Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa
File:                     332b4b6b-4756-3fce-802b-a4011c385d8f.roa (raw, json)
Hash identifier:          XXBtO3ZiPSDeG6MinZqv69kYRsr74SCZEDJUmYL0/uo=
Subject key identifier:   95:6D:58:5E:4F:AD:6D:10:4D:EA:6C:83:75:A4:84:17:54:51:CE:13
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584F89A85CCF74E04D8FF40F56B0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11269
IP address blocks:        207.2.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5c:cf:74:e0:4d:8f:f4:0f:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=90b1ec31-1da5-4c65-bc75-f085dbccf0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:17:0b:23:b6:a1:96:df:97:7b:38:3f:ea:
                    71:d6:24:a0:e5:1b:f7:2e:73:e5:9d:3b:84:b5:30:
                    83:bd:a3:c8:ad:c8:65:e4:be:b1:85:6d:a8:42:80:
                    81:23:2a:73:ac:09:e3:e5:26:ba:7b:76:3f:a5:c2:
                    d9:4b:92:91:2e:b0:c2:77:44:df:0a:d4:5a:b5:3e:
                    62:ff:fb:d5:dd:6a:f7:a2:87:a1:d6:18:34:9c:bc:
                    62:e1:9c:07:a1:53:ee:94:0c:07:e5:76:30:28:51:
                    f7:9c:66:8c:2d:b0:35:fc:70:e0:89:62:96:63:c4:
                    60:df:a2:25:c4:e8:d7:ee:9a:d8:1e:73:f2:b0:84:
                    ae:c8:f9:9d:0b:6c:e7:95:1a:b0:08:cd:29:72:0f:
                    e4:5c:42:50:52:fd:ff:6b:4d:3b:b7:dd:1d:5b:b7:
                    3a:e7:21:55:50:7f:fc:f0:3d:35:48:f0:a3:21:29:
                    70:6c:5d:01:f5:97:8b:de:61:a4:80:b0:f9:b1:04:
                    26:60:6a:f2:c5:fc:a9:32:04:c5:92:20:df:e8:9d:
                    7f:af:a9:5e:f4:8b:21:47:0d:90:65:14:e2:fa:6e:
                    9d:8d:f4:bb:1b:e5:c7:bb:77:c2:14:3e:b8:46:cf:
                    f7:2d:1a:de:06:e3:d0:a6:74:90:10:26:d6:68:8d:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:58:5E:4F:AD:6D:10:4D:EA:6C:83:75:A4:84:17:54:51:CE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:96:9c:82:e5:40:ab:30:34:c2:84:36:95:4c:d7:69:b8:ce:
         d9:ed:a7:23:b9:72:f3:e9:dd:79:5c:c9:46:6f:77:e4:05:cd:
         5e:c9:e4:12:ff:74:f8:6d:23:e8:ad:ce:00:ad:9a:ba:0a:66:
         c7:c8:33:06:25:a7:9b:a8:2f:f5:70:87:3f:11:23:8e:6b:c4:
         17:87:a0:aa:81:ea:e3:08:1c:b0:3f:2c:fc:e9:34:66:a1:6b:
         6b:33:f6:26:92:eb:75:3c:7d:a5:24:2c:13:df:7f:84:8d:02:
         05:e2:51:0c:63:24:2c:b9:64:07:8c:eb:82:52:9f:f5:29:85:
         17:b8:34:b6:8d:13:25:83:21:a8:0f:5c:c7:19:fc:6d:ac:7d:
         8d:77:30:73:73:eb:02:4d:d8:97:f9:24:ef:13:1c:0c:57:3f:
         e6:5d:69:7d:67:ea:e4:4b:63:34:da:20:2b:0a:e9:01:ef:f5:
         50:87:ad:11:32:d6:39:4f:06:30:6e:f8:38:c9:d4:4a:5c:7a:
         a1:fc:f1:88:1d:3e:4a:92:48:68:74:b8:b0:13:71:4a:81:19:
         6f:cf:d2:ab:8b:ca:b0:bb:43:89:22:22:f4:e1:30:a3:a9:87:
         d1:3c:51:f6:8c:e8:33:fb:75:1f:6f:9c:e5:db:49:71:a8:76:
         11:29:b5:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFzPdOBNj/QPVrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3
MTRjMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
OTBiMWVjMzEtMWRhNS00YzY1LWJjNzUtZjA4NWRiY2NmMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZkXCyO2oZbfl3s4P+px1iSg5Rv3LnPlnTuE
tTCDvaPIrchl5L6xhW2oQoCBIypzrAnj5Sa6e3Y/pcLZS5KRLrDCd0TfCtRatT5i
//vV3Wr3ooeh1hg0nLxi4ZwHoVPulAwH5XYwKFH3nGaMLbA1/HDgiWKWY8Rg36Il
xOjX7prYHnPysISuyPmdC2znlRqwCM0pcg/kXEJQUv3/a007t90dW7c65yFVUH/8
8D01SPCjISlwbF0B9ZeL3mGkgLD5sQQmYGryxfypMgTFkiDf6J1/r6le9IshRw2Q
ZRTi+m6djfS7G+XHu3fCFD64Rs/3LRreBuPQpnSQECbWaI0nhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVtWF5PrW0QTepsg3WkhBdUUc4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy
NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvMzMyYjRiNmItNDc1Ni0z
ZmNlLTgwMmItYTQwMTFjMzg1ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1
YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5
NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0
NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzwJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGWnILlQKswNMKENpVM12m4ztntpyO5cvPp3XlcyUZvd+QFzV7J5BL/
dPhtI+itzgCtmroKZsfIMwYlp5uoL/Vwhz8RI45rxBeHoKqB6uMIHLA/LPzpNGah
a2sz9iaS63U8faUkLBPff4SNAgXiUQxjJCy5ZAeM64JSn/UphRe4NLaNEyWDIagP
XMcZ/G2sfY13MHNz6wJN2Jf5JO8THAxXP+ZdaX1n6uRLYzTaICsK6QHv9VCHrREy
1jlPBjBu+DjJ1EpceqH88YgdPkqSSGh0uLATcUqBGW/P0quLyrC7Q4kiIvThMKOp
h9E8UfaM6DP7dR9vnOXbSXGodhEptSk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:43 2026 by rpki-client