Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/b9b3a27b-65cb-37a4-a39e-d7c64a5c97f5.roa
File:                     b9b3a27b-65cb-37a4-a39e-d7c64a5c97f5.roa (raw, json)
Hash identifier:          S6H8EI+QcOYOZEXpzXukc614m4pZY6/vqudCNR2Ds4k=
Subject key identifier:   56:B4:88:0A:72:7D:4C:C9:54:57:5E:93:C8:52:4B:64:7B:B6:30:23
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F146790C44DF51A093131D100
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/b9b3a27b-65cb-37a4-a39e-d7c64a5c97f5.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     3300
IP address blocks:        198.207.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:90:c4:4d:f5:1a:09:31:31:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=f6400765-2c6b-462b-bf6a-f95620653f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:67:3d:bb:de:45:58:86:fd:c4:67:f0:bb:
                    15:d0:8d:33:95:47:d2:61:9b:23:5b:bd:cd:80:ad:
                    eb:e3:2e:9b:a0:ac:d3:a1:64:36:58:4d:ea:54:70:
                    74:00:f4:d5:35:94:ee:c8:45:00:ef:51:33:06:ed:
                    de:f0:82:f2:29:64:4b:0e:89:5f:77:59:c8:51:2d:
                    81:d6:83:0d:c3:57:a8:5d:54:44:17:f1:90:79:76:
                    2b:8c:4b:e7:71:cc:ae:40:43:04:79:03:da:ba:86:
                    f5:3e:fc:76:b9:5c:fc:37:d3:77:03:1e:be:9b:0f:
                    77:07:05:af:91:1c:72:e9:43:3b:93:41:3b:20:5b:
                    5b:8e:3a:d8:f1:8e:f2:7b:a1:81:77:e4:87:08:fc:
                    d4:dc:6b:53:cc:d8:be:ec:0e:7a:5a:27:08:03:d1:
                    d4:fe:0e:9c:e0:15:ba:8a:12:37:f6:43:cb:b7:8a:
                    f6:ff:c0:a2:f0:f2:33:ea:48:2c:fc:36:7b:a9:78:
                    ab:70:d8:6b:bf:e3:89:4b:49:7d:2b:f8:3a:b2:8e:
                    ec:57:6a:3c:98:d8:cd:bb:d6:f4:e0:38:db:6b:c0:
                    d1:75:38:88:77:a4:54:dc:74:f4:b2:53:36:2b:59:
                    cc:c6:ba:be:34:c5:45:78:55:5e:86:69:51:2b:20:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:88:0A:72:7D:4C:C9:54:57:5E:93:C8:52:4B:64:7B:B6:30:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/b9b3a27b-65cb-37a4-a39e-d7c64a5c97f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:ee:cb:a8:bb:99:ca:22:33:30:03:a1:d7:06:b9:c1:7d:
         8c:5b:04:bd:9d:45:78:38:a8:7b:d6:75:07:54:f3:c3:4d:4d:
         bf:8a:54:66:28:58:83:3f:47:1d:56:7c:2c:9b:f8:62:ab:53:
         87:94:9d:5b:b9:14:3a:29:9d:7f:40:de:69:4c:62:61:22:f2:
         00:7f:f2:f1:35:8e:ca:37:c6:41:0c:61:d8:8a:ad:32:df:13:
         5e:16:23:a8:55:bf:e9:4d:4a:70:3f:71:c5:a1:f6:53:36:3a:
         79:88:7f:d5:6b:89:5f:bb:14:07:21:b4:51:c4:bf:48:22:de:
         fd:2b:65:cc:da:ab:50:47:f1:6c:2f:85:b5:5a:52:65:2f:46:
         ba:e5:3f:73:b5:cd:5d:8c:6b:14:fe:ab:d9:fd:db:62:2a:eb:
         21:a0:79:5d:ef:ba:8a:9f:7b:ee:8c:db:02:ad:72:bc:00:67:
         8f:83:28:be:a7:95:df:6a:b8:92:b3:10:2a:57:a1:33:6c:ac:
         7e:ca:28:e6:51:cb:37:1a:26:c6:4a:c5:00:d3:12:6d:9d:5d:
         48:5d:4b:f3:1a:f9:91:e4:b4:c4:a6:65:df:ec:1e:1d:e6:13:
         3d:ca:4e:14:89:b7:f4:a4:58:ca:93:ba:b9:2c:94:c4:3f:ca:
         b8:0a:08:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5DETfUaCTEx0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2
ZDcxMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
ZjY0MDA3NjUtMmM2Yi00NjJiLWJmNmEtZjk1NjIwNjUzZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqVnPbveRViG/cRn8LsV0I0zlUfSYZsjW73N
gK3r4y6boKzToWQ2WE3qVHB0APTVNZTuyEUA71EzBu3e8ILyKWRLDolfd1nIUS2B
1oMNw1eoXVREF/GQeXYrjEvnccyuQEMEeQPauob1Pvx2uVz8N9N3Ax6+mw93BwWv
kRxy6UM7k0E7IFtbjjrY8Y7ye6GBd+SHCPzU3GtTzNi+7A56WicIA9HU/g6c4BW6
ihI39kPLt4r2/8Ci8PIz6kgs/DZ7qXircNhrv+OJS0l9K/g6so7sV2o8mNjNu9b0
4Djba8DRdTiId6RU3HT0slM2K1nMxrq+NMVFeFVehmlRKyD/1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa0iApyfUzJVFdek8hSS2R7tjAjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4
NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYjliM2EyN2ItNjVjYi0z
N2E0LWEzOWUtZDdjNjRhNWM5N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx
NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx
NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx
MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs9PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyc7suou5nKIjMwA6HXBrnBfYxbBL2dRXg4qHvWdQdU88NNTb+KVGYo
WIM/Rx1WfCyb+GKrU4eUnVu5FDopnX9A3mlMYmEi8gB/8vE1jso3xkEMYdiKrTLf
E14WI6hVv+lNSnA/ccWh9lM2OnmIf9VriV+7FAchtFHEv0gi3v0rZczaq1BH8Wwv
hbVaUmUvRrrlP3O1zV2MaxT+q9n922Iq6yGgeV3vuoqfe+6M2wKtcrwAZ4+DKL6n
ld9quJKzECpXoTNsrH7KKOZRyzcaJsZKxQDTEm2dXUhdS/Ma+ZHktMSmZd/sHh3m
Ez3KThSJt/SkWMqTurkslMQ/yrgKCKM=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:21:50 2026 by rpki-client