Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/c365d81a-2545-3101-a149-d19e2faa4f39.roa
File:                     c365d81a-2545-3101-a149-d19e2faa4f39.roa (raw, json)
Hash identifier:          iryPuQDpC88l0ANxesbJNEOcyGBL/RyEgf/uHO9+aC8=
Subject key identifier:   F5:1A:38:E3:D8:89:CD:8F:66:EB:CC:BF:EC:0F:A2:1A:F1:89:04:CB
Certificate issuer:       /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial:       010D0C9F4328584F7D477AA314C18C7BE89BF360
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/c365d81a-2545-3101-a149-d19e2faa4f39.roa
Signing time:             Tue 13 Oct 2026 14:35:31 +0000
ROA not before:           Tue 13 Oct 2026 14:35:31 +0000
ROA not after:            Mon 11 Jan 2027 15:35:31 +0000
asID:                     46606
IP address blocks:        198.252.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:47:7a:a3:14:c1:8c:7b:e8:9b:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
        Validity
            Not Before: Oct 13 14:35:31 2026 GMT
            Not After : Jan 11 15:35:31 2027 GMT
        Subject: CN=df40477e-789a-4331-948e-84482c347818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:99:a0:ca:71:2e:d8:c7:f3:2a:50:92:90:
                    11:b9:69:41:bd:db:85:9c:ab:ee:24:5d:cb:4e:c9:
                    c7:f1:e4:2f:32:49:be:47:63:c9:0c:eb:d0:d9:d0:
                    67:0a:49:16:ca:03:77:c3:30:c4:52:09:5b:da:7a:
                    9b:f5:28:8c:7e:07:9c:ca:50:ea:95:8c:0f:92:b0:
                    24:bd:3c:94:50:44:63:4d:38:03:07:03:d0:ae:c5:
                    73:70:44:18:22:ee:6f:6a:ed:3f:ad:c7:15:57:64:
                    a7:e7:73:bb:18:b2:de:df:3b:db:11:80:23:14:00:
                    2c:76:91:f4:c6:87:28:8f:ff:95:56:64:ff:b7:a4:
                    36:72:fb:ef:80:0f:c5:3a:9e:4d:47:ff:32:25:01:
                    b7:56:7f:09:f8:64:22:ad:2a:11:3c:0b:3f:1c:24:
                    dd:28:21:39:18:e1:e3:82:d1:ae:52:52:ba:bb:75:
                    38:5a:b4:96:48:e1:43:79:a0:d5:d1:f7:80:09:55:
                    e1:c5:d2:21:37:7a:de:2d:f1:50:53:5e:19:fa:4e:
                    d3:72:bf:64:5b:88:39:34:c1:6e:99:9a:91:bd:db:
                    a2:8c:69:88:66:bd:27:fd:8b:f8:fb:7e:6a:54:2b:
                    ab:bd:32:1c:3b:63:ac:1a:da:62:1e:5f:78:7d:0f:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:38:E3:D8:89:CD:8F:66:EB:CC:BF:EC:0F:A2:1A:F1:89:04:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/c365d81a-2545-3101-a149-d19e2faa4f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:d3:fe:61:92:5e:ff:8c:07:b9:82:d0:b6:09:ea:ac:fa:
         d2:62:71:28:78:98:2b:f1:d3:f5:81:f9:03:c6:de:0a:1d:9f:
         df:40:90:19:50:50:8b:c0:12:24:38:3a:30:91:61:a5:83:f1:
         2a:89:a9:c6:c2:1e:f1:82:93:8f:65:56:97:78:4a:e6:41:a1:
         f3:29:6a:70:ce:cb:d6:69:5c:84:64:43:e7:7f:79:4c:8c:46:
         68:73:1f:0a:ae:8d:ff:b8:bb:71:bb:f4:31:85:b2:2d:6a:6b:
         02:40:9b:f6:5d:78:19:d1:9d:30:07:c8:0d:4b:58:cd:55:26:
         7f:01:35:fd:4e:be:12:8d:d1:c8:64:a4:1e:f0:e6:fe:3f:ed:
         c7:eb:a8:b4:f8:46:fd:e8:11:09:a8:81:1d:88:ee:ae:6d:9a:
         71:cb:d4:1a:84:47:e2:ac:0b:28:12:17:23:9a:53:70:a5:0f:
         cd:45:2b:e7:b8:a8:cd:7f:f8:e0:cf:bd:f7:58:be:c4:3d:8c:
         93:70:a4:2e:ae:d2:be:34:91:4b:4f:76:58:43:82:8c:f4:e0:
         79:be:f0:8d:6f:bf:1b:6d:03:15:49:09:b7:28:f7:ac:ad:3d:
         1b:fc:62:64:f9:16:27:a7:7d:d9:09:88:1e:f3:f4:24:a8:4a:
         f3:fc:94:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99R3qjFMGMe+ib82AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1
ZGEwMB4XDTI2MTAxMzE0MzUzMVoXDTI3MDExMTE1MzUzMVowLzEtMCsGA1UEAxMk
ZGY0MDQ3N2UtNzg5YS00MzMxLTk0OGUtODQ0ODJjMzQ3ODE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3uZoMpxLtjH8ypQkpARuWlBvduFnKvuJF3L
TsnH8eQvMkm+R2PJDOvQ2dBnCkkWygN3wzDEUglb2nqb9SiMfgecylDqlYwPkrAk
vTyUUERjTTgDBwPQrsVzcEQYIu5vau0/rccVV2Sn53O7GLLe3zvbEYAjFAAsdpH0
xocoj/+VVmT/t6Q2cvvvgA/FOp5NR/8yJQG3Vn8J+GQirSoRPAs/HCTdKCE5GOHj
gtGuUlK6u3U4WrSWSOFDeaDV0feACVXhxdIhN3reLfFQU14Z+k7Tcr9kW4g5NMFu
mZqRvduijGmIZr0n/Yv4+35qVCurvTIcO2OsGtpiHl94fQ/QoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUaOOPYic2PZuvMv+wPohrxiQTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk
YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvYzM2NWQ4MWEtMjU0NS0z
MTAxLWExNDktZDE5ZTJmYWE0ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5
MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi
NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3
MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOb0/5hkl7/jAe5gtC2Ceqs+tJicSh4mCvx0/WB+QPG3godn99AkBlQ
UIvAEiQ4OjCRYaWD8SqJqcbCHvGCk49lVpd4SuZBofMpanDOy9ZpXIRkQ+d/eUyM
RmhzHwqujf+4u3G79DGFsi1qawJAm/ZdeBnRnTAHyA1LWM1VJn8BNf1OvhKN0chk
pB7w5v4/7cfrqLT4Rv3oEQmogR2I7q5tmnHL1BqER+KsCygSFyOaU3ClD81FK+e4
qM1/+ODPvfdYvsQ9jJNwpC6u0r40kUtPdlhDgoz04Hm+8I1vvxttAxVJCbco96yt
PRv8YmT5FienfdkJiB7z9CSoSvP8lPw=
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:25 2026 by rpki-client