Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/b43973cb-abfe-3b27-8aed-1d7a560deee7.roa
File:                     b43973cb-abfe-3b27-8aed-1d7a560deee7.roa (raw, json)
Hash identifier:          EnIu0Z+CWYG08bgL396WRH+Q61t61oGA4c1l2Na1gxU=
Subject key identifier:   44:A2:63:95:D1:62:8A:BB:51:7F:CA:DC:22:1D:6E:3A:09:44:92:7E
Certificate issuer:       /CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
Certificate serial:       010D0C9F4328584EA794FEB36B05D235FC278700
Authority key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/b43973cb-abfe-3b27-8aed-1d7a560deee7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19782
IP address blocks:        192.206.10.0/24 maxlen: 24
                          192.206.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:fe:b3:6b:05:d2:35:fc:27:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=88ad1763-6bc4-4137-9b4d-3db8785c1358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:81:ba:31:f8:54:eb:65:60:b8:a4:04:d0:fb:
                    86:6d:9c:0a:de:58:6d:2e:77:88:0f:78:3f:34:c9:
                    4b:17:0a:af:53:66:f1:3c:04:60:61:70:4b:0b:ad:
                    5f:4c:bd:7f:97:43:be:3a:6c:74:7e:12:48:33:35:
                    c4:ae:f8:76:f9:03:da:a9:75:a9:4f:80:41:73:8c:
                    c5:63:40:42:76:b9:27:8c:d0:a1:b5:5d:4b:21:aa:
                    87:b9:b5:6e:1e:71:45:9c:91:d8:d3:6e:5d:bb:60:
                    f0:e7:c3:56:9a:f8:61:ce:3c:2b:78:31:ec:81:c2:
                    b7:ab:20:cd:5a:f0:74:e6:2f:c8:9f:c5:87:2e:c3:
                    ea:cd:9c:40:95:36:eb:34:5e:7b:9b:6b:03:4d:28:
                    59:f8:9e:e5:fe:24:02:4b:d7:6e:e4:5b:01:c0:06:
                    4b:59:f4:aa:92:4d:96:88:88:54:dd:f1:0f:ce:78:
                    00:bd:b8:84:12:82:0e:78:fb:5e:62:dd:dd:60:5c:
                    25:b6:6d:f2:7d:7f:b9:1b:3d:5e:ec:89:a5:84:a5:
                    88:d9:79:c0:d6:10:a0:7c:47:4d:d8:ce:c0:7a:69:
                    bb:d8:26:f9:1b:e7:9f:fb:66:04:a4:89:8e:d5:5f:
                    be:38:34:aa:44:f3:c6:0f:36:29:9c:42:65:17:2d:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:63:95:D1:62:8A:BB:51:7F:CA:DC:22:1D:6E:3A:09:44:92:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/b43973cb-abfe-3b27-8aed-1d7a560deee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl

            X509v3 Authority Key Identifier:
                keyid:00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:77:9b:f6:97:22:44:6e:a9:05:64:c3:2e:de:83:17:cb:4b:
         a7:2b:9e:42:39:cd:31:70:55:79:95:69:ce:13:0b:af:db:77:
         ae:82:45:ee:50:ac:41:ee:d9:15:6f:a2:7f:48:01:04:2f:eb:
         97:b6:4a:a1:9a:a2:29:c9:42:00:e4:70:9f:7d:fa:b5:20:78:
         89:a4:76:d4:64:a7:d6:24:52:f1:a9:22:b2:9b:9e:0d:36:fd:
         17:29:7e:d2:6f:4c:f1:98:e0:dd:67:fc:0e:9c:54:04:2c:05:
         6b:c5:59:19:2f:93:1f:2f:12:c3:86:0c:21:e1:9e:30:36:29:
         ee:39:88:78:0d:27:c2:dc:e7:cd:6b:ce:a9:69:d0:4f:56:6e:
         89:d0:aa:1e:29:05:e5:fb:65:19:b1:06:ed:4d:67:8b:8c:01:
         5b:44:ff:37:ec:31:d0:db:27:0c:2d:71:62:7e:99:7c:7a:7f:
         80:39:cc:1a:f1:c8:30:c2:9e:e2:9d:71:25:85:b2:aa:f7:5e:
         60:89:5b:33:cb:9e:39:1d:e5:11:f2:af:1c:4b:a7:03:72:d8:
         6c:41:76:2b:1f:1b:2f:16:01:37:f5:f7:9c:49:be:93:0c:28:
         f3:7e:f5:e1:69:44:d8:3b:61:ed:bb:13:76:56:57:9c:52:ce:
         e6:66:57:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlP6zawXSNfwnhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZmOWJjZWItZTE0Yi00NDE3LWI5YjctYzUxMzUyZDk1
NDE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODhhZDE3NjMtNmJjNC00MTM3LTliNGQtM2RiODc4NWMxMzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIG6MfhU62VguKQE0PuGbZwK3lhtLneID3g/
NMlLFwqvU2bxPARgYXBLC61fTL1/l0O+Omx0fhJIMzXErvh2+QPaqXWpT4BBc4zF
Y0BCdrknjNChtV1LIaqHubVuHnFFnJHY025du2Dw58NWmvhhzjwreDHsgcK3qyDN
WvB05i/In8WHLsPqzZxAlTbrNF57m2sDTShZ+J7l/iQCS9du5FsBwAZLWfSqkk2W
iIhU3fEPzngAvbiEEoIOePteYt3dYFwltm3yfX+5Gz1e7ImlhKWI2XnA1hCgfEdN
2M7Aemm72Cb5G+ef+2YEpImO1V++ODSqRPPGDzYpnEJlFy0f9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESiY5XRYoq7UX/K3CIdbjoJRJJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZmY5
YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJkOTU0MTYvYjQzOTczY2ItYWJmZS0z
YjI3LThhZWQtMWQ3YTU2MGRlZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWZmOWJjZWItZTE0Yi00NDE3LWI5
YjctYzUxMzUyZDk1NDE2LzlmZjliY2ViLWUxNGItNDQxNy1iOWI3LWM1MTM1MmQ5
NTQxNi5jcmwwHwYDVR0jBBgwFoAUAA5PUUFZbTi7+gDrpSTGaIxfoN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEz
NTJkOTU0MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwM4KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEB3m/aXIkRuqQVkwy7egxfLS6crnkI5zTFwVXmVac4TC6/bd66CRe5Q
rEHu2RVvon9IAQQv65e2SqGaoinJQgDkcJ99+rUgeImkdtRkp9YkUvGpIrKbng02
/RcpftJvTPGY4N1n/A6cVAQsBWvFWRkvkx8vEsOGDCHhnjA2Ke45iHgNJ8Lc581r
zqlp0E9WbonQqh4pBeX7ZRmxBu1NZ4uMAVtE/zfsMdDbJwwtcWJ+mXx6f4A5zBrx
yDDCnuKdcSWFsqr3XmCJWzPLnjkd5RHyrxxLpwNy2GxBdisfGy8WATf195xJvpMM
KPN+9eFpRNg7Ye27E3ZWV5xSzuZmV8w=
-----END CERTIFICATE-----
Generated at Mon Aug 10 14:56:05 2026 by rpki-client