Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f048ef42-cb9c-39d8-8360-a42a8779a381.roa
File:                     f048ef42-cb9c-39d8-8360-a42a8779a381.roa (raw, json)
Hash identifier:          9BS6cxU6RE9Xd96veNbtz5GMkHudnRaW1TT30qDjAEc=
Subject key identifier:   C6:F2:98:BF:43:37:53:B7:19:FE:5A:FB:88:27:3B:A5:31:C4:C6:21
Certificate issuer:       /CN=f7cdccfc-98d6-46cd-9ca4-09360de8cb55
Certificate serial:       010D0C9F4328584F5F38AC5C4283CA2F0C968D20
Authority key identifier: A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f048ef42-cb9c-39d8-8360-a42a8779a381.roa
Signing time:             Fri 02 Oct 2026 20:11:26 +0000
ROA not before:           Fri 02 Oct 2026 20:11:26 +0000
ROA not after:            Thu 31 Dec 2026 21:11:26 +0000
asID:                     604
IP address blocks:        198.62.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:38:ac:5c:42:83:ca:2f:0c:96:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cdccfc-98d6-46cd-9ca4-09360de8cb55
        Validity
            Not Before: Oct  2 20:11:26 2026 GMT
            Not After : Dec 31 21:11:26 2026 GMT
        Subject: CN=8de10760-1a05-4cb9-970a-97ebfe77acba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:b1:4f:1b:ad:f1:12:5f:31:f0:54:9f:2e:
                    2c:f3:f2:09:c2:f3:82:dd:d6:ba:08:ba:0b:5f:c9:
                    ab:35:50:73:74:e2:d5:a2:fd:d0:21:c8:0c:b6:07:
                    a1:ae:fa:fa:77:d6:42:db:6f:53:e0:46:6d:4e:6f:
                    fe:75:5a:b2:cc:d0:1a:6b:4b:b7:65:8d:63:af:87:
                    0d:78:5f:21:56:3c:1a:5b:55:51:80:f7:09:b8:a2:
                    47:1c:74:63:62:92:e9:ff:1a:98:5b:5e:7e:23:28:
                    e4:a9:dd:86:03:f2:13:c3:d1:2c:99:eb:71:a2:82:
                    16:89:22:92:d3:19:1c:5f:b0:71:61:c2:37:51:5f:
                    30:7f:18:74:a1:cc:31:f1:9c:f2:e3:6c:d6:c0:da:
                    53:1b:7e:07:38:fa:bc:44:d7:34:21:ed:8e:ba:07:
                    b3:94:21:77:8a:76:fa:7f:fd:59:b4:ab:60:3b:df:
                    6b:2d:f0:6f:7b:91:bb:01:bf:87:02:7a:4d:d1:10:
                    88:3f:6b:0f:81:c9:23:44:12:1d:b0:92:1a:98:43:
                    22:fd:f4:c5:ab:fd:60:71:e1:62:54:da:0d:b2:13:
                    89:3f:87:61:14:d2:75:5e:7c:99:12:9f:09:36:c8:
                    06:56:71:0c:7b:88:12:31:20:21:c8:00:07:b6:36:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:98:BF:43:37:53:B7:19:FE:5A:FB:88:27:3B:A5:31:C4:C6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f048ef42-cb9c-39d8-8360-a42a8779a381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.crl

            X509v3 Authority Key Identifier:
