Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa
File:                     db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa (raw, json)
Hash identifier:          zwoSnJmitKBwE1NUCVH9dfaIexCP1G2wYSLBCToMnfg=
Subject key identifier:   D4:6D:5D:98:D8:E2:CA:B1:1B:7E:C2:1C:B9:7A:3A:70:71:8D:DE:04
Certificate issuer:       /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
Certificate serial:       010D0C9F4328584EB2B1BA1FA2D35BD82AB3291C
Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     8075
IP address blocks:        198.245.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ba:1f:a2:d3:5b:d8:2a:b3:29:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f777e4d4-8c4c-4b88-92bc-dec5a62c7541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:4f:2e:31:27:12:40:90:6a:ff:80:3a:74:
                    43:36:ad:19:13:80:df:e2:85:63:8e:c7:93:60:20:
                    7f:d0:fc:95:0d:b8:21:b1:eb:f2:b7:3d:06:38:07:
                    0d:d2:87:c8:f5:5b:e5:9d:41:52:ca:04:f4:c4:40:
                    40:4d:dd:85:9d:ff:80:93:9e:7b:40:f1:e9:f9:8d:
                    7a:e5:70:b7:22:fc:14:2d:d1:f3:7d:1b:49:19:c5:
                    7e:dc:d4:8a:c7:b4:89:ec:3c:27:92:c5:37:04:34:
                    9d:ea:1a:68:28:97:e1:6f:2a:c0:61:74:04:2a:66:
                    06:00:86:90:a0:70:e4:bc:19:fa:83:40:2e:7d:17:
                    91:7e:99:29:26:80:6c:ac:50:47:b8:0a:81:ad:d0:
                    f1:3c:39:50:4f:0c:5e:71:a0:cf:7c:f8:97:db:d9:
                    75:63:cf:bd:6f:39:b7:e2:59:fa:7d:37:b7:52:27:
                    7d:b1:9d:c8:d5:46:52:68:cb:5a:35:43:5a:eb:bf:
                    df:4e:0b:ee:e0:a7:5e:e8:e0:f9:22:56:a3:55:66:
                    59:88:79:72:93:f8:a8:8d:be:8a:c7:de:47:0c:aa:
                    ef:f3:82:d4:25:ce:4c:7d:de:52:94:d7:fa:b3:b1:
                    4f:84:19:75:32:d9:a8:51:79:94:3d:3a:27:3a:f7:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:5D:98:D8:E2:CA:B1:1B:7E:C2:1C:B9:7A:3A:70:71:8D:DE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl

            X509v3 Authority Key Identifier:
                keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:34:d7:08:97:1b:ab:89:e9:95:07:02:27:27:1e:86:b8:
         c1:96:ec:aa:b4:e9:ff:de:a4:11:72:72:ad:ae:00:0d:6b:79:
         f8:8d:a6:1c:d8:03:94:fd:84:2a:bc:1f:33:33:ce:88:46:ed:
         4b:9a:f6:35:09:5c:82:bc:41:ba:9d:44:69:a9:43:8f:c0:b5:
         b4:53:b2:c7:70:2d:46:2c:9c:bb:df:f8:5e:a0:62:de:33:a6:
         2a:41:41:1c:3a:0e:2c:43:94:23:02:8d:31:05:3f:82:db:16:
         33:e6:2a:cc:3f:60:db:62:c7:5f:23:fe:54:30:dc:76:1b:ce:
         a7:8b:02:3c:f6:e6:f6:4f:f5:0e:4f:5a:6c:63:97:63:4b:8a:
         c7:da:ea:1a:dc:bd:f5:f7:55:e9:cf:d3:c8:90:d5:03:52:43:
         90:12:b2:9a:e9:6f:51:e6:e5:8c:d7:f1:0d:84:6b:13:89:87:
         50:76:c1:b8:d5:fd:3a:4c:74:27:08:3f:82:e9:ed:ff:c6:c0:
         14:fb:0f:f8:4d:aa:b5:2a:2e:d0:34:66:b4:2b:4d:0c:e1:ff:
         f6:5e:27:6b:35:e3:59:21:01:bd:ee:f6:aa:7a:b9:cb:a3:24:
         c1:cc:c2:1d:7c:51:b0:ab:a0:05:2e:10:43:6a:e7:9b:e7:5e:
         98:e7:43:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbofotNb2CqzKRwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYWY3Y2ItYmM4Mi00YTc4LWJhMGYtMmJhODhiNmQ5
Zjc0MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
Zjc3N2U0ZDQtOGM0Yy00Yjg4LTkyYmMtZGVjNWE2MmM3NTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS1PLjEnEkCQav+AOnRDNq0ZE4Df4oVjjseT
YCB/0PyVDbghsevytz0GOAcN0ofI9VvlnUFSygT0xEBATd2Fnf+Ak557QPHp+Y16
5XC3IvwULdHzfRtJGcV+3NSKx7SJ7DwnksU3BDSd6hpoKJfhbyrAYXQEKmYGAIaQ
oHDkvBn6g0AufReRfpkpJoBsrFBHuAqBrdDxPDlQTwxecaDPfPiX29l1Y8+9bzm3
4ln6fTe3Uid9sZ3I1UZSaMtaNUNa67/fTgvu4Kde6OD5IlajVWZZiHlyk/iojb6K
x95HDKrv84LUJc5Mfd5SlNf6s7FPhBl1MtmoUXmUPTonOvcfSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRtXZjY4sqxG37CHLl6OnBxjd4EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFh
ZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4OGI2ZDlmNzQvZGIzMzBjMzEtMWI2YS0z
MjUxLTliNzAtMGNlYjViZThjOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODExYWY3Y2ItYmM4Mi00YTc4LWJh
MGYtMmJhODhiNmQ5Zjc0LzgxMWFmN2NiLWJjODItNGE3OC1iYTBmLTJiYTg4YjZk
OWY3NC5jcmwwHwYDVR0jBBgwFoAUaBAzo6bjFx1WmzKvg7cn1rax/18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFhZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4
OGI2ZDlmNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvWuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHejNNcIlxuriemVBwInJx6GuMGW7Kq06f/epBFycq2uAA1refiNphzY
A5T9hCq8HzMzzohG7Uua9jUJXIK8QbqdRGmpQ4/AtbRTssdwLUYsnLvf+F6gYt4z
pipBQRw6DixDlCMCjTEFP4LbFjPmKsw/YNtix18j/lQw3HYbzqeLAjz25vZP9Q5P
Wmxjl2NLisfa6hrcvfX3VenP08iQ1QNSQ5ASsprpb1Hm5YzX8Q2EaxOJh1B2wbjV
/TpMdCcIP4Lp7f/GwBT7D/hNqrUqLtA0ZrQrTQzh//ZeJ2s141khAb3u9qp6ucuj
JMHMwh18UbCroAUuEENq55vnXpjnQ7U=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:08:51 2026 by rpki-client