Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
File:                     3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa (raw, json)
Hash identifier:          zxNd/3yXPPPdo4tOhG7IJMZ9yk8ieFQ2k2QvO1H9lHk=
Subject key identifier:   A8:23:DD:F8:D5:79:30:A2:DF:3A:9A:AA:BC:56:4C:4C:31:5E:9E:CB
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584FA59346698324F506212A73C0
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     210
IP address blocks:        140.197.0.0/16 maxlen: 24
                          205.118.0.0/15 maxlen: 24
                          205.120.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:46:69:83:24:f5:06:21:2a:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=21ec5748-0f30-4f4f-8678-f7fed19fe0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:75:e0:e3:f6:ec:df:fd:b9:0e:53:63:a1:
                    ee:c2:e9:aa:b7:6e:9c:e8:98:d7:62:f1:8e:4e:f6:
                    51:cc:6e:90:2b:37:1b:b2:ee:e0:26:9e:f1:e0:28:
                    ac:a4:d0:04:fc:fe:b0:12:6a:9c:7a:ab:60:99:54:
                    1f:8f:8b:aa:f7:e4:8f:dd:38:82:3f:64:fb:3c:b5:
                    29:fe:ee:ea:29:93:d7:29:0f:ad:1f:95:ba:18:2d:
                    29:9a:8e:83:5b:2e:25:9a:39:b1:3f:1f:82:d5:9c:
                    3e:40:d2:a0:75:d1:81:bd:d2:d7:32:f9:38:77:29:
                    c3:8d:0d:dc:2e:8f:d6:37:08:1e:88:19:88:54:8d:
                    5c:ce:22:7b:da:f3:ae:3e:31:a8:c0:26:d4:ea:30:
                    b8:57:70:66:98:2d:b2:59:7e:85:91:2a:ce:76:43:
                    09:52:70:e7:fe:07:36:4b:0e:69:be:ee:a3:6b:4b:
                    ed:68:d0:e2:2c:3c:e5:fc:8a:b6:c5:e0:a0:19:f4:
                    ce:48:6a:d9:43:7d:c0:fd:46:be:39:72:3a:dd:f5:
                    6e:fe:0c:2a:fe:59:54:a0:8a:9c:df:d9:40:6f:a8:
                    ed:39:fd:a2:69:3d:20:1f:2b:10:e5:7a:f1:50:a6:
                    ea:d7:5b:72:f2:ea:86:25:bc:40:24:4f:62:a6:86:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:DD:F8:D5:79:30:A2:DF:3A:9A:AA:BC:56:4C:4C:31:5E:9E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.197.0.0/16
                  205.118.0.0-205.127.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:0d:1c:5e:6b:db:bd:02:6e:d4:4a:fb:45:a2:50:43:4b:
         57:62:1c:17:97:a6:cf:e6:b2:07:72:d6:80:ce:94:c7:54:c8:
         9a:da:06:bc:02:b9:4d:41:5b:49:06:e3:e9:3c:66:bd:d0:da:
         1a:46:3c:30:85:e3:ff:5e:fd:51:2b:4e:d0:70:9c:83:3d:47:
         2b:49:8f:41:6b:b2:00:93:6c:38:06:f8:2d:18:45:7d:23:e2:
         6b:f9:2b:6b:61:5c:b3:94:6a:b8:4d:e0:6c:ea:90:3d:d8:35:
         a7:b1:89:9a:bb:05:cd:84:29:45:a4:7c:f8:f2:7f:39:ad:d3:
         cd:8f:53:32:c7:b0:a0:c1:5c:7a:2a:fa:25:c9:16:05:e6:84:
         21:45:30:c2:28:07:98:39:d6:d4:5e:c3:3f:ee:60:2a:28:13:
         c2:c2:46:50:a7:dc:99:91:a5:1b:96:a6:33:9d:80:66:53:75:
         db:68:d0:02:19:3b:6e:de:8e:28:4a:6a:a6:04:9c:6b:e3:29:
         6b:e9:0a:05:cb:48:ac:ad:e1:25:13:b5:2b:88:2a:8f:fa:45:
         43:9e:03:46:0a:f7:ac:e8:53:88:67:57:a7:5a:26:e7:70:7c:
         0b:49:8a:d7:03:7f:1e:fb:a7:d7:8e:73:3e:85:f9:aa:80:3d:
         0e:15:96:b8
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE+lk0ZpgyT1BiEqc8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx
NTNmMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk
MjFlYzU3NDgtMGYzMC00ZjRmLTg2NzgtZjdmZWQxOWZlMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksx14OP27N/9uQ5TY6Huwumqt26c6JjXYvGO
TvZRzG6QKzcbsu7gJp7x4CispNAE/P6wEmqceqtgmVQfj4uq9+SP3TiCP2T7PLUp
/u7qKZPXKQ+tH5W6GC0pmo6DWy4lmjmxPx+C1Zw+QNKgddGBvdLXMvk4dynDjQ3c
Lo/WNwgeiBmIVI1cziJ72vOuPjGowCbU6jC4V3BmmC2yWX6FkSrOdkMJUnDn/gc2
Sw5pvu6ja0vtaNDiLDzl/Iq2xeCgGfTOSGrZQ33A/Ua+OXI63fVu/gwq/llUoIqc
39lAb6jtOf2iaT0gHysQ5XrxUKbq11ty8uqGJbxAJE9ipoYSAwIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFKgj3fjVeTCi3zqaqrxWTEwxXp7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0
OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvM2M4NzhmMzMtZmIxOC0z
NGZmLThhZWUtYjJjNmI0ZDQ0ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk
YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh
MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4
YTU4YTE1M2YuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAjMUwCgMD
Ac12AwMHzQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAD6gNHF5r270CbtRK+0WiUENLV2IcF5emz+ayB3LW
gM6Ux1TImtoGvAK5TUFbSQbj6TxmvdDaGkY8MIXj/179UStO0HCcgz1HK0mPQWuy
AJNsOAb4LRhFfSPia/kra2Fcs5RquE3gbOqQPdg1p7GJmrsFzYQpRaR8+PJ/Oa3T
zY9TMsewoMFceir6JckWBeaEIUUwwigHmDnW1F7DP+5gKigTwsJGUKfcmZGlG5am
M52AZlN122jQAhk7bt6OKEpqpgSca+Mpa+kKBctIrK3hJRO1K4gqj/pFQ54DRgr3
rOhTiGdXp1om53B8C0mK1wN/Hvun145zPoX5qoA9DhWWuA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:20:06 2026 by rpki-client