Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/3d06ed74-c288-3712-b5e2-46a334f46710.roa
File:                     3d06ed74-c288-3712-b5e2-46a334f46710.roa (raw, json)
Hash identifier:          mZmwVigQ++J0JjatJMxfCrE9TMa2aSmO7zGJuzKhAnw=
Subject key identifier:   32:43:80:58:E3:DA:B8:39:A4:9A:D4:A4:05:45:FE:76:54:97:B0:34
Certificate issuer:       /CN=47dcd76c-a53c-4746-b38d-ab33e0246341
Certificate serial:       010D0C9F4328584F4005E27BE46E60EB03372460
Authority key identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/3d06ed74-c288-3712-b5e2-46a334f46710.roa
Signing time:             Mon 21 Sep 2026 15:59:02 +0000
ROA not before:           Mon 21 Sep 2026 15:59:02 +0000
ROA not after:            Sun 20 Dec 2026 16:59:02 +0000
asID:                     17215
IP address blocks:        198.51.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:05:e2:7b:e4:6e:60:eb:03:37:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47dcd76c-a53c-4746-b38d-ab33e0246341
        Validity
            Not Before: Sep 21 15:59:02 2026 GMT
            Not After : Dec 20 16:59:02 2026 GMT
        Subject: CN=0b154f88-d63f-40ea-bee2-0c3ec6d57f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:41:81:d4:a5:f6:ba:e3:34:32:59:3f:da:
                    a6:23:71:12:2f:b1:df:c7:4c:b1:48:5e:4a:bf:7d:
                    6f:ad:cd:34:7e:ad:bf:96:9b:82:67:1e:33:3a:18:
                    62:4e:32:64:36:2f:d0:3c:2a:b2:67:07:d6:80:f1:
                    7c:83:97:73:21:f7:5e:ae:ec:b1:eb:8d:a2:de:a0:
                    bc:8f:0d:bc:5c:84:04:04:fb:64:8b:df:f5:b1:c6:
                    f1:73:a8:10:c3:b4:5a:b8:02:78:24:a4:74:7d:70:
                    48:88:be:1d:54:00:35:12:c4:37:c2:60:7e:34:4e:
                    aa:e0:aa:58:a4:86:0c:49:db:14:fd:b5:2f:1e:c0:
                    5e:d2:12:b4:f9:a5:f0:df:08:c1:f2:b6:26:65:f0:
                    c5:85:a7:9f:be:53:24:8d:34:0c:46:60:fd:a7:7c:
                    9c:d5:fb:ff:d0:94:31:51:de:d7:5e:4f:e2:33:64:
                    ee:de:93:b1:5f:2e:80:ae:2f:ff:6a:5f:c9:aa:e6:
                    56:f8:19:ef:1e:70:40:6d:7d:b5:a5:b4:a3:53:6c:
                    1c:a1:76:94:09:f0:7a:c3:25:a4:b3:0f:f7:d7:49:
                    f4:88:d2:69:17:c5:9c:05:8c:59:fa:56:a2:87:42:
                    e1:94:6a:1b:47:10:19:1f:e8:dd:09:ed:34:ad:76:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:80:58:E3:DA:B8:39:A4:9A:D4:A4:05:45:FE:76:54:97:B0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/3d06ed74-c288-3712-b5e2-46a334f46710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl

            X509v3 Authority Key Identifier:
                keyid:47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:8b:a3:35:0f:de:4d:1c:17:e6:a5:02:e5:fc:f5:ca:f5:
