Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
File:                     860e28cf-fb11-3efd-8cea-335ea7024d99.roa (raw, json)
Hash identifier:          emMRi8yzt8JmHP8ZH91hX98CDWZQsUfRT7INkOv8n5Q=
Subject key identifier:   39:FF:71:DA:1E:FF:55:B8:8A:F8:D8:92:0A:FE:D2:E5:B5:2C:EC:E2
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584ED431EE5B3110EF5D9ABB6E80
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     1299
IP address blocks:        204.156.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ee:5b:31:10:ef:5d:9a:bb:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=542414bb-3ca0-4e5e-903e-48de678d3e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:01:0d:91:dc:52:70:57:86:34:76:8a:03:
                    38:f4:28:05:29:a1:b2:98:c4:4f:ec:c8:ba:c6:fc:
                    e3:0f:6f:f6:39:34:2b:84:e6:16:dd:00:cc:29:e0:
                    4a:c6:fe:1e:0d:36:e5:f6:67:46:3e:60:1d:ab:54:
                    29:f0:78:26:63:6f:60:c9:f7:69:2f:e8:9b:43:e9:
                    7e:13:cb:f1:f5:32:40:7d:7d:3a:16:f6:6e:90:49:
                    23:87:64:33:ba:87:4d:44:29:63:a1:60:f7:5b:65:
                    4e:c7:f6:56:66:53:89:b9:4b:7a:20:07:80:a2:3c:
                    fa:a5:e0:27:70:c2:c0:56:1f:d1:65:af:32:08:d7:
                    3d:9a:11:43:e5:ee:bd:6d:75:73:e1:9e:43:9e:38:
                    bf:28:f7:8f:1f:a4:d8:32:74:cb:82:c6:84:8c:83:
                    6d:f4:5d:a0:02:e6:b4:18:13:70:1d:b7:39:e8:b8:
                    7e:5c:99:c1:78:bf:27:56:b8:ba:a3:94:63:a2:de:
                    3c:c5:d6:05:ab:22:ed:97:77:49:2a:af:4a:4f:10:
                    69:0d:c9:c6:33:95:89:78:a1:72:0c:07:10:cb:8c:
                    f4:6c:91:bf:87:e7:ba:29:5f:60:7d:1b:3c:d9:6c:
                    3d:53:09:4a:4b:b0:48:60:6f:57:36:9a:3c:54:ad:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FF:71:DA:1E:FF:55:B8:8A:F8:D8:92:0A:FE:D2:E5:B5:2C:EC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:c1:96:04:73:75:3a:90:14:b5:74:5f:d3:1e:1b:69:17:
         91:83:9e:f1:76:96:97:49:a9:ca:dd:2a:6d:28:b9:72:a4:92:
         ae:3c:03:b0:31:b6:3a:8b:02:3c:c9:08:a4:7e:14:5b:87:fb:
         39:fe:ca:c9:e7:02:38:49:d6:24:bf:d8:92:90:f8:4d:26:44:
         22:40:d2:41:3b:7c:e6:84:59:3b:2d:9f:fe:67:6e:60:b2:c5:
         1c:08:7c:5d:69:80:8f:2d:69:d9:31:76:90:42:8d:19:52:b6:
         8b:e7:0b:ae:65:b4:85:5b:a9:b3:ca:ec:d9:21:59:97:10:88:
         cc:1c:5f:eb:67:30:46:19:20:7c:98:65:d3:30:55:da:a9:af:
         c4:02:f1:16:0f:8c:2d:09:aa:89:34:26:a3:03:cd:5b:73:e2:
         57:d7:6e:6c:d0:a9:10:01:2f:26:ff:27:2a:fb:9b:6b:8a:fb:
         c0:6a:05:62:00:50:19:9a:98:d4:b3:be:32:fd:87:0e:5b:31:
         1e:57:07:2a:ce:30:40:7f:72:4c:f1:80:e6:89:79:60:c6:d8:
         90:e9:f0:fc:90:c6:5f:cc:7c:6b:9c:16:ea:c9:a0:e4:54:88:
         02:fe:5a:25:2a:53:aa:68:75:21:2b:14:ce:b2:cb:e7:b5:aa:
         a1:ab:1e:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMe5bMRDvXZq7boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NTQyNDE0YmItM2NhMC00ZTVlLTkwM2UtNDhkZTY3OGQzZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj40BDZHcUnBXhjR2igM49CgFKaGymMRP7Mi6
xvzjD2/2OTQrhOYW3QDMKeBKxv4eDTbl9mdGPmAdq1Qp8HgmY29gyfdpL+ibQ+l+
E8vx9TJAfX06FvZukEkjh2QzuodNRCljoWD3W2VOx/ZWZlOJuUt6IAeAojz6peAn
cMLAVh/RZa8yCNc9mhFD5e69bXVz4Z5Dnji/KPePH6TYMnTLgsaEjINt9F2gAua0
GBNwHbc56Lh+XJnBeL8nVri6o5Rjot48xdYFqyLtl3dJKq9KTxBpDcnGM5WJeKFy
DAcQy4z0bJG/h+e6KV9gfRs82Ww9UwlKS7BIYG9XNpo8VK0cMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDn/cdoe/1W4ivjYkgr+0uW1LOziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvODYwZTI4Y2YtZmIxMS0z
ZWZkLThjZWEtMzM1ZWE3MDI0ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJxWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuwwZYEc3U6kBS1dF/THhtpF5GDnvF2lpdJqcrdKm0ouXKkkq48A7Ax
tjqLAjzJCKR+FFuH+zn+ysnnAjhJ1iS/2JKQ+E0mRCJA0kE7fOaEWTstn/5nbmCy
xRwIfF1pgI8tadkxdpBCjRlStovnC65ltIVbqbPK7NkhWZcQiMwcX+tnMEYZIHyY
ZdMwVdqpr8QC8RYPjC0Jqok0JqMDzVtz4lfXbmzQqRABLyb/Jyr7m2uK+8BqBWIA
UBmamNSzvjL9hw5bMR5XByrOMEB/ckzxgOaJeWDG2JDp8PyQxl/MfGucFurJoORU
iAL+WiUqU6podSErFM6yy+e1qqGrHr0=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:24:29 2026 by rpki-client