Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa
File:                     0f356d9b-d693-3452-b640-7ec98a80eb2f.roa (raw, json)
Hash identifier:          8u/Qki4gMUXVzkCrDpbrzAR3lubsrnEGOBDo2Tm2M4Q=
Subject key identifier:   F9:D1:D9:BC:7C:C2:6D:8A:56:6E:78:0A:9E:68:4D:9D:44:15:4F:07
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5E62BEF2998EB5E2D8644000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     64267
IP address blocks:        168.91.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:be:f2:99:8e:b5:e2:d8:64:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=ba887816-f37d-474e-99a4-5fc84517ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:40:33:97:19:db:e9:19:61:e5:94:14:0b:
                    96:f0:90:06:8e:ce:88:a6:3f:50:fc:bd:c7:9b:99:
                    c2:9b:34:db:86:4c:4b:4c:12:86:d5:c7:2c:07:3d:
                    fc:b3:a4:da:0f:26:16:77:93:f8:8b:a5:6f:27:a5:
                    85:3b:e9:29:61:60:90:1e:04:5a:a3:f9:68:03:21:
                    75:b1:33:57:64:18:47:2b:4d:89:75:f9:83:85:7d:
                    ec:03:c8:81:9f:d8:44:be:8d:70:b7:af:f8:1d:de:
                    37:b9:05:7f:6b:f8:3b:84:a3:da:f7:21:78:46:41:
                    bf:0c:03:f7:17:c9:db:4e:6c:d7:bc:30:df:5c:a3:
                    d6:69:07:ed:a7:d3:ad:90:08:95:4d:f5:7f:12:13:
                    56:1d:0e:57:af:a0:2b:1c:1e:48:98:28:34:b5:91:
                    0a:61:1e:85:03:65:c2:ab:1a:e2:cc:3e:0b:24:8f:
                    56:c7:ca:b9:2b:c2:dd:6d:1d:ea:a2:6f:b4:60:16:
                    fe:e4:9d:51:30:84:c5:5c:46:d7:1d:9e:36:5c:a5:
                    e6:c0:4d:98:67:11:45:3d:55:88:9f:1c:c3:12:05:
                    85:14:19:69:6f:dd:01:50:a5:81:48:0d:b1:8c:6e:
                    e0:40:54:11:83:b9:3a:53:e5:89:3e:f2:e8:94:80:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D1:D9:BC:7C:C2:6D:8A:56:6E:78:0A:9E:68:4D:9D:44:15:4F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:66:66:e1:44:fa:d2:59:f1:2b:e7:e0:2c:93:22:41:f3:
         96:17:67:69:46:92:e0:8b:17:9c:7b:03:81:75:35:a5:b9:f4:
         3b:58:a7:db:53:9b:cf:0b:d9:5c:4e:4b:37:15:7c:18:76:7e:
         24:33:da:e6:8f:97:34:11:e5:64:99:de:3e:47:9b:99:70:dd:
         ad:aa:93:b3:58:24:f8:0e:29:78:cd:f0:2c:79:db:b8:90:6e:
         dd:9a:22:56:60:59:f0:af:36:26:42:01:c6:bd:0d:df:91:ef:
         d8:40:5a:45:ab:45:63:96:95:09:17:b2:7a:22:7a:c6:36:9c:
         41:11:4f:90:fc:d3:00:77:4a:e4:83:f0:f2:2d:19:6c:c1:28:
         cc:9d:42:25:2b:76:f4:51:85:ad:d5:41:bf:5d:ec:38:c1:2c:
         a9:73:49:df:0f:1f:28:b8:9b:c4:ab:3c:80:bb:c9:39:6d:6e:
         3d:dc:72:82:c3:9b:7d:cd:7b:4b:eb:6a:53:e2:c5:d5:3e:a4:
         e1:99:41:e7:72:56:17:55:f2:8b:d9:c9:ac:f9:2a:3c:f2:c1:
         aa:cf:38:a0:59:c6:75:eb:d9:17:79:98:f7:fd:a5:20:e9:cf:
         9f:03:df:72:83:87:00:6f:0f:8c:d8:74:fe:eb:22:db:ba:d6:
         c8:6a:54:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYr7ymY614thkQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
YmE4ODc4MTYtZjM3ZC00NzRlLTk5YTQtNWZjODQ1MTdjZWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyRAM5cZ2+kZYeWUFAuW8JAGjs6Ipj9Q/L3H
m5nCmzTbhkxLTBKG1ccsBz38s6TaDyYWd5P4i6VvJ6WFO+kpYWCQHgRao/loAyF1
sTNXZBhHK02JdfmDhX3sA8iBn9hEvo1wt6/4Hd43uQV/a/g7hKPa9yF4RkG/DAP3
F8nbTmzXvDDfXKPWaQftp9OtkAiVTfV/EhNWHQ5Xr6ArHB5ImCg0tZEKYR6FA2XC
qxrizD4LJI9Wx8q5K8LdbR3qom+0YBb+5J1RMITFXEbXHZ42XKXmwE2YZxFFPVWI
nxzDEgWFFBlpb90BUKWBSA2xjG7gQFQRg7k6U+WJPvLolICZiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnR2bx8wm2KVm54Cp5oTZ1EFU8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGYzNTZkOWItZDY5My0z
NDUyLWI2NDAtN2VjOThhODBlYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXHZmbhRPrSWfEr5+AskyJB85YXZ2lGkuCLF5x7A4F1NaW59DtYp9tT
m88L2VxOSzcVfBh2fiQz2uaPlzQR5WSZ3j5Hm5lw3a2qk7NYJPgOKXjN8Cx527iQ
bt2aIlZgWfCvNiZCAca9Dd+R79hAWkWrRWOWlQkXsnoiesY2nEERT5D80wB3SuSD
8PItGWzBKMydQiUrdvRRha3VQb9d7DjBLKlzSd8PHyi4m8SrPIC7yTltbj3ccoLD
m33Ne0vralPixdU+pOGZQedyVhdV8ovZyaz5KjzywarPOKBZxnXr2Rd5mPf9pSDp
z58D33KDhwBvD4zYdP7rItu61shqVHo=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:32:26 2026 by rpki-client