Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43aeaadf-acab-3a4c-a805-71682c5167b7.roa
File:                     43aeaadf-acab-3a4c-a805-71682c5167b7.roa (raw, json)
Hash identifier:          +2ZVlZUgDMAsKFMUeRqNZxnt+/oBxkAHwiDBRVpCcMI=
Subject key identifier:   5B:28:1E:33:6E:12:A4:F0:CC:0F:2F:2B:BE:B4:73:72:70:5D:2E:83
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC9072027B27AADD4799BDE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43aeaadf-acab-3a4c-a805-71682c5167b7.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     40676
IP address blocks:        209.92.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:20:27:b2:7a:ad:d4:79:9b:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=5c719bfa-58aa-4f4a-aa69-9b1e08a88b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:df:d8:d0:2f:f5:7c:47:bb:fb:09:3d:73:
                    29:47:30:5d:e7:ad:26:46:93:4a:55:9c:bc:bf:cd:
                    8f:13:62:77:b0:87:a9:a8:31:f0:de:4d:42:fb:66:
                    f8:12:f6:7c:a1:2d:d2:fe:6d:95:0c:8e:bb:fc:33:
                    be:c6:82:d7:33:12:da:b9:0b:74:18:fc:13:12:c6:
                    db:e7:91:6b:f9:11:6d:1d:35:bf:ce:94:52:2d:45:
                    38:06:1f:fd:c9:1d:31:6b:f7:5e:e4:30:ef:df:11:
                    ff:c4:c5:62:f7:d8:48:49:f7:85:f2:b8:9d:37:2e:
                    a0:82:43:83:df:ea:57:db:43:dd:8f:27:d2:f4:f4:
                    8a:96:34:ac:61:68:dc:87:0c:8f:2e:07:cd:d8:37:
                    58:05:06:d0:32:08:7b:1b:1f:4c:b2:95:4d:82:25:
                    7e:89:a0:31:90:8e:51:4e:f7:36:eb:a7:33:81:a1:
                    d3:3b:1b:25:7b:35:ed:3c:1d:b6:74:d6:3a:70:3a:
                    2a:4e:4a:79:1e:1e:62:21:3f:cf:0d:eb:ef:d4:bb:
                    75:e0:5e:01:09:c9:91:17:40:e2:ab:ac:37:4b:b2:
                    91:7f:d3:3f:43:b4:04:f4:22:42:05:2c:fe:b1:93:
                    a8:dc:c7:49:52:77:06:cc:e1:75:3f:6f:42:4f:49:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:28:1E:33:6E:12:A4:F0:CC:0F:2F:2B:BE:B4:73:72:70:5D:2E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43aeaadf-acab-3a4c-a805-71682c5167b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:16:f2:cd:3c:df:e2:23:d3:bb:4f:80:0c:aa:e4:77:53:d0:
         88:33:4b:96:9f:e2:08:18:62:17:66:5d:f2:bc:da:8e:26:54:
         46:38:39:38:18:93:53:30:98:ae:8c:da:b0:0a:30:47:18:00:
         68:56:19:18:bc:b3:de:e2:de:67:3e:2f:30:02:b6:c8:02:76:
         81:5b:c3:b5:87:c8:b6:2e:5b:22:df:d7:0d:0e:4d:d9:77:83:
         68:2c:75:15:74:dd:5e:dd:8b:4e:2f:52:ab:38:be:38:40:bb:
         0c:59:d4:12:7e:45:ba:9d:63:e3:b2:d9:17:58:e6:1c:37:c4:
         d7:8b:58:ae:1c:f3:7f:e7:ca:db:17:73:cb:6a:3a:4d:b5:5b:
         9a:7d:35:f0:ea:97:04:03:c8:96:bb:92:fe:06:76:90:b8:7c:
         a8:ba:2f:20:8d:c1:69:70:39:8c:b9:ab:c9:fa:2d:cf:03:96:
         8e:ae:b2:fe:4b:af:83:c3:0d:3f:e5:67:2a:13:2c:9b:eb:a3:
         f9:fe:6f:91:d8:53:89:f7:f1:dd:6e:3b:46:f1:fd:7b:b8:79:
         ae:50:e5:44:be:58:72:91:70:e6:81:9c:d1:3d:fe:eb:9d:6d:
         33:ec:22:3d:00:98:44:1b:6b:88:29:ba:22:8c:ed:8f:87:7f:
         01:fb:75:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JByAnsnqt1Hmb3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
NWM3MTliZmEtNThhYS00ZjRhLWFhNjktOWIxZTA4YTg4YjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9n/f2NAv9XxHu/sJPXMpRzBd560mRpNKVZy8
v82PE2J3sIepqDHw3k1C+2b4EvZ8oS3S/m2VDI67/DO+xoLXMxLauQt0GPwTEsbb
55Fr+RFtHTW/zpRSLUU4Bh/9yR0xa/de5DDv3xH/xMVi99hISfeF8ridNy6ggkOD
3+pX20PdjyfS9PSKljSsYWjchwyPLgfN2DdYBQbQMgh7Gx9MspVNgiV+iaAxkI5R
Tvc266czgaHTOxslezXtPB22dNY6cDoqTkp5Hh5iIT/PDevv1Lt14F4BCcmRF0Di
q6w3S7KRf9M/Q7QE9CJCBSz+sZOo3MdJUncGzOF1P29CT0lFRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsoHjNuEqTwzA8vK760c3JwXS6DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDNhZWFhZGYtYWNhYi0z
YTRjLWE4MDUtNzE2ODJjNTE2N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vy9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANIW8s083+Ij07tPgAyq5HdT0IgzS5af4ggYYhdmXfK82o4mVEY4OTgY
k1MwmK6M2rAKMEcYAGhWGRi8s97i3mc+LzACtsgCdoFbw7WHyLYuWyLf1w0OTdl3
g2gsdRV03V7di04vUqs4vjhAuwxZ1BJ+RbqdY+Oy2RdY5hw3xNeLWK4c83/nytsX
c8tqOk21W5p9NfDqlwQDyJa7kv4GdpC4fKi6LyCNwWlwOYy5q8n6Lc8Dlo6usv5L
r4PDDT/lZyoTLJvro/n+b5HYU4n38d1uO0bx/Xu4ea5Q5US+WHKRcOaBnNE9/uud
bTPsIj0AmEQba4gpuiKM7Y+HfwH7deU=
-----END CERTIFICATE-----
Generated at Sun Aug 16 10:39:22 2026 by rpki-client