Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa
File:                     f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa (raw, json)
Hash identifier:          NPpEewzWeYvi0cfHF2OKRNjold0KrB5Ijh2OzBLRY78=
Subject key identifier:   9D:B7:ED:15:38:57:C1:A1:97:4C:86:96:B1:E7:F2:8D:E2:9F:43:48
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584FA85DDF2922EA5AA6391F6020
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     22773
IP address blocks:        216.185.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:df:29:22:ea:5a:a6:39:1f:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=bee2e7b5-6c2b-40f4-80bd-43bb4cc71658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:e8:86:32:41:ec:2e:6b:29:96:ac:b6:d3:
                    e9:67:1b:d6:4e:7d:e0:1b:30:40:a0:05:f8:a5:e1:
                    38:2e:70:fd:7d:3e:ed:dd:b6:95:6b:bd:e1:28:ea:
                    cf:72:ab:8a:ea:24:07:0b:b8:03:93:41:d1:24:66:
                    b2:36:3e:3d:da:3a:46:04:36:68:11:f1:44:85:fd:
                    a3:3a:83:5d:26:53:8c:77:5e:2d:c3:e2:f1:18:db:
                    7e:9f:42:5a:d6:cc:1e:ed:5b:25:b2:ee:5a:ae:96:
                    97:fe:35:41:e7:bb:3b:af:fb:ab:56:3e:17:86:17:
                    aa:ad:7d:3b:da:27:6d:08:71:87:e9:1b:50:b5:ca:
                    71:c8:17:11:44:d5:90:af:82:5c:e7:db:af:62:e2:
                    e6:13:d8:86:68:d6:46:66:4f:97:13:ca:c4:35:d8:
                    bd:37:fb:f4:2d:45:25:39:12:71:d2:08:f8:51:de:
                    8f:3b:1c:5e:c9:b4:af:50:3e:dd:d1:e9:b5:af:48:
                    32:9c:57:06:57:8d:29:59:78:42:b0:fc:67:b2:26:
                    85:51:b6:a2:64:ec:b0:a7:37:c7:10:67:94:fd:ab:
                    22:2d:a4:64:39:6e:5b:c8:50:8e:a6:26:92:6b:f7:
                    03:ff:38:1b:c0:2f:e3:ed:67:c7:60:99:ae:e6:98:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:ED:15:38:57:C1:A1:97:4C:86:96:B1:E7:F2:8D:E2:9F:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:f2:0c:fe:10:2d:74:98:41:06:d8:93:50:f5:8b:9b:6b:
         ee:ca:f4:99:f3:41:74:5a:3f:11:4b:61:de:a0:ec:c0:ee:b5:
         d5:e0:14:75:9c:31:7f:fb:43:c1:79:de:9d:48:a8:16:d2:57:
         dd:77:0c:ba:7b:59:17:14:d6:14:27:77:d9:20:18:ce:ec:44:
         12:0b:ea:b2:df:e1:83:6f:c6:ea:aa:ee:e0:03:f4:bf:a2:e8:
         f0:0a:34:1f:15:81:fd:bd:6c:04:91:fb:55:45:dc:7b:a1:64:
         48:b5:78:89:c9:ef:25:9b:b6:77:7e:fe:e3:ce:cf:2b:a2:ff:
         1a:2b:65:e5:e5:d6:6d:47:a9:6c:47:5b:34:be:fc:f1:cd:43:
         8e:14:1e:d9:97:36:0e:29:25:e4:c7:3e:63:42:66:3c:db:05:
         c0:10:41:db:6b:aa:cc:6a:d1:13:cd:55:b2:d8:b8:6f:c7:40:
         f8:a8:b1:16:71:9c:f2:8d:dc:95:90:83:be:e2:cb:8d:ac:cd:
         3d:8e:f2:d5:92:f7:de:b6:61:4d:e7:54:8b:df:6d:4e:0a:60:
         2c:b4:fb:53:4a:75:8f:38:c4:54:6c:1b:d4:e6:95:f6:1c:46:
         8f:9a:76:8f:60:53:c1:13:83:d8:9c:3a:97:f3:ab:59:e5:71:
         9f:0c:2a:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXd8pIupapjkfYCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2
NjNlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
YmVlMmU3YjUtNmMyYi00MGY0LTgwYmQtNDNiYjRjYzcxNjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzohjJB7C5rKZasttPpZxvWTn3gGzBAoAX4
peE4LnD9fT7t3baVa73hKOrPcquK6iQHC7gDk0HRJGayNj492jpGBDZoEfFEhf2j
OoNdJlOMd14tw+LxGNt+n0Ja1swe7Vslsu5arpaX/jVB57s7r/urVj4XhheqrX07
2idtCHGH6RtQtcpxyBcRRNWQr4Jc59uvYuLmE9iGaNZGZk+XE8rENdi9N/v0LUUl
ORJx0gj4Ud6POxxeybSvUD7d0em1r0gynFcGV40pWXhCsPxnsiaFUbaiZOywpzfH
EGeU/asiLaRkOW5byFCOpiaSa/cD/zgbwC/j7WfHYJmu5pgpfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ237RU4V8Ghl0yGlrHn8o3in0NIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy
ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvZjhjMjljNjgtMDE3OS0z
ZmMzLWE2NTEtYmFiY2IxZjk1ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2
YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3
NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm
NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBM8gz+EC10mEEG2JNQ9Yuba+7K9JnzQXRaPxFLYd6g7MDutdXgFHWc
MX/7Q8F53p1IqBbSV913DLp7WRcU1hQnd9kgGM7sRBIL6rLf4YNvxuqq7uAD9L+i
6PAKNB8Vgf29bASR+1VF3HuhZEi1eInJ7yWbtnd+/uPOzyui/xorZeXl1m1HqWxH
WzS+/PHNQ44UHtmXNg4pJeTHPmNCZjzbBcAQQdtrqsxq0RPNVbLYuG/HQPiosRZx
nPKN3JWQg77iy42szT2O8tWS9962YU3nVIvfbU4KYCy0+1NKdY84xFRsG9TmlfYc
Ro+ado9gU8ETg9icOpfzq1nlcZ8MKis=
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:57:43 2026 by rpki-client