Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
File:                     ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa (raw, json)
Hash identifier:          BohlFHM63KRw4RpH/H43kMLCIvDbED/6GfzlU0IAzzI=
Subject key identifier:   3D:1F:9E:39:8D:6D:AC:03:E7:EA:A3:21:B4:BD:9A:F3:B4:AD:EE:0E
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F4328584F82ADB828A0BC55463B9A0A80
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        208.70.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b8:28:a0:bc:55:46:3b:9a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=0b47a7db-95f1-4448-8beb-6aa854829ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:8f:9d:30:ee:c6:c3:71:57:e1:a0:e0:a0:
                    af:6b:42:57:41:ef:78:3b:18:e8:4f:36:d2:15:d5:
                    a5:08:22:e4:d5:9b:7e:bc:6f:9e:05:8b:ba:e6:dd:
                    ac:d5:e0:39:d7:5f:c4:5a:b5:04:86:29:b9:4d:5d:
                    11:b9:57:41:0f:39:0a:b8:3a:6e:e4:fe:72:20:e5:
                    61:b4:d8:6a:a3:0f:d9:27:27:f4:34:5a:a1:25:80:
                    8e:71:06:2c:6e:ba:6f:5f:91:81:cb:f1:09:ab:f2:
                    c9:b1:5a:75:ec:56:85:0a:a9:09:48:03:32:b3:32:
                    13:3a:e1:16:67:96:61:2c:e9:c5:93:60:4d:7a:62:
                    0a:74:94:91:35:fa:78:80:7a:39:6b:4e:07:20:f0:
                    9a:e0:a4:49:16:02:44:39:e5:8c:7a:ac:cd:79:f4:
                    af:48:51:18:be:83:b1:70:ed:fd:db:98:fd:3a:45:
                    bf:2b:cb:e5:8d:77:1d:9e:37:89:4f:a3:0c:5a:47:
                    a9:a9:25:d7:3f:df:e2:d2:f5:a0:5b:c6:26:98:a8:
                    fd:80:e4:70:bc:c1:e8:3d:2f:d7:6e:fc:08:b1:d0:
                    3e:f7:3a:d8:e4:4f:cb:3c:76:07:1c:1f:68:17:3a:
                    c5:38:1b:b5:94:62:eb:90:9e:6d:e0:a5:a1:98:05:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:9E:39:8D:6D:AC:03:E7:EA:A3:21:B4:BD:9A:F3:B4:AD:EE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:c7:40:e0:e9:b7:1b:d4:f1:08:99:20:d0:ef:00:03:9b:
         d0:44:c0:51:79:e2:82:3c:8b:5e:15:71:d3:a6:33:85:e9:6c:
         64:ca:61:01:cd:85:9c:e3:7f:70:16:1f:a9:ba:65:ce:ce:81:
         17:88:2a:94:ed:63:65:af:0d:ce:fe:67:76:b5:1e:d4:59:47:
         40:50:c8:1f:8e:55:ec:dd:a8:04:77:e0:cc:27:3d:67:f1:33:
         ff:5b:7a:e2:97:01:ab:42:ae:25:58:c3:0d:a3:08:0b:93:d5:
         8e:60:16:d1:c6:1c:c1:60:43:1e:fa:24:ec:8c:05:29:8c:94:
         06:44:34:6e:28:62:92:df:6c:89:ab:fd:fb:38:79:42:ed:93:
         ec:f0:d8:c9:08:9c:67:21:84:17:f5:f1:02:e8:2d:96:8d:72:
         8b:2b:45:be:85:3c:45:6a:03:f4:f0:7b:36:10:a9:3a:1e:66:
         3a:46:62:ad:9f:79:e4:e2:5e:56:c3:67:51:67:78:4b:89:ca:
         30:69:6f:e4:8f:2a:67:e7:ef:04:c3:47:3b:50:2b:dc:99:73:
         f7:44:93:83:58:0b:ab:91:61:62:0c:c1:af:84:61:32:65:94:
         21:c8:47:8f:9d:a0:ac:ab:b0:ee:6a:1b:36:90:60:d8:c6:fc:
         1b:95:cf:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrbgooLxVRjuaCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm
ZDFjMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
MGI0N2E3ZGItOTVmMS00NDQ4LThiZWItNmFhODU0ODI5YWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFGPnTDuxsNxV+Gg4KCva0JXQe94OxjoTzbS
FdWlCCLk1Zt+vG+eBYu65t2s1eA511/EWrUEhim5TV0RuVdBDzkKuDpu5P5yIOVh
tNhqow/ZJyf0NFqhJYCOcQYsbrpvX5GBy/EJq/LJsVp17FaFCqkJSAMyszITOuEW
Z5ZhLOnFk2BNemIKdJSRNfp4gHo5a04HIPCa4KRJFgJEOeWMeqzNefSvSFEYvoOx
cO3925j9OkW/K8vljXcdnjeJT6MMWkepqSXXP9/i0vWgW8YmmKj9gORwvMHoPS/X
bvwIsdA+9zrY5E/LPHYHHB9oFzrFOBu1lGLrkJ5t4KWhmAX6eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0fnjmNbawD5+qjIbS9mvO0re4OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi
YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvZWJiN2YzYjUtZWRmOS0z
ZmU2LTkyMzAtZjFiNGNhMzg5NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0
YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh
ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm
MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdcx0Dg6bcb1PEImSDQ7wADm9BEwFF54oI8i14VcdOmM4XpbGTKYQHN
hZzjf3AWH6m6Zc7OgReIKpTtY2WvDc7+Z3a1HtRZR0BQyB+OVezdqAR34MwnPWfx
M/9beuKXAatCriVYww2jCAuT1Y5gFtHGHMFgQx76JOyMBSmMlAZENG4oYpLfbImr
/fs4eULtk+zw2MkInGchhBf18QLoLZaNcosrRb6FPEVqA/TwezYQqToeZjpGYq2f
eeTiXlbDZ1FneEuJyjBpb+SPKmfn7wTDRztQK9yZc/dEk4NYC6uRYWIMwa+EYTJl
lCHIR4+doKyrsO5qGzaQYNjG/BuVz5s=
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:59 2026 by rpki-client