Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/d86fdf7a-16f2-3ed3-9e42-b82785b4c4b9.roa
File:                     d86fdf7a-16f2-3ed3-9e42-b82785b4c4b9.roa (raw, json)
Hash identifier:          Xvk15OmQyKahO4mgWVBnS8kYhb7yPtvnbzFXUnTQQw0=
Subject key identifier:   D8:2F:18:C6:02:22:FA:61:AB:CA:2C:7F:57:38:62:30:23:BD:59:81
Certificate issuer:       /CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
Certificate serial:       010D0C9F4328584FD3C1313359FA13473D8DE000
Authority key identifier: 9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/d86fdf7a-16f2-3ed3-9e42-b82785b4c4b9.roa
Signing time:             Fri 13 Nov 2026 14:00:14 +0000
ROA not before:           Fri 13 Nov 2026 14:00:14 +0000
ROA not after:            Thu 11 Feb 2027 14:00:14 +0000
asID:                     4546
IP address blocks:        162.52.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d3:c1:31:33:59:fa:13:47:3d:8d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
        Validity
            Not Before: Nov 13 14:00:14 2026 GMT
            Not After : Feb 11 14:00:14 2027 GMT
        Subject: CN=dc6f46e6-e8b0-4ca7-8f5e-8b8c58259a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:19:47:27:08:7c:cc:b9:ce:ce:e1:e8:4d:
                    14:21:a2:10:d9:3f:28:0a:74:f8:c7:b0:aa:e4:bf:
                    3a:39:a5:5d:8d:2a:21:8d:db:53:53:83:17:b7:20:
                    d9:d8:62:42:5d:ea:04:47:04:f5:7c:84:98:db:12:
                    14:44:18:60:89:01:23:8f:ff:2a:fc:22:48:ec:c2:
                    35:cd:82:c5:eb:f2:50:7b:6c:c6:7f:36:60:6e:a0:
                    a0:36:38:36:62:3f:b5:7b:67:f7:be:de:75:84:d0:
                    e1:5a:14:27:0e:b3:7f:3a:e8:be:33:f8:c3:e8:d2:
                    2d:c9:ff:7b:cc:a3:4c:1c:d3:da:91:e3:5d:98:7a:
                    3e:e4:15:c7:6b:c1:e3:e8:55:05:c7:d7:76:d2:33:
                    f1:a3:36:fc:24:d2:6b:ca:e4:86:39:57:0c:78:a9:
                    63:fb:05:75:ea:3f:19:a5:91:84:47:b2:91:8b:a8:
                    c5:66:7a:37:50:1a:63:aa:ff:45:ae:4b:48:5c:fa:
                    43:10:63:f9:16:2e:5a:df:c2:19:fb:08:d4:c8:23:
                    b9:61:2b:a1:d2:c3:12:22:06:5c:06:2d:de:86:62:
                    56:7a:d5:0c:96:33:e2:7e:d3:ab:22:37:5c:ec:a8:
                    41:69:46:7e:df:94:48:98:31:70:7b:14:e2:72:18:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:18:C6:02:22:FA:61:AB:CA:2C:7F:57:38:62:30:23:BD:59:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/d86fdf7a-16f2-3ed3-9e42-b82785b4c4b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl

            X509v3 Authority Key Identifier:
                keyid:9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.52.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:0f:52:c2:af:ee:27:c2:c8:e4:a1:d1:a0:40:27:8a:9a:
