Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/45c2b81a-c74f-3def-adac-08b6fe38e587.roa
File:                     45c2b81a-c74f-3def-adac-08b6fe38e587.roa (raw, json)
Hash identifier:          K7/42AzAsDGAWtu3QYZ+ig33Wevk/q0rsArKzEDyjLQ=
Subject key identifier:   BF:0F:67:20:77:00:14:1B:AE:2A:95:C4:0C:EF:D0:65:70:46:DF:75
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584F70882300BFC045DF62C38040
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/45c2b81a-c74f-3def-adac-08b6fe38e587.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     2675
IP address blocks:        205.194.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:23:00:bf:c0:45:df:62:c3:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=d7ec5810-4826-41a9-bad0-68ee9477bb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:86:5e:2f:b7:9c:fd:0e:91:be:a1:44:9e:
                    ca:48:4b:c1:41:1d:c9:e7:c6:a6:6e:dd:18:8a:8d:
                    a0:6b:24:07:e3:e8:d6:33:e1:05:d4:54:fd:ec:33:
                    f5:d8:80:6d:b2:61:a3:f8:10:55:05:4c:ea:ed:03:
                    12:30:71:6c:77:3b:c5:29:69:83:9f:2f:7e:ab:a6:
                    c7:db:9f:5a:5d:71:37:8a:c6:69:a3:7b:ca:71:4b:
                    8b:5b:e7:e8:52:10:88:fd:98:fe:0d:f0:00:68:18:
                    37:43:d9:b3:d8:a0:6b:a1:9b:e5:8a:41:41:cd:7f:
                    a7:44:9d:74:14:bd:d6:4b:34:fe:b6:1c:6e:8f:f0:
                    67:52:8c:67:0c:c8:3d:c4:f7:af:95:24:20:1a:d7:
                    a8:55:f3:4e:1c:b9:98:dd:23:a5:92:35:69:6a:c3:
                    db:d1:ca:73:8d:ed:cd:23:f1:52:63:40:8f:bd:53:
                    67:03:a1:b8:a1:9e:8f:59:ab:02:11:db:26:09:87:
                    95:1f:5c:0c:f5:00:a3:7a:06:14:dc:a3:27:a6:5e:
                    f0:23:07:76:42:d3:42:44:41:22:a5:51:f0:b1:eb:
                    ac:86:33:94:08:77:50:fd:02:dc:57:91:8d:8b:28:
                    3f:3a:86:63:46:27:ec:d9:e8:39:a1:b7:17:f3:7c:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:67:20:77:00:14:1B:AE:2A:95:C4:0C:EF:D0:65:70:46:DF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/45c2b81a-c74f-3def-adac-08b6fe38e587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:44:81:f4:cb:33:6f:9e:77:e9:0e:c3:ec:be:bc:bc:2d:
         f3:95:f0:ee:a0:fd:21:c1:69:f7:18:e2:2f:6e:e0:e5:e5:3d:
         bd:6e:28:6b:5b:b6:45:aa:67:c9:8a:5b:8d:ab:a9:3a:61:b5:
         2f:43:31:53:0d:75:4f:c1:b6:98:05:62:2b:fc:8a:00:33:cc:
         9a:88:ff:5a:35:38:0a:52:7a:e4:7e:b3:5e:6b:d6:a7:39:a8:
         57:4e:e5:f5:be:8f:49:ff:93:22:2b:e4:34:46:db:57:f6:03:
         9a:75:b4:d0:51:d0:58:6b:4f:6b:a5:83:bc:9a:83:97:87:9b:
         77:ed:a9:b3:1c:fd:9d:b1:21:d3:2a:83:ac:a8:2a:17:3f:53:
         ad:a0:11:60:b6:32:d0:25:9d:b8:b4:5b:8c:3a:19:80:c6:c5:
         f4:8a:ad:56:1a:fd:c4:31:4b:99:f6:b2:ec:65:6d:ed:81:a0:
         b9:d1:f7:3a:60:4f:3a:64:5e:50:06:ba:be:68:03:a5:d8:25:
         11:6c:01:b7:b8:01:25:c5:69:cd:71:70:d8:09:0c:a1:30:9e:
         46:3f:70:b0:a5:8c:71:c5:d2:06:70:ba:18:dc:7a:3c:d2:3a:
         37:be:c0:b3:f4:73:51:7d:de:77:07:b6:c4:d1:35:ea:5e:85:
         4c:0e:d1:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCMAv8BF32LDgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVhOTVjOWYtYzVjMS00YTM2LWE3M2YtZGY1NDgxMTZi
YTU2MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDdlYzU4MTAtNDgyNi00MWE5LWJhZDAtNjhlZTk0NzdiYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsGGXi+3nP0Okb6hRJ7KSEvBQR3J58ambt0Y
io2gayQH4+jWM+EF1FT97DP12IBtsmGj+BBVBUzq7QMSMHFsdzvFKWmDny9+q6bH
259aXXE3isZpo3vKcUuLW+foUhCI/Zj+DfAAaBg3Q9mz2KBroZvlikFBzX+nRJ10
FL3WSzT+thxuj/BnUoxnDMg9xPevlSQgGteoVfNOHLmY3SOlkjVpasPb0cpzje3N
I/FSY0CPvVNnA6G4oZ6PWasCEdsmCYeVH1wM9QCjegYU3KMnpl7wIwd2QtNCREEi
pVHwseushjOUCHdQ/QLcV5GNiyg/OoZjRifs2eg5obcX83weBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8PZyB3ABQbriqVxAzv0GVwRt91MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZWE5
NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0ODExNmJhNTYvNDVjMmI4MWEtYzc0Zi0z
ZGVmLWFkYWMtMDhiNmZlMzhlNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmVhOTVjOWYtYzVjMS00YTM2LWE3
M2YtZGY1NDgxMTZiYTU2L2ZlYTk1YzlmLWM1YzEtNGEzNi1hNzNmLWRmNTQ4MTE2
YmE1Ni5jcmwwHwYDVR0jBBgwFoAU7IJWyVHSiOh9/fmHlJdcdXrLZicwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZWE5NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0
ODExNmJhNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzcIkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+/RIH0yzNvnnfpDsPsvry8LfOV8O6g/SHBafcY4i9u4OXlPb1uKGtb
tkWqZ8mKW42rqTphtS9DMVMNdU/BtpgFYiv8igAzzJqI/1o1OApSeuR+s15r1qc5
qFdO5fW+j0n/kyIr5DRG21f2A5p1tNBR0FhrT2ulg7yag5eHm3ftqbMc/Z2xIdMq
g6yoKhc/U62gEWC2MtAlnbi0W4w6GYDGxfSKrVYa/cQxS5n2suxlbe2BoLnR9zpg
TzpkXlAGur5oA6XYJRFsAbe4ASXFac1xcNgJDKEwnkY/cLCljHHF0gZwuhjcejzS
Oje+wLP0c1F93ncHtsTRNepehUwO0XI=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:43 2026 by rpki-client