Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/8074c426-0ac8-3c52-8f80-e78461cefd94.roa
File:                     8074c426-0ac8-3c52-8f80-e78461cefd94.roa (raw, json)
Hash identifier:          JaFgAjXh9FxpOvICHTSaWLFkFV9ViiS9XhWNENUmOIc=
Subject key identifier:   3F:AC:2D:9F:A9:BC:52:41:BF:2F:D7:08:B6:94:C1:ED:4A:64:C1:46
Certificate issuer:       /CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
Certificate serial:       010D0C9F4328584EE17AAFADF08933B5D9753B80
Authority key identifier: F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/8074c426-0ac8-3c52-8f80-e78461cefd94.roa
Signing time:             Tue 18 Aug 2026 19:12:35 +0000
ROA not before:           Tue 18 Aug 2026 19:12:35 +0000
ROA not after:            Mon 16 Nov 2026 20:10:27 +0000
asID:                     16509
IP address blocks:        206.168.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e1:7a:af:ad:f0:89:33:b5:d9:75:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
        Validity
            Not Before: Aug 18 19:12:35 2026 GMT
            Not After : Nov 16 20:10:27 2026 GMT
        Subject: CN=bda97c2b-a651-4b80-b125-42999e9eb939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:94:a5:d4:6e:e2:d1:07:11:3f:f4:19:02:
                    59:54:2a:96:ee:a9:a0:7c:72:5b:2e:c5:4e:94:d4:
                    74:b7:99:2c:7b:e4:55:c4:a9:5d:d9:26:b6:bd:d3:
                    b1:f7:29:aa:d8:87:90:a4:3f:44:a0:ad:e1:b2:cd:
                    35:22:36:aa:b2:85:e9:fa:38:52:e0:81:42:62:a6:
                    24:b2:fe:8f:03:13:04:30:72:53:c9:3d:b7:ef:fb:
                    27:e4:2d:28:f6:e4:b6:52:9d:58:bd:32:3d:a0:dd:
                    8d:58:c7:58:35:a0:7b:97:d9:24:70:9e:82:49:e9:
                    a3:f5:ac:00:fc:2e:61:63:19:f1:a3:6e:be:b6:24:
                    88:9a:19:03:b8:80:2c:bc:90:30:16:97:31:bd:a0:
                    3b:5c:00:63:8e:52:7f:ed:0a:2f:56:15:38:28:e9:
                    e2:d7:e3:d6:db:0c:c8:8f:4a:f9:ea:bd:92:f8:d7:
                    a5:bb:24:87:18:66:79:2e:e4:5a:68:41:d5:c5:92:
                    82:13:98:c1:2d:35:f2:9d:5c:ca:c0:c2:c3:45:91:
                    02:97:eb:9b:f5:6d:a7:a2:9b:9b:99:7b:42:63:39:
                    64:24:e9:f9:35:3e:d5:25:e6:54:49:ee:bc:74:0b:
                    a2:6c:de:da:8d:1a:39:7a:dc:20:1e:69:07:da:d9:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AC:2D:9F:A9:BC:52:41:BF:2F:D7:08:B6:94:C1:ED:4A:64:C1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/8074c426-0ac8-3c52-8f80-e78461cefd94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.crl

            X509v3 Authority Key Identifier:
