Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
File:                     e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa (raw, json)
Hash identifier:          H47yxqquUFllFHmwViCfgbv6QuqAkoeadX0MJ023pRE=
Subject key identifier:   63:44:DE:57:55:0E:59:8E:21:0F:07:0F:FE:CA:6B:FE:C9:C8:7B:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31E9CE9C4A4B5BE19C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        96.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1e:9c:e9:c4:a4:b5:be:19:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=806caf83-c16d-4b3c-a580-42f2d0b6e25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:9c:d2:71:db:59:5f:84:09:f9:24:b1:27:
                    00:ba:06:fb:33:ea:63:96:39:d9:9a:9c:50:4f:d9:
                    57:e0:7e:aa:8d:6f:f6:ee:27:f6:04:34:57:3c:0b:
                    8e:09:31:2d:e7:0a:10:dc:ab:4b:50:76:15:75:a1:
                    e6:83:00:52:b3:29:58:ff:62:ec:d8:c7:9b:f6:62:
                    a9:6a:a1:0f:f2:00:c8:ba:15:5f:ce:36:18:35:63:
                    f9:fa:91:f4:48:db:ed:82:e9:2e:a0:89:98:c0:07:
                    fd:7a:5d:2b:fc:ca:4e:ec:8a:fe:04:fc:f5:30:4d:
                    4b:93:b2:d8:05:69:b5:ef:53:20:bc:97:8b:2f:58:
                    1a:f4:24:1a:24:91:0e:4c:38:98:e5:d3:e9:a4:1e:
                    4a:86:86:b9:c6:d0:53:63:71:60:55:9d:b4:f8:eb:
                    6b:2a:d7:ed:7b:99:f0:fa:4d:5d:25:e2:d8:1b:e2:
                    7b:bb:80:08:28:70:88:bf:fc:a2:2e:cd:85:4c:f1:
                    89:a5:2d:44:42:64:8b:76:6f:c5:d8:99:1b:0c:1e:
                    72:2b:17:aa:f4:ec:4b:9d:0a:cb:12:b9:79:9e:b8:
                    cb:5d:ef:ea:af:ae:c4:3d:b5:5b:79:6d:b1:06:25:
                    47:a7:be:da:6b:a6:a1:24:3b:9b:b5:91:bd:86:c8:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:DE:57:55:0E:59:8E:21:0F:07:0F:FE:CA:6B:FE:C9:C8:7B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:a2:31:29:72:19:c0:84:d6:3d:c9:e0:6b:95:28:6e:82:
         19:a0:0a:5b:66:a2:ba:1d:c1:ec:cb:53:1a:5b:0e:aa:19:4a:
         e0:3b:4a:99:0c:97:4c:d7:46:ca:ef:dd:cd:ae:0e:3e:e0:63:
         a4:d1:56:dd:02:bf:4c:22:dc:13:a2:17:24:4d:1e:32:a9:76:
         72:44:8f:f7:a3:c4:60:38:58:9d:0d:86:e8:be:f0:ec:85:3b:
         c0:1c:99:63:0a:b1:5b:31:fb:f4:52:74:51:11:d3:80:19:18:
         cd:c5:4a:49:a3:6e:d5:b0:02:3c:c3:0c:de:6a:65:b5:34:6b:
         91:1c:e6:8e:7e:6b:94:9d:7a:3c:2c:f2:ef:6a:a5:14:85:06:
         3d:4d:28:a6:31:93:44:cd:87:89:4e:5e:99:3c:d4:99:47:6e:
         81:5e:82:4b:1e:bf:31:00:de:9c:26:2d:4e:3f:1e:a7:26:e9:
         f9:58:e3:01:10:cf:e6:63:7d:20:ca:27:c4:bc:28:df:d2:c4:
         0a:c9:7d:cb:23:69:ee:41:82:4a:70:38:89:04:39:e7:38:ea:
         2c:e7:a8:58:c2:fd:a5:c6:b8:40:be:5c:4b:5f:f6:51:50:56:
         a1:8a:f4:25:54:60:ba:4c:20:ac:fc:39:38:5a:71:36:18:77:
         0a:54:37:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+Qox6c6cSktb4ZwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk
ODA2Y2FmODMtYzE2ZC00YjNjLWE1ODAtNDJmMmQwYjZlMjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjac0nHbWV+ECfkksScAugb7M+pjljnZmpxQ
T9lX4H6qjW/27if2BDRXPAuOCTEt5woQ3KtLUHYVdaHmgwBSsylY/2Ls2Meb9mKp
aqEP8gDIuhVfzjYYNWP5+pH0SNvtgukuoImYwAf9el0r/MpO7Ir+BPz1ME1Lk7LY
BWm171MgvJeLL1ga9CQaJJEOTDiY5dPppB5Khoa5xtBTY3FgVZ20+OtrKtfte5nw
+k1dJeLYG+J7u4AIKHCIv/yiLs2FTPGJpS1EQmSLdm/F2JkbDB5yKxeq9OxLnQrL
Erl5nrjLXe/qr67EPbVbeW2xBiVHp77aa6ahJDubtZG9hsi+bwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGNE3ldVDlmOIQ8HD/7Ka/7JyHvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTViM2JmYTEtNTFmZS0z
Y2U3LTkyYWUtODg5NDJhYWYxNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYOAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkMiiMSlyGcCE1j3J4GuVKG6CGaAKW2aiuh3B7MtTGlsOqhlK4DtKmQyX
TNdGyu/dza4OPuBjpNFW3QK/TCLcE6IXJE0eMql2ckSP96PEYDhYnQ2G6L7w7IU7
wByZYwqxWzH79FJ0URHTgBkYzcVKSaNu1bACPMMM3mpltTRrkRzmjn5rlJ16PCzy
72qlFIUGPU0opjGTRM2HiU5emTzUmUdugV6CSx6/MQDenCYtTj8epybp+VjjARDP
5mN9IMonxLwo39LECsl9yyNp7kGCSnA4iQQ55zjqLOeoWML9pca4QL5cS1/2UVBW
oYr0JVRgukwgrPw5OFpxNhh3ClQ3RQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 19:12:22 2026 by rpki-client