Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa
File:                     f6772905-9e78-3f55-87a4-e8da870aa987.roa (raw, json)
Hash identifier:          jhNkS5Ch8SWpwyYzzg8Jk0N1G1Al49ZM/jVrnhjO7r0=
Subject key identifier:   67:79:B7:23:C4:D9:64:8C:66:F5:42:A5:2D:F4:DC:B0:0A:D7:FE:84
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584F979DBB59667202F85D9C0080
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     812
IP address blocks:        209.148.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:bb:59:66:72:02:f8:5d:9c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=47872f64-5d32-4961-b38c-26f5b3725609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:d7:1f:63:79:60:91:dc:8c:6c:07:39:ea:
                    f6:e9:33:3a:03:49:25:45:6f:dc:0e:6e:87:66:e1:
                    2e:c1:95:38:46:db:79:0d:28:e2:8f:77:5c:b2:26:
                    1b:09:b7:43:7d:b2:58:f0:cd:b2:a1:d6:37:1d:c4:
                    8a:fb:5c:51:e6:9f:af:98:78:27:ce:5f:75:62:84:
                    bb:90:2b:28:d2:12:18:26:bd:c0:49:da:c2:74:eb:
                    02:30:4b:bd:32:d0:b7:af:3d:48:bc:42:f8:06:c1:
                    23:d9:a7:50:b9:68:e1:4b:01:28:05:86:98:7e:48:
                    36:54:a3:ac:75:39:68:51:df:12:b2:85:98:ce:f3:
                    52:9d:bb:b6:d8:89:19:c5:03:31:01:bc:a0:aa:04:
                    6a:c0:4d:8e:d1:a6:7b:28:23:42:43:de:e5:7e:9f:
                    35:6d:66:cd:a8:2c:b0:13:32:2d:ab:77:4c:32:09:
                    68:4c:da:6f:08:e0:f6:28:09:6c:6e:3c:1d:63:df:
                    9c:f1:95:bc:17:8b:4c:9d:46:ca:29:ba:60:b0:3b:
                    e5:11:dc:ad:37:ab:c1:cf:2e:e0:21:7b:b0:c9:ba:
                    3d:bc:50:94:cd:50:0b:a1:3d:03:88:bc:0b:0e:d4:
                    a7:ea:ae:16:71:c8:c4:1c:74:0b:35:47:0f:b0:5f:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:B7:23:C4:D9:64:8C:66:F5:42:A5:2D:F4:DC:B0:0A:D7:FE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:8f:12:f4:e8:be:41:87:a9:9f:36:be:f8:b1:2d:48:95:
         32:d2:f6:67:95:73:09:a8:2b:51:8d:54:9c:09:5e:68:b9:37:
         71:12:da:e9:1a:09:3c:3f:1b:2e:31:ba:41:3c:7f:27:41:00:
         61:d4:d6:54:53:d0:bf:bf:bd:61:a5:64:50:cc:8f:fe:c7:cb:
         75:19:7b:d1:57:22:41:0e:1e:f3:02:fe:03:3a:d2:f4:6a:75:
         2b:a6:0d:65:b0:03:f7:d8:f5:a9:37:ec:14:82:5c:7b:a1:52:
         e4:b3:65:0b:90:9b:de:ef:1e:34:ef:32:46:9b:11:b9:cd:d5:
         68:4d:e1:16:bb:74:a9:6e:55:19:56:56:5d:53:ad:73:be:cc:
         31:67:06:56:96:22:27:04:8e:f0:0d:db:59:a3:2d:2d:bb:c1:
         7c:8a:53:0f:c4:e1:83:11:a4:4b:f3:36:ed:d6:78:e4:b1:0e:
         9b:13:a8:f4:83:b6:b2:a8:ae:aa:4c:84:ca:7e:f4:f9:7d:de:
         fa:ec:2b:f4:3b:5a:72:b9:e7:09:ab:da:e1:02:f0:c7:47:45:
         4a:a1:3f:53:c9:17:9f:d2:05:25:88:49:8e:68:81:c6:3c:fc:
         d7:40:2a:3a:0b:54:8e:72:12:9e:aa:14:6a:85:e2:6b:6c:a2:
         13:28:47:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XnbtZZnIC+F2cAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz
ZTJkMB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NDc4NzJmNjQtNWQzMi00OTYxLWIzOGMtMjZmNWIzNzI1NjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiHXH2N5YJHcjGwHOer26TM6A0klRW/cDm6H
ZuEuwZU4Rtt5DSjij3dcsiYbCbdDfbJY8M2yodY3HcSK+1xR5p+vmHgnzl91YoS7
kCso0hIYJr3ASdrCdOsCMEu9MtC3rz1IvEL4BsEj2adQuWjhSwEoBYaYfkg2VKOs
dTloUd8SsoWYzvNSnbu22IkZxQMxAbygqgRqwE2O0aZ7KCNCQ97lfp81bWbNqCyw
EzItq3dMMgloTNpvCOD2KAlsbjwdY9+c8ZW8F4tMnUbKKbpgsDvlEdytN6vBzy7g
IXuwybo9vFCUzVALoT0DiLwLDtSn6q4WccjEHHQLNUcPsF/hGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd5tyPE2WSMZvVCpS303LAK1/6EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi
Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvZjY3NzI5MDUtOWU3OC0z
ZjU1LTg3YTQtZThkYTg3MGFhOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1
MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw
M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0
OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ZSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJC4jxL06L5Bh6mfNr74sS1IlTLS9meVcwmoK1GNVJwJXmi5N3ES2uka
CTw/Gy4xukE8fydBAGHU1lRT0L+/vWGlZFDMj/7Hy3UZe9FXIkEOHvMC/gM60vRq
dSumDWWwA/fY9ak37BSCXHuhUuSzZQuQm97vHjTvMkabEbnN1WhN4Ra7dKluVRlW
Vl1TrXO+zDFnBlaWIicEjvAN21mjLS27wXyKUw/E4YMRpEvzNu3WeOSxDpsTqPSD
trKorqpMhMp+9Pl93vrsK/Q7WnK55wmr2uEC8MdHRUqhP1PJF5/SBSWISY5ogcY8
/NdAKjoLVI5yEp6qFGqF4mtsohMoR1I=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:53 2026 by rpki-client