Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
File:                     40a03e32-5251-3da2-b2fa-a2e789263d7b.roa (raw, json)
Hash identifier:          vAO01Dy5LZ5+0nM2tI1K/LE7gOQ6zEZy25uW+biNCFA=
Subject key identifier:   11:81:EC:34:7F:55:FF:FB:6A:23:8B:D3:DE:22:F4:97:26:AC:AC:47
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F506D50CE78DFA67A9B34D640
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        152.44.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:50:ce:78:df:a6:7a:9b:34:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=83925c30-52b2-4062-b065-a48ae8d6b243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:01:c5:30:3e:dc:42:e4:84:71:5e:9d:cf:
                    a7:88:55:e3:95:b7:55:05:63:c8:48:05:2e:9b:ea:
                    1b:db:85:a4:9e:c9:fb:4c:cb:29:fb:08:7a:b5:41:
                    7c:31:b8:db:8e:8a:41:0a:b5:66:19:18:48:ce:2f:
                    b3:59:40:6e:de:e9:89:d8:1b:e4:ad:a1:c7:c3:6b:
                    47:d5:91:9a:4d:3b:fb:12:da:52:e9:98:44:ab:21:
                    61:95:f4:e9:5e:e7:d8:35:72:ab:c8:cc:b1:5e:7f:
                    0c:5d:a0:b2:62:f8:17:ee:d1:d0:68:ae:76:ed:00:
                    84:51:bc:d5:3b:0a:22:74:b8:08:73:25:1c:18:ba:
                    36:ec:db:df:f5:a9:83:78:60:23:2a:b0:42:fe:c5:
                    a3:e0:02:a0:7b:6d:15:de:5b:70:77:43:c9:8f:89:
                    14:6b:39:5b:86:79:a6:f6:09:2c:e6:75:3b:3c:e5:
                    70:fd:8b:8f:89:ea:4f:d1:dd:07:39:8b:ca:d2:0b:
                    f7:bf:2d:02:ea:66:60:d2:57:46:38:98:59:8b:8a:
                    f2:20:e6:b0:30:9a:9e:ad:bb:75:8a:af:75:07:1e:
                    25:72:74:14:11:77:49:b6:41:9b:23:03:02:af:e7:
                    6c:31:0e:3e:b7:ae:74:84:9a:61:9a:98:2e:b0:cb:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:EC:34:7F:55:FF:FB:6A:23:8B:D3:DE:22:F4:97:26:AC:AC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:4f:28:0e:12:97:84:2f:10:f1:db:cc:7e:4d:75:79:10:b8:
         55:83:29:4c:3b:7d:04:6f:7e:68:e3:55:24:fd:44:73:3b:fd:
         03:0f:40:d5:65:cb:4a:a5:d5:60:9d:4f:4c:82:01:29:2c:ed:
         c2:71:ad:6d:eb:52:80:26:57:be:5f:9c:88:51:79:a7:c3:cc:
         29:98:20:d9:97:7b:1a:c0:c9:da:08:f8:1d:49:17:cf:c0:30:
         9d:7c:0b:e6:73:2e:bb:e8:d3:03:7e:bc:95:25:21:44:13:8b:
         21:50:a1:b5:f7:be:4e:3f:0c:c4:02:a6:dc:e6:86:d4:48:81:
         b9:a0:73:ea:e5:f7:2e:27:41:ef:63:28:10:71:0b:d5:58:9b:
         69:0d:69:6e:d0:b3:0a:de:b2:f4:03:37:73:4e:e3:bd:fa:49:
         a3:86:c4:74:0f:24:1c:83:17:bb:07:71:2a:39:7d:7a:d3:bb:
         74:09:8e:05:05:7c:5b:35:10:46:cd:fd:e2:75:f9:d3:2d:06:
         32:2c:23:d1:1d:1f:fa:2b:ce:2b:67:92:bc:ca:f4:a6:cd:aa:
         33:b6:d3:fd:c7:87:41:0e:16:65:28:65:2c:8f:f5:86:b6:7b:
         0a:75:eb:3e:04:ce:68:fa:fe:f8:55:b7:9c:ea:ec:99:70:af:
         aa:83:6d:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVDOeN+meps01kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ODM5MjVjMzAtNTJiMi00MDYyLWIwNjUtYTQ4YWU4ZDZiMjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglQBxTA+3ELkhHFenc+niFXjlbdVBWPISAUu
m+ob24Wknsn7TMsp+wh6tUF8MbjbjopBCrVmGRhIzi+zWUBu3umJ2BvkraHHw2tH
1ZGaTTv7EtpS6ZhEqyFhlfTpXufYNXKryMyxXn8MXaCyYvgX7tHQaK527QCEUbzV
OwoidLgIcyUcGLo27Nvf9amDeGAjKrBC/sWj4AKge20V3ltwd0PJj4kUazlbhnmm
9gks5nU7POVw/YuPiepP0d0HOYvK0gv3vy0C6mZg0ldGOJhZi4ryIOawMJqerbt1
iq91Bx4lcnQUEXdJtkGbIwMCr+dsMQ4+t650hJphmpgusMu1VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGB7DR/Vf/7aiOL094i9JcmrKxHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDBhMDNlMzItNTI1MS0z
ZGEyLWIyZmEtYTJlNzg5MjYzZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN9PKA4Sl4QvEPHbzH5NdXkQuFWDKUw7fQRvfmjjVST9RHM7/QMPQNVl
y0ql1WCdT0yCASks7cJxrW3rUoAmV75fnIhReafDzCmYINmXexrAydoI+B1JF8/A
MJ18C+ZzLrvo0wN+vJUlIUQTiyFQobX3vk4/DMQCptzmhtRIgbmgc+rl9y4nQe9j
KBBxC9VYm2kNaW7QswresvQDN3NO4736SaOGxHQPJByDF7sHcSo5fXrTu3QJjgUF
fFs1EEbN/eJ1+dMtBjIsI9EdH/orzitnkrzK9KbNqjO20/3Hh0EOFmUoZSyP9Ya2
ewp16z4Ezmj6/vhVt5zq7Jlwr6qDbUo=
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:50:15 2026 by rpki-client