Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a3868dc1-07a2-378d-ae6d-9db6391416ad.roa
File:                     a3868dc1-07a2-378d-ae6d-9db6391416ad.roa (raw, json)
Hash identifier:          LN5B8lMBrxJ9KaTavyQkwPmB0HnG0qJv3GdUFZ3JNW4=
Subject key identifier:   20:CA:EB:AB:4E:8E:51:CD:3C:3A:1F:C3:1C:D6:3B:0B:31:90:02:6E
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F4328584EA79BBBD2C68DB2BCC5484580
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a3868dc1-07a2-378d-ae6d-9db6391416ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     215748
IP address blocks:        209.209.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:bb:d2:c6:8d:b2:bc:c5:48:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3f20ebf7-2d97-4251-ae27-d427fff4494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:34:78:6b:ea:dc:43:e7:8d:af:cf:93:19:
                    dc:17:89:ac:e6:9c:df:54:ef:d5:57:b0:6a:ff:8a:
                    13:b3:d5:fe:87:f7:0b:69:f6:e7:25:e8:6e:00:f9:
                    54:54:29:64:20:cc:ec:81:10:f5:40:72:07:5f:1a:
                    45:8d:f4:9b:21:22:b7:a7:21:f2:b2:0d:b1:99:42:
                    b3:48:b4:13:36:23:cc:e4:23:39:60:ae:8b:73:12:
                    9e:9c:b1:2b:5d:03:22:87:94:0f:f4:0e:23:56:03:
                    33:ed:55:c9:fc:8d:56:30:76:cb:05:d4:c8:81:ab:
                    6c:10:02:c5:b3:25:8b:bd:19:98:15:e2:8c:2d:42:
                    aa:f1:31:a0:05:92:64:dc:ec:f0:43:8c:4c:76:10:
                    76:66:b2:ab:65:b8:1c:f4:17:11:cb:11:d3:6d:dc:
                    c7:b7:7e:55:6d:dd:a7:81:fe:f1:6b:a0:0b:5f:b7:
                    87:74:66:46:16:00:1e:de:82:43:34:15:34:5c:62:
                    04:18:8e:ec:bf:de:87:8a:c5:38:67:18:f8:39:c7:
                    85:18:2d:57:d3:e0:47:e7:03:9b:b9:04:04:75:a1:
                    7c:22:96:82:59:1a:c2:d5:31:4f:a3:8b:7f:9c:99:
                    b8:69:cc:74:56:ae:a8:23:89:ac:82:52:d1:a8:f9:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CA:EB:AB:4E:8E:51:CD:3C:3A:1F:C3:1C:D6:3B:0B:31:90:02:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a3868dc1-07a2-378d-ae6d-9db6391416ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6c:be:d4:7f:2d:13:e9:91:e0:53:bc:c1:04:cc:2d:24:87:
         29:02:9d:c9:ea:7d:76:f6:f2:6e:2f:84:39:e6:61:c6:9a:be:
         58:de:fb:39:04:cc:66:23:b9:6f:8c:82:7f:85:42:ff:2b:2b:
         8a:0b:f9:8d:f4:e2:12:6a:f7:dc:21:98:47:4a:96:20:7b:56:
         0d:3b:94:f0:a8:4a:4a:c3:48:72:bc:26:ab:00:b0:ca:90:1e:
         6b:79:46:7a:e4:23:ba:d2:55:f0:b4:07:1e:6c:41:45:98:ae:
         01:83:ea:42:f3:4c:88:e2:86:ae:a9:11:98:18:ca:fa:65:e2:
         08:73:8a:28:bd:52:f7:b4:16:c8:fb:22:a7:ce:84:4d:4d:f9:
         c9:bf:74:45:ae:00:90:97:d3:e0:a6:17:8b:bf:39:be:84:41:
         2c:6a:be:b4:52:d2:a4:a0:e5:44:db:6d:c9:bf:04:a7:37:97:
         c5:bd:30:e0:8a:4a:08:08:00:17:59:08:b6:e6:d7:c4:21:13:
         27:a5:40:90:49:5e:30:c7:12:2a:7c:c7:20:3c:4e:3e:aa:51:
         ad:f2:19:66:c9:bc:a5:3c:56:27:8a:fd:73:5b:80:a6:34:fe:
         a5:06:f7:af:91:0c:df:91:45:ab:b6:5c:ec:ef:3e:ba:db:86:
         e6:38:b2:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm7vSxo2yvMVIRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1
NjUxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2YyMGViZjctMmQ5Ny00MjUxLWFlMjctZDQyN2ZmZjQ0OTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq500eGvq3EPnja/PkxncF4ms5pzfVO/VV7Bq
/4oTs9X+h/cLafbnJehuAPlUVClkIMzsgRD1QHIHXxpFjfSbISK3pyHysg2xmUKz
SLQTNiPM5CM5YK6LcxKenLErXQMih5QP9A4jVgMz7VXJ/I1WMHbLBdTIgatsEALF
syWLvRmYFeKMLUKq8TGgBZJk3OzwQ4xMdhB2ZrKrZbgc9BcRyxHTbdzHt35Vbd2n
gf7xa6ALX7eHdGZGFgAe3oJDNBU0XGIEGI7sv96HisU4Zxj4OceFGC1X0+BH5wOb
uQQEdaF8IpaCWRrC1TFPo4t/nJm4acx0Vq6oI4msglLRqPktUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDK66tOjlHNPDofwxzWOwsxkAJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4
ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvYTM4NjhkYzEtMDdhMi0z
NzhkLWFlNmQtOWRiNjM5MTQxNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj
NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm
NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5
YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZsvtR/LRPpkeBTvMEEzC0khykCncnqfXb28m4vhDnmYcaavlje+zkE
zGYjuW+Mgn+FQv8rK4oL+Y304hJq99whmEdKliB7Vg07lPCoSkrDSHK8JqsAsMqQ
Hmt5RnrkI7rSVfC0Bx5sQUWYrgGD6kLzTIjihq6pEZgYyvpl4ghziii9Uve0Fsj7
IqfOhE1N+cm/dEWuAJCX0+CmF4u/Ob6EQSxqvrRS0qSg5UTbbcm/BKc3l8W9MOCK
SggIABdZCLbm18QhEyelQJBJXjDHEip8xyA8Tj6qUa3yGWbJvKU8VieK/XNbgKY0
/qUG96+RDN+RRau2XOzvPrrbhuY4sqw=
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:04:29 2026 by rpki-client