Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/f3081cb4-3ee1-3d56-97fe-7484f25fe1b6.roa
File:                     f3081cb4-3ee1-3d56-97fe-7484f25fe1b6.roa (raw, json)
Hash identifier:          KssMEZ2CCE+o7HS+b/1XrPu0oYIj7og/hQ05YbD3qJ8=
Subject key identifier:   D8:D6:BC:A4:23:FA:44:1B:EB:E0:C5:8A:71:74:B3:C0:62:78:9A:C0
Certificate issuer:       /CN=b06dfa1b-167f-420e-8d12-c85833973977
Certificate serial:       010D0C9F4328584F486205E904C02871EE868DE9
Authority key identifier: 46:4F:BB:08:2D:5D:D2:C4:BE:40:B9:54:BD:EE:5C:C1:FF:77:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/f3081cb4-3ee1-3d56-97fe-7484f25fe1b6.roa
Signing time:             Thu 24 Sep 2026 15:51:09 +0000
ROA not before:           Thu 24 Sep 2026 15:51:09 +0000
ROA not after:            Wed 23 Dec 2026 16:51:09 +0000
asID:                     201665
IP address blocks:        192.238.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/b06dfa1b-167f-420e-8d12-c85833973977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/b06dfa1b-167f-420e-8d12-c85833973977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:62:05:e9:04:c0:28:71:ee:86:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06dfa1b-167f-420e-8d12-c85833973977
        Validity
            Not Before: Sep 24 15:51:09 2026 GMT
            Not After : Dec 23 16:51:09 2026 GMT
        Subject: CN=51506ae8-51c2-411a-a96a-10f7be9f6bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:dc:41:8b:64:dd:93:0b:c4:2b:fd:f9:32:
                    f5:57:da:ae:10:cf:32:31:f5:84:fb:96:a2:cc:13:
                    28:9d:ee:b0:ef:1c:0c:a7:79:12:55:e8:bf:99:66:
                    7a:77:3d:e0:70:8d:1e:f6:ee:df:0e:d3:87:16:91:
                    19:90:e6:1a:e1:aa:c6:cf:13:16:5d:cd:6f:6b:79:
                    0a:86:10:32:4c:4f:a8:06:49:15:e1:b2:5b:e3:63:
                    2c:3c:f0:d3:57:4c:d1:6b:b6:ad:20:c6:fb:d0:96:
                    3c:58:d1:af:ed:70:9b:c3:e9:68:dd:0f:61:6b:da:
                    22:77:67:b9:33:41:7a:75:b4:ad:40:65:ad:ab:a7:
                    fb:3e:58:7a:0a:0a:1e:58:9c:df:52:fb:06:e1:22:
                    ea:8c:b7:16:44:5c:a5:05:30:3e:84:28:26:d6:4f:
                    4a:b7:c6:e5:da:d1:2f:a2:b8:df:a6:f6:6e:7e:09:
                    25:6b:9f:f5:ad:52:85:4a:3e:f6:29:ab:13:c7:b8:
                    02:6d:89:f8:8c:48:28:6f:b1:09:93:04:cf:4d:ee:
                    2e:8c:07:dc:40:6c:c1:b1:61:3e:49:1b:38:be:94:
                    c0:4f:6d:8d:49:93:15:fb:9a:0a:1d:95:37:6b:6e:
                    9f:b7:f5:0e:b7:d1:16:7e:90:93:f3:96:af:62:4d:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:BC:A4:23:FA:44:1B:EB:E0:C5:8A:71:74:B3:C0:62:78:9A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/f3081cb4-3ee1-3d56-97fe-7484f25fe1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977/b06dfa1b-167f-420e-8d12-c85833973977.crl

            X509v3 Authority Key Identifier:
