Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/c249643d-9412-3302-bffc-bac603dba0c1.roa
File:                     c249643d-9412-3302-bffc-bac603dba0c1.roa (raw, json)
Hash identifier:          nh/eq3M/7Oe4hnf5bed4bh+8OctdUbPOVKLk42dLaNU=
Subject key identifier:   9A:59:43:AA:70:97:20:C9:76:83:10:32:1F:BF:36:C1:34:24:FC:37
Certificate issuer:       /CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b
Certificate serial:       010D0C9F4328584F4972983029A75995AAE56080
Authority key identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/c249643d-9412-3302-bffc-bac603dba0c1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394199
IP address blocks:        216.52.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:98:30:29:a7:59:95:aa:e5:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02d12d27-c74e-49ca-b6ba-258edf285e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:5f:38:bf:7f:96:f7:3d:b2:14:0f:3a:cd:
                    35:ec:4c:42:02:9b:db:db:88:22:aa:10:4e:6e:b5:
                    1d:d3:8b:64:c1:1c:35:e8:a6:5c:58:1a:f8:bc:f0:
                    7e:65:0b:81:9c:de:0f:50:47:81:84:97:5b:95:65:
                    36:28:c8:cf:97:96:44:6c:93:31:a8:89:8c:96:91:
                    53:e4:16:f6:06:ef:4c:57:2c:55:57:d6:e3:35:74:
                    45:d9:46:92:5d:b2:0d:ac:5d:46:da:1d:72:66:ec:
                    bc:b1:13:62:44:3d:51:f0:8e:0f:e2:17:d7:79:58:
                    15:c1:1d:ec:2c:46:a1:07:a7:8b:51:94:93:d1:06:
                    d8:b7:50:f6:4a:3d:72:7e:f4:c6:dd:fe:e1:e1:ed:
                    c0:13:b6:b7:f6:ed:62:43:31:f6:fe:9c:22:7b:3c:
                    ca:60:d4:d2:c0:9d:eb:00:8f:78:06:64:f8:bb:51:
                    eb:0c:26:4c:0e:6b:be:55:2f:e3:85:ba:3b:21:2c:
                    c4:83:8a:50:87:89:c2:db:bb:cb:ff:21:0f:5f:e6:
                    83:35:a6:a5:87:28:85:7f:92:1b:5c:98:ad:80:74:
                    a3:ea:d0:a3:0b:ed:a1:f2:31:01:7d:01:03:06:65:
                    04:8b:61:47:e1:dc:54:ec:d1:0f:23:15:09:06:a2:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:43:AA:70:97:20:C9:76:83:10:32:1F:BF:36:C1:34:24:FC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/c249643d-9412-3302-bffc-bac603dba0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl

            X509v3 Authority Key Identifier:
                keyid:54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:14:f3:93:f7:6a:38:59:3c:b7:c1:8e:62:e3:6c:de:12:ff:
         e6:c0:21:41:aa:02:c1:68:cf:91:76:ca:84:fb:a9:58:b1:d9:
         fd:b4:2c:ef:f2:f0:8f:26:cf:71:ad:5b:f2:e7:10:07:e7:ad:
         59:5e:1c:67:64:02:94:91:1f:85:77:bd:1c:7a:3e:ef:f0:bf:
         8a:1a:88:50:be:3b:ec:dd:f9:23:25:97:92:85:7a:09:87:71:
         ff:60:ef:c6:c0:8a:5e:e0:54:b2:fa:14:66:f0:03:a8:9f:24:
         86:a0:51:3c:75:f2:c6:5b:23:8b:d8:ab:fb:12:d8:f4:63:70:
         41:e7:99:5f:8f:b7:b6:27:5a:c8:ec:24:ed:47:19:4c:27:0b:
         d2:bb:9f:b5:f2:28:89:5f:88:66:44:51:3a:d2:cc:71:6f:3d:
         c4:12:de:cd:d0:02:eb:31:c1:6e:26:a6:dc:32:03:68:71:4b:
         b3:82:61:2f:1f:44:c7:58:9a:00:2a:6c:95:b3:c7:20:a3:a9:
         af:aa:ab:19:4f:e4:92:b3:52:33:36:80:0c:c7:00:2f:75:bf:
         59:41:4c:72:4b:bd:c7:f2:07:d9:42:b0:06:2c:ad:68:20:c8:
         f8:0e:85:5e:68:d8:ea:a6:62:06:df:49:c3:18:f4:a3:86:98:
         29:f0:43:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcpgwKadZlarlYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTExMWRjZGMtMzVmOC00YTJmLWI2NjctYmU2YmFmNWVi
ZjliMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDJkMTJkMjctYzc0ZS00OWNhLWI2YmEtMjU4ZWRmMjg1ZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJlfOL9/lvc9shQPOs017ExCApvb24giqhBO
brUd04tkwRw16KZcWBr4vPB+ZQuBnN4PUEeBhJdblWU2KMjPl5ZEbJMxqImMlpFT
5Bb2Bu9MVyxVV9bjNXRF2UaSXbINrF1G2h1yZuy8sRNiRD1R8I4P4hfXeVgVwR3s
LEahB6eLUZST0QbYt1D2Sj1yfvTG3f7h4e3AE7a39u1iQzH2/pwiezzKYNTSwJ3r
AI94BmT4u1HrDCZMDmu+VS/jhbo7ISzEg4pQh4nC27vL/yEPX+aDNaalhyiFf5Ib
XJitgHSj6tCjC+2h8jEBfQEDBmUEi2FH4dxU7NEPIxUJBqIs9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpZQ6pwlyDJdoMQMh+/NsE0JPw3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MTEx
ZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1ZWJmOWIvYzI0OTY0M2QtOTQxMi0z
MzAyLWJmZmMtYmFjNjAzZGJhMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTExMWRjZGMtMzVmOC00YTJmLWI2
NjctYmU2YmFmNWViZjliLzUxMTFkY2RjLTM1ZjgtNGEyZi1iNjY3LWJlNmJhZjVl
YmY5Yi5jcmwwHwYDVR0jBBgwFoAUVGjpNbfoRitbfEoCc1nrXda/XaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZi
YWY1ZWJmOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DTrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoU85P3ajhZPLfBjmLjbN4S/+bAIUGqAsFoz5F2yoT7qVix2f20LO/y
8I8mz3GtW/LnEAfnrVleHGdkApSRH4V3vRx6Pu/wv4oaiFC+O+zd+SMll5KFegmH
cf9g78bAil7gVLL6FGbwA6ifJIagUTx18sZbI4vYq/sS2PRjcEHnmV+Pt7YnWsjs
JO1HGUwnC9K7n7XyKIlfiGZEUTrSzHFvPcQS3s3QAusxwW4mptwyA2hxS7OCYS8f
RMdYmgAqbJWzxyCjqa+qqxlP5JKzUjM2gAzHAC91v1lBTHJLvcfyB9lCsAYsrWgg
yPgOhV5o2OqmYgbfScMY9KOGmCnwQ+w=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:56 2026 by rpki-client