Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f43d3632-64ba-3056-a166-fe0b6067433c.roa
File:                     f43d3632-64ba-3056-a166-fe0b6067433c.roa (raw, json)
Hash identifier:          GQFnQcY9Ssyij+4FqWh+FSP5Zk6vwyFu9Pn/2ma/MPQ=
Subject key identifier:   F9:B2:E6:95:C8:D7:5E:C0:DA:DB:1F:C3:6B:34:33:8D:87:DE:97:06
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584EC9071A745811C0F64A8512C0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f43d3632-64ba-3056-a166-fe0b6067433c.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     213430
IP address blocks:        208.68.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1a:74:58:11:c0:f6:4a:85:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=60330228-a61c-4e84-af29-1ba41ca4f121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:dd:46:c7:db:8b:60:09:07:5d:d3:64:9b:
                    d2:c3:5a:b2:40:64:20:38:4a:41:f6:d8:95:56:15:
                    c4:67:41:21:af:31:d3:73:e7:ac:ef:39:17:f1:c1:
                    2b:58:ff:49:a2:65:35:dd:66:27:11:71:e6:8f:b8:
                    31:31:24:78:04:df:bf:33:02:1d:53:4e:a3:5c:64:
                    f0:40:ab:6c:8f:14:a8:e9:45:90:8a:cd:3b:94:5c:
                    97:ea:ac:67:c4:8a:97:08:8d:9e:76:3d:f9:01:8c:
                    b9:ed:e1:b5:cc:db:7a:a0:89:7f:28:d9:ed:06:4a:
                    21:83:ae:cc:ba:4f:ef:6f:a1:7d:43:3c:a0:c0:79:
                    45:52:11:8f:bc:1d:13:c9:35:5c:6a:d4:2d:6c:99:
                    b6:9b:64:85:98:76:67:8e:88:4c:e5:b6:7b:62:95:
                    b8:60:3e:bc:51:74:92:ff:00:69:85:70:93:65:05:
                    19:f9:ed:3b:35:7b:73:a2:e5:5f:d4:b4:80:33:21:
                    c3:be:f1:eb:45:d6:0f:9d:04:53:07:6b:a2:63:50:
                    ba:63:5e:a3:40:d4:ae:52:94:cb:00:77:52:2e:26:
                    fd:2b:a2:82:cd:4e:f5:14:02:ba:25:43:63:19:18:
                    cb:a3:6c:fa:6d:2f:70:6d:c7:7d:58:b9:4f:8b:65:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:E6:95:C8:D7:5E:C0:DA:DB:1F:C3:6B:34:33:8D:87:DE:97:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f43d3632-64ba-3056-a166-fe0b6067433c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:7d:51:9f:84:5b:0f:b0:28:d2:35:82:22:b7:f1:a2:51:
         fc:e1:6d:e3:92:b6:3d:b9:aa:84:57:24:42:b1:89:11:38:6e:
         ca:fb:9c:93:42:26:97:42:a6:ab:92:52:02:c6:44:53:47:10:
         71:f5:6d:1a:ab:4e:af:85:12:c3:d9:75:80:7e:ef:cd:b7:3d:
         72:66:6c:ab:c9:57:ec:61:f8:75:8d:52:f0:80:a5:b0:94:32:
         60:c7:20:f4:4b:c8:6c:d2:df:5c:21:73:9f:db:97:0d:08:4c:
         ed:48:54:72:0d:c6:4b:5e:63:c5:e1:29:ca:66:c4:da:e8:2f:
         36:49:c5:02:a8:09:a5:18:36:28:1f:f6:0c:11:73:57:54:10:
         d3:63:36:91:07:26:b5:93:d0:99:0f:a5:47:c1:fa:77:b2:ab:
         1b:02:d5:90:45:69:12:4b:22:a7:82:05:d7:aa:5a:88:5b:50:
         6a:29:0d:f2:9e:96:1c:47:cf:9a:80:fa:c6:92:e3:e7:92:09:
         25:87:2e:b5:e0:82:8a:5e:f8:ac:c8:a5:2f:ba:b4:af:22:e5:
         7d:ec:4d:9b:e9:4a:30:db:3a:7a:6b:01:7c:77:04:72:28:86:
         4e:3f:93:69:d3:ac:a1:e8:dd:22:b6:5e:6c:67:ff:d9:92:17:
         ff:21:40:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxp0WBHA9kqFEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
NjAzMzAyMjgtYTYxYy00ZTg0LWFmMjktMWJhNDFjYTRmMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ndRsfbi2AJB13TZJvSw1qyQGQgOEpB9tiV
VhXEZ0EhrzHTc+es7zkX8cErWP9JomU13WYnEXHmj7gxMSR4BN+/MwIdU06jXGTw
QKtsjxSo6UWQis07lFyX6qxnxIqXCI2edj35AYy57eG1zNt6oIl/KNntBkohg67M
uk/vb6F9QzygwHlFUhGPvB0TyTVcatQtbJm2m2SFmHZnjohM5bZ7YpW4YD68UXSS
/wBphXCTZQUZ+e07NXtzouVf1LSAMyHDvvHrRdYPnQRTB2uiY1C6Y16jQNSuUpTL
AHdSLib9K6KCzU71FAK6JUNjGRjLo2z6bS9wbcd9WLlPi2VD8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmy5pXI117A2tsfw2s0M42H3pcGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvZjQzZDM2MzItNjRiYS0z
MDU2LWExNjYtZmUwYjYwNjc0MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ES3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfdfVGfhFsPsCjSNYIit/GiUfzhbeOStj25qoRXJEKxiRE4bsr7nJNC
JpdCpquSUgLGRFNHEHH1bRqrTq+FEsPZdYB+7823PXJmbKvJV+xh+HWNUvCApbCU
MmDHIPRLyGzS31whc5/blw0ITO1IVHINxkteY8XhKcpmxNroLzZJxQKoCaUYNigf
9gwRc1dUENNjNpEHJrWT0JkPpUfB+neyqxsC1ZBFaRJLIqeCBdeqWohbUGopDfKe
lhxHz5qA+saS4+eSCSWHLrXggope+KzIpS+6tK8i5X3sTZvpSjDbOnprAXx3BHIo
hk4/k2nTrKHo3SK2Xmxn/9mSF/8hQFY=
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:11:05 2026 by rpki-client