                keyid:46:4F:BB:08:2D:5D:D2:C4:BE:40:B9:54:BD:EE:5C:C1:FF:77:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b06dfa1b-167f-420e-8d12-c85833973977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:69:31:87:66:fb:46:58:ff:4f:ac:d4:5b:65:de:e3:ec:2e:
         49:24:08:64:a2:8f:4c:93:38:e2:94:62:60:7e:84:af:47:37:
         75:a5:0b:b4:3e:63:92:b4:e7:dd:cd:45:bf:c7:f0:40:20:54:
         5a:94:7a:56:c7:35:f6:3f:e7:3a:e9:7a:45:a8:72:8b:92:af:
         a3:ae:b0:9d:0c:14:d5:cb:8b:1e:06:c0:53:15:8a:30:72:13:
         c6:d6:9f:0a:a2:6e:bb:35:2e:7a:18:8a:dd:fa:1a:1b:76:d4:
         a8:98:49:f0:32:06:30:09:a3:08:0a:6a:cc:e9:5a:50:81:d0:
         ee:01:d4:68:81:27:93:b7:10:88:37:84:fe:76:f3:46:a1:1b:
         40:d0:31:57:6d:e9:49:a6:fc:c2:ab:95:a6:ed:1c:6b:35:03:
         47:76:43:9c:72:3b:1c:f7:26:51:84:c3:1c:34:09:3b:a8:66:
         03:6f:cb:b1:49:d5:53:45:ad:63:7e:69:4e:c4:1f:27:99:d2:
         22:71:ed:e2:d5:67:72:06:b6:a2:05:52:ec:5b:54:0f:0b:b7:
         97:01:75:cf:f0:5e:80:31:e4:e8:0e:e3:64:a5:2d:15:58:57:
         bc:be:67:fb:4b:10:24:8a:ba:8c:f8:12:05:96:8e:93:cb:de:
         06:16:d9:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IYgXpBMAoce6GjekwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA2ZGZhMWItMTY3Zi00MjBlLThkMTItYzg1ODMzOTcz
OTc3MB4XDTI2MDkyNDE1NTEwOVoXDTI2MTIyMzE2NTEwOVowLzEtMCsGA1UEAxMk
NTE1MDZhZTgtNTFjMi00MTFhLWE5NmEtMTBmN2JlOWY2YmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4jcQYtk3ZMLxCv9+TL1V9quEM8yMfWE+5ai
zBMone6w7xwMp3kSVei/mWZ6dz3gcI0e9u7fDtOHFpEZkOYa4arGzxMWXc1va3kK
hhAyTE+oBkkV4bJb42MsPPDTV0zRa7atIMb70JY8WNGv7XCbw+lo3Q9ha9oid2e5
M0F6dbStQGWtq6f7Plh6CgoeWJzfUvsG4SLqjLcWRFylBTA+hCgm1k9Kt8bl2tEv
orjfpvZufgkla5/1rVKFSj72KasTx7gCbYn4jEgob7EJkwTPTe4ujAfcQGzBsWE+
SRs4vpTAT22NSZMV+5oKHZU3a26ft/UOt9EWfpCT85avYk3lGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjWvKQj+kQb6+DFinF0s8BieJrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iMDZk
ZmExYi0xNjdmLTQyMGUtOGQxMi1jODU4MzM5NzM5NzcvZjMwODFjYjQtM2VlMS0z
ZDU2LTk3ZmUtNzQ4NGYyNWZlMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYjA2ZGZhMWItMTY3Zi00MjBlLThk
MTItYzg1ODMzOTczOTc3L2IwNmRmYTFiLTE2N2YtNDIwZS04ZDEyLWM4NTgzMzk3
Mzk3Ny5jcmwwHwYDVR0jBBgwFoAURk+7CC1d0sS+QLlUve5cwf93OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS9iMDZkZmExYi0xNjdmLTQyMGUtOGQxMi1jODU4
MzM5NzM5NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO4bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhpMYdm+0ZY/0+s1Ftl3uPsLkkkCGSij0yTOOKUYmB+hK9HN3WlC7Q+
Y5K0593NRb/H8EAgVFqUelbHNfY/5zrpekWocouSr6OusJ0MFNXLix4GwFMVijBy
E8bWnwqibrs1LnoYit36Ght21KiYSfAyBjAJowgKaszpWlCB0O4B1GiBJ5O3EIg3
hP5280ahG0DQMVdt6Umm/MKrlabtHGs1A0d2Q5xyOxz3JlGEwxw0CTuoZgNvy7FJ
1VNFrWN+aU7EHyeZ0iJx7eLVZ3IGtqIFUuxbVA8Lt5cBdc/wXoAx5OgO42SlLRVY
V7y+Z/tLECSKuoz4EgWWjpPL3gYW2Sg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:43 2026 by rpki-client