Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa
File:                     42b38733-d52e-372d-b451-7cecd7972e32.roa (raw, json)
Hash identifier:          b8+G2zVOLzgrShE4FKVZ9mX0en0At5dCkzdR7SMIvwM=
Subject key identifier:   C7:6B:50:14:4D:E5:C6:2F:D6:1D:9B:A2:80:AA:10:B6:CD:39:E2:91
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584FA85E4E01FB85F6FDE3C37D80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     19901
IP address blocks:        208.161.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:4e:01:fb:85:f6:fd:e3:c3:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=d53fa983-4179-4219-95e1-7f065ee22364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:7f:73:28:a4:bc:7a:3f:f3:4e:e8:d9:40:
                    1d:eb:4e:6e:66:7b:ed:d3:53:83:1c:c6:c2:13:bd:
                    fa:af:64:06:fb:5c:ab:cb:81:b5:6b:42:2a:b6:da:
                    53:7c:f8:f9:9f:b6:bf:78:09:e2:2b:9c:ce:9e:74:
                    45:3c:f4:f2:7d:de:6b:19:4e:6b:cd:1e:86:5d:09:
                    fd:1f:92:89:0a:f0:3f:b2:cd:9d:78:0b:4f:d0:18:
                    ca:10:86:51:29:6b:34:6b:70:c8:85:27:3e:3c:dd:
                    6d:70:57:92:30:21:cd:d1:8f:1f:bc:91:bf:e2:8d:
                    91:68:55:b5:21:ca:23:a9:2b:38:23:62:30:d3:60:
                    67:86:0f:b4:3d:70:44:43:f7:0a:b6:07:11:dd:9d:
                    e1:e7:03:39:8e:6a:94:31:e5:22:e3:fc:8d:4c:73:
                    6e:1c:b3:93:1f:ba:bb:c2:60:2b:f9:6c:55:06:cb:
                    2b:23:c6:8a:90:66:6e:29:54:3a:6b:fb:31:06:d6:
                    09:7c:20:ca:50:3d:5a:da:59:1f:b8:e2:4a:89:ca:
                    a7:1b:f0:14:64:bb:3b:5c:60:85:6c:c9:4c:f1:54:
                    16:0e:41:4c:c2:d0:95:1a:61:8a:cc:5f:da:bf:e0:
                    b1:fe:cf:ff:71:45:28:61:35:39:66:4f:e9:6f:9c:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:50:14:4D:E5:C6:2F:D6:1D:9B:A2:80:AA:10:B6:CD:39:E2:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.161.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:76:d4:34:d1:26:7a:63:d4:27:d6:4b:c7:90:17:97:da:a6:
         e7:e1:87:23:9a:d8:a0:48:c4:63:e1:0e:e1:dd:f6:d2:20:db:
         b6:54:43:16:54:06:19:b8:36:64:d8:6c:50:3a:9a:04:09:05:
         58:85:38:b4:83:20:54:ca:9e:ce:a3:26:c8:ab:80:45:55:92:
         70:0d:9f:ec:5e:76:e4:f5:0b:72:fc:cc:9c:13:ea:a9:c8:18:
         28:3d:ae:ff:61:97:56:05:02:76:9f:88:30:a9:35:cd:4d:7f:
         12:d6:4a:93:b9:4c:84:c2:d3:9d:01:b6:ee:06:30:c5:0a:0e:
         d0:77:59:22:f8:f6:dc:9e:c6:66:4a:84:5c:c0:b2:d3:14:d3:
         6b:54:9c:c6:8e:6e:c2:87:21:51:95:58:85:2b:65:9e:88:95:
         17:3b:5e:af:21:e6:90:9f:c5:2b:7b:55:71:48:88:43:8e:c6:
         16:18:2f:1d:c2:a9:73:aa:1d:7f:d9:59:09:c9:04:ad:e3:ca:
         7f:75:c4:67:ec:f3:b4:42:08:c7:1c:39:a6:85:ef:4f:71:3f:
         17:6d:a7:ac:03:d7:41:38:8a:2a:64:7b:9c:be:65:dd:d0:36:
         84:b4:5d:50:c4:5e:b1:d4:5c:f6:4b:95:e5:e8:a1:ba:14:af:
         5e:7b:36:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXk4B+4X2/ePDfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDUzZmE5ODMtNDE3OS00MjE5LTk1ZTEtN2YwNjVlZTIyMzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gh/cyikvHo/807o2UAd605uZnvt01ODHMbC
E736r2QG+1yry4G1a0IqttpTfPj5n7a/eAniK5zOnnRFPPTyfd5rGU5rzR6GXQn9
H5KJCvA/ss2deAtP0BjKEIZRKWs0a3DIhSc+PN1tcFeSMCHN0Y8fvJG/4o2RaFW1
IcojqSs4I2Iw02Bnhg+0PXBEQ/cKtgcR3Z3h5wM5jmqUMeUi4/yNTHNuHLOTH7q7
wmAr+WxVBssrI8aKkGZuKVQ6a/sxBtYJfCDKUD1a2lkfuOJKicqnG/AUZLs7XGCF
bMlM8VQWDkFMwtCVGmGKzF/av+Cx/s//cUUoYTU5Zk/pb5zDywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdrUBRN5cYv1h2booCqELbNOeKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNDJiMzg3MzMtZDUyZS0z
NzJkLWI0NTEtN2NlY2Q3OTcyZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0KHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR21DTRJnpj1CfWS8eQF5fapufhhyOa2KBIxGPhDuHd9tIg27ZUQxZU
Bhm4NmTYbFA6mgQJBViFOLSDIFTKns6jJsirgEVVknANn+xeduT1C3L8zJwT6qnI
GCg9rv9hl1YFAnafiDCpNc1NfxLWSpO5TITC050Btu4GMMUKDtB3WSL49tyexmZK
hFzAstMU02tUnMaObsKHIVGVWIUrZZ6IlRc7Xq8h5pCfxSt7VXFIiEOOxhYYLx3C
qXOqHX/ZWQnJBK3jyn91xGfs87RCCMccOaaF709xPxdtp6wD10E4iipke5y+Zd3Q
NoS0XVDEXrHUXPZLleXooboUr157Nos=
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:42:52 2026 by rpki-client