Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa
File:                     b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa (raw, json)
Hash identifier:          P6spOO+8+zsTzLe5kNV1T7Dn4zSy4TSQA/g39rC0WR4=
Subject key identifier:   31:6E:4E:32:D4:B6:33:95:F9:8D:3C:80:4B:53:71:57:19:33:D7:A4
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584F82ADBD1EBB44BC7E9525E5A1
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     19257
IP address blocks:        162.222.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:bd:1e:bb:44:bc:7e:95:25:e5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=c6b4d8fb-1187-4811-b675-69b28c8faf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:c4:5c:ab:5a:a7:31:5a:98:ee:74:1c:74:
                    d5:c0:4d:db:bf:fd:38:ed:78:18:91:c0:99:3f:c2:
                    3e:a4:d8:16:19:50:14:b0:c2:51:e1:c0:26:03:a5:
                    20:a0:19:83:54:04:9f:33:13:71:3c:e9:9a:61:27:
                    d2:93:4c:3b:ca:b0:b6:1d:4f:b3:76:da:d7:ff:48:
                    af:24:60:a9:13:85:66:ff:16:3c:2e:a5:f8:0a:ee:
                    72:33:b9:4a:97:2c:6c:ec:96:72:88:fe:8b:f1:40:
                    0d:11:c1:04:86:32:79:f5:f6:3d:d2:4c:24:0e:bf:
                    95:74:0d:0a:ec:e6:55:b7:34:b1:0f:24:5a:b3:b7:
                    45:cf:9e:20:fb:d8:b7:15:42:48:ae:15:f3:be:f1:
                    ee:cd:0d:6b:3e:5b:ea:a1:25:49:06:4b:d7:b8:59:
                    17:50:81:74:4c:80:d1:53:8e:a6:28:a7:d2:29:3e:
                    95:fe:04:e4:34:07:dd:64:42:b8:e8:34:6d:cc:2d:
                    5d:ab:fe:71:e6:8f:c6:40:f0:4f:40:99:52:14:9d:
                    50:45:98:2a:0f:b1:3e:94:87:75:0a:08:1a:23:15:
                    cd:fb:48:e3:89:f4:25:95:17:d2:21:a7:73:73:20:
                    df:ba:8c:29:2a:7d:65:b4:6c:15:4d:f3:31:bc:6e:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:4E:32:D4:B6:33:95:F9:8D:3C:80:4B:53:71:57:19:33:D7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d9:a0:a0:d1:1d:a2:03:8b:98:69:d7:9a:6f:dc:84:eb:0c:
         25:82:9f:27:d7:1f:78:5b:47:29:ad:54:a8:2b:34:b0:ea:9c:
         1f:91:cf:06:76:51:4d:57:35:d1:d8:fa:4f:5d:95:48:e1:fb:
         62:76:03:5f:e7:d5:32:5e:8f:77:35:5b:0c:70:4d:5c:3e:9c:
         6c:df:fe:f3:f7:99:31:33:38:83:da:a0:94:5f:f1:13:90:25:
         58:f3:1b:82:29:1a:8d:4c:0a:b6:fa:e7:ca:ff:f2:5d:20:8a:
         9d:ab:b2:c9:69:7d:0e:a1:92:d0:61:4e:19:22:7b:13:2f:e4:
         e8:07:7a:de:d8:c7:6e:5e:20:ef:97:60:ba:8b:8c:86:f8:87:
         a5:72:2f:ee:87:43:58:7f:64:d6:e9:31:1b:00:ff:8f:b1:b9:
         df:08:7d:58:cc:5a:c1:e4:27:54:a4:0c:b0:07:1e:43:45:5c:
         b4:83:8a:80:42:f5:52:03:f1:43:e0:11:13:11:f8:45:75:95:
         65:9a:74:33:c2:67:8a:13:cc:61:c3:33:72:f7:c2:d7:11:fb:
         0f:a8:1a:9f:b2:fa:b9:f8:35:36:63:59:a4:c8:dc:7a:10:d9:
         f4:8b:a1:33:ba:bb:95:17:66:60:53:a5:1a:1c:86:31:b3:6d:
         e3:32:8e:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Crb0eu0S8fpUl5aEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
YzZiNGQ4ZmItMTE4Ny00ODExLWI2NzUtNjliMjhjOGZhZjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3zEXKtapzFamO50HHTVwE3bv/047XgYkcCZ
P8I+pNgWGVAUsMJR4cAmA6UgoBmDVASfMxNxPOmaYSfSk0w7yrC2HU+zdtrX/0iv
JGCpE4Vm/xY8LqX4Cu5yM7lKlyxs7JZyiP6L8UANEcEEhjJ59fY90kwkDr+VdA0K
7OZVtzSxDyRas7dFz54g+9i3FUJIrhXzvvHuzQ1rPlvqoSVJBkvXuFkXUIF0TIDR
U46mKKfSKT6V/gTkNAfdZEK46DRtzC1dq/5x5o/GQPBPQJlSFJ1QRZgqD7E+lId1
CggaIxXN+0jjifQllRfSIadzcyDfuowpKn1ltGwVTfMxvG5fbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFuTjLUtjOV+Y08gEtTcVcZM9ekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvYjUyMDY5NWQtOTdjYy0z
ZWFmLTkxNWQtZjg0YmIyZTE2ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKnZoKDRHaIDi5hp15pv3ITrDCWCnyfXH3hbRymtVKgrNLDqnB+RzwZ2
UU1XNdHY+k9dlUjh+2J2A1/n1TJej3c1WwxwTVw+nGzf/vP3mTEzOIPaoJRf8ROQ
JVjzG4IpGo1MCrb658r/8l0gip2rsslpfQ6hktBhThkiexMv5OgHet7Yx25eIO+X
YLqLjIb4h6VyL+6HQ1h/ZNbpMRsA/4+xud8IfVjMWsHkJ1SkDLAHHkNFXLSDioBC
9VID8UPgERMR+EV1lWWadDPCZ4oTzGHDM3L3wtcR+w+oGp+y+rn4NTZjWaTI3HoQ
2fSLoTO6u5UXZmBTpRochjGzbeMyjoE=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:17:48 2026 by rpki-client