Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
File:                     d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa (raw, json)
Hash identifier:          0aP3BN6ehVs7NYI7jHi+tTIKS8frHXKOqcKXPjOoTqc=
Subject key identifier:   19:4D:E8:35:6F:BE:0B:D2:CB:C3:6C:0F:58:21:14:5F:96:DF:50:7A
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584F979DC9BA40E40A61592E8940
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     812
IP address blocks:        24.137.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:c9:ba:40:e4:0a:61:59:2e:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=a099baec-cffb-4a1e-8301-c4220d7adc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:86:d9:f1:d8:8c:c9:86:ee:96:6e:3f:41:19:
                    25:e6:9b:86:85:84:e6:4a:a4:60:81:28:56:8a:5e:
                    d8:c3:da:76:88:0d:05:40:ed:15:dd:be:ab:10:06:
                    ce:67:2b:86:36:20:53:9c:b4:4c:7e:0c:a5:3e:33:
                    02:ed:d7:71:d3:33:42:b1:d0:5a:70:40:1d:8c:83:
                    f0:3c:66:34:de:0a:85:2a:a9:7d:d9:0f:b5:09:7f:
                    9b:73:82:38:17:de:d2:a9:0d:1f:a6:11:ad:ff:95:
                    97:5e:7c:14:4e:08:ed:4d:e3:44:ad:b5:bf:61:10:
                    fb:a1:99:b5:eb:23:32:3d:2e:f1:0a:84:6e:93:9d:
                    99:3f:27:92:d7:b6:8d:8f:4b:8f:ca:15:2d:8f:93:
                    aa:fd:43:5d:3a:47:6c:8b:df:3c:5b:aa:a9:5c:c9:
                    8e:b3:b8:da:89:5a:69:3e:a8:e6:f8:cf:66:83:56:
                    a0:e6:85:b9:67:96:d9:0a:26:42:14:c4:fd:c5:a5:
                    c1:e3:d2:6e:9f:6c:17:8f:8e:41:61:ce:5f:88:56:
                    67:50:f9:c2:65:9b:61:b9:9e:2f:42:92:dc:e7:36:
                    3c:0b:3e:bd:01:3f:7c:09:38:3d:72:ab:ad:b4:5d:
                    47:00:7d:fd:44:cd:2c:91:39:11:a0:f0:50:d3:ec:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:E8:35:6F:BE:0B:D2:CB:C3:6C:0F:58:21:14:5F:96:DF:50:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:81:fc:87:d3:a6:d7:fd:e1:96:41:e5:17:34:57:01:02:d6:
         b0:44:e0:91:d6:60:1f:bd:b7:36:46:30:88:a2:cd:ca:31:bb:
         04:d7:b8:34:a1:29:e1:81:4a:86:df:eb:93:90:71:70:a9:de:
         80:18:2c:6f:00:cb:52:9e:76:8a:e5:75:8e:ae:b2:6b:1c:9d:
         97:04:2e:cd:af:1c:c6:1f:09:89:cf:25:9f:a1:5a:b6:37:ba:
         04:d9:2c:16:4e:26:82:b4:4c:e0:ee:82:bb:33:74:5d:6d:42:
         dd:e2:32:5b:8d:ef:8f:68:37:ad:4e:8c:3c:ce:54:84:de:7f:
         57:6b:8f:ec:10:b4:9d:e8:fd:1b:bc:42:c5:56:c9:b5:20:b9:
         d5:eb:bf:6e:17:88:71:26:8c:ed:af:31:1d:56:16:88:40:01:
         c2:37:9d:66:c6:20:16:8d:b9:cc:bd:31:48:5c:00:a6:4c:a5:
         93:c5:52:f6:25:2e:09:c6:e8:21:68:73:5a:fe:3c:28:87:a1:
         75:b6:2d:e1:14:94:16:54:85:7a:51:b2:10:53:d1:2b:f1:3d:
         09:43:5d:a5:3a:9d:86:a8:70:57:ba:5c:0e:7c:f8:74:34:a1:
         83:bc:0e:36:21:48:ff:72:10:49:b6:36:ac:36:19:ae:b6:0c:
         8a:9f:78:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Xncm6QOQKYVkuiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0
NzUxMB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTA5OWJhZWMtY2ZmYi00YTFlLTgzMDEtYzQyMjBkN2FkYzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4bZ8diMyYbulm4/QRkl5puGhYTmSqRggShW
il7Yw9p2iA0FQO0V3b6rEAbOZyuGNiBTnLRMfgylPjMC7ddx0zNCsdBacEAdjIPw
PGY03gqFKql92Q+1CX+bc4I4F97SqQ0fphGt/5WXXnwUTgjtTeNErbW/YRD7oZm1
6yMyPS7xCoRuk52ZPyeS17aNj0uPyhUtj5Oq/UNdOkdsi988W6qpXMmOs7jaiVpp
Pqjm+M9mg1ag5oW5Z5bZCiZCFMT9xaXB49Jun2wXj45BYc5fiFZnUPnCZZthuZ4v
QpLc5zY8Cz69AT98CTg9cquttF1HAH39RM0skTkRoPBQ0+ySWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlN6DVvvgvSy8NsD1ghFF+W31B6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj
OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvZDhiYmQzYjAtZDNkYi0z
ZWRkLTllYmUtMjYxN2NkZjk3YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj
YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk
NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz
N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGInAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGB/IfTptf94ZZB5Rc0VwEC1rBE4JHWYB+9tzZGMIiizcoxuwTXuDSh
KeGBSobf65OQcXCp3oAYLG8Ay1KedorldY6usmscnZcELs2vHMYfCYnPJZ+hWrY3
ugTZLBZOJoK0TODugrszdF1tQt3iMluN749oN61OjDzOVITef1drj+wQtJ3o/Ru8
QsVWybUgudXrv24XiHEmjO2vMR1WFohAAcI3nWbGIBaNucy9MUhcAKZMpZPFUvYl
LgnG6CFoc1r+PCiHoXW2LeEUlBZUhXpRshBT0SvxPQlDXaU6nYaocFe6XA58+HQ0
oYO8DjYhSP9yEEm2Nqw2Ga62DIqfeHk=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:59 2026 by rpki-client