Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa
File:                     4335fb9e-616b-368d-997c-c015da56c9bf.roa (raw, json)
Hash identifier:          tIHFV5z5mUr67GdQId3MSmTSKpgNWNQfHGgsAe+kkPo=
Subject key identifier:   40:CB:C9:98:EA:C0:22:04:B7:35:42:C0:ED:8A:C6:B5:90:2B:1B:5A
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584EF9E210FCCE5ABE9031C63AD8
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:10:fc:ce:5a:be:90:31:c6:3a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=8686d32f-bd71-4647-b887-ddf0af02b8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:99:34:91:6e:d0:23:50:15:6a:c1:97:61:
                    19:ed:66:af:ce:1b:b2:41:3b:3e:5b:87:8e:1e:6b:
                    cc:37:33:09:c4:03:75:96:bc:69:1e:6c:09:6c:51:
                    f8:54:9f:34:d4:8a:ab:47:dc:ef:50:71:5e:67:bf:
                    83:d5:10:df:5a:a3:03:f6:aa:ef:46:31:02:4d:00:
                    96:f8:93:22:c8:1d:d4:b2:d1:61:c6:33:e7:f1:b3:
                    f0:5a:6a:d8:22:9c:d1:b1:70:95:29:c2:5f:9a:f1:
                    77:03:fc:1b:52:19:91:a0:d7:3e:c7:37:d4:69:3b:
                    31:18:23:b8:7f:cd:99:af:51:a6:bb:8a:c4:2a:d3:
                    16:ad:a5:c4:bc:fe:97:f6:3c:bb:1f:7a:29:05:a4:
                    80:0e:88:2d:59:46:e5:2f:af:5f:b7:52:63:9d:49:
                    83:fd:74:32:7b:c7:f9:d3:5c:a9:87:1a:ba:59:db:
                    b2:6d:5a:b2:6d:1f:6a:e0:82:5a:ac:c4:63:42:31:
                    dc:b7:a2:90:80:8c:97:20:de:d5:aa:20:6c:2d:78:
                    33:d5:be:f6:c5:c1:11:31:aa:ec:78:f1:6b:b7:5b:
                    62:05:cb:8b:f3:59:67:96:c4:02:5f:ce:5b:a1:ed:
                    1e:29:e4:aa:c9:ab:76:31:9f:fc:18:3c:49:29:1a:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CB:C9:98:EA:C0:22:04:B7:35:42:C0:ED:8A:C6:B5:90:2B:1B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/4335fb9e-616b-368d-997c-c015da56c9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:06:0c:38:da:8b:35:d9:eb:13:db:ff:38:f8:54:16:bc:
         24:23:6e:d8:74:67:18:d0:f8:b9:64:b4:ca:0b:98:bd:59:8a:
         df:c4:47:ee:ba:53:4f:3b:55:91:47:65:78:e0:d7:05:93:37:
         a9:ea:69:62:b8:7b:bb:38:b2:c4:f9:d4:f4:ed:52:a2:52:b4:
         97:dc:f5:7a:84:27:68:4f:13:03:12:af:38:4a:c5:34:52:1f:
         26:a4:05:34:ce:85:1f:66:06:9c:f6:0b:66:da:f4:e5:72:22:
         db:fe:b9:06:a1:23:ed:ae:0a:50:1a:d0:f4:62:94:d0:3a:02:
         6f:9d:8a:5b:e0:31:4e:52:80:23:24:23:c3:45:5e:bf:9e:8b:
         81:f5:79:37:f0:2c:4e:db:22:55:e6:79:f8:c5:57:5c:98:27:
         b2:b7:4a:0f:b6:13:0d:04:b0:91:b1:bb:3e:00:29:82:78:3b:
         5f:5e:4d:b3:e9:7f:d4:31:62:f1:f5:66:2d:ce:71:f5:f2:12:
         da:38:96:78:e2:b4:ff:67:ab:71:cf:c7:38:92:a0:cd:ba:9f:
         5a:ba:1d:c1:a6:5f:7b:66:4e:2b:9e:91:01:78:2a:23:f9:2c:
         c5:4d:22:d5:b1:29:79:92:ac:7f:84:c2:5e:c0:7a:13:b4:71:
         fc:05:9b:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hD8zlq+kDHGOtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5
M2E4MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk
ODY4NmQzMmYtYmQ3MS00NjQ3LWI4ODctZGRmMGFmMDJiOGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vyZNJFu0CNQFWrBl2EZ7WavzhuyQTs+W4eO
HmvMNzMJxAN1lrxpHmwJbFH4VJ801IqrR9zvUHFeZ7+D1RDfWqMD9qrvRjECTQCW
+JMiyB3UstFhxjPn8bPwWmrYIpzRsXCVKcJfmvF3A/wbUhmRoNc+xzfUaTsxGCO4
f82Zr1Gmu4rEKtMWraXEvP6X9jy7H3opBaSADogtWUblL69ft1JjnUmD/XQye8f5
01yphxq6WduybVqybR9q4IJarMRjQjHct6KQgIyXIN7VqiBsLXgz1b72xcERMars
ePFrt1tiBcuL81lnlsQCX85boe0eKeSqyat2MZ/8GDxJKRphqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDLyZjqwCIEtzVCwO2KxrWQKxtaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw
NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvNDMzNWZiOWUtNjE2Yi0z
NjhkLTk5N2MtYzAxNWRhNTZjOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4
ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx
OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi
ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu2Bgw42os12esT2/84+FQWvCQjbth0ZxjQ+LlktMoLmL1Zit/ER+66
U087VZFHZXjg1wWTN6nqaWK4e7s4ssT51PTtUqJStJfc9XqEJ2hPEwMSrzhKxTRS
HyakBTTOhR9mBpz2C2ba9OVyItv+uQahI+2uClAa0PRilNA6Am+dilvgMU5SgCMk
I8NFXr+ei4H1eTfwLE7bIlXmefjFV1yYJ7K3Sg+2Ew0EsJGxuz4AKYJ4O19eTbPp
f9QxYvH1Zi3OcfXyEto4lnjitP9nq3HPxziSoM26n1q6HcGmX3tmTiuekQF4KiP5
LMVNItWxKXmSrH+Ewl7AehO0cfwFmz0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:27:18 2026 by rpki-client