         54:c6:f5:a1:57:27:3d:21:77:80:b5:ac:f1:01:c7:0d:f1:50:
         ee:f5:1e:56:98:ed:21:78:7e:ee:7d:b7:09:78:d4:be:65:f8:
         67:49:7b:33:da:8c:74:7b:86:29:30:b2:e2:70:e6:9c:70:4b:
         31:16:e2:b1:d5:26:29:08:c5:37:18:0b:fe:fe:e9:f1:f7:d8:
         58:8b:93:ad:bf:72:6f:5a:25:1e:9e:0f:ab:bb:f1:af:7f:1b:
         f7:bd:f7:27:1c:b0:d8:97:92:5f:ea:79:57:06:bf:8c:f3:ee:
         82:9e:e9:b0:88:8f:b6:01:92:c5:a2:47:1c:11:54:55:71:30:
         05:9f:21:de:35:e0:20:84:73:51:85:04:f6:dc:d5:dc:14:b8:
         ea:29:61:b8:ed:be:4e:e4:68:f9:04:69:75:7d:f7:b7:bf:39:
         e2:13:bb:16:a8:35:11:25:54:f0:04:b8:a6:c7:1c:97:a6:5e:
         49:f8:0f:c8:9a:46:7d:85:81:98:79:82:cc:c3:81:9f:ed:23:
         6e:00:98:4c:a9:dc:ce:1f:0f:d3:f0:02:fe:a0:29:6f:99:ca:
         f7:3f:c8:37:0e:aa:fb:2a:7c:f5:75:57:8c:7c:06:a0:4e:9e:
         ff:93:23:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ABeJ75G5g6wM3JGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDdkY2Q3NmMtYTUzYy00NzQ2LWIzOGQtYWIzM2UwMjQ2
MzQxMB4XDTI2MDkyMTE1NTkwMloXDTI2MTIyMDE2NTkwMlowLzEtMCsGA1UEAxMk
MGIxNTRmODgtZDYzZi00MGVhLWJlZTItMGMzZWM2ZDU3ZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJBgdSl9rrjNDJZP9qmI3ESL7Hfx0yxSF5K
v31vrc00fq2/lpuCZx4zOhhiTjJkNi/QPCqyZwfWgPF8g5dzIfderuyx642i3qC8
jw28XIQEBPtki9/1scbxc6gQw7RauAJ4JKR0fXBIiL4dVAA1EsQ3wmB+NE6q4KpY
pIYMSdsU/bUvHsBe0hK0+aXw3wjB8rYmZfDFhaefvlMkjTQMRmD9p3yc1fv/0JQx
Ud7XXk/iM2Tu3pOxXy6Ari//al/JquZW+BnvHnBAbX21pbSjU2wcoXaUCfB6wyWk
sw/310n0iNJpF8WcBYxZ+laih0LhlGobRxAZH+jdCe00rXaQAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJDgFjj2rg5pJrUpAVF/nZUl7A0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80N2Rj
ZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMzZTAyNDYzNDEvM2QwNmVkNzQtYzI4OC0z
NzEyLWI1ZTItNDZhMzM0ZjQ2NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDdkY2Q3NmMtYTUzYy00NzQ2LWIz
OGQtYWIzM2UwMjQ2MzQxLzQ3ZGNkNzZjLWE1M2MtNDc0Ni1iMzhkLWFiMzNlMDI0
NjM0MS5jcmwwHwYDVR0jBBgwFoAUR5rbvJ0zOrxcTDR8mV1hGJNqbLAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS80N2RjZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMz
ZTAyNDYzNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjPXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiri6M1D95NHBfmpQLl/PXK9VTG9aFXJz0hd4C1rPEBxw3xUO71HlaY
7SF4fu59twl41L5l+GdJezPajHR7hikwsuJw5pxwSzEW4rHVJikIxTcYC/7+6fH3
2FiLk62/cm9aJR6eD6u78a9/G/e99yccsNiXkl/qeVcGv4zz7oKe6bCIj7YBksWi
RxwRVFVxMAWfId414CCEc1GFBPbc1dwUuOopYbjtvk7kaPkEaXV997e/OeITuxao
NRElVPAEuKbHHJemXkn4D8iaRn2FgZh5gszDgZ/tI24AmEyp3M4fD9PwAv6gKW+Z
yvc/yDcOqvsqfPV1V4x8BqBOnv+TI1w=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:25 2026 by rpki-client