Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d42a6d2b-d856-3a2d-96e4-f522241122dd.roa
File:                     d42a6d2b-d856-3a2d-96e4-f522241122dd.roa (raw, json)
Hash identifier:          rpH/8IpDiwP/U4dUHcdMsY6/ufjVqs7AMYegjyCE7G4=
Subject key identifier:   74:5A:65:AC:F1:CC:66:88:E5:09:9A:BC:1C:BD:C3:23:7B:D3:91:7A
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F06729901463282F9E8BB4280
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d42a6d2b-d856-3a2d-96e4-f522241122dd.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        206.76.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:99:01:46:32:82:f9:e8:bb:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f85c1ba9-fbdb-412e-8fd3-27b0360f451b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:fe:c3:a5:e0:46:23:e7:b4:6d:92:d4:d2:
                    10:e0:58:2c:94:89:9a:db:6a:8b:ff:a9:d5:8c:ab:
                    d5:84:f1:86:9f:d1:a4:9c:01:03:34:b1:37:ce:10:
                    7e:8d:74:fb:27:14:b5:65:97:68:5a:79:37:b4:07:
                    b8:22:4f:d7:d2:0f:db:55:90:89:5b:d7:31:e9:04:
                    a5:e4:9f:24:fd:62:aa:3e:58:df:5d:93:d4:82:ff:
                    dc:8f:36:3b:8a:59:a7:99:f2:be:03:f1:04:dc:0d:
                    cc:3d:a8:de:98:cf:40:92:aa:fd:25:c4:b1:dd:fb:
                    d9:16:f9:bf:ce:03:55:75:24:3e:30:bb:4a:fc:bc:
                    52:17:11:5a:39:9f:19:5b:24:4e:4c:f8:c7:b8:0b:
                    09:06:d5:ac:99:b7:c8:c9:a2:13:a8:3f:73:68:1e:
                    f6:0d:64:dc:2e:46:00:b1:db:be:8b:14:99:14:a4:
                    f9:5f:f3:44:05:35:07:69:07:43:74:8f:e3:bf:bc:
                    15:d0:61:8e:18:1a:ee:75:4b:87:66:a6:d1:c5:02:
                    2c:cb:21:9c:a3:67:6f:1c:92:38:fd:93:53:04:db:
                    77:38:1b:10:7d:94:c5:39:ca:14:aa:d1:4f:93:ce:
                    d5:f6:ab:75:de:cb:5d:cb:38:90:ad:3d:07:37:86:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:65:AC:F1:CC:66:88:E5:09:9A:BC:1C:BD:C3:23:7B:D3:91:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d42a6d2b-d856-3a2d-96e4-f522241122dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:11:76:95:40:eb:e9:0f:b4:4e:c8:c3:ea:5b:63:63:e1:
         95:cf:64:7d:0c:6f:75:a5:48:d4:03:b8:ce:37:fd:f3:81:54:
         25:5b:27:33:1a:58:1f:a9:1e:2d:b6:29:9a:00:8a:bf:22:51:
         b4:56:bc:ce:8a:a8:1d:d6:c1:13:19:a5:6a:69:78:01:7d:c6:
         1f:87:53:f8:1c:14:35:cb:e0:ee:da:87:ff:6a:25:18:ae:f1:
         a5:a3:a1:eb:02:8e:6e:52:02:52:80:75:69:a3:bf:79:8a:44:
         fc:40:43:e5:50:e2:66:5b:f3:8e:64:bd:c0:9a:66:4e:c9:76:
         95:33:da:ff:d0:d2:07:93:92:f1:d5:33:11:c3:dc:5a:42:1c:
         2c:9b:7a:8a:62:eb:97:ae:a2:45:04:0c:f9:30:ce:9c:c0:a9:
         72:16:2d:00:36:4c:36:ad:85:02:87:a2:d9:45:c7:98:d8:2a:
         03:44:4c:54:00:91:11:b9:a1:04:a6:48:41:a5:2a:f5:5d:48:
         25:7b:a4:1c:73:63:05:d9:7b:27:bd:34:c4:eb:ac:9b:23:0b:
         59:50:4a:36:3a:0a:26:9e:43:83:04:45:d8:3a:58:20:50:13:
         91:81:af:ce:a5:4e:f4:10:53:0f:52:16:06:c0:07:02:b8:4d:
         5e:79:33:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpkBRjKC+ei7QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Zjg1YzFiYTktZmJkYi00MTJlLThmZDMtMjdiMDM2MGY0NTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5T+w6XgRiPntG2S1NIQ4FgslIma22qL/6nV
jKvVhPGGn9GknAEDNLE3zhB+jXT7JxS1ZZdoWnk3tAe4Ik/X0g/bVZCJW9cx6QSl
5J8k/WKqPljfXZPUgv/cjzY7ilmnmfK+A/EE3A3MPajemM9Akqr9JcSx3fvZFvm/
zgNVdSQ+MLtK/LxSFxFaOZ8ZWyROTPjHuAsJBtWsmbfIyaITqD9zaB72DWTcLkYA
sdu+ixSZFKT5X/NEBTUHaQdDdI/jv7wV0GGOGBrudUuHZqbRxQIsyyGco2dvHJI4
/ZNTBNt3OBsQfZTFOcoUqtFPk87V9qt13stdyziQrT0HN4aApwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRaZazxzGaI5QmavBy9wyN705F6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvZDQyYTZkMmItZDg1Ni0z
YTJkLTk2ZTQtZjUyMjI0MTEyMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzkygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETsEXaVQOvpD7ROyMPqW2Nj4ZXPZH0Mb3WlSNQDuM43/fOBVCVbJzMa
WB+pHi22KZoAir8iUbRWvM6KqB3WwRMZpWppeAF9xh+HU/gcFDXL4O7ah/9qJRiu
8aWjoesCjm5SAlKAdWmjv3mKRPxAQ+VQ4mZb845kvcCaZk7JdpUz2v/Q0geTkvHV
MxHD3FpCHCybeopi65euokUEDPkwzpzAqXIWLQA2TDathQKHotlFx5jYKgNETFQA
kRG5oQSmSEGlKvVdSCV7pBxzYwXZeye9NMTrrJsjC1lQSjY6CiaeQ4MERdg6WCBQ
E5GBr86lTvQQUw9SFgbABwK4TV55M1Q=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:20 2026 by rpki-client