Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/bbd4b14a-af2a-3054-babf-3ee197655e46.roa
File:                     bbd4b14a-af2a-3054-babf-3ee197655e46.roa (raw, json)
Hash identifier:          sDux8/8d2kt5CNyNhXYmu6BAeGC52OXmoGvqCohkGfU=
Subject key identifier:   E9:49:92:02:27:5A:F1:4C:D2:1A:46:66:5F:12:8F:68:94:34:9B:DD
Certificate issuer:       /CN=ad842c91-b318-4d14-8b45-f69bae7985e4
Certificate serial:       010D0C9F4328584F497355BD39A73FCB4AF36BC0
Authority key identifier: E5:60:82:CD:13:CC:18:B8:0D:B5:0E:EA:A8:98:F7:67:DF:E6:8C:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/bbd4b14a-af2a-3054-babf-3ee197655e46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402083
IP address blocks:        199.34.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/ad842c91-b318-4d14-8b45-f69bae7985e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/ad842c91-b318-4d14-8b45-f69bae7985e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:55:bd:39:a7:3f:cb:4a:f3:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad842c91-b318-4d14-8b45-f69bae7985e4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=968cf2fc-2613-480f-bd2c-4e0a77b0f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:be:c9:f3:c5:39:0b:aa:21:35:ee:eb:70:
                    e0:3b:ba:6a:e0:d5:98:92:e6:35:1f:88:cc:fb:32:
                    63:89:31:c9:2d:06:d9:a2:1d:41:4a:37:b3:79:f5:
                    95:95:a2:86:3f:e1:ec:31:50:5a:4a:31:34:fc:6a:
                    4a:4d:e6:ca:93:c9:89:b5:d0:34:af:14:37:0b:16:
                    c9:18:42:45:ae:17:f2:08:98:54:65:e8:80:a4:f7:
                    6d:50:e0:db:1a:8e:8d:b8:75:b6:e1:4f:b3:60:07:
                    2c:c7:90:0d:af:d7:66:ac:30:9e:15:df:07:06:91:
                    f0:d5:75:d6:70:46:6d:25:ad:7b:2a:97:26:1e:58:
                    47:13:45:79:a2:9b:23:82:ad:b9:a0:a3:42:3e:ec:
                    07:b8:5a:25:f7:5c:57:94:18:dc:45:e0:f2:48:6a:
                    e8:ba:14:b0:cd:13:11:bd:e7:54:13:4d:45:55:3a:
                    e5:c2:4f:61:71:b2:67:05:ee:7e:0f:42:00:71:30:
                    f7:e8:c7:ff:8a:d7:0e:f5:69:e7:e6:43:18:d9:6b:
                    c0:86:f9:97:b2:0b:d7:73:1f:13:45:da:29:40:ee:
                    93:ac:10:31:2f:04:d3:3a:ca:ac:11:29:1d:4c:16:
                    2a:cd:3d:e0:6c:6d:3e:d7:06:38:a8:23:20:fe:bd:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:49:92:02:27:5A:F1:4C:D2:1A:46:66:5F:12:8F:68:94:34:9B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/bbd4b14a-af2a-3054-babf-3ee197655e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4/ad842c91-b318-4d14-8b45-f69bae7985e4.crl

            X509v3 Authority Key Identifier:
