Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/61c6a0bd-d79b-3464-b9c5-0dee21805a82.roa
File:                     61c6a0bd-d79b-3464-b9c5-0dee21805a82.roa (raw, json)
Hash identifier:          XMJP45nAeVMoUoMV5jrVOqngrgMgQa4hOpmJq5WeCBc=
Subject key identifier:   74:5E:A6:26:73:2A:92:5D:4F:23:A6:A0:56:F6:B1:21:BC:BD:B4:66
Certificate issuer:       /CN=8f4ca837-0daa-4761-9c02-6dd1f3ca8544
Certificate serial:       010D0C9F4328584F6BC89CCF53E8125E30453100
Authority key identifier: 09:27:BE:8C:3E:6C:EF:CE:E8:F7:6F:EC:A0:93:0C:C0:85:48:DE:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/61c6a0bd-d79b-3464-b9c5-0dee21805a82.roa
Signing time:             Wed 07 Oct 2026 08:11:09 +0000
ROA not before:           Wed 07 Oct 2026 08:11:09 +0000
ROA not after:            Tue 05 Jan 2027 09:11:09 +0000
asID:                     402966
IP address blocks:        204.138.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:c8:9c:cf:53:e8:12:5e:30:45:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ca837-0daa-4761-9c02-6dd1f3ca8544
        Validity
            Not Before: Oct  7 08:11:09 2026 GMT
            Not After : Jan  5 09:11:09 2027 GMT
        Subject: CN=2a4889ed-1bbb-4ca5-b522-19e33ac33a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:71:25:37:f9:c3:3e:bb:46:d2:02:fb:9b:
                    93:3e:6f:db:16:47:70:dc:b7:72:f1:7f:5c:30:82:
                    b7:19:38:83:e5:23:22:ec:0c:86:1a:66:12:16:ad:
                    90:98:48:d9:71:9c:02:29:56:09:23:15:4b:0b:0b:
                    43:07:c1:58:21:b7:56:9c:d7:ed:d9:e0:88:4d:07:
                    e5:ef:44:bc:58:f7:33:65:3b:b5:88:f4:6b:3f:2e:
                    8c:97:b6:b0:95:e9:16:0f:67:82:77:e6:a8:26:61:
                    b2:78:a9:c8:86:d7:18:b7:3c:a2:65:df:b8:52:d2:
                    9d:9d:97:b8:37:8f:57:b6:57:eb:a5:9c:47:0a:7a:
                    01:05:08:89:b0:c9:16:04:aa:21:2e:9d:f1:1f:62:
                    98:6a:69:89:18:0d:29:b3:56:cf:80:d3:53:74:b4:
                    82:7c:b2:07:70:3b:0d:d8:1c:db:5a:2c:3c:9e:f1:
                    3c:8c:65:96:dc:59:38:e6:b2:5d:47:c8:85:0f:28:
                    9d:95:bb:a3:c1:59:37:c8:ec:f5:e3:1f:3e:a0:7d:
                    eb:4e:90:0b:3c:4e:fb:3f:e2:12:de:07:02:cf:54:
                    67:c2:07:2b:fa:49:78:09:a3:ba:44:ea:ce:94:b5:
                    8c:01:e7:bb:dc:69:40:cd:4f:ef:ac:f4:fc:de:25:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:A6:26:73:2A:92:5D:4F:23:A6:A0:56:F6:B1:21:BC:BD:B4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/61c6a0bd-d79b-3464-b9c5-0dee21805a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.crl

            X509v3 Authority Key Identifier:
