Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
File:                     167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa (raw, json)
Hash identifier:          KK2LP9CR4hCWXzKITq++aj3cV88Tz7o538xPyEZ8UOI=
Subject key identifier:   29:94:14:C7:9D:9E:78:A0:B1:F3:90:5B:6F:68:49:D6:12:45:D5:D8
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584F4986AB73D3B1FB2BB720DDC0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     376
IP address blocks:        206.167.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:ab:73:d3:b1:fb:2b:b7:20:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0dc7e02d-9e81-4743-af41-40f2a4c0e5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:c7:3a:4a:7e:23:40:01:da:18:03:fe:77:
                    18:f9:c0:21:b9:5e:64:f4:b9:cd:27:bc:53:36:f4:
                    36:1e:ba:88:de:83:46:93:76:8f:eb:19:34:b4:24:
                    1e:59:a0:7f:1a:8b:1e:95:79:40:2a:f9:a4:90:dd:
                    0a:c1:e2:10:32:be:2a:d3:e4:48:23:8e:e6:10:e4:
                    c0:5c:7f:1f:c0:43:f3:db:e4:63:aa:41:2b:25:66:
                    7e:1a:e0:c8:1f:05:4f:de:dd:cb:08:5a:65:5b:78:
                    38:e5:e1:6a:66:13:17:53:9e:64:0a:0b:34:11:22:
                    99:57:a4:01:3b:34:dd:89:79:f0:3d:68:9c:ca:b4:
                    45:f8:ae:56:22:6c:e7:ef:fa:48:2f:bd:b4:2a:70:
                    78:2f:80:5b:f0:fc:c4:e4:55:f5:73:dc:a8:7b:21:
                    33:b0:78:b8:27:e0:5f:33:ba:41:2a:31:12:b6:af:
                    83:6e:4a:6d:8d:63:b3:0f:22:93:68:49:c4:36:d6:
                    5d:b8:ce:29:46:f4:2f:c3:4e:10:7a:44:c1:40:44:
                    23:7b:a1:f8:6f:ee:e6:14:ed:0b:b9:c1:fc:80:f9:
                    66:01:5f:95:7e:71:79:b5:d9:bc:83:21:bb:92:ce:
                    a8:b1:62:e7:f4:1a:d9:83:24:94:33:fa:af:45:a1:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:14:C7:9D:9E:78:A0:B1:F3:90:5B:6F:68:49:D6:12:45:D5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:9e:e2:da:f7:4c:d1:f3:1a:f8:3d:51:64:e5:42:75:9c:
         ff:22:d1:fd:74:a4:d6:36:f5:a2:77:e8:16:e0:e2:0c:4e:c3:
         ed:2e:c9:f2:07:a5:6f:e2:9b:fb:9d:1a:93:2f:a7:64:1b:8b:
         1f:96:8a:4b:a6:01:7c:25:47:f4:46:0a:cc:05:25:1d:e1:c5:
         5c:f5:d3:c7:ac:1c:f1:12:7c:9c:32:f1:e3:ef:fd:dd:f3:c2:
         36:23:0e:cb:97:d6:f0:30:d7:a3:31:33:0a:ae:e5:63:f4:ce:
         7c:66:28:af:c7:d7:30:06:e1:26:b8:3a:3a:35:f7:5e:14:ad:
         80:4e:ad:18:44:9c:5a:98:a2:14:f3:4f:8f:c1:e8:de:8b:9c:
         ad:58:31:82:c4:4b:3e:21:db:4f:31:84:49:8b:38:d5:9c:c4:
         be:a9:f8:37:fa:2c:4e:50:3e:1d:9d:b7:51:54:f2:da:6b:13:
         15:1c:0f:e2:a5:73:51:ac:be:9c:ce:e5:a6:f3:66:eb:41:91:
         72:06:bd:dd:7d:e3:a8:9c:0e:ae:69:54:a5:c8:40:13:81:67:
         b8:99:85:b2:5a:d8:3b:7c:40:2d:60:65:46:6e:17:86:df:5d:
         a9:f1:67:b5:b8:43:7a:35:23:a9:be:75:e8:8d:81:e3:30:50:
         16:07:83:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhqtz07H7K7cg3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGRjN2UwMmQtOWU4MS00NzQzLWFmNDEtNDBmMmE0YzBlNWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHHOkp+I0AB2hgD/ncY+cAhuV5k9LnNJ7xT
NvQ2HrqI3oNGk3aP6xk0tCQeWaB/GoselXlAKvmkkN0KweIQMr4q0+RII47mEOTA
XH8fwEPz2+RjqkErJWZ+GuDIHwVP3t3LCFplW3g45eFqZhMXU55kCgs0ESKZV6QB
OzTdiXnwPWicyrRF+K5WImzn7/pIL720KnB4L4Bb8PzE5FX1c9yoeyEzsHi4J+Bf
M7pBKjEStq+DbkptjWOzDyKTaEnENtZduM4pRvQvw04QekTBQEQje6H4b+7mFO0L
ucH8gPlmAV+VfnF5tdm8gyG7ks6osWLn9BrZgySUM/qvRaElfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmUFMednnigsfOQW29oSdYSRdXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMTY3MTkzYWMtOWE1ZS0z
MTg2LWJkNjEtYThlYjNiZGY2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqePMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvanuLa90zR8xr4PVFk5UJ1nP8i0f10pNY29aJ36Bbg4gxOw+0uyfIH
pW/im/udGpMvp2Qbix+WikumAXwlR/RGCswFJR3hxVz108esHPESfJwy8ePv/d3z
wjYjDsuX1vAw16MxMwqu5WP0znxmKK/H1zAG4Sa4Ojo1914UrYBOrRhEnFqYohTz
T4/B6N6LnK1YMYLESz4h208xhEmLONWcxL6p+Df6LE5QPh2dt1FU8tprExUcD+Kl
c1GsvpzO5abzZutBkXIGvd1946icDq5pVKXIQBOBZ7iZhbJa2Dt8QC1gZUZuF4bf
XanxZ7W4Q3o1I6m+deiNgeMwUBYHgz0=
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:00:14 2026 by rpki-client