Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa
File:                     138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa (raw, json)
Hash identifier:          UaFqAZQbkn6aQGYEQH0V2ALTVT2s6Icv9RzTa+cLQME=
Subject key identifier:   6A:60:F5:7B:87:FC:A1:B0:BB:80:94:B9:81:6F:6C:10:EF:76:1D:A9
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F4328584F49741158A97666C609E5B670
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400671
IP address blocks:        206.168.193.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:11:58:a9:76:66:c6:09:e5:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe432604-0938-430b-b063-ea6eb0cd7d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:4b:37:f0:cc:a6:60:05:ab:9a:df:ae:04:
                    92:75:ae:82:1b:48:a4:e6:46:b5:8b:cf:5b:e9:53:
                    eb:f4:eb:5f:f7:38:bc:8b:d3:4e:7e:6a:24:e4:94:
                    b3:2a:db:44:3c:0c:12:9e:5e:7a:52:41:0c:6e:92:
                    36:1c:d8:0f:b5:a2:ae:e2:3e:55:54:77:38:22:5f:
                    18:b5:db:db:77:97:4e:d9:1f:dc:12:fe:60:d8:d2:
                    ef:96:16:65:89:40:7f:11:f7:6a:c2:04:ec:ef:74:
                    91:2d:98:74:ff:5d:4b:f9:e9:71:b8:e8:32:1b:de:
                    ce:68:aa:79:d4:70:7d:49:8b:0a:98:24:c6:9a:96:
                    89:f4:2c:96:d1:82:ba:c8:32:dc:10:80:7a:e1:10:
                    7c:93:66:38:01:37:7e:fa:4f:04:73:cc:0f:06:ad:
                    f7:a7:a2:a1:22:1c:99:69:b2:c6:59:60:f2:31:d7:
                    69:58:9c:e2:22:8f:8d:7a:7d:9c:f3:5e:6d:c3:e1:
                    5e:1c:ad:0d:0c:4b:e6:72:45:c0:b5:82:8e:ce:c1:
                    a6:a4:c8:a3:df:d7:83:a1:39:a5:93:0b:63:d7:83:
                    42:82:72:95:30:0c:55:fe:cf:07:79:62:dc:a7:af:
                    c0:8a:12:d3:d0:f8:26:db:44:fa:16:c3:d7:22:4d:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:F5:7B:87:FC:A1:B0:BB:80:94:B9:81:6F:6C:10:EF:76:1D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:66:32:51:b9:d1:09:4e:86:65:24:04:45:62:26:c2:19:
         09:d6:51:ef:71:c0:c5:23:87:70:a2:a2:0f:cc:9d:54:0a:a3:
         ee:97:78:6c:42:38:83:2d:96:8c:8b:97:1b:0e:65:54:e5:72:
         05:d0:e6:d7:ee:34:de:da:9b:e0:fb:8e:88:bd:de:74:a3:f5:
         69:4d:f1:76:f2:b1:24:4e:01:13:74:37:fb:69:76:8f:fc:7f:
         26:21:60:33:7f:dd:a7:52:16:63:b7:6c:50:90:40:53:18:d9:
         f1:96:5f:76:45:21:82:f4:0c:73:ab:ee:12:63:54:67:34:ed:
         8b:55:35:a1:1a:df:68:f8:c7:83:ca:79:4c:d5:c0:60:0c:3b:
         c9:19:39:12:e8:02:f0:7a:f1:f9:6f:30:91:35:05:92:d9:3a:
         43:1a:41:4a:0b:a6:8e:dd:98:1d:a0:48:d9:7c:cb:24:3f:fe:
         16:12:7c:92:05:73:eb:99:16:05:77:8b:55:91:f3:5a:b0:9f:
         f9:e6:42:cf:58:6e:8b:59:f2:6a:92:1e:33:92:2c:b0:fe:bf:
         db:91:70:07:fa:8e:18:25:49:59:e8:38:75:e8:cd:b7:48:97:
         d5:58:2c:8d:f0:65:78:98:b7:47:af:61:0b:dc:c4:79:45:ba:
         02:58:c3:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBFYqXZmxgnltnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRiZDE5NjUtNTc1Ny00NzljLWIyYWYtNDQ5NjdiNWUw
NTM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmU0MzI2MDQtMDkzOC00MzBiLWIwNjMtZWE2ZWIwY2Q3ZDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv5LN/DMpmAFq5rfrgSSda6CG0ik5ka1i89b
6VPr9Otf9zi8i9NOfmok5JSzKttEPAwSnl56UkEMbpI2HNgPtaKu4j5VVHc4Il8Y
tdvbd5dO2R/cEv5g2NLvlhZliUB/EfdqwgTs73SRLZh0/11L+elxuOgyG97OaKp5
1HB9SYsKmCTGmpaJ9CyW0YK6yDLcEIB64RB8k2Y4ATd++k8Ec8wPBq33p6KhIhyZ
abLGWWDyMddpWJziIo+Nen2c815tw+FeHK0NDEvmckXAtYKOzsGmpMij39eDoTml
kwtj14NCgnKVMAxV/s8HeWLcp6/AihLT0Pgm20T6FsPXIk2FCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpg9XuH/KGwu4CUuYFvbBDvdh2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJk
MTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2N2I1ZTA1MzkvMTM4YTc1YzQtYzUxMi0z
ZGEzLTlhODMtZDFjMmQyZTdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDRiZDE5NjUtNTc1Ny00NzljLWIy
YWYtNDQ5NjdiNWUwNTM5LzA0YmQxOTY1LTU3NTctNDc5Yy1iMmFmLTQ0OTY3YjVl
MDUzOS5jcmwwHwYDVR0jBBgwFoAUtXgtVXqgUargFWS7QBUIjTRU/5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJkMTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2
N2I1ZTA1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9DZjJRudEJToZlJARFYibCGQnWUe9xwMUjh3Ciog/MnVQKo+6XeGxC
OIMtloyLlxsOZVTlcgXQ5tfuNN7am+D7joi93nSj9WlN8XbysSROARN0N/tpdo/8
fyYhYDN/3adSFmO3bFCQQFMY2fGWX3ZFIYL0DHOr7hJjVGc07YtVNaEa32j4x4PK
eUzVwGAMO8kZORLoAvB68flvMJE1BZLZOkMaQUoLpo7dmB2gSNl8yyQ//hYSfJIF
c+uZFgV3i1WR81qwn/nmQs9YbotZ8mqSHjOSLLD+v9uRcAf6jhglSVnoOHXozbdI
l9VYLI3wZXiYt0evYQvcxHlFugJYw0E=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:06 2026 by rpki-client