Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a02e68c7-63cc-3f44-97ce-df45f8da061c.roa
File:                     a02e68c7-63cc-3f44-97ce-df45f8da061c.roa (raw, json)
Hash identifier:          Hpcy86Pn9UsC7B6u88qpQPebiwL9Uh39K0FWprm0keo=
Subject key identifier:   9A:59:8A:00:36:85:7F:AC:95:B4:2F:EC:D2:99:89:BE:3F:41:4D:96
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EAA520CFFB9F779B4DC8C7DC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a02e68c7-63cc-3f44-97ce-df45f8da061c.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     198239
IP address blocks:        149.12.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:0c:ff:b9:f7:79:b4:dc:8c:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=f3e23ce7-6ad9-4bf2-9598-337591ced0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:47:af:80:a5:19:d4:fb:32:15:cc:80:84:
                    01:aa:ce:f3:6b:dc:b6:78:c2:4a:63:69:36:ba:37:
                    fd:b5:9a:1c:87:13:b0:ff:02:38:d0:e8:ea:dc:ee:
                    5e:b9:9a:44:0e:84:ef:81:16:af:91:74:04:45:0e:
                    08:2f:9f:7f:98:e8:3d:f3:8e:d1:a5:ad:54:be:d6:
                    b9:91:5f:7a:fb:01:82:dc:28:49:9b:54:12:c6:5a:
                    11:e1:b1:b6:53:ff:cc:18:ef:6b:b5:74:0d:e3:21:
                    f5:48:99:a4:f5:3b:98:30:38:82:90:7a:b1:34:86:
                    69:46:2f:02:a9:a3:14:25:8a:77:c9:93:af:f6:91:
                    46:46:f4:28:57:24:cf:82:02:e1:c3:1b:db:c1:fe:
                    1d:09:a0:48:33:11:d3:e1:74:5b:ec:07:e7:ff:5e:
                    db:5d:a9:54:84:b2:8e:5c:b1:52:ba:fb:f6:4f:b8:
                    5d:6c:8c:a2:ba:14:9d:cb:7c:68:ff:63:80:e6:68:
                    12:9d:c5:4b:b3:90:63:eb:12:72:c7:a3:bd:38:3e:
                    07:2e:96:d2:75:f5:7e:af:9e:08:d4:81:70:d7:16:
                    20:87:60:a3:da:8e:ff:d5:9c:ee:69:20:07:bf:fa:
                    48:e2:dc:99:06:32:44:7c:a2:eb:2e:ff:ef:c6:f8:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:8A:00:36:85:7F:AC:95:B4:2F:EC:D2:99:89:BE:3F:41:4D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a02e68c7-63cc-3f44-97ce-df45f8da061c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.12.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:c5:57:a6:61:64:82:84:44:78:2c:24:c2:51:c9:92:e5:
         39:8f:46:43:1b:37:24:28:10:78:6d:28:e6:e1:6c:29:cf:f8:
         ae:e1:97:93:15:f7:6e:95:9b:1b:00:62:40:14:f1:85:7e:32:
         72:a0:37:74:29:f7:66:2c:dd:25:bb:24:09:40:97:11:c3:d2:
         8c:4d:6c:fe:a4:1c:1a:bd:03:07:19:3e:33:ec:6c:70:3c:f1:
         38:e6:35:9a:80:9d:66:e8:97:4e:47:05:f5:f9:6d:8e:ea:13:
         f3:90:d4:90:93:84:c6:39:0a:c9:2d:58:89:7c:12:bc:1e:ea:
         5e:ae:4b:47:37:03:27:7f:45:99:36:5d:b0:f6:5a:3d:13:0d:
         24:ff:a3:c4:d7:02:f1:8e:2b:0e:5f:a9:c9:f7:f3:82:26:de:
         5f:9d:8a:33:e4:74:38:cc:83:d5:17:47:bc:2f:1e:5c:e3:44:
         7c:62:a7:67:73:63:58:b7:f9:f8:b6:3b:61:47:60:5f:b2:db:
         df:3c:56:54:d4:9b:6e:a6:e6:6f:26:a6:e6:27:ea:29:07:29:
         89:16:47:46:99:90:59:22:a6:b3:b4:7e:74:04:83:ca:48:00:
         06:de:4b:04:f5:da:d0:1f:cb:c3:af:f5:27:90:1a:b8:26:09:
         0b:08:e2:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUgz/ufd5tNyMfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
ZjNlMjNjZTctNmFkOS00YmYyLTk1OTgtMzM3NTkxY2VkMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSFHr4ClGdT7MhXMgIQBqs7za9y2eMJKY2k2
ujf9tZochxOw/wI40Ojq3O5euZpEDoTvgRavkXQERQ4IL59/mOg9847Rpa1Uvta5
kV96+wGC3ChJm1QSxloR4bG2U//MGO9rtXQN4yH1SJmk9TuYMDiCkHqxNIZpRi8C
qaMUJYp3yZOv9pFGRvQoVyTPggLhwxvbwf4dCaBIMxHT4XRb7Afn/17bXalUhLKO
XLFSuvv2T7hdbIyiuhSdy3xo/2OA5mgSncVLs5Bj6xJyx6O9OD4HLpbSdfV+r54I
1IFw1xYgh2Cj2o7/1ZzuaSAHv/pI4tyZBjJEfKLrLv/vxvj8gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpZigA2hX+slbQv7NKZib4/QU2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTAyZTY4YzctNjNjYy0z
ZjQ0LTk3Y2UtZGY0NWY4ZGEwNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlQzBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9oxVemYWSChER4LCTCUcmS5TmPRkMbNyQoEHhtKObhbCnP+K7hl5MV
926VmxsAYkAU8YV+MnKgN3Qp92Ys3SW7JAlAlxHD0oxNbP6kHBq9AwcZPjPsbHA8
8TjmNZqAnWbol05HBfX5bY7qE/OQ1JCThMY5CsktWIl8Erwe6l6uS0c3Ayd/RZk2
XbD2Wj0TDST/o8TXAvGOKw5fqcn384Im3l+dijPkdDjMg9UXR7wvHlzjRHxip2dz
Y1i3+fi2O2FHYF+y2988VlTUm26m5m8mpuYn6ikHKYkWR0aZkFkiprO0fnQEg8pI
AAbeSwT12tAfy8Ov9SeQGrgmCQsI4mg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:50:57 2026 by rpki-client