Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d8c80d8a-cd85-3618-a58b-fb56a2ee44f2.roa
File:                     d8c80d8a-cd85-3618-a58b-fb56a2ee44f2.roa (raw, json)
Hash identifier:          T1g78L7pb5JTcu8+n8bLFiEG1ahSwr84dI9KzZ5p4jk=
Subject key identifier:   05:DF:A7:ED:C6:D5:D2:83:99:36:7A:FB:5B:1A:D4:27:37:63:24:10
Certificate issuer:       /CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679
Certificate serial:       010D0C9F4328584EA787DBFEAE2413319CE3B6C0
Authority key identifier: 8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d8c80d8a-cd85-3618-a58b-fb56a2ee44f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54209
IP address blocks:        65.97.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:db:fe:ae:24:13:31:9c:e3:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=754cb350-a684-45c2-aa8a-c01c52b28242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:af:1e:e8:48:39:eb:d8:05:40:ec:7c:6f:
                    90:0b:c7:51:bd:24:c2:47:65:56:df:bd:cd:fd:cd:
                    a1:a0:9f:44:12:8e:23:e5:cd:b0:5f:ab:0a:01:5c:
                    86:92:a3:9e:a0:c7:9b:b3:c8:a7:bc:a1:83:6d:c9:
                    ee:54:6f:2a:1f:3b:4f:25:2e:c3:e8:48:29:c2:40:
                    f8:23:52:f4:36:9e:cd:6a:84:e1:90:bf:fa:77:87:
                    c0:2b:16:4f:2d:e9:a3:1d:48:4b:06:e1:5a:87:ec:
                    0d:1d:f7:98:bf:00:13:87:96:3c:39:09:12:e0:b4:
                    c2:20:c8:19:70:61:7f:02:b9:fd:6e:a7:01:cb:05:
                    1e:78:48:c1:a4:9b:05:15:76:91:89:80:a4:f6:1d:
                    05:fe:bc:ab:7a:80:b4:0b:d8:4b:16:0f:2c:7e:59:
                    b4:a9:9e:30:8f:94:11:19:b4:11:00:a9:fa:47:a6:
                    be:8c:c1:3e:63:a9:df:89:0d:41:5b:39:63:f8:c6:
                    7a:0b:af:3b:40:ce:61:ad:20:89:89:e2:ba:f2:1c:
                    7b:3c:08:c5:7b:8a:fc:e9:06:22:c6:80:c8:26:60:
                    23:03:73:4c:68:bf:46:d9:a7:5b:4f:5e:ca:85:4a:
                    b3:d3:a8:34:a3:f0:42:d9:4a:9e:ca:40:87:c6:84:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:A7:ED:C6:D5:D2:83:99:36:7A:FB:5B:1A:D4:27:37:63:24:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d8c80d8a-cd85-3618-a58b-fb56a2ee44f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl

            X509v3 Authority Key Identifier:
                keyid:8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:e5:5e:72:d3:f3:ef:4c:31:ac:2f:e9:8b:60:b4:cd:b2:
         91:33:3c:0a:70:b2:d7:7b:14:9c:2e:1e:ad:7a:3a:92:cf:03:
         37:01:4e:2c:4b:a0:35:f3:77:93:f1:ae:93:5b:1d:2b:3a:a4:
         0b:e4:61:23:38:38:01:7d:38:8b:a8:54:c6:5f:e4:9f:8b:a4:
         31:c8:63:81:1b:08:82:c5:b6:5d:e1:d2:88:16:4b:8e:e9:7e:
         23:57:c2:cd:72:9d:ca:af:0f:8a:05:0a:ff:42:16:85:15:9d:
         d3:f5:6c:9a:fa:a2:39:31:a1:8a:94:b1:be:4b:ce:d7:05:07:
         f0:4f:b7:da:17:c7:96:a3:08:f3:95:59:23:d7:c7:a2:02:95:
         4c:1d:e6:a8:74:9b:d8:be:16:ad:cc:95:7a:71:8a:35:56:e9:
         da:03:da:e1:0c:2e:8e:08:41:6c:f3:cc:a4:83:31:ae:b2:f5:
         fb:2a:d5:06:7c:62:d7:16:67:8b:11:f8:f4:63:c2:5b:7a:85:
         f1:cf:1e:6e:15:69:88:66:64:57:0d:88:1c:22:5e:4b:01:37:
         49:97:ac:7e:7d:ec:1c:34:2f:ca:5e:89:1c:b4:2c:a3:0a:ba:
         aa:57:6b:d5:d0:f0:c1:5c:cf:0d:85:ec:a5:0b:ca:50:dc:77:
         4c:6d:38:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9v+riQTMZzjtsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZhMjdhN2EtYWRlYy00YjhjLWJhODktYzM5ZmQ3NTBh
Njc5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzU0Y2IzNTAtYTY4NC00NWMyLWFhOGEtYzAxYzUyYjI4MjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ2vHuhIOevYBUDsfG+QC8dRvSTCR2VW373N
/c2hoJ9EEo4j5c2wX6sKAVyGkqOeoMebs8invKGDbcnuVG8qHztPJS7D6EgpwkD4
I1L0Np7NaoThkL/6d4fAKxZPLemjHUhLBuFah+wNHfeYvwATh5Y8OQkS4LTCIMgZ
cGF/Arn9bqcBywUeeEjBpJsFFXaRiYCk9h0F/ryreoC0C9hLFg8sflm0qZ4wj5QR
GbQRAKn6R6a+jME+Y6nfiQ1BWzlj+MZ6C687QM5hrSCJieK68hx7PAjFe4r86QYi
xoDIJmAjA3NMaL9G2adbT17KhUqz06g0o/BC2UqeykCHxoTy0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXfp+3G1dKDmTZ6+1sa1Cc3YyQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNmEy
N2E3YS1hZGVjLTRiOGMtYmE4OS1jMzlmZDc1MGE2NzkvZDhjODBkOGEtY2Q4NS0z
NjE4LWE1OGItZmI1NmEyZWU0NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDZhMjdhN2EtYWRlYy00YjhjLWJh
ODktYzM5ZmQ3NTBhNjc5L2Q2YTI3YTdhLWFkZWMtNGI4Yy1iYTg5LWMzOWZkNzUw
YTY3OS5jcmwwHwYDVR0jBBgwFoAUjyN57rBMa7MlOW+ffg9R1UP2JsIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNmEyN2E3YS1hZGVjLTRiOGMtYmE4OS1jMzlm
ZDc1MGE2NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQWEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzk5V5y0/PvTDGsL+mLYLTNspEzPApwstd7FJwuHq16OpLPAzcBTixL
oDXzd5PxrpNbHSs6pAvkYSM4OAF9OIuoVMZf5J+LpDHIY4EbCILFtl3h0ogWS47p
fiNXws1yncqvD4oFCv9CFoUVndP1bJr6ojkxoYqUsb5LztcFB/BPt9oXx5ajCPOV
WSPXx6IClUwd5qh0m9i+Fq3MlXpxijVW6doD2uEMLo4IQWzzzKSDMa6y9fsq1QZ8
YtcWZ4sR+PRjwlt6hfHPHm4VaYhmZFcNiBwiXksBN0mXrH597Bw0L8peiRy0LKMK
uqpXa9XQ8MFczw2F7KULylDcd0xtOG8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:47:26 2026 by rpki-client