                keyid:09:27:BE:8C:3E:6C:EF:CE:E8:F7:6F:EC:A0:93:0C:C0:85:48:DE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8f4ca837-0daa-4761-9c02-6dd1f3ca8544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.138.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:87:af:2c:16:f6:e2:fa:6f:16:69:5d:1f:65:67:41:4e:ab:
         0a:83:a0:a4:5a:d8:30:46:14:5d:f6:46:7f:93:f2:d1:e2:5a:
         01:fb:4c:b8:07:40:a2:95:7d:63:be:a3:79:d1:cb:c2:22:70:
         fc:8b:30:fe:6a:57:6d:9b:d8:c2:c4:7e:b1:7a:85:17:cc:20:
         a9:6d:ce:ba:4f:fc:28:f3:7c:b6:78:2a:a5:4e:c6:19:04:34:
         c6:ca:84:d0:bb:99:66:c2:d1:c1:eb:7f:69:e1:ff:35:93:e8:
         b1:64:c4:4f:88:76:9c:10:ca:d1:1d:68:07:dc:bb:4f:3f:60:
         16:47:7b:de:f5:c7:c4:21:82:f8:37:3e:fd:76:d0:4d:bc:3b:
         40:47:2d:32:b9:e4:88:50:13:27:e5:58:b1:45:c6:37:a5:31:
         a9:e2:fa:9b:fb:be:bd:9c:92:65:bc:67:8d:82:31:f3:a4:72:
         33:01:92:c1:7b:10:c0:50:78:45:63:f0:45:82:ed:a7:1b:5f:
         3e:ba:7b:66:9d:e8:78:07:05:19:66:3b:4e:b6:7f:c6:f8:40:
         73:46:8a:14:6b:7b:ca:19:b9:1e:7a:04:ab:3a:55:00:d3:4f:
         de:df:62:02:16:41:d9:63:e3:02:ec:75:df:11:33:ee:2f:d8:
         de:b2:24:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ryJzPU+gSXjBFMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY0Y2E4MzctMGRhYS00NzYxLTljMDItNmRkMWYzY2E4
NTQ0MB4XDTI2MTAwNzA4MTEwOVoXDTI3MDEwNTA5MTEwOVowLzEtMCsGA1UEAxMk
MmE0ODg5ZWQtMWJiYi00Y2E1LWI1MjItMTllMzNhYzMzYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8hxJTf5wz67RtIC+5uTPm/bFkdw3Ldy8X9c
MIK3GTiD5SMi7AyGGmYSFq2QmEjZcZwCKVYJIxVLCwtDB8FYIbdWnNft2eCITQfl
70S8WPczZTu1iPRrPy6Ml7awlekWD2eCd+aoJmGyeKnIhtcYtzyiZd+4UtKdnZe4
N49XtlfrpZxHCnoBBQiJsMkWBKohLp3xH2KYammJGA0ps1bPgNNTdLSCfLIHcDsN
2BzbWiw8nvE8jGWW3Fk45rJdR8iFDyidlbujwVk3yOz14x8+oH3rTpALPE77P+IS
3gcCz1Rnwgcr+kl4CaO6ROrOlLWMAee73GlAzU/vrPT83iVkXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRepiZzKpJdTyOmoFb2sSG8vbRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84ZjRj
YTgzNy0wZGFhLTQ3NjEtOWMwMi02ZGQxZjNjYTg1NDQvNjFjNmEwYmQtZDc5Yi0z
NDY0LWI5YzUtMGRlZTIxODA1YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOGY0Y2E4MzctMGRhYS00NzYxLTlj
MDItNmRkMWYzY2E4NTQ0LzhmNGNhODM3LTBkYWEtNDc2MS05YzAyLTZkZDFmM2Nh
ODU0NC5jcmwwHwYDVR0jBBgwFoAUCSe+jD5s787o92/soJMMwIVI3hkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi84ZjRjYTgzNy0wZGFhLTQ3NjEtOWMwMi02ZGQx
ZjNjYTg1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIqWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+HrywW9uL6bxZpXR9lZ0FOqwqDoKRa2DBGFF32Rn+T8tHiWgH7TLgH
QKKVfWO+o3nRy8IicPyLMP5qV22b2MLEfrF6hRfMIKltzrpP/CjzfLZ4KqVOxhkE
NMbKhNC7mWbC0cHrf2nh/zWT6LFkxE+IdpwQytEdaAfcu08/YBZHe971x8Qhgvg3
Pv120E28O0BHLTK55IhQEyflWLFFxjelMani+pv7vr2ckmW8Z42CMfOkcjMBksF7
EMBQeEVj8EWC7acbXz66e2ad6HgHBRlmO062f8b4QHNGihRre8oZuR56BKs6VQDT
T97fYgIWQdlj4wLsdd8RM+4v2N6yJOA=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:50 2026 by rpki-client