Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/e1cc5985-4e1d-3418-9cc3-b46085f4d8dd.roa
File:                     e1cc5985-4e1d-3418-9cc3-b46085f4d8dd.roa (raw, json)
Hash identifier:          cKL5cjR2X4AerFvxEcvM+mJOPEBvtcbJHZ3m0NCWwCk=
Subject key identifier:   1D:CF:D1:E0:27:F5:9B:67:5F:C4:49:EF:14:E2:1E:ED:2E:CF:17:17
Certificate issuer:       /CN=9446c9ed-4452-499f-a239-28b6b811c284
Certificate serial:       010D0C9F4328584F63F81137FE6C26C6E9A01280
Authority key identifier: EB:C5:1B:18:E5:F1:93:60:1B:10:6A:C2:A7:3D:C2:98:40:E5:14:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/e1cc5985-4e1d-3418-9cc3-b46085f4d8dd.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        206.168.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/9446c9ed-4452-499f-a239-28b6b811c284.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/9446c9ed-4452-499f-a239-28b6b811c284.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:11:37:fe:6c:26:c6:e9:a0:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9446c9ed-4452-499f-a239-28b6b811c284
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=ac212aa0-1888-4d5e-b1d3-f96886472fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:9f:f3:1d:89:86:dd:5c:6b:d2:48:eb:9e:
                    fb:16:2c:da:52:42:2e:f7:b5:4c:8e:12:2b:5c:0f:
                    aa:31:09:77:af:dd:04:a1:da:d5:ad:47:72:22:41:
                    2e:5f:0a:30:3e:1d:42:9f:1c:ef:ed:1d:67:50:fc:
                    3d:ff:96:c3:65:0e:e8:75:f3:a9:05:91:cb:1d:05:
                    ae:73:50:79:63:f9:26:9a:af:21:9a:00:d8:97:60:
                    56:cc:36:18:42:e5:f3:8a:50:6a:f6:67:df:55:19:
                    8b:ef:77:d9:23:00:cb:f7:ff:de:70:6a:a9:d1:92:
                    93:67:18:32:5d:67:1a:5e:71:1a:f0:dc:87:de:37:
                    86:b9:bc:16:f6:a8:7d:98:b7:74:22:d6:52:12:42:
                    7f:92:c2:d7:95:1e:0a:9b:08:73:b8:81:13:01:ed:
                    d7:50:ea:97:0f:a4:25:5b:01:ca:e0:24:a4:ed:62:
                    d8:30:78:4c:d7:97:8d:87:0a:83:45:65:56:b1:99:
                    36:61:94:75:30:d4:83:c4:78:53:85:f0:7f:e1:91:
                    60:d8:ed:de:89:93:4b:0b:9c:89:c8:0e:12:ac:29:
                    8e:1f:07:97:78:f2:b4:af:3b:a9:45:24:b1:24:7d:
                    4e:47:94:6d:75:c7:18:8d:70:74:2b:6c:de:ad:bf:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:D1:E0:27:F5:9B:67:5F:C4:49:EF:14:E2:1E:ED:2E:CF:17:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/e1cc5985-4e1d-3418-9cc3-b46085f4d8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284/9446c9ed-4452-499f-a239-28b6b811c284.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C5:1B:18:E5:F1:93:60:1B:10:6A:C2:A7:3D:C2:98:40:E5:14:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9446c9ed-4452-499f-a239-28b6b811c284.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:c0:e0:d2:83:e7:d8:31:aa:b3:8b:00:a3:9c:a1:ed:07:
         27:b6:9e:fe:25:bc:be:22:21:a8:e6:ea:77:98:9e:09:e7:40:
         da:cf:36:7f:7b:a5:67:34:3a:06:4e:f2:5e:12:7e:e1:0f:cc:
         2a:4e:f2:ba:c4:01:ee:91:34:77:35:2e:bf:fb:38:b2:b7:a6:
         8a:4a:20:c9:78:16:5f:e2:82:69:8e:78:78:e8:02:29:b1:1b:
         05:84:db:e4:70:3b:14:09:8f:75:4b:9d:c7:29:94:ff:60:07:
         6e:fd:77:88:ea:8d:53:94:e2:a4:a3:6e:30:31:c7:cb:de:86:
         8a:76:0a:2a:aa:bd:69:03:83:fa:a7:c3:79:ff:57:e4:6b:0b:
         b4:ea:87:a8:11:81:b1:57:c5:55:48:dd:f9:c7:e0:77:39:19:
         b5:81:7c:09:2d:4f:12:db:11:4b:13:0c:43:80:d3:8b:3a:7f:
         67:09:03:c5:1e:c4:5d:23:32:28:60:6a:08:56:ef:4e:f1:aa:
         96:e8:f2:08:d2:b6:19:bd:34:8b:12:2a:5c:81:97:af:f6:ec:
         64:bd:ea:3f:88:cb:fd:af:ed:5c:c9:ad:da:b2:44:a3:fd:9c:
         fc:bf:10:24:01:a9:55:01:25:9b:a0:a5:c5:95:9e:93:50:c4:
         75:d4:60:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BE3/mwmxumgEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ0NmM5ZWQtNDQ1Mi00OTlmLWEyMzktMjhiNmI4MTFj
Mjg0MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
YWMyMTJhYTAtMTg4OC00ZDVlLWIxZDMtZjk2ODg2NDcyZmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeGf8x2Jht1ca9JI6577FizaUkIu97VMjhIr
XA+qMQl3r90EodrVrUdyIkEuXwowPh1Cnxzv7R1nUPw9/5bDZQ7odfOpBZHLHQWu
c1B5Y/kmmq8hmgDYl2BWzDYYQuXzilBq9mffVRmL73fZIwDL9//ecGqp0ZKTZxgy
XWcaXnEa8NyH3jeGubwW9qh9mLd0ItZSEkJ/ksLXlR4KmwhzuIETAe3XUOqXD6Ql
WwHK4CSk7WLYMHhM15eNhwqDRWVWsZk2YZR1MNSDxHhThfB/4ZFg2O3eiZNLC5yJ
yA4SrCmOHweXePK0rzupRSSxJH1OR5RtdccYjXB0K2zerb9RLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3P0eAn9ZtnX8RJ7xTiHu0uzxcXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85NDQ2
YzllZC00NDUyLTQ5OWYtYTIzOS0yOGI2YjgxMWMyODQvZTFjYzU5ODUtNGUxZC0z
NDE4LTljYzMtYjQ2MDg1ZjRkOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTQ0NmM5ZWQtNDQ1Mi00OTlmLWEy
MzktMjhiNmI4MTFjMjg0Lzk0NDZjOWVkLTQ0NTItNDk5Zi1hMjM5LTI4YjZiODEx
YzI4NC5jcmwwHwYDVR0jBBgwFoAU68UbGOXxk2AbEGrCpz3CmEDlFDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85NDQ2YzllZC00NDUyLTQ5OWYtYTIzOS0yOGI2
YjgxMWMyODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqi6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3mwODSg+fYMaqziwCjnKHtBye2nv4lvL4iIajm6neYngnnQNrPNn97
pWc0OgZO8l4SfuEPzCpO8rrEAe6RNHc1Lr/7OLK3popKIMl4Fl/igmmOeHjoAimx
GwWE2+RwOxQJj3VLnccplP9gB279d4jqjVOU4qSjbjAxx8vehop2CiqqvWkDg/qn
w3n/V+RrC7Tqh6gRgbFXxVVI3fnH4Hc5GbWBfAktTxLbEUsTDEOA04s6f2cJA8Ue
xF0jMihgaghW707xqpbo8gjSthm9NIsSKlyBl6/27GS96j+Iy/2v7VzJrdqyRKP9
nPy/ECQBqVUBJZugpcWVnpNQxHXUYN4=
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:44:54 2026 by rpki-client