Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57eabb15-5213-3bf0-bf87-1fbfb09d6213.roa
File:                     57eabb15-5213-3bf0-bf87-1fbfb09d6213.roa (raw, json)
Hash identifier:          LCSwolt9pmsTa/4il5XSYJzCZLE+S7q56fUa2FfqY4k=
Subject key identifier:   83:B2:F9:F4:78:6D:EE:B9:78:2E:4D:CF:D8:5B:2B:B0:F5:AB:F6:12
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584F4F07FE23CD4FE311BF354F00
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57eabb15-5213-3bf0-bf87-1fbfb09d6213.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     18705
IP address blocks:        68.171.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:fe:23:cd:4f:e3:11:bf:35:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=7dc96f7d-d2a0-4539-92a9-96a4622f5ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:4c:b1:19:dd:4b:63:6d:84:5e:c1:10:35:
                    fe:6e:75:78:85:69:24:78:2a:52:4c:46:57:ae:af:
                    f4:27:63:7e:93:d1:82:53:6f:6b:65:34:6d:96:6e:
                    72:25:40:b5:ad:bd:f3:e5:ce:23:b5:fb:13:a0:bd:
                    de:e7:ab:b7:34:34:a4:1d:06:02:7a:a9:c0:e2:ea:
                    a4:ee:c8:6c:7a:49:a3:44:86:e5:35:94:1e:62:4f:
                    3b:de:13:ff:04:85:67:fc:87:da:b2:0e:ef:28:2e:
                    d6:d9:c2:b3:d8:9a:b5:9a:3b:23:3a:88:f8:69:33:
                    e6:7c:4e:bb:a3:0a:48:99:b4:d6:81:93:44:43:f9:
                    27:30:fe:cf:87:cc:23:90:70:b3:d4:42:53:8c:2a:
                    26:e0:2e:f1:5b:8d:db:1f:57:13:96:32:c3:2c:98:
                    1c:d4:b5:93:07:8b:11:75:2d:4e:eb:4d:f1:92:b4:
                    6f:c8:4f:b4:25:df:51:26:9f:08:0c:66:35:fb:a3:
                    29:ed:c7:39:4b:16:85:ea:a9:36:a2:de:84:a4:24:
                    70:32:99:bc:8e:e9:25:36:81:f7:27:1f:1c:e3:c1:
                    90:a1:99:80:7f:09:03:9d:57:f0:c1:98:fc:0f:fb:
                    43:8d:6e:42:11:25:ce:b0:99:af:98:26:60:f1:4e:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B2:F9:F4:78:6D:EE:B9:78:2E:4D:CF:D8:5B:2B:B0:F5:AB:F6:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/57eabb15-5213-3bf0-bf87-1fbfb09d6213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.171.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:73:ca:cd:46:10:79:f7:fa:59:d0:d7:a9:88:d7:3f:2a:9b:
         2a:ca:b3:58:fc:1e:e9:5d:ba:e2:a2:93:d3:80:9e:22:20:60:
         dc:54:39:2b:40:7e:4b:0e:05:c8:9f:e2:05:47:c1:2b:90:ea:
         6c:4f:85:3b:5e:24:bc:e7:ff:00:dd:4c:19:d5:07:4d:13:eb:
         c0:fd:45:98:ff:74:04:6c:2f:36:c8:33:a7:78:dc:80:06:0d:
         ef:c9:aa:f2:52:d7:30:5c:f4:d3:b7:4f:c5:e5:6d:a5:82:d2:
         2d:f1:9e:85:0e:36:ff:82:fe:8c:d0:3f:f9:0d:a9:5e:ef:8e:
         7e:08:85:fd:08:5f:db:a8:16:6b:8a:38:54:76:91:e2:73:c0:
         dd:c5:4e:4f:57:b3:f3:d5:83:04:d2:35:1e:10:26:67:47:a6:
         cb:2e:de:d1:f1:44:7f:9b:19:79:a8:2c:fc:f4:f7:30:50:0a:
         98:04:62:87:bf:17:94:a6:3d:19:31:7e:36:1b:40:91:8c:fe:
         ff:dc:b5:93:5f:56:7a:41:3d:85:f3:bd:69:6b:c1:3b:c4:0c:
         b4:8c:e8:28:8f:ac:54:5a:ed:2b:6e:c2:8d:24:9a:5f:5f:0a:
         a0:df:47:3f:a8:4d:94:bc:de:25:f0:2b:65:54:46:f6:27:1b:
         f3:2e:5e:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/4jzU/jEb81TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5
MDVkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
N2RjOTZmN2QtZDJhMC00NTM5LTkyYTktOTZhNDYyMmY1ZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/5MsRndS2NthF7BEDX+bnV4hWkkeCpSTEZX
rq/0J2N+k9GCU29rZTRtlm5yJUC1rb3z5c4jtfsToL3e56u3NDSkHQYCeqnA4uqk
7shsekmjRIblNZQeYk873hP/BIVn/Ifasg7vKC7W2cKz2Jq1mjsjOoj4aTPmfE67
owpImbTWgZNEQ/knMP7Ph8wjkHCz1EJTjCom4C7xW43bH1cTljLDLJgc1LWTB4sR
dS1O603xkrRvyE+0Jd9RJp8IDGY1+6Mp7cc5SxaF6qk2ot6EpCRwMpm8juklNoH3
Jx8c48GQoZmAfwkDnVfwwZj8D/tDjW5CESXOsJmvmCZg8U5eUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOy+fR4be65eC5Nz9hbK7D1q/YSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk
OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvNTdlYWJiMTUtNTIxMy0z
YmYwLWJmODctMWZiZmIwOWQ2MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw
MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk
OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz
NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlzys1GEHn3+lnQ16mI1z8qmyrKs1j8HulduuKik9OAniIgYNxUOStA
fksOBcif4gVHwSuQ6mxPhTteJLzn/wDdTBnVB00T68D9RZj/dARsLzbIM6d43IAG
De/JqvJS1zBc9NO3T8XlbaWC0i3xnoUONv+C/ozQP/kNqV7vjn4Ihf0IX9uoFmuK
OFR2keJzwN3FTk9Xs/PVgwTSNR4QJmdHpssu3tHxRH+bGXmoLPz09zBQCpgEYoe/
F5SmPRkxfjYbQJGM/v/ctZNfVnpBPYXzvWlrwTvEDLSM6CiPrFRa7Stuwo0kml9f
CqDfRz+oTZS83iXwK2VURvYnG/MuXq4=
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:42:02 2026 by rpki-client