Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2586b4ee-ba0d-3f28-a97a-c4ff0afc2191.roa
File:                     2586b4ee-ba0d-3f28-a97a-c4ff0afc2191.roa (raw, json)
Hash identifier:          HCy3m02EkVC5WcNQgOn2yIvnJHCp+9cE615bJrCFGaY=
Subject key identifier:   C1:4B:37:10:62:03:08:88:4F:5E:83:BE:8D:D3:6F:96:87:C9:8E:17
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F6C581B4E25BF31997685B580
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2586b4ee-ba0d-3f28-a97a-c4ff0afc2191.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     63023
IP address blocks:        216.106.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:1b:4e:25:bf:31:99:76:85:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=7fde913c-9223-46de-820c-ddf74e631ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:33:95:5e:85:71:91:a2:ed:63:d2:5a:6f:
                    cc:f7:44:93:3d:d9:b4:05:04:2c:1f:07:3a:1b:81:
                    fe:55:03:0d:78:e0:5f:1a:d5:e2:38:c0:85:4e:f7:
                    51:37:7b:b1:0a:f0:98:37:80:75:e4:0b:02:b0:da:
                    67:6f:d8:53:64:b1:6a:7d:82:99:b2:91:d5:8e:23:
                    d2:57:c8:3e:67:d8:7c:b2:ba:7c:89:dd:96:50:9b:
                    95:4c:fc:4b:59:00:8c:61:f2:c4:b3:b0:6a:65:4f:
                    f4:45:a9:e6:6d:59:0e:58:a2:4d:a1:fc:6a:16:b4:
                    cc:90:76:b9:81:30:32:48:67:31:33:26:6f:b6:0c:
                    34:3a:5e:fa:80:3b:58:e6:ca:4e:16:53:a4:a4:08:
                    73:0a:1e:20:b6:13:b3:c4:1d:bb:b3:7c:84:bf:48:
                    14:3e:a8:c2:54:fa:2c:b9:a3:ff:b4:04:d8:9b:64:
                    a6:f7:8f:6a:ba:26:4b:f3:f7:61:64:df:6d:2d:60:
                    a3:ed:1f:3d:2e:18:4d:c1:3a:71:4a:0b:85:57:50:
                    29:4f:cd:17:65:a5:09:32:fd:c5:6f:9b:b4:69:19:
                    f6:68:12:de:61:36:01:0d:79:b9:13:95:81:f4:02:
                    91:1f:53:be:08:03:66:df:e7:24:04:53:32:09:4c:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4B:37:10:62:03:08:88:4F:5E:83:BE:8D:D3:6F:96:87:C9:8E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2586b4ee-ba0d-3f28-a97a-c4ff0afc2191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:e1:a5:48:45:2f:ef:1e:71:33:e3:ba:0a:b2:11:1c:0f:
         36:bd:ac:e4:2a:91:dd:ec:40:d3:03:3a:cd:ad:36:d2:b3:68:
         4d:dc:04:58:e8:86:6c:8c:b5:72:37:da:0d:13:e2:4a:9f:4f:
         e5:0e:17:e4:96:6e:7d:84:7a:66:6e:3d:59:10:74:19:20:c2:
         4e:ff:71:58:8b:4b:a4:3e:89:6e:99:ce:45:3d:13:b0:40:50:
         ab:a8:43:5d:9e:bb:d1:e2:81:10:36:ad:f6:10:6a:d3:8d:20:
         3a:44:27:d7:13:ab:97:d3:66:e9:6b:0c:11:05:c3:86:31:f4:
         5f:3f:a6:f9:ec:96:2a:7e:39:88:19:7a:dd:86:f1:6d:c3:0b:
         5b:d4:27:62:8c:f8:5a:f9:89:ef:2e:58:92:7c:fe:b0:fd:dc:
         e0:06:b2:ce:14:52:a1:93:5f:ca:67:73:f2:00:b9:22:29:fc:
         85:12:31:96:1b:fe:f3:2e:c5:47:34:69:66:32:68:4c:a8:98:
         29:f1:1d:93:92:e5:52:52:ac:45:59:e4:f6:cc:07:e2:e1:ae:
         3d:2c:87:62:c0:5c:a7:0f:16:0a:2c:5e:ab:29:a6:b1:a3:d2:
         4f:d3:e1:d4:ba:c4:b4:94:b5:f7:b6:06:fa:1a:e4:85:ee:d5:
         98:fe:88:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBtOJb8xmXaFtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
N2ZkZTkxM2MtOTIyMy00NmRlLTgyMGMtZGRmNzRlNjMxYWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxAzlV6FcZGi7WPSWm/M90STPdm0BQQsHwc6
G4H+VQMNeOBfGtXiOMCFTvdRN3uxCvCYN4B15AsCsNpnb9hTZLFqfYKZspHVjiPS
V8g+Z9h8srp8id2WUJuVTPxLWQCMYfLEs7BqZU/0RanmbVkOWKJNofxqFrTMkHa5
gTAySGcxMyZvtgw0Ol76gDtY5spOFlOkpAhzCh4gthOzxB27s3yEv0gUPqjCVPos
uaP/tATYm2Sm949quiZL8/dhZN9tLWCj7R89LhhNwTpxSguFV1ApT80XZaUJMv3F
b5u0aRn2aBLeYTYBDXm5E5WB9AKRH1O+CANm3+ckBFMyCUzRoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFLNxBiAwiIT16Dvo3Tb5aHyY4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMjU4NmI0ZWUtYmEwZC0z
ZjI4LWE5N2EtYzRmZjBhZmMyMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GqzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8E4aVIRS/vHnEz47oKshEcDza9rOQqkd3sQNMDOs2tNtKzaE3cBFjo
hmyMtXI32g0T4kqfT+UOF+SWbn2EemZuPVkQdBkgwk7/cViLS6Q+iW6ZzkU9E7BA
UKuoQ12eu9HigRA2rfYQatONIDpEJ9cTq5fTZulrDBEFw4Yx9F8/pvnslip+OYgZ
et2G8W3DC1vUJ2KM+Fr5ie8uWJJ8/rD93OAGss4UUqGTX8pnc/IAuSIp/IUSMZYb
/vMuxUc0aWYyaEyomCnxHZOS5VJSrEVZ5PbMB+Lhrj0sh2LAXKcPFgosXqspprGj
0k/T4dS6xLSUtfe2Bvoa5IXu1Zj+iDg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:23:20 2026 by rpki-client