Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa
File:                     8298df6b-5374-3b5b-805b-56273bfaf2d8.roa (raw, json)
Hash identifier:          7dhGdosmIyYb2UdqvUViVJgTT8Z0XoQOQlF5Pz0sNQ4=
Subject key identifier:   E4:CA:5C:5F:90:64:C9:E4:CE:E7:28:1E:30:17:10:C5:67:28:32:C1
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F4328584F4C3D3F912B06927AC5568D00
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     13767
IP address blocks:        162.252.168.0/24 maxlen: 24
                          2606:fe80:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:3f:91:2b:06:92:7a:c5:56:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=e20308ca-acba-4aba-a0bb-18b261807e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:29:66:32:d7:1f:19:62:f4:00:b8:9b:3f:
                    7c:fb:5c:6f:5f:d0:62:28:30:5b:fd:18:12:36:b4:
                    28:a4:f3:79:1f:75:40:73:dd:38:b8:db:b0:5a:18:
                    1b:68:2e:d5:ad:7c:62:a2:c9:9c:c9:b2:f5:3c:79:
                    7e:fe:d5:f7:cc:6f:dc:de:ca:f3:82:db:79:40:d9:
                    b4:26:aa:e9:22:99:a8:bd:3b:54:46:1b:cf:99:30:
                    7f:79:c7:00:a0:6e:2b:ee:67:d1:fe:a7:b2:d8:53:
                    45:a2:dd:38:c8:15:33:eb:36:a3:50:a1:97:54:a5:
                    e6:cf:61:c1:bc:54:fa:ef:af:b8:b8:a7:6e:e2:7f:
                    0b:63:ce:50:85:06:f5:ce:6b:35:72:b6:96:9b:3a:
                    c1:2d:ae:a7:7c:88:74:25:3e:ca:83:37:4d:13:3e:
                    03:ef:0d:f7:a1:78:9a:1d:78:65:fa:fe:04:a5:e3:
                    00:c6:b5:68:2a:c3:2f:75:ca:92:1f:5c:25:24:24:
                    05:25:47:e0:4a:30:c3:f6:a5:7b:05:8e:57:3b:07:
                    df:cb:86:43:b3:51:ac:41:09:f6:cd:37:d8:f0:31:
                    54:de:77:93:c5:e3:a0:5c:ce:8a:82:81:32:ee:c6:
                    3d:72:b9:64:f8:88:a1:38:35:d0:98:e5:e4:68:14:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CA:5C:5F:90:64:C9:E4:CE:E7:28:1E:30:17:10:C5:67:28:32:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.168.0/24
                IPv6:
                  2606:fe80:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:45:54:71:3b:b8:bd:50:d9:81:16:67:b2:e5:f8:ec:e8:
         31:c0:f4:ab:8a:ed:6b:d3:43:18:25:45:6a:00:79:cb:5d:06:
         48:a9:fa:76:6f:32:41:60:55:8d:68:d6:55:11:88:8e:79:7c:
         b8:b1:a3:f9:6a:82:fe:fc:ce:6a:a0:52:d0:2b:3c:63:2e:b3:
         b8:e2:96:98:cc:07:02:c8:c6:db:97:a7:da:a6:91:a5:3b:7f:
         1e:26:ac:47:de:41:34:d1:1e:d0:a4:2c:a9:2a:31:6b:a1:57:
         41:f7:91:31:f4:55:1f:57:6b:14:b0:a1:18:f4:db:0c:88:06:
         34:1c:28:d3:16:30:12:43:e3:12:7d:59:8c:ad:71:66:c2:bb:
         3a:2a:13:64:38:c6:d4:2c:92:b1:3f:21:e5:dd:e9:79:9c:c1:
         63:af:3d:aa:42:60:b0:36:76:3a:9f:c6:09:88:3f:e3:96:97:
         dc:23:4c:d5:d7:ec:10:13:14:98:93:15:b4:3a:d8:62:cb:3c:
         f4:bd:c5:2a:40:b5:cf:e3:6c:cd:26:b5:a2:5e:99:5f:7b:64:
         77:15:9c:38:b6:78:76:62:7d:f4:1b:9b:9d:77:1a:46:51:eb:
         26:a1:83:bc:08:65:e4:59:bb:8d:3f:f1:05:96:d6:79:4d:50:
         0d:ec:84:f5
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9MPT+RKwaSesVWjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQxOGNhNmYtMjBjOC00ZjFiLWI0ZjUtZTRmODA1ODYy
MzYzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZTIwMzA4Y2EtYWNiYS00YWJhLWEwYmItMThiMjYxODA3ZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEApZjLXHxli9AC4mz98+1xvX9BiKDBb/RgS
NrQopPN5H3VAc904uNuwWhgbaC7VrXxiosmcybL1PHl+/tX3zG/c3srzgtt5QNm0
JqrpIpmovTtURhvPmTB/eccAoG4r7mfR/qey2FNFot04yBUz6zajUKGXVKXmz2HB
vFT676+4uKdu4n8LY85QhQb1zms1craWmzrBLa6nfIh0JT7KgzdNEz4D7w33oXia
HXhl+v4EpeMAxrVoKsMvdcqSH1wlJCQFJUfgSjDD9qV7BY5XOwffy4ZDs1GsQQn2
zTfY8DFU3neTxeOgXM6KgoEy7sY9crlk+IihODXQmOXkaBTNRQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFOTKXF+QZMnkzucoHjAXEMVnKDLBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4
Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4MDU4NjIzNjMvODI5OGRmNmItNTM3NC0z
YjViLTgwNWItNTYyNzNiZmFmMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzQxOGNhNmYtMjBjOC00ZjFiLWI0
ZjUtZTRmODA1ODYyMzYzL2M0MThjYTZmLTIwYzgtNGYxYi1iNGY1LWU0ZjgwNTg2
MjM2My5jcmwwHwYDVR0jBBgwFoAUNfqIdPmA7c2mQtILHtC4i+/r13swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4
MDU4NjIzNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAovyoMA8E
AgACMAkDBwQmBv6AABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFshFVHE7uL1Q2YEWZ7Ll+OzoMcD0q4rt
a9NDGCVFagB5y10GSKn6dm8yQWBVjWjWVRGIjnl8uLGj+WqC/vzOaqBS0Cs8Yy6z
uOKWmMwHAsjG25en2qaRpTt/HiasR95BNNEe0KQsqSoxa6FXQfeRMfRVH1drFLCh
GPTbDIgGNBwo0xYwEkPjEn1ZjK1xZsK7OioTZDjG1CySsT8h5d3peZzBY689qkJg
sDZ2Op/GCYg/45aX3CNM1dfsEBMUmJMVtDrYYss89L3FKkC1z+NszSa1ol6ZX3tk
dxWcOLZ4dmJ99BubnXcaRlHrJqGDvAhl5Fm7jT/xBZbWeU1QDeyE9Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:54:06 2026 by rpki-client