Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/eadf9090-d384-30ad-a12b-6c7eaeaf24f5.roa
File:                     eadf9090-d384-30ad-a12b-6c7eaeaf24f5.roa (raw, json)
Hash identifier:          2F/lDjxll+77UiTx2ylNe7LJMghB+stP5uqNJtRAy3c=
Subject key identifier:   8C:8E:F8:11:36:67:35:5F:DD:3A:5A:BE:4A:AC:18:72:35:5B:8E:C7
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584ED9C7494934A15E87F8EAA100
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/eadf9090-d384-30ad-a12b-6c7eaeaf24f5.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     397250
IP address blocks:        69.55.213.0/24 maxlen: 24
                          205.174.152.0/24 maxlen: 24
                          207.32.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:49:49:34:a1:5e:87:f8:ea:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=cee35171-5b7b-43fb-aef4-151d55e530ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:3b:87:ef:22:bb:9e:43:cf:c4:81:02:a7:
                    1d:29:5f:a0:e8:b5:94:fe:1f:36:b6:96:64:2c:9e:
                    95:a5:ea:1a:fd:82:0a:6b:6a:90:9c:a4:75:f6:c3:
                    f4:35:fd:c1:45:5b:2f:c5:b8:6c:38:66:f0:c0:82:
                    6d:0e:18:34:e4:0c:86:47:59:5c:ed:67:7d:34:70:
                    fa:9a:ee:4f:70:73:43:ea:34:05:bb:9a:de:14:cf:
                    83:63:54:5a:ae:77:7b:26:38:51:bc:e5:7b:cd:b3:
                    1c:e6:c7:aa:3c:55:db:63:e2:f9:1f:4d:11:98:45:
                    9a:94:1e:fa:3a:5a:b1:d1:c2:89:50:e0:07:20:06:
                    88:96:08:1c:78:6e:fd:d3:e9:11:e9:6b:c1:0e:91:
                    9b:f0:bc:a1:96:7a:a0:c2:f5:06:47:dc:2f:01:0d:
                    03:39:46:9b:2c:10:41:45:05:86:a0:76:9c:a8:59:
                    92:b5:88:5c:db:60:ec:9e:7f:45:9d:00:8e:c6:18:
                    1e:5a:0b:5c:71:a6:e1:1a:d6:f4:91:3d:2d:a9:fd:
                    79:60:9b:fd:63:02:58:f9:23:65:45:0e:7f:84:b2:
                    24:72:86:b5:92:2d:e3:76:79:97:ad:37:98:43:f6:
                    68:c2:58:d7:fc:94:16:da:d3:ef:e6:34:a4:a6:ff:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:F8:11:36:67:35:5F:DD:3A:5A:BE:4A:AC:18:72:35:5B:8E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/eadf9090-d384-30ad-a12b-6c7eaeaf24f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.213.0/24
                  205.174.152.0/24
                  207.32.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:90:94:68:cc:f2:1d:eb:33:01:1c:57:ee:82:59:40:9f:
         36:b7:26:f8:a3:59:ff:d4:76:3c:c9:0b:a2:93:57:23:d9:17:
         83:ce:a7:9c:9a:06:90:6c:95:58:21:ca:37:de:7b:7a:15:d2:
         bf:ea:e9:09:27:89:01:3b:e6:bf:80:ce:65:d2:96:59:ec:61:
         fc:44:92:e7:73:06:e5:49:05:f8:bc:6a:9b:a6:52:f8:b1:63:
         6d:cd:6a:be:7a:51:0d:2f:b4:6c:cb:e7:f9:ec:55:3b:9a:85:
         dc:86:21:27:69:e3:cd:b5:16:53:ca:d7:ff:43:47:13:b1:3d:
         60:5e:07:f0:1f:4c:e2:87:dd:46:06:66:26:a7:0a:3e:15:2b:
         e6:96:f3:70:f0:db:70:90:7d:84:60:73:e6:c9:8a:e2:15:2c:
         90:91:a1:88:be:20:bb:95:24:7c:26:a0:dd:dc:d4:d1:94:d0:
         7b:78:c3:cf:5c:69:ff:af:63:8d:85:e9:b2:60:f8:09:43:71:
         a0:3e:bf:9d:65:8d:f1:67:b9:c0:c1:39:52:11:07:b6:86:7c:
         24:a1:16:af:1b:14:d7:1a:7f:58:89:99:17:d5:43:c2:da:29:
         ef:f7:37:83:da:54:5f:07:21:07:95:75:d3:8b:6a:bf:ad:75:
         f8:78:df:48
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7Zx0lJNKFeh/jqoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm
M2M4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
Y2VlMzUxNzEtNWI3Yi00M2ZiLWFlZjQtMTUxZDU1ZTUzMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhk7h+8iu55Dz8SBAqcdKV+g6LWU/h82tpZk
LJ6Vpeoa/YIKa2qQnKR19sP0Nf3BRVsvxbhsOGbwwIJtDhg05AyGR1lc7Wd9NHD6
mu5PcHND6jQFu5reFM+DY1Rarnd7JjhRvOV7zbMc5seqPFXbY+L5H00RmEWalB76
Olqx0cKJUOAHIAaIlggceG790+kR6WvBDpGb8LyhlnqgwvUGR9wvAQ0DOUabLBBB
RQWGoHacqFmStYhc22Dsnn9FnQCOxhgeWgtccabhGtb0kT0tqf15YJv9YwJY+SNl
RQ5/hLIkcoa1ki3jdnmXrTeYQ/ZowljX/JQW2tPv5jSkpv9eywIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIyO+BE2ZzVf3TpavkqsGHI1W47HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm
YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvZWFkZjkwOTAtZDM4NC0z
MGFkLWExMmItNmM3ZWFlYWYyNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4
ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5
ZDkxYmYzYzguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQARTfVAwQA
za6YAwQAzyDGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAFfkJRozPId6zMBHFfugllAnza3JvijWf/UdjzJ
C6KTVyPZF4POp5yaBpBslVghyjfee3oV0r/q6QkniQE75r+AzmXSllnsYfxEkudz
BuVJBfi8apumUvixY23Nar56UQ0vtGzL5/nsVTuahdyGISdp4821FlPK1/9DRxOx
PWBeB/AfTOKH3UYGZianCj4VK+aW83Dw23CQfYRgc+bJiuIVLJCRoYi+ILuVJHwm
oN3c1NGU0Ht4w89caf+vY42F6bJg+AlDcaA+v51ljfFnucDBOVIRB7aGfCShFq8b
FNcaf1iJmRfVQ8LaKe/3N4PaVF8HIQeVddOLar+tdfh430g=
-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:41 2026 by rpki-client