Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
File:                     8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa (raw, json)
Hash identifier:          4wVLoAcE8TREIM9K55JabKzDlS1mTQ2zO2iVzPGth8E=
Subject key identifier:   09:63:DB:85:49:35:4D:30:F7:6D:70:42:7A:5C:BA:AB:53:5A:D5:98
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584EAA518E8E501087A8A8A6CCC0
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     9304
IP address blocks:        192.6.194.0/23 maxlen: 24
                          192.25.216.0/23 maxlen: 24
                          192.78.218.0/23 maxlen: 24
                          192.120.124.0/23 maxlen: 24
                          192.170.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8e:8e:50:10:87:a8:a8:a6:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=68c496b0-9c3a-4a65-8a9e-5986db59525a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:4c:21:6e:60:2a:22:07:95:1e:dd:fd:1f:
                    6b:cd:ea:cf:68:b5:e5:f8:1a:15:02:15:25:42:6c:
                    f3:8f:e7:04:ef:6b:d0:18:61:73:de:83:5c:11:96:
                    53:41:c1:e3:b5:d5:24:2b:81:83:3a:11:27:4d:dc:
                    e4:e0:36:bb:02:bc:fe:fc:7a:f1:fa:77:a8:c0:5a:
                    f3:40:0c:fb:4f:86:cd:17:1b:be:0e:b0:25:c9:5d:
                    88:dd:72:13:a2:07:76:62:cb:c2:d2:d1:b9:13:a6:
                    57:58:66:b6:ae:75:28:b7:0b:3f:bb:9c:52:d6:62:
                    53:bf:b6:aa:be:6f:51:87:fb:7d:af:b6:eb:83:49:
                    35:bf:30:a4:13:bc:19:2b:67:dd:0f:6e:21:e3:4b:
                    97:58:83:b8:2e:4a:63:7f:00:ba:13:b0:38:6b:72:
                    f6:bf:c7:be:33:b6:fc:16:93:92:2d:65:d5:5d:8c:
                    4f:29:23:77:4d:df:40:a5:87:b2:c6:53:67:2e:32:
                    d8:6f:b9:65:3c:ec:08:da:55:b9:fc:5d:5a:88:46:
                    84:a6:76:ea:20:fd:93:e0:1c:83:20:76:85:62:91:
                    b1:e7:e3:73:bb:7a:2d:14:99:70:c2:ff:bf:d6:c0:
                    87:36:4f:84:e4:c5:94:23:eb:d3:28:cd:9f:28:1a:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:63:DB:85:49:35:4D:30:F7:6D:70:42:7A:5C:BA:AB:53:5A:D5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.194.0/23
                  192.25.216.0/23
                  192.78.218.0/23
                  192.120.124.0/23
                  192.170.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:bb:42:c1:02:bc:d5:3c:b5:06:01:0e:c6:80:34:69:d9:
         ee:22:75:7e:7f:43:da:76:05:a3:fa:5d:48:41:0d:4a:93:17:
         1e:3d:e1:ca:c0:27:de:d2:6e:1a:bf:7f:30:36:b4:05:36:3b:
         80:b8:1c:02:33:a1:36:43:37:80:bc:75:aa:a2:c0:6a:59:18:
         02:b2:b0:76:59:f3:3e:a0:3e:35:3d:4b:04:05:c8:34:13:c1:
         01:17:b9:ac:08:be:61:28:6c:f5:c2:bb:e6:fa:fa:d9:b1:be:
         9e:5f:e2:2b:c6:7d:69:ac:0d:30:f4:c7:4f:1a:fa:21:43:54:
         85:17:52:a2:24:f6:b4:a4:58:57:cb:4a:aa:e2:b5:25:85:4d:
         f1:ff:54:62:ce:19:de:61:58:58:e2:9d:f3:bf:77:0d:8d:21:
         f0:28:8b:30:47:5a:42:48:ad:51:39:2f:88:05:a9:fa:0c:07:
         99:c4:db:90:8f:e6:14:c0:02:11:38:fd:f4:28:4d:ba:9a:b7:
         a5:ae:03:92:7c:a0:4a:2d:43:cd:18:fb:62:17:39:e5:ee:47:
         e9:34:0d:69:56:ed:9b:5c:ea:5e:ce:cb:89:06:61:76:f2:7d:
         2d:da:6d:17:0c:6e:05:17:ed:43:bd:fc:3e:66:16:2f:e8:7c:
         85:df:cc:2a
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE6qUY6OUBCHqKimzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
NjhjNDk2YjAtOWMzYS00YTY1LThhOWUtNTk4NmRiNTk1MjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ZMIW5gKiIHlR7d/R9rzerPaLXl+BoVAhUl
Qmzzj+cE72vQGGFz3oNcEZZTQcHjtdUkK4GDOhEnTdzk4Da7Arz+/Hrx+neowFrz
QAz7T4bNFxu+DrAlyV2I3XITogd2YsvC0tG5E6ZXWGa2rnUotws/u5xS1mJTv7aq
vm9Rh/t9r7brg0k1vzCkE7wZK2fdD24h40uXWIO4LkpjfwC6E7A4a3L2v8e+M7b8
FpOSLWXVXYxPKSN3Td9ApYeyxlNnLjLYb7llPOwI2lW5/F1aiEaEpnbqIP2T4ByD
IHaFYpGx5+Nzu3otFJlwwv+/1sCHNk+E5MWUI+vTKM2fKBpvSQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFAlj24VJNU0w921wQnpcuqtTWtWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvOGNhN2MyYzgtYmRjMC0z
MDM4LWFkOTQtMzBiNmJmNWZkYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBwAbCAwQB
wBnYAwQBwE7aAwQBwHh8AwQBwKpqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA8fu0LBArzVPLUGAQ7GgDRp
2e4idX5/Q9p2BaP6XUhBDUqTFx494crAJ97Sbhq/fzA2tAU2O4C4HAIzoTZDN4C8
daqiwGpZGAKysHZZ8z6gPjU9SwQFyDQTwQEXuawIvmEobPXCu+b6+tmxvp5f4ivG
fWmsDTD0x08a+iFDVIUXUqIk9rSkWFfLSqritSWFTfH/VGLOGd5hWFjinfO/dw2N
IfAoizBHWkJIrVE5L4gFqfoMB5nE25CP5hTAAhE4/fQoTbqat6WuA5J8oEotQ80Y
+2IXOeXuR+k0DWlW7Ztc6l7Oy4kGYXbyfS3abRcMbgUX7UO9/D5mFi/ofIXfzCo=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:52 2026 by rpki-client