                keyid:A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:03:8e:f3:0a:e9:98:03:2a:87:92:f9:31:b0:04:70:be:d1:
         14:08:28:88:f8:4e:94:ce:2b:7c:7b:f2:48:97:1a:34:ac:03:
         e1:34:97:7b:cd:9d:12:33:3e:04:b7:a6:a7:8c:26:e4:80:5f:
         30:61:8d:92:1e:15:e6:a7:96:77:ef:66:80:ac:48:48:46:bf:
         e6:26:b7:ca:79:4e:a6:3f:f1:2e:d9:63:0f:e4:05:0b:a9:13:
         b0:24:75:b1:1f:a1:bf:b4:c9:a9:3e:06:85:22:7c:19:79:5c:
         1a:9c:95:2a:32:6b:6b:c6:93:d4:8c:2b:30:0b:b2:60:84:eb:
         88:4f:52:0f:2d:e6:fb:9f:0f:55:f4:5f:fd:20:b4:b9:6d:7f:
         60:aa:0c:ae:29:25:f2:99:65:34:b5:4d:31:72:e0:97:7a:44:
         79:a7:f3:5a:9a:92:6f:52:a8:86:39:b4:26:69:af:99:26:ad:
         82:5c:22:e4:3b:bd:23:a1:ad:be:1c:96:59:90:b8:d7:61:eb:
         5f:26:33:96:96:40:db:fd:0e:4c:55:50:10:34:89:d0:be:95:
         0f:83:76:c7:fa:0f:4c:a2:b9:40:dd:d4:6a:a1:58:22:93:9e:
         78:1b:f0:21:53:d3:a1:3e:55:cf:5c:2c:e4:c4:0d:03:19:0f:
         4f:0b:95:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fOKxcQoPKLwyWjSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdjZGNjZmMtOThkNi00NmNkLTljYTQtMDkzNjBkZThj
YjU1MB4XDTI2MTAwMjIwMTEyNloXDTI2MTIzMTIxMTEyNlowLzEtMCsGA1UEAxMk
OGRlMTA3NjAtMWEwNS00Y2I5LTk3MGEtOTdlYmZlNzdhY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmKxTxut8RJfMfBUny4s8/IJwvOC3da6CLoL
X8mrNVBzdOLVov3QIcgMtgehrvr6d9ZC229T4EZtTm/+dVqyzNAaa0u3ZY1jr4cN
eF8hVjwaW1VRgPcJuKJHHHRjYpLp/xqYW15+Iyjkqd2GA/ITw9EsmetxooIWiSKS
0xkcX7BxYcI3UV8wfxh0ocwx8Zzy42zWwNpTG34HOPq8RNc0Ie2OugezlCF3inb6
f/1ZtKtgO99rLfBve5G7Ab+HAnpN0RCIP2sPgckjRBIdsJIamEMi/fTFq/1gceFi
VNoNshOJP4dhFNJ1XnyZEp8JNsgGVnEMe4gSMSAhyAAHtjY5xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbymL9DN1O3Gf5a+4gnO6UxxMYhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mN2Nk
Y2NmYy05OGQ2LTQ2Y2QtOWNhNC0wOTM2MGRlOGNiNTUvZjA0OGVmNDItY2I5Yy0z
OWQ4LTgzNjAtYTQyYTg3NzlhMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjdjZGNjZmMtOThkNi00NmNkLTlj
YTQtMDkzNjBkZThjYjU1L2Y3Y2RjY2ZjLTk4ZDYtNDZjZC05Y2E0LTA5MzYwZGU4
Y2I1NS5jcmwwHwYDVR0jBBgwFoAUp5+Lz9aZ06HfmDuvSl0vcKIhINUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mN2NkY2NmYy05OGQ2LTQ2Y2QtOWNhNC0wOTM2
MGRlOGNiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxj7/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEDjvMK6ZgDKoeS+TGwBHC+0RQIKIj4TpTOK3x78kiXGjSsA+E0l3vN
nRIzPgS3pqeMJuSAXzBhjZIeFeanlnfvZoCsSEhGv+Ymt8p5TqY/8S7ZYw/kBQup
E7AkdbEfob+0yak+BoUifBl5XBqclSoya2vGk9SMKzALsmCE64hPUg8t5vufD1X0
X/0gtLltf2CqDK4pJfKZZTS1TTFy4Jd6RHmn81qakm9SqIY5tCZpr5kmrYJcIuQ7
vSOhrb4cllmQuNdh618mM5aWQNv9DkxVUBA0idC+lQ+Ddsf6D0yiuUDd1GqhWCKT
nngb8CFT06E+Vc9cLOTEDQMZD08LlSE=
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:55 2026 by rpki-client