                keyid:E5:60:82:CD:13:CC:18:B8:0D:B5:0E:EA:A8:98:F7:67:DF:E6:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad842c91-b318-4d14-8b45-f69bae7985e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:0f:d0:9d:4a:cb:fa:19:6a:fc:41:f6:36:65:60:2b:52:
         78:97:56:a4:79:60:57:31:da:7c:9e:4b:68:9d:18:cf:32:d8:
         16:ea:09:88:d1:d4:81:25:e6:c9:da:a8:9d:ef:64:5d:fe:9a:
         46:ba:fc:f2:33:63:f6:4d:83:21:14:d4:1d:84:14:78:7b:ee:
         4f:31:ef:2f:35:19:e4:2b:f5:a3:d0:4e:37:06:c4:c2:41:35:
         fa:b1:f9:c6:1b:a6:ac:d3:2c:13:83:2f:a0:da:a2:5c:18:fb:
         2d:06:39:c6:0a:1d:fc:bb:5b:3d:39:da:08:38:e4:d9:f9:6b:
         18:09:78:3e:0d:5e:12:96:79:36:66:0d:14:e7:40:7e:9d:be:
         98:85:1d:af:86:f2:43:b6:11:58:b5:85:f1:74:15:b9:ca:10:
         ce:72:92:bb:34:91:2b:ad:c0:e8:4b:9f:66:9a:e0:ab:28:d3:
         b7:49:77:df:91:56:d5:c2:43:53:ec:cd:5b:33:09:65:7b:75:
         c4:77:0d:42:85:ce:ed:50:07:63:5c:f5:ac:2e:24:2b:5c:f6:
         36:4d:7f:79:c1:a7:90:8c:27:15:b2:23:ef:53:00:13:88:84:
         ed:ed:a7:12:80:ef:e6:3a:a6:04:7a:4d:92:2e:0f:91:f7:96:
         91:6b:1c:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1W9Oac/y0rza8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ4NDJjOTEtYjMxOC00ZDE0LThiNDUtZjY5YmFlNzk4
NWU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTY4Y2YyZmMtMjYxMy00ODBmLWJkMmMtNGUwYTc3YjBmODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaq+yfPFOQuqITXu63DgO7pq4NWYkuY1H4jM
+zJjiTHJLQbZoh1BSjezefWVlaKGP+HsMVBaSjE0/GpKTebKk8mJtdA0rxQ3CxbJ
GEJFrhfyCJhUZeiApPdtUODbGo6NuHW24U+zYAcsx5ANr9dmrDCeFd8HBpHw1XXW
cEZtJa17KpcmHlhHE0V5opsjgq25oKNCPuwHuFol91xXlBjcReDySGrouhSwzRMR
vedUE01FVTrlwk9hcbJnBe5+D0IAcTD36Mf/itcO9Wnn5kMY2WvAhvmXsgvXcx8T
RdopQO6TrBAxLwTTOsqsESkdTBYqzT3gbG0+1wY4qCMg/r0L6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlJkgInWvFM0hpGZl8Sj2iUNJvdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZDg0
MmM5MS1iMzE4LTRkMTQtOGI0NS1mNjliYWU3OTg1ZTQvYmJkNGIxNGEtYWYyYS0z
MDU0LWJhYmYtM2VlMTk3NjU1ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWQ4NDJjOTEtYjMxOC00ZDE0LThi
NDUtZjY5YmFlNzk4NWU0L2FkODQyYzkxLWIzMTgtNGQxNC04YjQ1LWY2OWJhZTc5
ODVlNC5jcmwwHwYDVR0jBBgwFoAU5WCCzRPMGLgNtQ7qqJj3Z9/mjCQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9hZDg0MmM5MS1iMzE4LTRkMTQtOGI0NS1mNjli
YWU3OTg1ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS4D9CdSsv6GWr8QfY2ZWArUniXVqR5YFcx2nyeS2idGM8y2BbqCYjR
1IEl5snaqJ3vZF3+mka6/PIzY/ZNgyEU1B2EFHh77k8x7y81GeQr9aPQTjcGxMJB
Nfqx+cYbpqzTLBODL6DaolwY+y0GOcYKHfy7Wz052gg45Nn5axgJeD4NXhKWeTZm
DRTnQH6dvpiFHa+G8kO2EVi1hfF0FbnKEM5ykrs0kSutwOhLn2aa4Kso07dJd9+R
VtXCQ1PszVszCWV7dcR3DUKFzu1QB2Nc9awuJCtc9jZNf3nBp5CMJxWyI+9TABOI
hO3tpxKA7+Y6pgR6TZIuD5H3lpFrHM0=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:53:16 2026 by rpki-client