Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa
File:                     6aca919f-7194-3657-a9cd-84082ad16747.roa (raw, json)
Hash identifier:          /mfHWdeVKt879d5QttqXEKLJKKLv8af0OKgLI33/dTQ=
Subject key identifier:   99:F4:F9:40:FF:18:2D:E9:E6:F4:97:3D:57:D6:FB:51:A0:CC:F7:76
Certificate issuer:       /CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968
Certificate serial:       010D0C9F4328584EC20C611595AB892C38805C00
Authority key identifier: C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     19048
IP address blocks:        209.160.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:61:15:95:ab:89:2c:38:80:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=91edd3de-4344-49fa-8e17-367950bc4f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:fe:02:1f:ed:25:bc:08:6c:4e:54:3f:66:
                    cf:12:7c:6d:3b:28:32:e1:34:70:f9:98:7b:c6:1a:
                    42:25:31:3c:3a:e5:5a:60:ef:2d:9f:43:e2:bf:86:
                    4e:06:c2:c7:d5:a9:d0:11:d8:1e:3e:08:ac:e6:ca:
                    7a:78:93:34:9a:0e:79:20:ff:0b:13:b3:34:c6:8c:
                    b0:0a:28:98:03:2e:ba:11:a7:35:ef:75:2f:35:b4:
                    3f:19:9d:83:2e:7e:91:fb:27:28:98:50:7b:f8:29:
                    bc:76:d1:de:02:12:85:81:c3:59:95:f9:8b:ca:8f:
                    fc:8d:84:55:f6:cb:49:15:52:04:25:9a:9c:6d:f6:
                    33:9b:60:f9:55:a9:84:02:6b:10:19:ee:b2:f8:8f:
                    a8:5f:48:67:5a:b2:5f:3e:25:6c:a0:28:a2:d2:f1:
                    32:0a:a7:d7:dc:42:be:af:e5:65:40:60:75:4b:cd:
                    36:a1:c5:42:fc:f5:a2:03:d4:e7:77:02:6d:33:5f:
                    83:43:f6:1b:eb:a8:52:77:56:a9:88:a4:41:1e:d5:
                    85:ce:dd:fa:02:14:e0:6f:c6:d9:63:2f:b3:06:68:
                    9e:5f:33:7f:0f:5c:17:a4:cb:7b:5e:58:ff:71:19:
                    cc:26:26:28:e6:13:cf:54:4c:52:2b:5f:f7:e2:63:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F4:F9:40:FF:18:2D:E9:E6:F4:97:3D:57:D6:FB:51:A0:CC:F7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:d3:0e:60:7d:bb:b7:68:62:bf:9a:73:7b:40:11:74:40:e6:
         86:63:a3:4f:f6:b0:8c:4e:54:ed:a8:fc:62:28:75:d2:d2:51:
         44:c9:18:53:87:80:9a:ec:fa:e3:d5:22:8e:eb:79:16:80:5a:
         e7:5a:de:68:6c:70:ea:64:30:98:92:f4:bb:9f:b7:04:aa:71:
         c3:e5:cf:10:d0:68:61:ab:8c:ff:34:bb:b6:d5:c1:6c:c7:3e:
         6c:b1:a1:8f:b8:2c:d0:53:e2:08:7a:44:14:a3:a8:03:12:cf:
         1e:71:53:83:95:d3:11:25:ee:08:18:fd:29:8c:fc:9a:2f:f8:
         b2:e9:2f:c2:46:73:89:b1:08:51:5b:52:54:1b:65:a2:40:dc:
         2c:b6:e7:1f:ca:44:6e:89:64:02:71:16:60:55:ad:70:9a:ef:
         c1:22:58:11:14:60:2a:e7:b9:a0:ac:50:16:48:88:93:9d:7d:
         5c:6d:eb:2b:20:1e:94:e3:a0:6c:17:ba:c8:ff:f8:9e:c6:e4:
         cc:73:f9:0a:e4:87:ad:2a:7d:e4:07:f9:9b:9f:28:d1:ae:f9:
         d1:ee:45:77:cf:fe:f9:be:f3:14:6e:91:78:0d:37:c1:6e:0b:
         0d:87:74:c1:75:e9:4c:a2:78:6e:30:92:0f:59:2f:01:a5:82:
         b1:94:ea:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGEVlauJLDiAXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QyZTVkNzAtZmJiNS00YjQ1LWJhYTMtMDc2M2MyNmQ0
OTY4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
OTFlZGQzZGUtNDM0NC00OWZhLThlMTctMzY3OTUwYmM0ZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqez+Ah/tJbwIbE5UP2bPEnxtOygy4TRw+Zh7
xhpCJTE8OuVaYO8tn0Piv4ZOBsLH1anQEdgePgis5sp6eJM0mg55IP8LE7M0xoyw
CiiYAy66Eac173UvNbQ/GZ2DLn6R+ycomFB7+Cm8dtHeAhKFgcNZlfmLyo/8jYRV
9stJFVIEJZqcbfYzm2D5VamEAmsQGe6y+I+oX0hnWrJfPiVsoCii0vEyCqfX3EK+
r+VlQGB1S802ocVC/PWiA9TndwJtM1+DQ/Yb66hSd1apiKRBHtWFzt36AhTgb8bZ
Yy+zBmieXzN/D1wXpMt7Xlj/cRnMJiYo5hPPVExSK1/34mPPtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJn0+UD/GC3p5vSXPVfW+1GgzPd2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJl
NWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYzYzI2ZDQ5NjgvNmFjYTkxOWYtNzE5NC0z
NjU3LWE5Y2QtODQwODJhZDE2NzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2QyZTVkNzAtZmJiNS00YjQ1LWJh
YTMtMDc2M2MyNmQ0OTY4L2NkMmU1ZDcwLWZiYjUtNGI0NS1iYWEzLTA3NjNjMjZk
NDk2OC5jcmwwHwYDVR0jBBgwFoAUyLduIASDrs7R0dv36Ox/sNTzdnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJlNWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYz
YzI2ZDQ5NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM3TDmB9u7doYr+ac3tAEXRA5oZjo0/2sIxOVO2o/GIoddLSUUTJGFOH
gJrs+uPVIo7reRaAWuda3mhscOpkMJiS9LuftwSqccPlzxDQaGGrjP80u7bVwWzH
PmyxoY+4LNBT4gh6RBSjqAMSzx5xU4OV0xEl7ggY/SmM/Jov+LLpL8JGc4mxCFFb
UlQbZaJA3Cy25x/KRG6JZAJxFmBVrXCa78EiWBEUYCrnuaCsUBZIiJOdfVxt6ysg
HpTjoGwXusj/+J7G5Mxz+Qrkh60qfeQH+ZufKNGu+dHuRXfP/vm+8xRukXgNN8Fu
Cw2HdMF16UyieG4wkg9ZLwGlgrGU6hk=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:20 2026 by rpki-client