Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/22b2ddde-5069-3d67-b0ce-1329f181a3fa.roa
File:                     22b2ddde-5069-3d67-b0ce-1329f181a3fa.roa (raw, json)
Hash identifier:          xUItdeoTNz0s7P9lieK0/Sfy5nPlVMh4RRusMHGjgkY=
Subject key identifier:   A8:E3:5D:6E:7A:C0:E1:DD:DC:6C:E9:01:29:C8:A3:01:4B:0D:4C:3B
Certificate issuer:       /CN=f2560405-675d-4c58-8230-db678dbdf9bb
Certificate serial:       010D0C9F4328584F6F22F87CD9551EC503D61D60
Authority key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/22b2ddde-5069-3d67-b0ce-1329f181a3fa.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        140.232.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f8:7c:d9:55:1e:c5:03:d6:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2560405-675d-4c58-8230-db678dbdf9bb
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=3e6a416f-77e3-472c-9494-73ebd0c28345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:98:43:0b:83:72:32:f2:97:8d:bf:28:ee:
                    5e:15:d5:10:10:04:f2:f8:f6:37:16:ab:34:11:94:
                    37:05:2e:45:ef:b0:2b:a8:7a:81:c5:2b:b0:6a:c2:
                    99:b5:a2:50:87:50:41:ce:d2:22:ca:d5:d2:9d:6a:
                    05:bb:ff:51:f3:a8:8b:fb:73:cb:a8:c5:30:4e:4f:
                    84:19:23:80:75:07:1f:60:3d:b3:70:aa:c8:51:54:
                    93:14:e6:22:d9:11:fb:59:52:40:46:ce:9b:93:0c:
                    fd:38:cf:6e:c6:87:ca:1b:17:62:64:b5:2e:cf:01:
                    d7:39:ba:8b:4c:c2:94:76:ce:2f:9a:4b:56:12:30:
                    b7:2b:11:c0:8a:cf:4d:2f:1c:25:1d:1e:80:ab:e4:
                    2d:6d:bc:d9:b8:e2:ff:a0:1a:14:52:a5:50:e3:0d:
                    1c:92:86:47:c3:ee:36:f7:00:5f:ed:42:5b:ac:5d:
                    6d:66:47:86:6d:ee:37:81:05:1f:63:a7:06:79:1d:
                    49:05:72:e1:cf:1f:42:2d:a8:25:21:ea:97:c4:49:
                    81:03:9e:ec:40:0a:5e:eb:09:2e:63:f3:02:98:47:
                    2a:1a:57:42:3d:73:3a:4d:00:56:26:03:a2:a7:af:
                    32:91:ca:96:a6:98:0f:f7:e4:c1:eb:9e:32:5b:51:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:5D:6E:7A:C0:E1:DD:DC:6C:E9:01:29:C8:A3:01:4B:0D:4C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/22b2ddde-5069-3d67-b0ce-1329f181a3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:7d:20:59:3b:6e:72:7f:54:5e:27:5e:36:1b:f1:72:b3:
         db:d1:83:05:f9:42:7d:56:4e:bc:b5:8d:bc:b1:b7:5b:8d:ee:
         52:cf:fa:ab:e6:28:7f:be:ff:e3:a9:76:53:2e:a2:bd:91:22:
         8e:fb:9a:27:a7:73:b0:57:4b:db:aa:36:6f:d8:71:e2:9c:58:
         60:94:4c:76:4c:c9:5d:58:e7:0b:c6:65:7b:8f:bc:ab:b4:d6:
         e0:74:0d:5f:71:98:a7:6e:70:f2:9d:89:ff:87:6e:41:58:ed:
         97:ae:1c:31:cc:db:d3:9d:e0:f0:02:30:ff:c3:83:18:41:43:
         a0:71:db:72:3c:10:02:b7:0b:5d:45:e3:03:2f:70:87:c9:59:
         eb:8c:b3:ce:0e:85:b9:ef:d3:2b:78:0d:c7:8a:8e:8a:fd:b0:
         bd:6b:cc:e7:72:31:81:8f:5a:ba:e2:00:1c:32:19:69:fe:58:
         e5:b7:4f:97:73:27:39:e6:e3:83:2c:86:49:c7:51:ba:ac:d1:
         85:2c:74:77:23:0c:0f:31:ea:2e:0c:9e:32:cd:95:08:d2:c1:
         94:ef:2e:ed:e0:a3:a4:ca:3c:28:a1:08:d3:26:03:d2:cf:57:
         8c:92:d0:6c:d7:e9:97:b6:7b:61:32:5b:98:33:97:28:7b:e7:
         1e:35:c2:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvh82VUexQPWHWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1NjA0MDUtNjc1ZC00YzU4LTgyMzAtZGI2NzhkYmRm
OWJiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
M2U2YTQxNmYtNzdlMy00NzJjLTk0OTQtNzNlYmQwYzI4MzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijCYQwuDcjLyl42/KO5eFdUQEATy+PY3Fqs0
EZQ3BS5F77ArqHqBxSuwasKZtaJQh1BBztIiytXSnWoFu/9R86iL+3PLqMUwTk+E
GSOAdQcfYD2zcKrIUVSTFOYi2RH7WVJARs6bkwz9OM9uxofKGxdiZLUuzwHXObqL
TMKUds4vmktWEjC3KxHAis9NLxwlHR6Aq+QtbbzZuOL/oBoUUqVQ4w0ckoZHw+42
9wBf7UJbrF1tZkeGbe43gQUfY6cGeR1JBXLhzx9CLaglIeqXxEmBA57sQApe6wku
Y/MCmEcqGldCPXM6TQBWJgOip68ykcqWppgP9+TB654yW1HIyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjjXW56wOHd3GzpASnIowFLDUw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMjU2
MDQwNS02NzVkLTRjNTgtODIzMC1kYjY3OGRiZGY5YmIvMjJiMmRkZGUtNTA2OS0z
ZDY3LWIwY2UtMTMyOWYxODFhM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjI1NjA0MDUtNjc1ZC00YzU4LTgy
MzAtZGI2NzhkYmRmOWJiL2YyNTYwNDA1LTY3NWQtNGM1OC04MjMwLWRiNjc4ZGJk
ZjliYi5jcmwwHwYDVR0jBBgwFoAUqDNFuizPy4w0BWiPNi0bRnU4PNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMjU2MDQwNS02NzVkLTRjNTgtODIzMC1kYjY3
OGRiZGY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJbfSBZO25yf1ReJ142G/Fys9vRgwX5Qn1WTry1jbyxt1uN7lLP+qvm
KH++/+OpdlMuor2RIo77mienc7BXS9uqNm/YceKcWGCUTHZMyV1Y5wvGZXuPvKu0
1uB0DV9xmKducPKdif+HbkFY7ZeuHDHM29Od4PACMP/DgxhBQ6Bx23I8EAK3C11F
4wMvcIfJWeuMs84Ohbnv0yt4DceKjor9sL1rzOdyMYGPWrriABwyGWn+WOW3T5dz
Jznm44MshknHUbqs0YUsdHcjDA8x6i4MnjLNlQjSwZTvLu3go6TKPCihCNMmA9LP
V4yS0GzX6Ze2e2EyW5gzlyh75x41wsE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:14:07 2026 by rpki-client