Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/e64cb951-1dd5-342b-bd3d-c85d997441bb.roa
File:                     e64cb951-1dd5-342b-bd3d-c85d997441bb.roa (raw, json)
Hash identifier:          9PKhLSpq2du2UIi3bX+i+CPaqS0BP/zE/3bYbWMO8Nk=
Subject key identifier:   C9:CB:4B:05:BC:C9:C0:F8:17:AE:6B:8D:42:B0:63:32:14:D2:50:1F
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584F4873F9E2C1BBC144C6EFDE00
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/e64cb951-1dd5-342b-bd3d-c85d997441bb.roa
Signing time:             Thu 24 Sep 2026 16:27:20 +0000
ROA not before:           Thu 24 Sep 2026 16:27:20 +0000
ROA not after:            Wed 23 Dec 2026 17:27:20 +0000
asID:                     212238
IP address blocks:        209.222.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:73:f9:e2:c1:bb:c1:44:c6:ef:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Sep 24 16:27:20 2026 GMT
            Not After : Dec 23 17:27:20 2026 GMT
        Subject: CN=482c2d60-5af1-4e9b-b9b7-238da4e8f36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:e3:91:b1:fb:98:e9:51:92:04:0c:56:fe:
                    2c:cf:32:ff:bd:f8:94:18:fa:46:e3:64:4f:89:16:
                    92:ab:01:88:43:7d:eb:7f:8f:66:0a:59:bd:0f:56:
                    7c:1d:07:7f:d8:2e:d8:71:6b:21:d9:e6:61:2c:cd:
                    f2:7e:d6:4a:2d:89:28:da:a7:ee:71:b8:13:4d:96:
                    d6:11:b7:e1:0b:c7:09:0d:e1:03:4b:73:a5:92:bb:
                    f8:cc:17:05:5b:19:93:4d:04:fa:4e:e8:61:d8:0c:
                    98:bb:a7:05:58:7f:db:54:a3:1d:3e:3c:9f:fc:d2:
                    0b:01:78:ab:23:be:db:c5:2d:4c:f3:9c:34:82:35:
                    67:35:01:d1:07:ce:70:93:33:98:95:f1:71:5f:bf:
                    07:25:c9:4a:9a:56:c6:60:d3:c0:c2:6e:4c:30:0c:
                    66:27:69:64:28:f5:f2:13:53:23:10:90:1f:44:b7:
                    a5:a1:97:af:a6:15:43:fb:bf:6f:2b:73:17:d3:de:
                    ea:a9:25:31:58:a7:19:2e:5a:3f:62:8e:a2:5c:2e:
                    54:72:a9:80:6a:ba:ca:a6:fd:8e:f7:17:ca:55:13:
                    e9:d5:5e:e7:15:4f:82:6a:76:d2:1c:e5:48:18:3c:
                    8c:69:83:6a:6c:5e:37:b0:26:f1:3f:a3:bc:08:a9:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:4B:05:BC:C9:C0:F8:17:AE:6B:8D:42:B0:63:32:14:D2:50:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/e64cb951-1dd5-342b-bd3d-c85d997441bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:67:e0:12:ff:24:78:fa:f7:bd:00:84:c3:f0:26:4a:ae:
         8e:a2:80:4c:12:ae:10:cf:23:0f:8f:a3:10:8a:8c:e6:42:9d:
         b8:1b:48:25:47:04:c7:52:9b:09:48:cd:62:87:7a:8b:61:91:
         df:4b:7d:da:64:8b:98:c6:dc:98:12:45:80:01:69:bc:37:dc:
         e7:d4:08:e8:07:fa:28:e3:59:98:43:a2:fe:fe:25:77:09:a5:
         79:a4:a6:c5:1c:cd:3d:c0:cf:d4:11:42:91:a7:eb:92:ea:1d:
         f1:90:42:4a:70:47:19:99:24:28:e2:b3:8d:0a:7d:1f:48:ac:
         ff:ba:fa:17:14:47:b4:d9:bb:46:fc:70:fc:a5:7c:9b:5a:02:
         aa:6b:39:f7:32:0a:e2:93:f0:f1:15:45:f7:da:b4:5c:2b:18:
         fc:f1:7e:13:2e:3b:1e:37:fd:44:e8:a1:67:bb:75:28:41:44:
         cc:86:16:54:f0:2d:9f:3c:eb:72:28:c3:20:78:59:56:ed:eb:
         8a:13:e6:7a:08:80:18:d1:8d:77:c6:76:3a:1c:10:02:ca:60:
         5d:14:1e:d5:fa:d4:2d:8b:a7:e8:34:1c:bc:f9:2f:6c:b1:67:
         b9:2f:03:0f:94:43:29:14:2d:58:ca:96:99:4d:7b:f4:1f:20:
         ae:da:10:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ic/niwbvBRMbv3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh
NmFlMB4XDTI2MDkyNDE2MjcyMFoXDTI2MTIyMzE3MjcyMFowLzEtMCsGA1UEAxMk
NDgyYzJkNjAtNWFmMS00ZTliLWI5YjctMjM4ZGE0ZThmMzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusnjkbH7mOlRkgQMVv4szzL/vfiUGPpG42RP
iRaSqwGIQ33rf49mClm9D1Z8HQd/2C7YcWsh2eZhLM3yftZKLYko2qfucbgTTZbW
EbfhC8cJDeEDS3Olkrv4zBcFWxmTTQT6Tuhh2AyYu6cFWH/bVKMdPjyf/NILAXir
I77bxS1M85w0gjVnNQHRB85wkzOYlfFxX78HJclKmlbGYNPAwm5MMAxmJ2lkKPXy
E1MjEJAfRLeloZevphVD+79vK3MX097qqSUxWKcZLlo/Yo6iXC5UcqmAarrKpv2O
9xfKVRPp1V7nFU+CanbSHOVIGDyMaYNqbF43sCbxP6O8CKnr8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnLSwW8ycD4F65rjUKwYzIU0lAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj
ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvZTY0Y2I5NTEtMWRkNS0z
NDJiLWJkM2QtYzg1ZDk5NzQ0MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx
YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi
YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw
MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNsZ+AS/yR4+ve9AITD8CZKro6igEwSrhDPIw+PoxCKjOZCnbgbSCVH
BMdSmwlIzWKHeothkd9Lfdpki5jG3JgSRYABabw33OfUCOgH+ijjWZhDov7+JXcJ
pXmkpsUczT3Az9QRQpGn65LqHfGQQkpwRxmZJCjis40KfR9IrP+6+hcUR7TZu0b8
cPylfJtaAqprOfcyCuKT8PEVRffatFwrGPzxfhMuOx43/UTooWe7dShBRMyGFlTw
LZ8863IowyB4WVbt64oT5noIgBjRjXfGdjocEALKYF0UHtX61C2Lp+g0HLz5L2yx
Z7kvAw+UQykULVjKlplNe/QfIK7aEIE=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:28:23 2026 by rpki-client