Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa
File:                     51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa (raw, json)
Hash identifier:          MEdIDedhz21ytdhF435Z3HveUzgHVpE7LR22ULbsxgo=
Subject key identifier:   FC:65:1A:38:A7:EC:92:BD:38:5C:5D:58:E6:AE:A8:CD:50:DA:78:DE
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584EC0A726E138F9017D2FB051B0
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     3300
IP address blocks:        209.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:26:e1:38:f9:01:7d:2f:b0:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=6aca8645-dc11-4682-a33b-1c0f453b4a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:cd:49:4e:ce:c5:40:ef:6f:5b:95:4d:6d:
                    f7:38:df:ae:75:6c:68:ab:b2:27:77:35:20:32:76:
                    3e:bc:02:5d:59:87:34:6f:31:bd:93:da:da:d0:13:
                    8f:55:fa:07:ed:ea:2e:15:0c:cd:b1:2a:e3:4f:21:
                    e4:1b:b2:5b:0c:bf:53:f7:29:88:4b:17:0c:df:ee:
                    e5:4f:fb:8c:7f:ac:7d:d6:f9:e0:2e:d5:6b:f3:bc:
                    00:a9:79:11:36:68:04:11:c5:d7:2a:7f:d8:1a:0f:
                    d6:e6:bb:b8:14:56:44:d9:26:81:4c:6d:32:9a:cf:
                    41:33:b4:bf:c4:f8:15:03:a0:b7:33:94:60:74:74:
                    10:45:81:25:4c:ee:f0:43:59:b2:87:2b:9c:fb:98:
                    e9:6c:c3:f0:6f:8d:f3:79:b4:11:77:b7:e5:aa:01:
                    fc:7a:a1:1f:84:1a:64:72:7c:53:4f:c2:57:72:22:
                    b2:1c:70:e0:04:18:ee:12:8f:9b:25:89:27:1b:04:
                    18:a0:8a:4c:9d:1a:3f:19:b1:f3:64:af:1e:58:84:
                    f5:8e:02:e2:c9:69:2f:15:6c:87:4d:9b:94:96:3f:
                    cd:d3:25:55:5c:52:ac:1c:4a:08:1a:bc:18:54:fb:
                    58:60:a5:82:67:52:10:d9:42:c2:ce:bc:03:46:b2:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:1A:38:A7:EC:92:BD:38:5C:5D:58:E6:AE:A8:CD:50:DA:78:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:41:51:69:d6:6e:4b:7d:eb:f8:2f:53:c9:11:c1:4c:31:c8:
         9e:51:7a:42:21:d1:7b:f9:be:ef:25:ec:51:58:1c:73:4f:19:
         3b:ca:ea:09:f4:32:3e:a3:e3:05:5d:3f:07:02:ec:d3:3f:e1:
         34:36:e9:63:d7:22:e1:8f:19:eb:58:bb:82:56:0e:f6:66:47:
         ea:85:f1:37:6b:e8:f1:eb:01:de:7f:31:ee:60:30:ec:92:a5:
         d1:f2:2a:b6:6a:ab:a5:65:99:6e:ab:9d:a7:06:9d:dc:6c:6e:
         0b:77:1b:55:03:58:4f:fc:f4:fa:00:ba:9b:ab:18:2d:7b:04:
         30:1a:2e:d5:97:01:27:f7:2f:c4:62:c2:02:32:f5:76:51:c0:
         f8:56:37:aa:54:b5:26:39:8b:45:c5:30:05:41:2d:fa:d7:35:
         80:1c:7b:f4:5f:ac:e2:ae:9d:40:28:c2:dd:56:d3:cd:b8:6a:
         6e:1b:ad:7f:20:07:19:c0:e0:8d:ec:93:1f:ee:29:f2:82:24:
         b2:11:89:26:bd:a1:e9:53:e8:fe:82:0f:8c:26:63:32:85:6d:
         26:18:f8:be:fe:d0:f0:62:94:ba:95:a5:66:59:4b:ee:30:c4:
         a2:c8:d0:ff:a5:9c:b6:0b:6e:27:5f:07:bc:b7:cc:fb:58:88:
         50:bc:e8:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7ApybhOPkBfS+wUbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2
ZDcxMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NmFjYTg2NDUtZGMxMS00NjgyLWEzM2ItMWMwZjQ1M2I0YTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMvNSU7OxUDvb1uVTW33ON+udWxoq7IndzUg
MnY+vAJdWYc0bzG9k9ra0BOPVfoH7eouFQzNsSrjTyHkG7JbDL9T9ymISxcM3+7l
T/uMf6x91vngLtVr87wAqXkRNmgEEcXXKn/YGg/W5ru4FFZE2SaBTG0yms9BM7S/
xPgVA6C3M5RgdHQQRYElTO7wQ1myhyuc+5jpbMPwb43zebQRd7flqgH8eqEfhBpk
cnxTT8JXciKyHHDgBBjuEo+bJYknGwQYoIpMnRo/GbHzZK8eWIT1jgLiyWkvFWyH
TZuUlj/N0yVVXFKsHEoIGrwYVPtYYKWCZ1IQ2ULCzrwDRrIk3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPxlGjin7JK9OFxdWOauqM1Q2njeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4
NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvNTFiZmQ1ODktZmU3My0z
ZDc0LTk4YTgtOWQ0YzAzNmMxM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx
NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx
NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx
MGZkMTZkNzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0RwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZEFRadZuS33r+C9TyRHBTDHInlF6QiHRe/m+7yXsUVgcc08ZO8rqCfQy
PqPjBV0/BwLs0z/hNDbpY9ci4Y8Z61i7glYO9mZH6oXxN2vo8esB3n8x7mAw7JKl
0fIqtmqrpWWZbqudpwad3GxuC3cbVQNYT/z0+gC6m6sYLXsEMBou1ZcBJ/cvxGLC
AjL1dlHA+FY3qlS1JjmLRcUwBUEt+tc1gBx79F+s4q6dQCjC3VbTzbhqbhutfyAH
GcDgjeyTH+4p8oIkshGJJr2h6VPo/oIPjCZjMoVtJhj4vv7Q8GKUupWlZllL7jDE
osjQ/6WctgtuJ18HvLfM+1iIULzocg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:48:32 2026 by rpki-client