Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
File:                     96377f13-9828-377f-8847-5a9e522ad52d.roa (raw, json)
Hash identifier:          pzH6q/3a+UpNaD2EtHYBI1jEjTRaLHRhjD4cSb89KnI=
Subject key identifier:   1F:9E:18:87:03:A4:D0:60:70:5A:9C:E0:14:7E:B7:B3:11:21:BB:35
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584F9E9881EB15DE4DB936288EC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     11260
IP address blocks:        216.167.224.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:81:eb:15:de:4d:b9:36:28:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=0d78c87c-0999-400c-9bf8-d3e8fc889bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:7d:b6:45:ef:21:94:dc:0f:f3:8f:55:2e:
                    44:6c:a8:67:09:ef:40:c1:ad:91:15:8e:37:55:f4:
                    e3:94:a6:d2:28:03:74:fc:d5:c5:2d:7a:56:81:f7:
                    a7:9d:25:a7:6b:46:c4:cd:11:e7:46:0f:e5:42:10:
                    3c:75:ad:44:cd:2c:18:c7:fa:e6:ff:ea:75:c5:ed:
                    c9:70:46:ef:b1:39:93:5c:d5:e6:bc:4a:65:ce:a1:
                    d2:ae:3b:d7:5b:3b:d1:c0:f0:f6:ba:dc:9f:af:8d:
                    2c:56:37:f6:68:2e:a9:79:81:87:34:9f:8f:a3:a2:
                    ab:09:8e:e1:04:75:07:f4:79:84:1c:d6:93:7f:4d:
                    87:c4:2f:28:6b:02:40:01:f7:04:fb:bf:d8:72:e5:
                    f9:1e:a2:02:21:c0:c2:29:95:7a:ee:38:34:45:1b:
                    61:c8:26:f5:45:fc:ea:d0:58:24:1e:7c:cc:05:c7:
                    e5:a4:72:74:60:3e:10:3a:ec:e2:6f:62:86:aa:b2:
                    2b:f3:c0:0a:9b:fd:ef:3c:07:ec:bb:5c:30:b7:83:
                    ad:1c:69:05:db:6b:9c:b0:e5:2f:f6:65:ec:06:65:
                    e7:49:16:e3:fd:46:a9:88:35:42:7c:fd:e9:79:8e:
                    7a:1b:59:dc:a1:06:ee:53:36:8d:ce:b1:90:f1:5e:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9E:18:87:03:A4:D0:60:70:5A:9C:E0:14:7E:B7:B3:11:21:BB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.167.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:8c:25:dc:e2:9c:3c:2a:35:2c:f5:34:d0:ca:8b:6b:6c:
         ac:2d:6b:f5:0c:30:51:ce:86:d1:ec:79:4b:5b:e1:27:47:12:
         ca:21:91:48:96:97:a0:ae:c6:6b:f8:ba:36:4f:fc:49:6d:d1:
         a0:79:38:2a:74:be:70:c9:6e:56:a3:31:ec:2c:a6:5d:bb:bb:
         32:f7:54:ba:ba:02:24:d5:ee:61:53:f8:6c:ba:b8:01:65:c3:
         26:1b:de:bd:d1:12:63:71:c9:9e:8e:be:11:be:76:b3:cc:e2:
         f6:b3:03:3b:ec:f9:e7:4c:cb:78:ec:a7:e6:db:c7:c0:03:d5:
         77:46:a1:5c:e3:79:4f:b5:c8:bf:8b:33:ac:95:fe:dd:2e:97:
         03:1e:6b:ba:93:2e:43:ca:5b:08:9d:47:4e:3b:fe:1b:e8:12:
         46:5f:dd:6b:1f:1f:ab:4e:24:62:9d:b4:f4:5b:04:fd:46:56:
         54:e5:74:06:98:c4:88:4a:74:0a:14:7c:2b:dc:d1:bf:af:d9:
         93:28:df:05:01:0f:08:a1:84:9d:13:70:ad:b0:3a:25:86:ae:
         c4:0f:4d:70:9f:23:fa:fa:c7:b3:87:6d:66:a6:7c:75:ae:a5:
         cc:88:a9:77:0c:7f:8a:97:83:ce:f9:23:5b:36:18:f9:89:f0:
         ff:6b:9a:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emIHrFd5NuTYojsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk
MGQ3OGM4N2MtMDk5OS00MDBjLTliZjgtZDNlOGZjODg5YmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtl9tkXvIZTcD/OPVS5EbKhnCe9Awa2RFY43
VfTjlKbSKAN0/NXFLXpWgfennSWna0bEzRHnRg/lQhA8da1EzSwYx/rm/+p1xe3J
cEbvsTmTXNXmvEplzqHSrjvXWzvRwPD2utyfr40sVjf2aC6peYGHNJ+Po6KrCY7h
BHUH9HmEHNaTf02HxC8oawJAAfcE+7/YcuX5HqICIcDCKZV67jg0RRthyCb1Rfzq
0FgkHnzMBcflpHJ0YD4QOuzib2KGqrIr88AKm/3vPAfsu1wwt4OtHGkF22ucsOUv
9mXsBmXnSRbj/UapiDVCfP3peY56G1ncoQbuUzaNzrGQ8V6D8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+eGIcDpNBgcFqc4BR+t7MRIbs1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTYzNzdmMTMtOTgyOC0z
NzdmLTg4NDctNWE5ZTUyMmFkNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/kjCXc4pw8KjUs9TTQyotrbKwta/UMMFHOhtHseUtb4SdHEsohkUiW
l6Cuxmv4ujZP/Elt0aB5OCp0vnDJblajMewspl27uzL3VLq6AiTV7mFT+Gy6uAFl
wyYb3r3REmNxyZ6OvhG+drPM4vazAzvs+edMy3jsp+bbx8AD1XdGoVzjeU+1yL+L
M6yV/t0ulwMea7qTLkPKWwidR047/hvoEkZf3WsfH6tOJGKdtPRbBP1GVlTldAaY
xIhKdAoUfCvc0b+v2ZMo3wUBDwihhJ0TcK2wOiWGrsQPTXCfI/r6x7OHbWamfHWu
pcyIqXcMf4qXg875I1s2GPmJ8P9rmr8=
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:34:05 2026 by rpki-client