Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
File:                     8211cbe9-7823-3994-9066-ce68fa110b8f.roa (raw, json)
Hash identifier:          LMXLGo4ff3jjWT1+I3xP/uCrtgOnlbvHR4VBBVY3RA0=
Subject key identifier:   DD:CE:27:BE:56:17:25:5B:45:A8:48:4E:F4:8B:38:BB:EF:1C:EA:EE
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584F7E7DABF098D5ADFFD40D4DD0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     30041
IP address blocks:        168.100.184.0/21 maxlen: 24
                          192.145.64.0/22 maxlen: 24
                          206.204.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:ab:f0:98:d5:ad:ff:d4:0d:4d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=5cf8a41f-0fe0-47ff-9496-d99a878f0a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e0:3d:7a:54:a1:8e:e1:c9:58:bf:69:17:0b:
                    42:4c:47:e5:96:ba:5e:ce:90:ef:fc:52:b3:10:74:
                    df:9c:f0:f4:fc:52:7e:38:56:7d:34:ca:70:d2:bd:
                    65:a7:84:cf:b2:88:42:3b:79:39:67:04:3a:0d:e6:
                    75:2b:70:16:c7:f9:20:a4:89:6d:fd:1d:bd:78:1a:
                    ad:81:07:7e:64:f8:13:21:eb:aa:44:08:1d:0e:75:
                    2e:ee:a0:d9:21:99:cb:66:36:e1:93:17:be:c5:1b:
                    11:f9:af:dc:a4:47:c0:6b:b5:bd:8a:09:f4:2a:6a:
                    89:8c:8d:f5:e9:b8:44:0b:41:2c:58:6d:f7:cd:f6:
                    7f:d0:25:d2:4e:f9:00:68:cc:14:9a:20:05:53:88:
                    86:a8:d1:ee:8f:f0:fe:f9:72:8d:40:06:ba:fc:af:
                    21:72:1b:40:50:34:78:9e:f0:5b:76:1b:a5:c3:f1:
                    d5:be:a7:18:e0:0a:0d:d9:44:e1:88:be:1a:2d:ba:
                    f8:5c:36:ee:e1:79:75:0b:5a:47:67:6a:2c:fb:28:
                    32:61:66:58:75:f0:7d:50:a7:79:2d:79:fb:af:fe:
                    b6:93:23:12:28:b6:ca:d5:81:cf:70:d2:f0:01:b3:
                    8f:67:f4:a2:10:28:31:41:c5:25:a9:6e:cf:33:19:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CE:27:BE:56:17:25:5B:45:A8:48:4E:F4:8B:38:BB:EF:1C:EA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.184.0/21
                  192.145.64.0/22
                  206.204.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:8f:36:14:49:0c:fa:f8:cc:e6:02:45:b7:6d:cb:77:48:
         72:ec:66:60:87:58:08:bf:b9:87:f2:c3:82:8e:ee:c4:4e:6a:
         13:de:d6:be:ed:1f:4c:8a:b5:f7:2f:ef:20:6a:96:cd:76:9f:
         44:8b:aa:92:82:4a:0b:55:00:bc:6b:b5:87:ad:d2:4a:f5:f9:
         ae:69:b1:f2:ad:54:7c:e4:10:3d:9c:d1:9a:af:45:d8:e1:f1:
         ee:47:bf:8a:c9:a8:0b:36:b5:58:11:13:21:3a:97:9e:4c:96:
         a9:8a:45:b2:b3:25:12:ca:40:30:d9:55:c7:54:5f:5b:fc:36:
         97:3f:37:c7:6d:c3:4d:86:98:31:f4:b3:33:e5:89:f6:aa:4c:
         40:7f:76:0b:e2:33:8b:12:a6:51:89:b0:6a:a8:e0:78:d0:22:
         49:c4:c7:12:92:bb:db:11:6c:3b:0d:03:43:ff:f7:ca:97:a4:
         95:4d:54:7e:d5:b1:25:67:bd:39:b9:83:8e:06:d9:c9:e0:02:
         de:dd:a4:da:7b:fa:ca:2a:d5:e0:60:8b:2a:fa:53:7e:0a:81:
         fe:27:99:93:c4:75:37:e5:a7:59:11:7f:8d:be:d1:4e:bc:69:
         58:fd:1c:9c:de:2f:2f:f8:41:ff:e2:b5:c3:2d:ef:8d:1e:05:
         11:c4:c3:6e
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9+favwmNWt/9QNTdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh
MzQzMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NWNmOGE0MWYtMGZlMC00N2ZmLTk0OTYtZDk5YTg3OGYwYTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uA9elShjuHJWL9pFwtCTEfllrpezpDv/FKz
EHTfnPD0/FJ+OFZ9NMpw0r1lp4TPsohCO3k5ZwQ6DeZ1K3AWx/kgpIlt/R29eBqt
gQd+ZPgTIeuqRAgdDnUu7qDZIZnLZjbhkxe+xRsR+a/cpEfAa7W9ign0KmqJjI31
6bhEC0EsWG33zfZ/0CXSTvkAaMwUmiAFU4iGqNHuj/D++XKNQAa6/K8hchtAUDR4
nvBbdhulw/HVvqcY4AoN2UThiL4aLbr4XDbu4Xl1C1pHZ2os+ygyYWZYdfB9UKd5
LXn7r/62kyMSKLbK1YHPcNLwAbOPZ/SiECgxQcUlqW7PMxnpfwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFN3OJ75WFyVbRahITvSLOLvvHOruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4
YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvODIxMWNiZTktNzgyMy0z
OTk0LTkwNjYtY2U2OGZhMTEwYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0
MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm
YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi
NDU0ZmEzNDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDqGS4AwQC
wJFAAwQCzsz8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACbrjzYUSQz6+MzmAkW3bct3SHLsZmCHWAi/uYfy
w4KO7sROahPe1r7tH0yKtfcv7yBqls12n0SLqpKCSgtVALxrtYet0kr1+a5psfKt
VHzkED2c0ZqvRdjh8e5Hv4rJqAs2tVgREyE6l55MlqmKRbKzJRLKQDDZVcdUX1v8
Npc/N8dtw02GmDH0szPlifaqTEB/dgviM4sSplGJsGqo4HjQIknExxKSu9sRbDsN
A0P/98qXpJVNVH7VsSVnvTm5g44G2cngAt7dpNp7+soq1eBgiyr6U34Kgf4nmZPE
dTflp1kRf42+0U68aVj9HJzeLy/4Qf/itcMt740eBRHEw24=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:34:22 2026 by rpki-client