Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa
File:                     8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json)
Hash identifier:          1W19cIU4RRjvaQLEg/mbjRHet/zgMvdrfWn5S8jVALk=
Subject key identifier:   6C:74:43:6D:4A:98:B2:6E:EB:62:63:3E:4D:6E:0E:B8:C1:BD:BC:75
Certificate issuer:       /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94
Certificate serial:       010D0C9F4328584F6292E04C32D5F7AF8E2A8D70
Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     28959
IP address blocks:        158.51.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:4c:32:d5:f7:af:8e:2a:8d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=966690fe-a641-4c86-9837-fdfa29c9be7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:45:8c:6a:15:1d:39:13:54:56:5b:dc:5d:
                    7b:9e:89:a1:5a:5b:d0:82:c3:ce:e8:31:39:85:0c:
                    f2:7f:f8:2e:ee:15:06:5b:06:d3:11:79:bd:aa:43:
                    59:33:23:7c:60:24:79:f2:3b:ea:8a:1a:cd:4c:fe:
                    fc:26:82:ac:34:48:26:60:e2:4c:c9:42:bc:0b:5c:
                    97:6c:43:cc:91:dd:50:fa:cf:93:71:43:37:f5:12:
                    9f:93:96:a2:59:c5:d9:d5:61:3b:9e:5a:21:ce:ff:
                    a2:e8:67:a5:e0:4b:57:a0:fc:13:d5:9f:fe:f7:89:
                    24:c5:03:59:ed:87:c3:22:79:a7:9d:dc:59:78:7a:
                    87:d5:2b:d4:f6:99:c9:93:5d:41:c4:63:0e:f6:23:
                    83:4e:a8:94:0d:9d:27:45:98:ef:f6:e6:ee:df:99:
                    38:63:d2:c2:e8:25:60:3c:9e:6f:57:1c:dc:17:10:
                    74:a4:97:e7:25:e5:e9:7c:20:f6:60:9a:40:b7:c2:
                    9b:d2:1a:75:30:d9:53:18:e4:7b:6e:a1:0d:09:2b:
                    a3:06:8b:f5:07:29:11:85:49:93:30:62:cd:4d:ae:
                    fb:10:51:dc:9b:53:10:91:d3:9f:3d:ee:31:27:5e:
                    ef:ad:df:ab:db:06:9c:ce:d0:c7:06:11:46:e7:08:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:43:6D:4A:98:B2:6E:EB:62:63:3E:4D:6E:0E:B8:C1:BD:BC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl

            X509v3 Authority Key Identifier:
                keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:32:7a:01:54:36:68:9c:b8:5f:bd:b0:63:4b:d1:4c:2f:a5:
         ab:34:24:88:25:04:df:9b:e2:74:d9:0b:22:09:42:f7:6b:fe:
         79:4a:ff:f4:96:ec:0c:23:df:a7:de:87:6e:38:b5:5c:47:dd:
         b2:7e:63:70:43:cf:2c:36:4b:aa:62:b2:9b:5f:7d:3e:e0:60:
         0d:6b:25:8e:3b:50:5e:6a:b5:a8:3e:e7:ab:5e:68:18:e7:2d:
         f0:91:03:28:25:50:71:de:da:d0:12:c6:b8:25:21:ce:80:2e:
         48:23:b7:de:ee:a6:02:e1:fe:f7:76:f8:ec:1d:44:53:86:3a:
         95:e8:7a:b8:bc:a7:0d:29:ba:bf:4b:ca:61:57:45:f2:e8:e5:
         0f:6e:d6:e7:ea:16:1f:94:6b:e0:93:a5:41:b3:10:3e:ad:b8:
         43:bb:0f:be:0a:77:1c:29:34:35:23:b2:90:ee:20:a3:7f:69:
         50:e4:9f:fe:e6:0e:0e:07:16:78:dc:07:19:4b:e9:8a:f8:ab:
         45:ea:5b:93:5a:81:86:d5:d3:f9:98:01:9d:9c:47:b1:88:1e:
         1b:a3:24:ca:5e:ec:db:15:5e:8b:8a:e8:9e:ac:b7:4d:57:f4:
         49:5d:fe:6e:6d:d5:2c:21:b0:d1:a5:b6:aa:db:db:6b:76:09:
         0e:d9:71:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuBMMtX3r44qjXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRmM2RmNDItMDQwZS00ODU2LWIzZDYtN2MyZWJlMWUx
ZDk0MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
OTY2NjkwZmUtYTY0MS00Yzg2LTk4MzctZmRmYTI5YzliZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho9FjGoVHTkTVFZb3F17nomhWlvQgsPO6DE5
hQzyf/gu7hUGWwbTEXm9qkNZMyN8YCR58jvqihrNTP78JoKsNEgmYOJMyUK8C1yX
bEPMkd1Q+s+TcUM39RKfk5aiWcXZ1WE7nlohzv+i6Gel4EtXoPwT1Z/+94kkxQNZ
7YfDInmnndxZeHqH1SvU9pnJk11BxGMO9iODTqiUDZ0nRZjv9ubu35k4Y9LC6CVg
PJ5vVxzcFxB0pJfnJeXpfCD2YJpAt8Kb0hp1MNlTGOR7bqENCSujBov1BykRhUmT
MGLNTa77EFHcm1MQkdOfPe4xJ17vrd+r2wacztDHBhFG5wixPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx0Q21KmLJu62JjPk1uDrjBvbx1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYz
ZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJlYmUxZTFkOTQvOGQ2NjU3NjItMDQ2NS0z
MjNiLWI5NTAtYzY1ZDMwNjlkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmRmM2RmNDItMDQwZS00ODU2LWIz
ZDYtN2MyZWJlMWUxZDk0L2ZkZjNkZjQyLTA0MGUtNDg1Ni1iM2Q2LTdjMmViZTFl
MWQ5NC5jcmwwHwYDVR0jBBgwFoAUbAobALw/CS8tFQXCB+UrueYwYTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYzZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJl
YmUxZTFkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAyegFUNmicuF+9sGNL0Uwvpas0JIglBN+b4nTZCyIJQvdr/nlK//SW
7Awj36feh244tVxH3bJ+Y3BDzyw2S6pisptffT7gYA1rJY47UF5qtag+56teaBjn
LfCRAyglUHHe2tASxrglIc6ALkgjt97upgLh/vd2+OwdRFOGOpXoeri8pw0pur9L
ymFXRfLo5Q9u1ufqFh+Ua+CTpUGzED6tuEO7D74KdxwpNDUjspDuIKN/aVDkn/7m
Dg4HFnjcBxlL6Yr4q0XqW5NagYbV0/mYAZ2cR7GIHhujJMpe7NsVXouK6J6st01X
9Eld/m5t1SwhsNGltqrb22t2CQ7Zce8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:00:39 2026 by rpki-client