Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa
File:                     a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa (raw, json)
Hash identifier:          H2la4fjgVCG1pa584qAAE8vRJf9/dEqTJpxyY971Dzc=
Subject key identifier:   70:A6:4A:B8:7F:1E:6D:77:9B:A3:EB:D9:28:92:51:CB:11:10:89:0B
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584F119D18A44AFB4FCB7A2C3040
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     4181
IP address blocks:        205.213.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:18:a4:4a:fb:4f:cb:7a:2c:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=396f189a-cdbb-4551-9f7a-e400388bbbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:d7:9d:c7:54:b4:8a:c1:0c:42:eb:1e:ad:
                    2b:12:94:b3:34:41:ca:f7:eb:73:fb:57:9e:c3:ea:
                    3f:48:01:17:03:0c:3e:b4:4b:27:07:82:7e:d9:f1:
                    b0:40:ff:0a:e7:4f:81:98:c9:35:aa:99:b7:f0:f5:
                    5a:5b:74:b7:3f:82:b2:de:3a:8c:92:04:7d:ac:8f:
                    72:3d:02:d6:cf:c9:75:7f:fc:63:db:ee:d3:3d:0b:
                    f7:56:46:cf:67:e7:04:14:c5:32:38:04:81:8d:e4:
                    85:da:eb:7f:27:97:9f:ac:07:00:ab:fa:aa:4a:3f:
                    7a:a1:99:ee:9f:9a:54:b3:8a:80:17:07:89:91:c9:
                    8a:12:18:1b:1c:37:4e:cd:b7:eb:d5:e7:e0:5a:3f:
                    60:88:f7:53:b7:05:1f:34:0e:28:db:7c:5c:de:de:
                    aa:73:96:04:43:39:ea:c7:6e:45:25:ae:64:77:bc:
                    28:bc:7d:1e:83:5d:a0:a0:0b:f4:15:6e:70:ae:7d:
                    bd:c3:7a:11:ac:a9:33:ed:83:06:21:72:88:e6:09:
                    61:97:19:8e:44:3a:eb:4c:98:17:77:1c:ff:aa:38:
                    f0:91:1d:d2:e2:62:60:b1:ca:de:84:23:70:3c:5a:
                    2c:d4:89:3c:74:6b:35:71:ca:1d:75:3b:76:e2:84:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A6:4A:B8:7F:1E:6D:77:9B:A3:EB:D9:28:92:51:CB:11:10:89:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:c0:db:14:95:0c:99:45:28:80:a3:48:a8:ed:ab:a9:82:
         fb:02:ca:b7:95:90:3c:46:ab:04:ef:08:28:71:3c:71:38:34:
         c1:66:2e:20:07:29:8f:de:d1:d4:d3:bb:1e:1a:3a:ce:e4:5d:
         0e:49:4d:20:c7:10:8d:4e:bc:6d:ca:68:f6:09:ef:cb:00:ca:
         84:89:2a:ae:1e:b0:dc:79:e8:e1:6e:0e:ed:48:69:83:b6:9d:
         ac:64:7c:b1:35:1a:7c:e4:3c:0e:cd:97:a8:db:c8:6c:25:4d:
         3d:c4:37:e2:bf:0b:12:4c:8d:ad:82:89:ae:d8:bc:da:81:c5:
         05:2d:e4:7c:aa:93:16:17:58:e6:20:2c:26:51:b4:90:4e:21:
         67:04:d6:a5:33:5a:6f:f7:37:61:5e:80:f6:cc:8f:20:80:92:
         92:49:3a:9e:f2:b6:54:92:59:64:e2:90:93:18:86:e5:2d:70:
         33:75:a5:ef:83:71:fa:c6:d1:be:3f:cf:f6:db:7f:b4:b3:83:
         65:b9:f1:65:30:04:e5:e2:51:7e:e0:96:b4:da:a8:dd:12:6f:
         ef:d3:bf:5b:27:aa:bd:4a:40:c1:01:15:e7:6f:38:95:5f:a8:
         56:5e:e8:17:01:0d:b5:37:07:66:ca:bc:c4:e0:fc:11:c8:09:
         de:de:10:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRikSvtPy3osMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mzk2ZjE4OWEtY2RiYi00NTUxLTlmN2EtZTQwMDM4OGJiYmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPjXncdUtIrBDELrHq0rEpSzNEHK9+tz+1ee
w+o/SAEXAww+tEsnB4J+2fGwQP8K50+BmMk1qpm38PVaW3S3P4Ky3jqMkgR9rI9y
PQLWz8l1f/xj2+7TPQv3VkbPZ+cEFMUyOASBjeSF2ut/J5efrAcAq/qqSj96oZnu
n5pUs4qAFweJkcmKEhgbHDdOzbfr1efgWj9giPdTtwUfNA4o23xc3t6qc5YEQznq
x25FJa5kd7wovH0eg12goAv0FW5wrn29w3oRrKkz7YMGIXKI5glhlxmORDrrTJgX
dxz/qjjwkR3S4mJgscrehCNwPFos1Ik8dGs1ccoddTt24oQifwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCmSrh/Hm13m6Pr2SiSUcsREIkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYTA5MGY5ZmUtMzczZS0z
ZWQ3LTg0MjktOGU1M2NjYjExM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADHwNsUlQyZRSiAo0io7aupgvsCyreVkDxGqwTvCChxPHE4NMFmLiAH
KY/e0dTTux4aOs7kXQ5JTSDHEI1OvG3KaPYJ78sAyoSJKq4esNx56OFuDu1IaYO2
naxkfLE1GnzkPA7Nl6jbyGwlTT3EN+K/CxJMja2Cia7YvNqBxQUt5HyqkxYXWOYg
LCZRtJBOIWcE1qUzWm/3N2FegPbMjyCAkpJJOp7ytlSSWWTikJMYhuUtcDN1pe+D
cfrG0b4/z/bbf7Szg2W58WUwBOXiUX7glrTaqN0Sb+/Tv1snqr1KQMEBFedvOJVf
qFZe6BcBDbU3B2bKvMTg/BHICd7eEME=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:47:39 2026 by rpki-client