Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8563c708-858f-33da-9685-8baaa07947fa.roa
File:                     8563c708-858f-33da-9685-8baaa07947fa.roa (raw, json)
Hash identifier:          sNdgHLFQBwqo6THwDh6HL0ooBI8ANmSjvE9O3+X07WM=
Subject key identifier:   44:86:09:AA:26:3C:EA:9F:F8:32:EA:96:BE:84:74:CB:CB:60:1D:33
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DFB6574B2FFCE9B012500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8563c708-858f-33da-9685-8baaa07947fa.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     6534
IP address blocks:        205.172.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:fb:65:74:b2:ff:ce:9b:01:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=257d4f6e-c25e-4fbc-a236-2c64076c4a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:0c:8a:99:11:a5:4d:6c:46:71:00:ce:99:
                    3a:67:8c:a8:4c:89:41:78:67:5e:2b:3e:3c:15:bb:
                    a1:a2:8e:27:2a:d5:10:eb:26:4a:51:cb:d8:f8:ca:
                    e8:93:66:b7:a6:79:a9:53:2a:4e:a0:57:a3:b4:b1:
                    16:4c:8c:e3:d8:c6:50:a9:df:59:ea:e4:e8:29:e2:
                    47:f9:b9:5a:51:17:31:ef:31:bf:39:6d:2c:be:39:
                    61:43:18:2f:77:ea:10:61:63:4a:21:3e:17:6f:e3:
                    39:ca:48:aa:bc:e4:02:b9:b9:3b:62:2f:0e:ef:10:
                    fa:b7:0d:58:8e:c2:b8:c4:1a:53:82:3d:99:ea:67:
                    c0:d6:21:b9:36:f7:cf:44:a8:d6:6b:fa:bc:2d:24:
                    1a:32:29:75:06:47:ea:01:da:98:bd:73:21:67:4f:
                    55:c3:d2:67:c5:cc:02:28:d0:3f:86:61:be:a2:e3:
                    d1:97:64:19:a8:00:9d:fe:72:2d:81:39:50:ec:20:
                    a1:2a:4f:00:c0:2e:2c:b1:f1:f0:8b:91:a4:59:60:
                    dc:9d:eb:78:5d:4b:a1:d0:9d:fe:9e:b2:fe:44:1e:
                    2d:59:43:1d:5e:9e:fa:e3:a4:fc:0e:86:8a:d7:91:
                    48:17:62:42:cd:84:2c:68:cd:14:68:26:92:73:30:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:09:AA:26:3C:EA:9F:F8:32:EA:96:BE:84:74:CB:CB:60:1D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8563c708-858f-33da-9685-8baaa07947fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.172.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:1c:1b:51:d2:af:60:0e:c4:e5:7c:b0:01:da:0a:c9:19:
         cf:25:13:2b:41:bb:ef:02:63:c8:30:f6:79:06:fd:8b:cf:65:
         63:da:89:5b:a2:b5:67:b5:98:6e:c1:73:59:d0:75:f0:c3:50:
         07:0e:58:b6:4f:12:60:11:db:c3:cf:59:3b:b2:64:7c:89:eb:
         28:90:21:e1:8a:4c:f7:bf:1b:4a:1c:7d:32:72:cd:34:db:ca:
         76:fb:a7:72:62:00:73:d9:ff:7e:a8:10:cd:40:fb:20:20:14:
         91:c0:62:51:ee:b7:8d:35:64:10:4a:db:d0:37:f7:7f:c4:f7:
         1f:63:cc:80:17:df:82:52:b9:c8:79:57:ae:b8:ca:18:ac:c5:
         d2:2f:84:b6:3f:31:78:c4:fe:f6:dd:12:26:1c:aa:5f:3c:87:
         da:58:7b:04:ad:fe:1f:16:ba:2d:9c:f6:3f:46:01:73:21:65:
         94:ef:b0:4e:84:76:cb:f9:cd:8c:19:24:f4:1d:70:99:a5:ab:
         92:c9:f3:58:34:50:90:80:2a:9d:e0:5c:1c:64:e7:77:54:a0:
         f3:2d:f7:24:03:d7:66:f5:33:9f:eb:5e:b5:d8:47:38:cf:25:
         92:e1:ac:01:6c:23:ee:02:37:d5:23:a6:8f:0c:62:1d:1f:af:
         05:ef:ba:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXftldLL/zpsBJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MjU3ZDRmNmUtYzI1ZS00ZmJjLWEyMzYtMmM2NDA3NmM0YTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+cMipkRpU1sRnEAzpk6Z4yoTIlBeGdeKz48
Fbuhoo4nKtUQ6yZKUcvY+Mrok2a3pnmpUypOoFejtLEWTIzj2MZQqd9Z6uToKeJH
+blaURcx7zG/OW0svjlhQxgvd+oQYWNKIT4Xb+M5ykiqvOQCubk7Yi8O7xD6tw1Y
jsK4xBpTgj2Z6mfA1iG5NvfPRKjWa/q8LSQaMil1BkfqAdqYvXMhZ09Vw9JnxcwC
KNA/hmG+ouPRl2QZqACd/nItgTlQ7CChKk8AwC4ssfHwi5GkWWDcnet4XUuh0J3+
nrL+RB4tWUMdXp7646T8DoaK15FIF2JCzYQsaM0UaCaSczCW+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESGCaomPOqf+DLqlr6EdMvLYB0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODU2M2M3MDgtODU4Zi0z
M2RhLTk2ODUtOGJhYWEwNzk0N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzawQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISFHBtR0q9gDsTlfLAB2grJGc8lEytBu+8CY8gw9nkG/YvPZWPaiVui
tWe1mG7Bc1nQdfDDUAcOWLZPEmAR28PPWTuyZHyJ6yiQIeGKTPe/G0ocfTJyzTTb
ynb7p3JiAHPZ/36oEM1A+yAgFJHAYlHut401ZBBK29A393/E9x9jzIAX34JSuch5
V664yhisxdIvhLY/MXjE/vbdEiYcql88h9pYewSt/h8Wui2c9j9GAXMhZZTvsE6E
dsv5zYwZJPQdcJmlq5LJ81g0UJCAKp3gXBxk53dUoPMt9yQD12b1M5/rXrXYRzjP
JZLhrAFsI+4CN9Ujpo8MYh0frwXvujY=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:23:08 2026 by rpki-client