMnbK
Px3nq70TcjEFJ84JChnq6PX2NnNZdFmqPJJk+u/NCv2oPGnSp4vq86tETPjeLivi
iTd5gat4OmD84z7LDta7MJ8iPKy9m7HgnMxreHw7S5uD8eZ5eDy2dsEfipuzGEGA
IE9foa1MSZaFAtiqcXFQEX412pydlN65vg86zxS7h2ZlMJxAtd/iKjV2Iy9RN200
bpflJ7TEVUZL1vBxpEsveMSAFpE5alJAuUMqbGpjiyGnOmpTSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGjIm4DBnXNojH03WkbKzIY3E1DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvNjQ2M2U3NTUtMTdlOC0z
ZTRhLTkwM2MtNjg5MTA3OTJlODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IHiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANtd2X3D+Kfrmt5SWbE4SC+3iMSf8owv8/miTEc4x1h/Zex4/a1y7NWX
vHELZzesUQDT6XyPVLU0dxm6PZFnBqIIUXP3T1x2R+F/nREi+XY56AU+yOgFKS67
fpalCvifo5EI3qB7CUn8rwb8Dzw+pYVzF5EhOhY7clV6FJFB22OL7xXCVFV2PDgX
VAft6ebrofaIU6HUsD43Nd3OcFlrRw7XRTj6NwGSS1PtpvkL8Je2U2+We3GEWM8d
nWe4DjlvFNOsEH2WjorkDyKis7rksfcv8A5WQs6cVQXryyqjXEchOEA5n2TnVt2e
xylqgG02b214aLZQKtLZQhHvD2JZG4s=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:48:13 2026 by rpki-client