Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3542c552-8a98-3440-896b-093dce8a120d.roa
File:                     3542c552-8a98-3440-896b-093dce8a120d.roa (raw, json)
Hash identifier:          6Ghw5cWaH0xJB/8uHvH7tng57lsrSZC4JAU/e2QiSvk=
Subject key identifier:   C4:39:BB:3A:3C:B9:0F:B2:47:DC:8A:FA:E1:29:15:3F:85:89:84:F6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F07D775C08241B37CCF9F5CA0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3542c552-8a98-3440-896b-093dce8a120d.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     3503
IP address blocks:        162.244.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:75:c0:82:41:b3:7c:cf:9f:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=4fc43829-290a-4474-8b8f-2ee1122de763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:f6:1a:2f:45:ac:b1:f4:4c:2b:ef:69:10:
                    00:f2:9a:f5:d0:e0:a8:8d:28:c4:57:01:d2:70:ae:
                    d9:ea:12:8c:58:81:be:bf:e5:6d:4a:7d:db:1d:f3:
                    0e:a4:33:3b:86:62:a1:64:73:e0:27:2a:1b:b2:24:
                    29:a1:05:8f:5f:50:5c:f4:3f:a0:1c:c8:db:73:08:
                    2c:62:18:e1:26:f4:cc:67:a4:af:69:17:ac:95:4a:
                    50:bd:4a:54:07:c6:5b:a2:19:b3:0d:b6:56:6e:7c:
                    3e:21:70:4e:ea:a8:d7:b3:ea:f8:8e:55:e8:8f:ce:
                    38:51:e0:18:77:c6:21:77:c5:e2:6f:63:37:9f:cb:
                    c3:cf:c2:da:36:73:51:30:9b:1d:66:6e:b8:42:3a:
                    61:e8:0f:37:87:f8:4f:9f:53:71:1a:45:ab:64:68:
                    e9:7d:c7:f4:c6:67:e4:18:40:85:bf:29:8f:06:a4:
                    b4:10:a5:6a:fb:f4:40:2c:4e:6a:8f:49:54:c6:89:
                    1d:36:44:76:76:11:d8:b2:c0:1e:52:7d:4b:8c:2c:
                    c3:d1:7c:80:46:6d:2d:03:96:a5:e6:9f:36:71:50:
                    f7:54:17:6a:9c:2e:85:ed:fb:6b:d5:8b:5a:23:cc:
                    d8:4a:07:0f:f2:63:51:12:bc:a8:d9:d4:ef:6c:d9:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:39:BB:3A:3C:B9:0F:B2:47:DC:8A:FA:E1:29:15:3F:85:89:84:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3542c552-8a98-3440-896b-093dce8a120d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:03:4f:7d:eb:7d:82:fc:62:05:a3:d1:87:f4:55:28:d6:
         17:96:c6:d3:5f:4a:a3:a6:e4:a6:37:ac:34:82:67:64:ac:2f:
         6f:d7:20:83:06:0b:c9:fb:a2:f9:f5:1e:bd:51:ce:53:4f:ab:
         94:c7:eb:77:63:d0:eb:74:7d:da:8a:92:e2:f5:4f:e7:28:26:
         3c:65:4a:35:17:fd:55:76:88:37:75:29:1a:86:d6:63:82:79:
         63:cf:ae:68:6c:68:ba:b1:46:70:9f:e4:f7:73:9c:38:50:93:
         91:40:9a:fd:7c:7b:68:61:5c:84:f0:83:b6:18:9e:45:7a:3d:
         74:07:9f:77:5c:26:e1:ae:2f:79:50:ab:10:63:aa:b9:2d:35:
         1b:a5:c0:12:db:e5:a9:15:4a:64:1f:5a:7b:e0:16:ac:fb:c9:
         05:73:68:c0:22:12:d3:9d:31:7a:dd:81:f0:72:d7:03:50:34:
         e3:36:53:2f:81:f1:87:d1:ca:1f:68:70:36:73:52:21:54:9f:
         a5:f1:37:b1:34:46:57:6d:05:dc:39:94:c5:cb:37:6d:12:9c:
         6b:a5:1b:f1:d2:39:77:db:92:30:47:f6:cd:c2:6e:0e:00:b6:
         16:85:68:04:9f:45:ad:93:18:d9:4f:0d:5a:55:17:44:ab:99:
         c2:43:aa:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13XAgkGzfM+fXKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGZjNDM4MjktMjkwYS00NDc0LThiOGYtMmVlMTEyMmRlNzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKL2Gi9FrLH0TCvvaRAA8pr10OCojSjEVwHS
cK7Z6hKMWIG+v+VtSn3bHfMOpDM7hmKhZHPgJyobsiQpoQWPX1Bc9D+gHMjbcwgs
YhjhJvTMZ6SvaReslUpQvUpUB8ZbohmzDbZWbnw+IXBO6qjXs+r4jlXoj844UeAY
d8Yhd8Xib2M3n8vDz8LaNnNRMJsdZm64Qjph6A83h/hPn1NxGkWrZGjpfcf0xmfk
GECFvymPBqS0EKVq+/RALE5qj0lUxokdNkR2dhHYssAeUn1LjCzD0XyARm0tA5al
5p82cVD3VBdqnC6F7ftr1YtaI8zYSgcP8mNREryo2dTvbNnutQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQ5uzo8uQ+yR9yK+uEpFT+FiYT2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMzU0MmM1NTItOGE5OC0z
NDQwLTg5NmItMDkzZGNlOGExMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovTSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsBA099632C/GIFo9GH9FUo1heWxtNfSqOm5KY3rDSCZ2SsL2/XIIMG
C8n7ovn1Hr1RzlNPq5TH63dj0Ot0fdqKkuL1T+coJjxlSjUX/VV2iDd1KRqG1mOC
eWPPrmhsaLqxRnCf5PdznDhQk5FAmv18e2hhXITwg7YYnkV6PXQHn3dcJuGuL3lQ
qxBjqrktNRulwBLb5akVSmQfWnvgFqz7yQVzaMAiEtOdMXrdgfBy1wNQNOM2Uy+B
8YfRyh9ocDZzUiFUn6XxN7E0RldtBdw5lMXLN20SnGulG/HSOXfbkjBH9s3Cbg4A
thaFaASfRa2TGNlPDVpVF0SrmcJDqrs=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:07:12 2026 by rpki-client