Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa
File:                     8c27c1f2-e985-399e-a932-ffba02cadafc.roa (raw, json)
Hash identifier:          gmVrttoyERVS1t2qnEvpdysJRg4MxbjF1SzJCy17wHc=
Subject key identifier:   7C:AB:9A:35:04:6C:94:32:00:24:DF:6B:0B:5F:6A:A3:69:99:E7:AB
Certificate issuer:       /CN=3c637fa0-0773-40d6-afca-d49122516b4f
Certificate serial:       010D0C9F4328584FA42DDF6BBDE3DDF3727DECB0
Authority key identifier: DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     394968
IP address blocks:        204.87.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:df:6b:bd:e3:dd:f3:72:7d:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c637fa0-0773-40d6-afca-d49122516b4f
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=9c1d9abb-0903-42cd-a61d-76fab01b8408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:01:4b:a8:50:20:55:24:7b:90:95:2c:3e:
                    b1:e1:80:72:e7:44:f4:d3:02:6d:ff:4e:1d:f1:5f:
                    39:95:df:a1:c7:f6:48:10:68:17:0b:52:cd:df:47:
                    11:c1:97:2f:2c:82:93:c8:0d:81:79:2e:e7:07:c3:
                    ce:aa:33:bf:5a:05:af:f3:e5:48:c3:4e:e9:18:ca:
                    25:80:eb:e7:24:e1:f5:af:ae:ce:9b:98:ea:03:b7:
                    74:38:ad:e7:f8:9f:ee:dd:27:9f:61:f1:ad:f7:29:
                    fd:6c:55:33:5f:a7:90:e8:18:c6:a5:68:16:38:83:
                    86:0d:ff:18:02:4e:d5:98:e2:e5:f6:62:f3:28:72:
                    ca:68:5d:96:d9:27:c3:d9:fb:1e:27:2a:e1:36:ef:
                    a0:3a:b1:93:24:be:6f:f4:1d:5b:4a:e5:35:43:20:
                    c1:1f:5e:51:91:af:dd:d5:27:76:d1:9d:b2:08:24:
                    a3:5f:23:d2:ce:ec:87:55:51:ec:b5:71:55:14:4f:
                    84:d6:34:0e:04:59:8a:e2:d4:c7:69:54:7b:7d:11:
                    a5:6a:15:2f:b5:8e:30:f7:08:f9:f4:66:d9:84:f0:
                    0a:75:d9:31:55:1c:22:5e:c6:8d:6f:48:67:cf:4c:
                    d9:96:f4:7a:6a:db:a9:22:7b:ed:d4:b6:2f:de:4e:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:9A:35:04:6C:94:32:00:24:DF:6B:0B:5F:6A:A3:69:99:E7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.87.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:82:77:c6:5c:d8:8d:2d:4b:f9:e4:e6:d7:90:3f:0a:5f:
         05:ca:ec:31:7c:84:c4:09:ac:05:4d:65:0d:bd:38:ba:6d:fb:
         a2:6c:01:08:de:a4:08:93:07:82:65:c7:73:d4:13:e9:1b:9f:
         71:bd:b9:4e:e2:3d:cd:da:14:bd:4a:bf:e0:e5:8d:1b:d1:80:
         65:f2:63:1f:4c:cd:b0:4c:41:67:08:47:6c:26:ef:61:6b:71:
         88:2d:21:66:cc:f3:07:dc:c6:c7:57:8e:f2:2b:8a:66:a8:2c:
         b0:da:3e:32:54:71:38:31:73:48:6b:1b:25:f1:79:f4:48:19:
         ed:55:ca:c7:2f:7c:cc:29:40:f8:eb:d5:ee:eb:d4:00:e6:e4:
         6c:16:34:4e:fd:27:e6:96:c9:14:77:30:e0:27:e4:ff:f0:bc:
         9f:d3:21:02:bf:a1:77:2c:8d:b2:7e:d3:b8:4f:12:e4:89:f9:
         a5:bf:fd:12:1e:65:30:19:d4:8a:14:fb:70:74:c6:53:7b:60:
         da:38:23:a3:04:24:a3:a3:bc:a3:21:f6:af:c6:16:85:8b:15:
         ec:0b:6b:13:7b:55:4d:b2:9c:47:3f:05:2f:58:f2:28:99:c5:
         cb:52:1a:ca:4b:2f:4a:f1:ea:74:03:84:2d:70:70:37:ee:cd:
         4c:d0:c0:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLd9rvePd83J97LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M2MzdmYTAtMDc3My00MGQ2LWFmY2EtZDQ5MTIyNTE2
YjRmMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk
OWMxZDlhYmItMDkwMy00MmNkLWE2MWQtNzZmYWIwMWI4NDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNABS6hQIFUke5CVLD6x4YBy50T00wJt/04d
8V85ld+hx/ZIEGgXC1LN30cRwZcvLIKTyA2BeS7nB8POqjO/WgWv8+VIw07pGMol
gOvnJOH1r67Om5jqA7d0OK3n+J/u3SefYfGt9yn9bFUzX6eQ6BjGpWgWOIOGDf8Y
Ak7VmOLl9mLzKHLKaF2W2SfD2fseJyrhNu+gOrGTJL5v9B1bSuU1QyDBH15Rka/d
1Sd20Z2yCCSjXyPSzuyHVVHstXFVFE+E1jQOBFmK4tTHaVR7fRGlahUvtY4w9wj5
9GbZhPAKddkxVRwiXsaNb0hnz0zZlvR6atupInvt1LYv3k6lAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyrmjUEbJQyACTfawtfaqNpmeerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYzYz
N2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkxMjI1MTZiNGYvOGMyN2MxZjItZTk4NS0z
OTllLWE5MzItZmZiYTAyY2FkYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2M2MzdmYTAtMDc3My00MGQ2LWFm
Y2EtZDQ5MTIyNTE2YjRmLzNjNjM3ZmEwLTA3NzMtNDBkNi1hZmNhLWQ0OTEyMjUx
NmI0Zi5jcmwwHwYDVR0jBBgwFoAU2/gqnWFQJ0lVAC0+9sdirvncD/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYzYzN2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkx
MjI1MTZiNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFeXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw2gnfGXNiNLUv55ObXkD8KXwXK7DF8hMQJrAVNZQ29OLpt+6JsAQje
pAiTB4Jlx3PUE+kbn3G9uU7iPc3aFL1Kv+DljRvRgGXyYx9MzbBMQWcIR2wm72Fr
cYgtIWbM8wfcxsdXjvIrimaoLLDaPjJUcTgxc0hrGyXxefRIGe1VyscvfMwpQPjr
1e7r1ADm5GwWNE79J+aWyRR3MOAn5P/wvJ/TIQK/oXcsjbJ+07hPEuSJ+aW//RIe
ZTAZ1IoU+3B0xlN7YNo4I6MEJKOjvKMh9q/GFoWLFewLaxN7VU2ynEc/BS9Y8iiZ
xctSGspLL0rx6nQDhC1wcDfuzUzQwAg=
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:42:03 2026 by rpki-client