Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
File:                     ca9f455e-da4e-32b7-a8af-e94258969a46.roa (raw, json)
Hash identifier:          CKxifX6uM4xia/gMsl5BIKJOLXkUvwFHn+hlO3/KFDo=
Subject key identifier:   8F:21:A8:F8:90:F5:4A:C9:02:9E:A2:06:3F:4B:AB:AB:70:25:F6:4E
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584E9BE506BB30E8447AF4686F80
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     54048
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:06:bb:30:e8:44:7a:f4:68:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=2ee0b38a-e7e8-4cba-ae7d-b19614dcd06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:ef:78:0a:c6:35:ee:e5:ef:c8:bd:d2:76:
                    b2:e7:82:bc:20:33:02:cf:6a:bf:f7:c5:1b:9b:ec:
                    01:57:da:c4:da:a3:64:20:0a:8e:04:4a:a1:e7:e2:
                    7f:b0:88:c6:e6:94:29:e3:e2:0b:5d:5c:e4:5a:a1:
                    b9:63:2e:77:95:5f:8d:b2:15:e8:9f:cc:bc:8d:8d:
                    25:77:46:f0:6a:5a:15:97:33:e0:7d:d9:5e:22:cb:
                    d5:1d:69:29:36:6e:55:fd:38:70:8a:5d:45:ce:31:
                    23:67:5c:9c:a7:f5:52:9f:f8:e0:c1:d6:7f:5c:7c:
                    b0:5d:20:78:62:25:3b:0a:dc:fb:89:cf:17:d3:4a:
                    24:62:00:f6:e9:40:f5:68:c2:f4:1b:44:d0:18:48:
                    cc:e0:d2:ca:f2:6a:a8:9d:eb:ec:a4:98:76:d5:8c:
                    4d:5e:f0:30:7d:78:28:82:bb:19:6d:3f:dc:3d:ba:
                    7f:40:4c:31:6c:69:81:cf:1b:51:d4:32:fc:25:0c:
                    80:8b:6d:72:c6:02:72:1e:f5:2c:4a:b0:93:b0:13:
                    bd:88:ba:03:2d:1c:66:c6:ee:be:ad:2a:bc:fd:2d:
                    4c:ca:9e:cd:a2:7c:da:2e:e7:98:63:eb:92:fe:25:
                    d3:a6:c6:4d:92:16:9c:0d:e9:4b:f6:7c:52:43:18:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:A8:F8:90:F5:4A:C9:02:9E:A2:06:3F:4B:AB:AB:70:25:F6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:9a:d6:e3:24:f7:1f:b2:b5:85:f9:cc:21:d9:86:f3:60:
         b3:72:07:55:24:30:9b:b2:dc:18:e8:23:84:9d:f5:07:35:85:
         9d:3c:9e:f0:21:f7:39:09:c6:43:a1:9e:3d:44:c0:93:08:58:
         39:ba:37:f9:44:1c:89:c3:48:45:87:e2:59:f2:4d:33:d4:ee:
         c8:bc:71:8f:48:f5:22:cb:41:06:1e:c9:ef:08:b4:f0:fd:10:
         2e:9a:dc:cd:9e:b6:d9:a5:82:49:9a:eb:3f:75:80:ba:f5:ca:
         03:d2:14:28:b7:9b:57:34:88:0c:d3:62:2c:81:45:b4:75:52:
         12:df:d7:d7:90:20:73:38:2a:b1:44:0e:33:68:73:d7:13:e8:
         d9:9a:32:4b:d3:5b:f8:bf:d8:05:dd:4e:df:7d:30:2d:25:20:
         11:e7:c2:08:e5:86:8f:3d:fc:e4:4b:7f:d3:3f:1d:8c:1e:55:
         3a:49:60:4d:83:90:88:e1:a0:f5:df:d0:6d:ad:6d:c5:64:77:
         45:63:cd:7e:fa:d0:60:ad:3f:e0:a9:07:76:0c:4f:c7:80:6d:
         36:55:9f:e2:02:cd:ef:b1:3d:e0:6b:a2:ad:5d:60:9b:56:94:
         b0:04:b2:70:c1:2f:7b:08:48:c0:40:6a:9b:78:5d:41:92:82:
         91:23:3c:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Qa7MOhEevRob4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi
MzA1MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
MmVlMGIzOGEtZTdlOC00Y2JhLWFlN2QtYjE5NjE0ZGNkMDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh7veArGNe7l78i90nay54K8IDMCz2q/98Ub
m+wBV9rE2qNkIAqOBEqh5+J/sIjG5pQp4+ILXVzkWqG5Yy53lV+NshXon8y8jY0l
d0bwaloVlzPgfdleIsvVHWkpNm5V/Thwil1FzjEjZ1ycp/VSn/jgwdZ/XHywXSB4
YiU7Ctz7ic8X00okYgD26UD1aML0G0TQGEjM4NLK8mqonevspJh21YxNXvAwfXgo
grsZbT/cPbp/QEwxbGmBzxtR1DL8JQyAi21yxgJyHvUsSrCTsBO9iLoDLRxmxu6+
rSq8/S1Myp7NonzaLueYY+uS/iXTpsZNkhacDelL9nxSQxiFNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8hqPiQ9UrJAp6iBj9Lq6twJfZOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi
YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvY2E5ZjQ1NWUtZGE0ZS0z
MmI3LWE4YWYtZTk0MjU4OTY5YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj
ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz
YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2
M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbDmtbjJPcfsrWF+cwh2YbzYLNyB1UkMJuy3BjoI4Sd9Qc1hZ08nvAh
9zkJxkOhnj1EwJMIWDm6N/lEHInDSEWH4lnyTTPU7si8cY9I9SLLQQYeye8ItPD9
EC6a3M2ettmlgkma6z91gLr1ygPSFCi3m1c0iAzTYiyBRbR1UhLf19eQIHM4KrFE
DjNoc9cT6NmaMkvTW/i/2AXdTt99MC0lIBHnwgjlho89/ORLf9M/HYweVTpJYE2D
kIjhoPXf0G2tbcVkd0VjzX760GCtP+CpB3YMT8eAbTZVn+ICze+xPeBroq1dYJtW
lLAEsnDBL3sISMBAapt4XUGSgpEjPPU=
-----END CERTIFICATE-----
Generated at Sat Aug 1 06:57:10 2026 by rpki-client