Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa
File:                     829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (raw, json)
Hash identifier:          ahXHq4hN/k3FQ3EFpzlE+V3yzKMH3ooBThL5TdBZ3Ms=
Subject key identifier:   58:27:F4:22:64:A4:D5:41:56:CD:89:FF:8D:25:F2:C5:6A:80:84:9C
Certificate issuer:       /CN=4e84d19a-da77-4951-9413-0914c81e76e1
Certificate serial:       010D0C9F4328584F5A331C38FD6C8F27F742FB40
Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     8987
IP address blocks:        64.190.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:1c:38:fd:6c:8f:27:f7:42:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=a797052e-7805-4a34-be4f-1123f1339007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:a4:80:fd:b1:8f:33:32:ad:17:be:5b:37:
                    1a:a3:ec:fb:1c:0f:a1:2b:53:36:b0:76:82:4a:a7:
                    4a:8e:bf:65:dd:6c:42:24:e5:11:59:33:9a:0a:38:
                    2d:ef:a2:78:8f:ca:e1:2a:90:43:e5:53:11:46:92:
                    fa:c6:9d:13:b6:52:00:0f:22:7f:24:20:b2:fb:74:
                    17:aa:c1:97:76:ec:92:58:ca:0d:10:ee:83:66:88:
                    d6:4e:b9:3c:4d:1c:b5:09:a1:36:6a:36:b2:5b:6f:
                    8d:6c:38:4b:ca:e0:63:77:67:e4:18:bc:2c:c3:b0:
                    9b:72:c2:26:fa:f3:53:33:91:77:ea:a9:9c:f2:75:
                    19:5d:e4:d6:4e:7a:80:2b:65:fc:40:39:a7:77:04:
                    b0:00:0a:68:7c:09:01:dc:11:4a:4f:f9:4d:87:80:
                    cb:0c:58:a4:eb:b3:d1:50:12:66:5b:3e:5f:65:71:
                    44:03:d0:f7:e3:69:4d:01:f6:08:04:d9:2d:be:d7:
                    24:55:7d:6a:06:79:f4:66:78:23:1a:93:d1:e5:72:
                    66:72:71:64:30:b7:89:d8:64:e4:84:f2:16:a2:c6:
                    00:ab:d0:78:be:a1:62:a9:1a:29:8a:a3:8d:89:a7:
                    8a:3e:12:05:90:f8:b8:96:79:41:f8:ef:e9:aa:c9:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:F4:22:64:A4:D5:41:56:CD:89:FF:8D:25:F2:C5:6A:80:84:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:8b:de:30:d4:ea:60:34:6e:93:33:92:be:5e:de:49:b5:
         fd:6f:ae:cb:10:7f:4b:18:7c:f8:ea:0f:79:b7:1e:cc:57:53:
         14:ce:73:52:1e:66:a9:b7:6f:ef:fb:c0:5d:26:6c:9e:93:82:
         ba:a0:8d:7e:e9:bf:51:02:2d:cf:1f:63:08:11:10:ca:7f:93:
         b5:5c:74:e3:b1:6f:37:6f:4a:a3:d9:cb:18:46:b0:c5:f8:15:
         77:0c:43:85:98:f5:28:7e:ce:9d:d1:2a:2b:e5:12:bc:73:01:
         34:c8:82:88:cd:aa:95:68:14:54:3d:fe:83:45:83:dd:7d:99:
         ca:01:b6:94:08:d0:2a:dc:65:b2:8d:6b:51:24:6f:ec:ff:e7:
         8f:4f:38:ee:62:8a:75:df:46:c5:c3:75:5d:a8:89:e1:e5:43:
         ef:0f:6a:19:49:28:b6:cc:28:25:13:c6:1a:6a:3e:16:f4:b1:
         43:45:f4:00:18:f7:86:a7:08:30:05:5d:ac:63:d6:0c:e6:38:
         5b:29:93:df:ce:5e:86:ec:19:01:81:b2:19:7e:ec:bd:b3:ad:
         c9:5f:66:b2:4c:ed:12:27:35:c6:7d:a1:be:de:e2:ab:ed:83:
         6b:fa:65:45:a4:af:04:c9:a7:3e:e4:18:fe:d5:d4:5e:e4:f4:
         c5:5b:09:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxw4/WyPJ/dC+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3
NmUxMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YTc5NzA1MmUtNzgwNS00YTM0LWJlNGYtMTEyM2YxMzM5MDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK6kgP2xjzMyrRe+Wzcao+z7HA+hK1M2sHaC
SqdKjr9l3WxCJOURWTOaCjgt76J4j8rhKpBD5VMRRpL6xp0TtlIADyJ/JCCy+3QX
qsGXduySWMoNEO6DZojWTrk8TRy1CaE2ajayW2+NbDhLyuBjd2fkGLwsw7CbcsIm
+vNTM5F36qmc8nUZXeTWTnqAK2X8QDmndwSwAApofAkB3BFKT/lNh4DLDFik67PR
UBJmWz5fZXFEA9D342lNAfYIBNktvtckVX1qBnn0ZngjGpPR5XJmcnFkMLeJ2GTk
hPIWosYAq9B4vqFiqRopiqONiaeKPhIFkPi4lnlB+O/pqsmXNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgn9CJkpNVBVs2J/40l8sVqgIScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0
ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvODI5MTIxYmItYWQ2Yy0z
YmRiLWE4YTQtZWJhNGEyYjk1MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0
MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl
NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0
YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2oi94w1OpgNG6TM5K+Xt5Jtf1vrssQf0sYfPjqD3m3HsxXUxTOc1Ie
Zqm3b+/7wF0mbJ6TgrqgjX7pv1ECLc8fYwgREMp/k7VcdOOxbzdvSqPZyxhGsMX4
FXcMQ4WY9Sh+zp3RKivlErxzATTIgojNqpVoFFQ9/oNFg919mcoBtpQI0CrcZbKN
a1Ekb+z/549POO5iinXfRsXDdV2oieHlQ+8PahlJKLbMKCUTxhpqPhb0sUNF9AAY
94anCDAFXaxj1gzmOFspk9/OXobsGQGBshl+7L2zrclfZrJM7RInNcZ9ob7e4qvt
g2v6ZUWkrwTJpz7kGP7V1F7k9MVbCbo=
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:25:18 2026 by rpki-client