Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa
File:                     815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa (raw, json)
Hash identifier:          XdUqICW/xMd7EnMyy9qktxsxJw5vlzY9r/lYaCMWEHw=
Subject key identifier:   98:D6:F9:96:55:25:97:01:C4:C5:6B:74:74:64:FD:D1:17:AA:C5:3D
Certificate issuer:       /CN=423661c1-1874-440d-9de8-948e2ed69ebe
Certificate serial:       010D0C9F4328584F00DCBDEA3228E2E67FC31597
Authority key identifier: 30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     402056
IP address blocks:        198.252.150.0/24 maxlen: 24
                          2602:f3c3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bd:ea:32:28:e2:e6:7f:c3:15:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423661c1-1874-440d-9de8-948e2ed69ebe
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=ad7c3a92-266a-4bb0-b50a-7c7b7c0d88a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:62:eb:02:74:c1:bb:d0:25:07:16:83:ba:
                    14:7f:5a:d2:34:ec:00:69:a1:57:07:8d:de:d8:5a:
                    6e:3a:d5:f6:fd:00:28:5a:f7:4c:7b:dc:c8:13:3f:
                    ed:1a:68:cb:46:fa:b4:86:ed:5f:75:44:5c:dd:4d:
                    3c:05:7a:b1:87:e5:a4:5b:59:eb:74:86:d7:79:a0:
                    fc:80:89:6f:d9:50:af:ea:19:45:6f:46:59:cb:3e:
                    d1:1d:74:1f:8a:86:89:70:c3:35:64:03:48:ab:fe:
                    f5:6f:d7:b2:23:14:22:b8:a1:a8:70:94:c1:95:ce:
                    6a:a2:e5:61:98:0c:28:ed:73:40:6a:c9:81:d3:7a:
                    5e:f5:ae:18:fc:00:dc:04:c6:a6:2e:59:9d:0f:91:
                    c6:9a:8b:40:db:97:a6:fd:41:1b:c8:25:ed:7f:07:
                    20:dd:c3:5e:ed:a3:13:ce:f6:f6:b7:f5:c1:87:b9:
                    5f:25:4a:46:53:39:36:17:8c:57:2e:98:2a:38:99:
                    48:6a:90:bb:a2:1c:89:66:24:f5:bc:4f:d0:85:93:
                    2a:91:70:22:2f:fb:fc:43:41:0a:f6:41:5f:b2:c1:
                    87:b9:c6:df:3f:4c:63:da:4f:75:24:b1:19:30:6e:
                    80:79:56:6a:67:9c:66:05:3a:dd:0c:ac:78:b2:1c:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:F9:96:55:25:97:01:C4:C5:6B:74:74:64:FD:D1:17:AA:C5:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl

            X509v3 Authority Key Identifier:
                keyid:30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.150.0/24
                IPv6:
                  2602:f3c3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:5c:da:57:90:50:d5:a3:de:0a:40:41:19:0e:0d:50:c6:
         49:cd:ef:6c:53:09:94:e7:69:b7:0d:c7:3a:78:a0:e7:93:79:
         21:19:51:ca:c1:61:41:d9:c6:66:81:8f:ed:fe:53:c0:88:97:
         d4:32:9b:de:34:3a:6b:70:95:84:d9:01:15:ca:0f:44:7b:6f:
         b5:02:d4:27:12:12:31:3f:91:80:ca:0d:2f:8f:a7:71:72:c6:
         d2:10:87:bd:72:db:8a:7b:a0:a1:15:d5:68:8b:47:11:30:eb:
         2d:f5:31:c0:dc:ce:dc:7f:10:b8:9f:67:db:f7:23:cb:6f:1f:
         fb:f1:b4:e4:ea:35:8c:29:af:d8:4d:c7:d0:9a:fe:da:af:a2:
         a3:01:10:92:4d:22:dd:74:1a:a0:9a:09:88:b5:f4:b5:3f:dd:
         de:60:23:4f:55:de:52:c4:e0:d2:58:f8:84:ed:97:06:2b:35:
         fc:06:61:e4:82:98:3c:36:e0:4f:ef:42:7f:9a:f7:47:5f:81:
         d4:14:7e:45:41:a3:c5:ff:a5:b3:75:6e:57:ef:d2:d1:22:a9:
         fc:ff:db:5d:30:9d:94:7d:90:46:89:8c:17:bc:1a:bc:e7:70:
         b3:1e:f9:70:0c:c1:b9:03:02:5f:5f:5e:4a:1a:7b:e3:a7:a2:
         f5:00:50:0d
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8A3L3qMiji5n/DFZcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzNjYxYzEtMTg3NC00NDBkLTlkZTgtOTQ4ZTJlZDY5
ZWJlMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
YWQ3YzNhOTItMjY2YS00YmIwLWI1MGEtN2M3YjdjMGQ4OGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGxi6wJ0wbvQJQcWg7oUf1rSNOwAaaFXB43e
2FpuOtX2/QAoWvdMe9zIEz/tGmjLRvq0hu1fdURc3U08BXqxh+WkW1nrdIbXeaD8
gIlv2VCv6hlFb0ZZyz7RHXQfioaJcMM1ZANIq/71b9eyIxQiuKGocJTBlc5qouVh
mAwo7XNAasmB03pe9a4Y/ADcBMamLlmdD5HGmotA25em/UEbyCXtfwcg3cNe7aMT
zvb2t/XBh7lfJUpGUzk2F4xXLpgqOJlIapC7ohyJZiT1vE/QhZMqkXAiL/v8Q0EK
9kFfssGHucbfP0xj2k91JLEZMG6AeVZqZ5xmBTrdDKx4shwJ+wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJjW+ZZVJZcBxMVrdHRk/dEXqsU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MjM2
NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhlMmVkNjllYmUvODE1YzNhZmQtOTJjNS0z
OWE3LThmYmEtMDI5N2IxZTFjYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDIzNjYxYzEtMTg3NC00NDBkLTlk
ZTgtOTQ4ZTJlZDY5ZWJlLzQyMzY2MWMxLTE4NzQtNDQwZC05ZGU4LTk0OGUyZWQ2
OWViZS5jcmwwHwYDVR0jBBgwFoAUMGVf3lIV21tleIOlxHXF++nNTG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80MjM2NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhl
MmVkNjllYmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxvyWMA4E
AgACMAgDBgAmAvPDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtdFzaV5BQ1aPeCkBBGQ4NUMZJze9sUwmU
52m3Dcc6eKDnk3khGVHKwWFB2cZmgY/t/lPAiJfUMpveNDprcJWE2QEVyg9Ee2+1
AtQnEhIxP5GAyg0vj6dxcsbSEIe9ctuKe6ChFdVoi0cRMOst9THA3M7cfxC4n2fb
9yPLbx/78bTk6jWMKa/YTcfQmv7ar6KjARCSTSLddBqgmgmItfS1P93eYCNPVd5S
xODSWPiE7ZcGKzX8BmHkgpg8NuBP70J/mvdHX4HUFH5FQaPF/6WzdW5X79LRIqn8
/9tdMJ2UfZBGiYwXvBq853CzHvlwDMG5AwJfX15KGnvjp6L1AFAN
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:38:17 2026 by rpki-client