                keyid:F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:a0:63:56:0c:a2:ba:2a:f2:12:d5:f5:94:86:34:6e:05:
         b1:2e:3f:95:71:8d:86:f2:44:ce:82:83:f1:98:64:5a:7f:60:
         eb:dd:96:51:77:5f:e2:a5:20:dc:0b:83:84:75:9d:7e:b3:30:
         10:25:9e:4e:27:7c:5f:37:e0:4c:c0:db:d2:43:ea:cf:09:1e:
         25:37:e0:cd:47:ce:94:22:f9:d6:76:54:b6:ec:6f:8c:e4:d6:
         3c:ae:21:1f:06:6d:a6:c8:c9:c6:7b:1b:55:df:6f:d2:0c:40:
         46:5b:76:cd:64:a5:a0:a2:b3:b3:3c:f6:26:4b:67:c4:ee:54:
         03:c7:61:7c:21:02:70:49:2d:86:78:7b:dd:d7:93:33:22:90:
         94:3f:8a:16:bf:dc:24:d1:72:8e:14:bb:d3:1b:17:f3:0e:ee:
         27:a1:4c:2d:32:92:73:44:1c:f1:06:52:36:ed:2b:b5:31:fc:
         d8:7a:7a:6f:e9:7a:15:a2:e8:47:30:c4:3c:9a:46:49:13:f4:
         24:f8:64:cd:a2:96:f0:91:aa:0d:af:d7:8a:16:c7:ec:6e:a8:
         61:cb:92:d5:58:16:ab:53:70:1f:8d:93:52:97:e8:1d:70:c0:
         f4:fd:61:f9:6b:79:ad:38:80:04:83:9e:6a:fd:6f:d3:d5:4b:
         d1:c0:9a:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7heq+t8Ikztdl1O4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2NmNlOWYtZTNjYy00NjBiLWIxMjEtOTVlNWY0NDE1
ZTY0MB4XDTI2MDgxODE5MTIzNVoXDTI2MTExNjIwMTAyN1owLzEtMCsGA1UEAxMk
YmRhOTdjMmItYTY1MS00YjgwLWIxMjUtNDI5OTllOWViOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodKUpdRu4tEHET/0GQJZVCqW7qmgfHJbLsVO
lNR0t5kse+RVxKld2Sa2vdOx9ymq2IeQpD9EoK3hss01IjaqsoXp+jhS4IFCYqYk
sv6PAxMEMHJTyT237/sn5C0o9uS2Up1YvTI9oN2NWMdYNaB7l9kkcJ6CSemj9awA
/C5hYxnxo26+tiSImhkDuIAsvJAwFpcxvaA7XABjjlJ/7QovVhU4KOni1+PW2wzI
j0r56r2S+NeluySHGGZ5LuRaaEHVxZKCE5jBLTXynVzKwMLDRZECl+ub9W2nopub
mXtCYzlkJOn5NT7VJeZUSe68dAuibN7ajRo5etwgHmkH2tkMSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+sLZ+pvFJBvy/XCLaUwe1KZMFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTY2
Y2U5Zi1lM2NjLTQ2MGItYjEyMS05NWU1ZjQ0MTVlNjQvODA3NGM0MjYtMGFjOC0z
YzUyLThmODAtZTc4NDYxY2VmZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjU2NmNlOWYtZTNjYy00NjBiLWIx
MjEtOTVlNWY0NDE1ZTY0L2I1NjZjZTlmLWUzY2MtNDYwYi1iMTIxLTk1ZTVmNDQx
NWU2NC5jcmwwHwYDVR0jBBgwFoAU+VevfA6zXki3PNDIpmYhtyH9nMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTY2Y2U5Zi1lM2NjLTQ2MGItYjEyMS05NWU1
ZjQ0MTVlNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPxoGNWDKK6KvIS1fWUhjRuBbEuP5VxjYbyRM6Cg/GYZFp/YOvdllF3
X+KlINwLg4R1nX6zMBAlnk4nfF834EzA29JD6s8JHiU34M1HzpQi+dZ2VLbsb4zk
1jyuIR8GbabIycZ7G1Xfb9IMQEZbds1kpaCis7M89iZLZ8TuVAPHYXwhAnBJLYZ4
e93XkzMikJQ/iha/3CTRco4Uu9MbF/MO7iehTC0yknNEHPEGUjbtK7Ux/Nh6em/p
ehWi6EcwxDyaRkkT9CT4ZM2ilvCRqg2v14oWx+xuqGHLktVYFqtTcB+Nk1KX6B1w
wPT9Yflrea04gASDnmr9b9PVS9HAmvo=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:23 2026 by rpki-client