Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa
File:                     0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa (raw, json)
Hash identifier:          sFKtXMfFCBwa8QUOt231I2/2L/bnddrf4QnVy6lQZqA=
Subject key identifier:   89:32:22:86:7E:DC:A0:F6:BC:3E:3F:3D:B8:8A:9E:AC:38:69:E5:FB
Certificate issuer:       /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
Certificate serial:       010D0C9F4328584EC5A53697C6D18E1635E36C80
Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa
Signing time:             Sat 08 Aug 2026 19:55:38 +0000
ROA not before:           Sat 08 Aug 2026 19:55:38 +0000
ROA not after:            Fri 06 Nov 2026 20:55:38 +0000
asID:                     54624
IP address blocks:        149.24.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c5:a5:36:97:c6:d1:8e:16:35:e3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
        Validity
            Not Before: Aug  8 19:55:38 2026 GMT
            Not After : Nov  6 20:55:38 2026 GMT
        Subject: CN=98a094d9-dd98-405b-88f9-45eba2a22138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:d6:42:53:eb:91:79:32:fc:ce:24:f5:c2:
                    08:62:ee:55:21:3b:95:b9:fb:ab:b0:24:a9:eb:16:
                    3a:aa:a0:6c:f9:10:af:2f:c1:73:90:3c:01:2c:fb:
                    64:08:bf:a7:69:2a:bc:06:88:bf:af:5f:8e:ab:35:
                    ea:cd:7a:b0:36:2d:af:c4:14:92:e6:72:7c:f5:65:
                    29:02:a6:4b:34:01:17:80:13:dd:6f:67:fc:0a:6f:
                    56:2a:9e:06:6b:97:64:eb:b1:27:c0:81:d4:48:07:
                    97:7e:89:72:2b:e8:15:08:35:19:5e:f4:79:b2:54:
                    c7:20:35:f1:6c:ed:1f:33:44:ba:07:0b:93:df:60:
                    fd:c1:34:19:f7:44:02:a0:73:29:da:1f:59:2e:35:
                    0e:a9:b2:50:ad:c0:90:e4:a2:d4:52:71:52:d9:71:
                    03:da:de:c3:37:5f:b6:14:61:04:74:ea:f7:52:22:
                    6c:4b:f7:a0:42:31:ab:67:09:26:48:b5:ee:f1:34:
                    0e:1b:08:86:96:bb:c5:21:55:16:6a:1c:97:32:60:
                    2c:cb:9c:65:13:52:21:ab:eb:a7:6c:3c:a4:42:3c:
                    68:63:c2:1d:93:a6:14:72:3a:4a:41:ac:ef:1e:1a:
                    25:5d:20:7f:24:a3:6c:ba:db:e2:f9:10:4c:12:d8:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:22:86:7E:DC:A0:F6:BC:3E:3F:3D:B8:8A:9E:AC:38:69:E5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl

            X509v3 Authority Key Identifier:
                keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.24.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:f0:ce:93:a0:c4:20:3d:cb:6f:33:27:90:b6:1e:d8:97:
         ff:cd:14:58:c1:66:66:e4:43:04:36:ed:ed:75:60:c9:fc:9e:
         bc:2a:c2:ae:16:9c:c2:ec:1c:68:9c:ee:8a:0d:b6:af:ae:19:
         1f:2b:fd:fe:13:10:6f:32:25:1f:9f:91:f3:6b:52:4b:47:49:
         3e:a8:be:5f:bf:35:cf:50:d8:42:da:83:b4:9d:b9:9b:74:03:
         cf:cc:1b:7b:e9:25:43:ba:77:bb:bd:b5:82:34:64:97:81:b7:
         54:58:98:27:36:7d:68:1d:5b:73:ad:ef:46:f8:90:11:5c:49:
         fd:06:f6:0c:0f:11:44:8a:eb:ee:26:78:9f:04:c2:09:57:73:
         68:16:25:68:b3:f8:bb:a5:52:ba:fe:29:b3:45:c9:1a:8b:7d:
         9d:96:99:cc:11:82:73:ee:24:ba:a5:0a:bf:65:c1:c7:a6:f9:
         19:fc:31:71:51:fa:b2:fa:2e:06:64:95:f9:8f:ed:d7:3c:81:
         c4:ff:53:f3:40:fa:08:b9:f6:c8:40:57:58:f8:41:b5:47:31:
         d2:19:0e:d9:56:88:e1:bc:b0:2e:a8:c3:29:ab:f9:5f:12:1a:
         65:17:5d:fc:00:c4:3e:8e:0c:c1:ed:9e:87:5f:46:f7:c6:b3:
         73:53:9b:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7FpTaXxtGOFjXjbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz
NzQ0MB4XDTI2MDgwODE5NTUzOFoXDTI2MTEwNjIwNTUzOFowLzEtMCsGA1UEAxMk
OThhMDk0ZDktZGQ5OC00MDViLTg4ZjktNDVlYmEyYTIyMTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ/WQlPrkXky/M4k9cIIYu5VITuVufursCSp
6xY6qqBs+RCvL8FzkDwBLPtkCL+naSq8Boi/r1+OqzXqzXqwNi2vxBSS5nJ89WUp
AqZLNAEXgBPdb2f8Cm9WKp4Ga5dk67EnwIHUSAeXfolyK+gVCDUZXvR5slTHIDXx
bO0fM0S6BwuT32D9wTQZ90QCoHMp2h9ZLjUOqbJQrcCQ5KLUUnFS2XED2t7DN1+2
FGEEdOr3UiJsS/egQjGrZwkmSLXu8TQOGwiGlrvFIVUWahyXMmAsy5xlE1Ihq+un
bDykQjxoY8Idk6YUcjpKQazvHholXSB/JKNsutvi+RBMEthEowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkyIoZ+3KD2vD4/PbiKnqw4aeX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4
ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvMGMzYzg2YzAtOGZhNC0z
NTc0LWFmMmUtZmRjMzFjYTQ3MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0
NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk
Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2
MDYyZDM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRhkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/Y8M6ToMQgPctvMyeQth7Yl//NFFjBZmbkQwQ27e11YMn8nrwqwq4W
nMLsHGic7ooNtq+uGR8r/f4TEG8yJR+fkfNrUktHST6ovl+/Nc9Q2ELag7SduZt0
A8/MG3vpJUO6d7u9tYI0ZJeBt1RYmCc2fWgdW3Ot70b4kBFcSf0G9gwPEUSK6+4m
eJ8EwglXc2gWJWiz+LulUrr+KbNFyRqLfZ2WmcwRgnPuJLqlCr9lwcem+Rn8MXFR
+rL6LgZklfmP7dc8gcT/U/NA+gi59shAV1j4QbVHMdIZDtlWiOG8sC6owymr+V8S
GmUXXfwAxD6ODMHtnodfRvfGs3NTm94=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:43:44 2026 by rpki-client