Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/bbe608b2-1207-3e5a-ab38-8de126739dd0.roa
File:                     bbe608b2-1207-3e5a-ab38-8de126739dd0.roa (raw, json)
Hash identifier:          gzHop6x8tsl44BYChTgzW19Pho5l0B2JQveLTqtVeFY=
Subject key identifier:   C4:7A:8B:72:6A:D4:89:63:34:DB:76:20:AF:EB:61:02:19:78:4E:09
Certificate issuer:       /CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c
Certificate serial:       010D0C9F4328584F6C3BB68E3968CDD76B304280
Authority key identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/bbe608b2-1207-3e5a-ab38-8de126739dd0.roa
Signing time:             Wed 07 Oct 2026 12:03:04 +0000
ROA not before:           Wed 07 Oct 2026 12:03:04 +0000
ROA not after:            Tue 05 Jan 2027 13:03:04 +0000
asID:                     401608
IP address blocks:        143.203.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:3b:b6:8e:39:68:cd:d7:6b:30:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c
        Validity
            Not Before: Oct  7 12:03:04 2026 GMT
            Not After : Jan  5 13:03:04 2027 GMT
        Subject: CN=369ff20a-a11d-478d-be8e-314711483826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:27:de:60:c1:8a:ea:6c:df:19:8c:51:20:
                    04:61:fb:16:31:33:24:78:5d:09:29:2a:83:e4:84:
                    13:4f:dd:af:53:ad:f6:20:78:c9:b2:d4:c7:aa:2b:
                    63:9b:fe:69:bf:4e:86:a6:a4:94:b3:09:88:86:df:
                    9a:af:0b:f4:5a:ae:86:77:ec:80:5a:59:b5:20:48:
                    44:ec:a1:b1:1f:bb:b5:c6:ef:a1:d7:7c:33:57:94:
                    6c:97:7c:84:e8:c8:88:a7:00:65:8d:39:a8:f9:f0:
                    f7:d0:a9:ac:02:06:cd:db:ae:2d:15:24:94:aa:6e:
                    65:9b:92:ca:12:26:37:dd:c2:81:0f:12:1e:0e:b0:
                    23:fc:79:b0:a6:d1:30:c3:8a:2d:92:89:0e:48:af:
                    ce:93:ff:7c:06:a1:77:ee:9b:ed:63:21:36:db:01:
                    97:39:44:a1:c2:94:32:be:ca:7a:1b:dc:e7:ac:0b:
                    ba:1a:86:37:45:77:e4:c2:aa:f1:86:50:62:7b:8d:
                    ad:5e:30:1c:4e:4f:40:06:88:5c:ce:cb:f8:ac:46:
                    c9:8b:32:4d:19:f6:42:1e:5c:cb:7b:71:cb:b1:71:
                    9e:94:48:27:78:62:0f:f4:25:dd:e6:56:76:19:01:
                    76:e4:26:0a:87:0f:74:f7:7f:76:3e:3a:1c:4b:b9:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7A:8B:72:6A:D4:89:63:34:DB:76:20:AF:EB:61:02:19:78:4E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/bbe608b2-1207-3e5a-ab38-8de126739dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl

            X509v3 Authority Key Identifier:
                keyid:4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:ca:68:27:ac:fe:c9:99:b6:77:c0:1b:fe:9e:f7:63:44:
         df:3c:3c:a2:50:c6:4d:18:84:96:d9:5e:25:31:dd:02:94:4d:
         2f:d7:69:94:b1:70:29:9a:0f:89:e0:9d:93:a8:e1:7c:60:02:
         23:62:3c:a3:5a:0a:c0:8a:55:c7:e4:75:9e:05:79:84:ae:06:
         42:ce:7e:bb:a5:22:5c:de:4b:f8:35:16:f9:ea:17:00:c8:84:
         a5:57:4b:ee:d0:47:32:c1:f9:bd:32:23:b7:a5:ca:16:65:10:
         e5:ac:85:a7:c8:cf:66:44:69:29:00:6a:68:5f:57:22:a6:14:
         84:bc:1c:04:df:cd:af:3d:a3:cf:23:83:7a:bc:75:ad:4f:f9:
         30:e4:7d:04:81:0d:4f:31:39:8e:8b:82:aa:d0:a7:87:38:28:
         50:65:ea:09:0c:49:62:b1:20:45:3e:71:d1:e7:b0:22:35:ce:
         8e:f2:82:66:51:8d:d1:12:75:ce:b1:48:c3:a3:6b:b2:b5:4a:
         31:d9:f7:cb:ce:0c:5b:4d:7f:0a:5f:c5:4d:80:b2:04:4f:46:
         79:8c:cc:da:04:b2:74:73:e8:9b:e1:60:5a:91:94:47:9d:9b:
         9d:be:2d:74:c0:83:e8:72:bd:37:e0:e3:7c:d5:64:b4:7a:76:
         21:8c:38:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sO7aOOWjN12swQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjljZWIwOGItN2E5NS00MTVkLWE0ZTEtMzJmMTc2YzUw
NDdjMB4XDTI2MTAwNzEyMDMwNFoXDTI3MDEwNTEzMDMwNFowLzEtMCsGA1UEAxMk
MzY5ZmYyMGEtYTExZC00NzhkLWJlOGUtMzE0NzExNDgzODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0skn3mDBiups3xmMUSAEYfsWMTMkeF0JKSqD
5IQTT92vU632IHjJstTHqitjm/5pv06GpqSUswmIht+arwv0Wq6Gd+yAWlm1IEhE
7KGxH7u1xu+h13wzV5Rsl3yE6MiIpwBljTmo+fD30KmsAgbN264tFSSUqm5lm5LK
EiY33cKBDxIeDrAj/HmwptEww4otkokOSK/Ok/98BqF37pvtYyE22wGXOUShwpQy
vsp6G9znrAu6GoY3RXfkwqrxhlBie42tXjAcTk9ABohczsv4rEbJizJNGfZCHlzL
e3HLsXGelEgneGIP9CXd5lZ2GQF25CYKhw909392PjocS7nqRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMR6i3Jq1IljNNt2IK/rYQIZeE4JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNl
YjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZjNTA0N2MvYmJlNjA4YjItMTIwNy0z
ZTVhLWFiMzgtOGRlMTI2NzM5ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjljZWIwOGItN2E5NS00MTVkLWE0
ZTEtMzJmMTc2YzUwNDdjL2Y5Y2ViMDhiLTdhOTUtNDE1ZC1hNGUxLTMyZjE3NmM1
MDQ3Yy5jcmwwHwYDVR0jBBgwFoAUSvUHrQiBovAElrEKOXNhi+fN5NgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYx
NzZjNTA0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8tPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG50ymgnrP7JmbZ3wBv+nvdjRN88PKJQxk0YhJbZXiUx3QKUTS/XaZSx
cCmaD4ngnZOo4XxgAiNiPKNaCsCKVcfkdZ4FeYSuBkLOfrulIlzeS/g1FvnqFwDI
hKVXS+7QRzLB+b0yI7elyhZlEOWshafIz2ZEaSkAamhfVyKmFIS8HATfza89o88j
g3q8da1P+TDkfQSBDU8xOY6LgqrQp4c4KFBl6gkMSWKxIEU+cdHnsCI1zo7ygmZR
jdESdc6xSMOja7K1SjHZ98vODFtNfwpfxU2AsgRPRnmMzNoEsnRz6JvhYFqRlEed
m52+LXTAg+hyvTfg43zVZLR6diGMOMY=
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:49 2026 by rpki-client