Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4ad07b92-af6f-346f-b52a-99a2a857320e.roa
File:                     4ad07b92-af6f-346f-b52a-99a2a857320e.roa (raw, json)
Hash identifier:          CtmgEiGOw8pTKI8eKVErH44Oq7FotDvgPE1PILaencY=
Subject key identifier:   18:8F:EE:1F:0F:AF:CB:9B:1D:89:BE:B9:D6:55:78:48:E6:C5:5A:C9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F6292C6746FC4A22343B08B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4ad07b92-af6f-346f-b52a-99a2a857320e.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     47007
IP address blocks:        67.227.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c6:74:6f:c4:a2:23:43:b0:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=df633936-9988-4863-aae7-b6240f27a0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:af:aa:80:02:d1:15:ed:bb:a5:54:ad:89:
                    36:b3:56:d3:14:8a:34:aa:2d:12:a5:44:c5:25:1b:
                    01:d1:c8:9b:10:ab:e3:bb:14:96:f2:5b:c3:f4:09:
                    1e:61:a0:66:ad:6e:63:16:ac:aa:0a:e7:52:ef:21:
                    ee:91:72:55:d5:64:9e:4c:26:1d:79:a7:b1:e4:41:
                    c1:7a:fc:4b:b0:f4:38:89:69:03:47:80:08:b6:f3:
                    be:86:e2:c0:22:82:51:eb:21:1f:39:84:b7:d2:6e:
                    c7:f9:31:72:de:d5:02:f1:83:5d:dd:2a:4c:d8:75:
                    95:9e:ea:38:8d:6d:94:75:8e:08:f8:4a:8e:3a:f6:
                    d8:3f:95:c9:63:9e:4d:a3:b9:cc:8f:2a:f0:0c:cd:
                    63:fd:89:4e:ff:2a:68:65:0c:f5:6d:08:64:2f:ae:
                    9a:f9:a0:08:71:24:8d:65:8b:06:49:46:ae:64:a5:
                    61:69:ba:eb:85:2f:81:66:9e:38:70:10:b4:88:71:
                    39:b2:7e:58:53:82:48:01:67:0d:e6:81:7a:2a:5b:
                    55:ca:e5:28:89:e0:6e:f7:ec:bd:bc:83:2e:3d:34:
                    b4:c6:69:8d:76:a2:dc:af:93:bf:6f:1a:74:a1:f8:
                    40:8c:47:da:64:b3:90:3c:ba:46:d4:9f:80:fa:5a:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:EE:1F:0F:AF:CB:9B:1D:89:BE:B9:D6:55:78:48:E6:C5:5A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4ad07b92-af6f-346f-b52a-99a2a857320e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:6c:1a:40:9d:89:16:61:88:52:c8:41:51:d9:6e:4d:c3:bb:
         e4:cd:7c:f0:5c:15:9e:92:ba:1e:70:5c:c1:50:94:39:8c:c7:
         d4:8c:c8:2f:c6:8b:61:71:a3:66:c4:fe:d9:70:27:09:2d:b7:
         eb:dd:f9:3a:5f:f9:dd:43:ba:e1:5c:f3:b6:70:8d:32:97:5b:
         55:2d:7d:99:33:8e:1b:04:8c:60:15:3a:f2:18:e5:f0:49:81:
         17:75:7e:3b:43:4f:80:bf:54:c5:47:2e:f3:d4:df:ea:60:77:
         a1:00:57:76:86:c1:2d:76:d5:84:c4:8d:c9:cd:c5:b5:12:56:
         67:5e:9e:76:6b:16:fa:da:a0:a6:00:0c:9e:21:b7:63:95:85:
         bc:47:bb:f3:89:b8:e4:6b:91:8d:20:8e:eb:22:cb:3c:e1:11:
         de:2b:f6:34:09:cc:33:98:c0:d7:b6:bd:8f:4e:1f:2c:c6:11:
         51:85:7a:d8:8e:8f:38:c3:c3:42:4f:ab:4e:29:a5:f5:b9:ea:
         3d:77:f5:c4:27:fe:6c:22:0c:47:a5:28:45:90:cf:47:f7:a1:
         0e:b2:a6:4e:de:a2:76:10:0b:f1:97:b9:7e:df:5c:29:db:32:
         50:8f:d8:8c:3c:84:03:80:b1:53:b2:44:14:60:41:fe:d7:74:
         6e:e5:57:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksZ0b8SiI0OwiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZGY2MzM5MzYtOTk4OC00ODYzLWFhZTctYjYyNDBmMjdhMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHGvqoAC0RXtu6VUrYk2s1bTFIo0qi0SpUTF
JRsB0cibEKvjuxSW8lvD9AkeYaBmrW5jFqyqCudS7yHukXJV1WSeTCYdeaex5EHB
evxLsPQ4iWkDR4AItvO+huLAIoJR6yEfOYS30m7H+TFy3tUC8YNd3SpM2HWVnuo4
jW2UdY4I+EqOOvbYP5XJY55No7nMjyrwDM1j/YlO/ypoZQz1bQhkL66a+aAIcSSN
ZYsGSUauZKVhabrrhS+BZp44cBC0iHE5sn5YU4JIAWcN5oF6KltVyuUoieBu9+y9
vIMuPTS0xmmNdqLcr5O/bxp0ofhAjEfaZLOQPLpG1J+A+lqguwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiP7h8Pr8ubHYm+udZVeEjmxVrJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNGFkMDdiOTItYWY2Zi0z
NDZmLWI1MmEtOTlhMmE4NTczMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+MjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANhsGkCdiRZhiFLIQVHZbk3Du+TNfPBcFZ6Suh5wXMFQlDmMx9SMyC/G
i2Fxo2bE/tlwJwktt+vd+Tpf+d1DuuFc87ZwjTKXW1UtfZkzjhsEjGAVOvIY5fBJ
gRd1fjtDT4C/VMVHLvPU3+pgd6EAV3aGwS121YTEjcnNxbUSVmdennZrFvraoKYA
DJ4ht2OVhbxHu/OJuORrkY0gjusiyzzhEd4r9jQJzDOYwNe2vY9OHyzGEVGFetiO
jzjDw0JPq04ppfW56j139cQn/mwiDEelKEWQz0f3oQ6ypk7eonYQC/GXuX7fXCnb
MlCP2Iw8hAOAsVOyRBRgQf7XdG7lV84=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:18:53 2026 by rpki-client