         c4:14:f6:19:7b:c1:d5:c1:34:bb:5f:86:67:6d:92:29:70:99:
         d0:34:53:4e:7e:59:10:13:87:0a:67:6f:a4:dc:6a:ac:7c:5c:
         8b:62:7f:de:14:be:1e:74:99:f2:39:5b:8e:c1:f9:fc:09:af:
         ba:4c:c6:45:f5:7f:45:3b:40:2b:f4:3f:cb:a7:d0:31:b3:7d:
         ff:b2:07:1c:bc:54:61:c8:46:10:62:34:67:5b:25:7f:cf:24:
         53:67:df:8e:aa:02:e2:8b:1b:3f:b0:46:41:8b:14:ae:55:8c:
         ff:28:34:c1:50:ea:e1:a7:97:be:84:a9:f0:20:ed:a8:c5:9e:
         da:08:8a:b4:bd:76:f2:bf:7f:4f:bf:c7:55:67:20:97:d8:da:
         6e:b6:97:f0:5a:95:71:ec:93:b0:fa:15:d8:57:a1:eb:92:84:
         7a:d6:c7:35:2f:5f:ce:2b:34:3d:e3:91:16:5e:4a:69:21:b1:
         09:82:7b:53:f7:23:67:e0:b2:b7:9a:07:91:e7:7c:78:0a:7d:
         a4:18:59:5d:c9:a2:fc:2a:99:cc:06:40:57:80:ee:25:d9:e2:
         c1:29:f7:34:0c:87:91:ea:06:db:06:ab:31:60:30:d0:a7:52:
         eb:53:21:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/TwTEzWfoTRz2N4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkYTg0NTUtYWZkNy00Y2I3LWJhM2ItNWZiNDdjNTc0
NjA4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk
ZGM2ZjQ2ZTYtZThiMC00Y2E3LThmNWUtOGI4YzU4MjU5YTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCkZRycIfMy5zs7h6E0UIaIQ2T8oCnT4x7Cq
5L86OaVdjSohjdtTU4MXtyDZ2GJCXeoERwT1fISY2xIURBhgiQEjj/8q/CJI7MI1
zYLF6/JQe2zGfzZgbqCgNjg2Yj+1e2f3vt51hNDhWhQnDrN/Oui+M/jD6NItyf97
zKNMHNPakeNdmHo+5BXHa8Hj6FUFx9d20jPxozb8JNJryuSGOVcMeKlj+wV16j8Z
pZGER7KRi6jFZno3UBpjqv9FrktIXPpDEGP5Fi5a38IZ+wjUyCO5YSuh0sMSIgZc
Bi3ehmJWetUMljPiftOrIjdc7KhBaUZ+35RImDFwexTichh82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgvGMYCIvphq8osf1c4YjAjvVmBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZGRh
ODQ1NS1hZmQ3LTRjYjctYmEzYi01ZmI0N2M1NzQ2MDgvZDg2ZmRmN2EtMTZmMi0z
ZWQzLTllNDItYjgyNzg1YjRjNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmRkYTg0NTUtYWZkNy00Y2I3LWJh
M2ItNWZiNDdjNTc0NjA4L2JkZGE4NDU1LWFmZDctNGNiNy1iYTNiLTVmYjQ3YzU3
NDYwOC5jcmwwHwYDVR0jBBgwFoAUnNvWXn2p+njjvjMqzoLbVg5qBbowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS9iZGRhODQ1NS1hZmQ3LTRjYjctYmEzYi01ZmI0
N2M1NzQ2MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAojQHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpkD1LCr+4nwsjkodGgQCeKmsQU9hl7wdXBNLtfhmdtkilwmdA0U05+
WRAThwpnb6Tcaqx8XItif94Uvh50mfI5W47B+fwJr7pMxkX1f0U7QCv0P8un0DGz
ff+yBxy8VGHIRhBiNGdbJX/PJFNn346qAuKLGz+wRkGLFK5VjP8oNMFQ6uGnl76E
qfAg7ajFntoIirS9dvK/f0+/x1VnIJfY2m62l/BalXHsk7D6FdhXoeuShHrWxzUv
X84rND3jkRZeSmkhsQmCe1P3I2fgsreaB5HnfHgKfaQYWV3JovwqmcwGQFeA7iXZ
4sEp9zQMh5HqBtsGqzFgMNCnUutTIZw=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:59:53 2026 by rpki-client