Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e15b9102-ee5d-38b8-819f-2923569fc003.roa
File:                     e15b9102-ee5d-38b8-819f-2923569fc003.roa (raw, json)
Hash identifier:          nNvxkcN9S9wLAe6Bpw/G5mkwPBPuqC4EGQocr3yLhtQ=
Subject key identifier:   4D:0B:A7:A0:74:A6:02:5A:DA:C5:46:6A:32:97:25:A7:6F:25:C8:3F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584F497644B0E510833A8F828127
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e15b9102-ee5d-38b8-819f-2923569fc003.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     109
IP address blocks:        192.133.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:44:b0:e5:10:83:3a:8f:82:81:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d34c4704-3baf-4d9f-b861-28e3dbe7f684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:7d:69:7b:04:05:e2:cf:85:07:4e:94:41:
                    af:3c:1a:0b:e6:6f:8e:8d:d2:94:5a:68:b9:f7:07:
                    63:7a:bf:02:94:d3:cb:ab:ec:f6:49:0b:61:c8:df:
                    41:53:81:1a:a2:c6:ee:98:05:a1:ec:27:e4:56:5d:
                    4b:a9:5f:bd:c2:75:54:c8:89:31:e4:bb:f7:f1:47:
                    0c:d1:8c:5c:6f:27:a7:58:45:84:cf:42:d1:81:05:
                    e4:05:d1:04:43:2c:e1:fd:4e:be:0d:c4:65:72:23:
                    16:1f:38:8b:d7:74:a2:43:57:6b:36:81:13:70:69:
                    7f:26:2c:38:21:c2:e6:19:fe:ed:85:49:17:20:f9:
                    62:19:b4:bc:da:87:3d:fc:a1:d6:57:c9:2e:5f:35:
                    4f:64:5e:33:62:a6:27:d7:fa:69:7d:e5:48:c7:21:
                    51:2a:38:9c:8c:6a:a7:d7:b7:3c:30:df:62:db:5a:
                    33:fd:ab:d5:de:fa:c8:38:af:a9:9d:d6:8e:a7:5e:
                    e7:d0:05:f8:84:4c:49:06:45:3b:ec:fb:d7:f7:a2:
                    1f:6c:16:f3:2f:e7:74:63:83:ef:af:3c:28:bd:28:
                    d9:66:25:f0:40:e8:e3:ee:bf:cd:c7:ef:3a:5c:d9:
                    6c:2e:86:2b:7d:6a:53:88:78:7d:3b:61:8e:9f:05:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:A7:A0:74:A6:02:5A:DA:C5:46:6A:32:97:25:A7:6F:25:C8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e15b9102-ee5d-38b8-819f-2923569fc003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:97:17:ac:54:08:64:8c:b7:d9:31:60:88:09:77:f4:e6:
         54:0b:d1:5b:11:71:47:a4:99:47:94:53:c1:a8:f1:3f:c8:69:
         1b:cc:5f:e5:98:65:86:20:71:75:8e:ba:81:4c:aa:9d:78:3b:
         09:75:9e:98:23:c2:ad:c8:0f:d9:da:90:ca:a4:5c:8e:8a:79:
         e0:93:c1:f4:94:21:ca:03:a5:d9:03:46:55:66:b3:db:c4:e0:
         66:df:e1:5d:56:4c:1d:41:31:88:43:c3:92:b7:3a:88:37:53:
         85:50:46:73:74:97:12:0f:d8:a8:df:d6:b9:bd:a9:0c:9b:77:
         fa:8f:94:4b:72:cf:84:4e:25:93:53:a5:c0:bb:a3:63:5f:e1:
         d3:1f:9c:38:df:ab:70:70:b8:69:74:bb:cf:49:92:89:5c:6a:
         fe:b7:ef:b0:ce:1d:1f:86:68:4a:4c:3d:1b:d2:9c:dc:1e:73:
         f0:43:dd:52:35:b4:ba:0c:50:08:31:90:f3:d2:e4:de:f9:dd:
         54:1e:b6:6a:22:34:70:ed:a0:fd:40:62:41:54:df:09:a8:a5:
         16:c4:27:f1:67:08:26:66:d4:bf:4c:b1:4e:66:7b:74:bd:cc:
         0b:7e:81:fe:f5:02:d7:98:d0:46:9d:92:ab:3a:c2:94:49:cf:
         89:41:b0:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkSw5RCDOo+CgScwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM0YzQ3MDQtM2JhZi00ZDlmLWI4NjEtMjhlM2RiZTdmNjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9t9aXsEBeLPhQdOlEGvPBoL5m+OjdKUWmi5
9wdjer8ClNPLq+z2SQthyN9BU4EaosbumAWh7CfkVl1LqV+9wnVUyIkx5Lv38UcM
0YxcbyenWEWEz0LRgQXkBdEEQyzh/U6+DcRlciMWHziL13SiQ1drNoETcGl/Jiw4
IcLmGf7thUkXIPliGbS82oc9/KHWV8kuXzVPZF4zYqYn1/ppfeVIxyFRKjicjGqn
17c8MN9i21oz/avV3vrIOK+pndaOp17n0AX4hExJBkU77PvX96IfbBbzL+d0Y4Pv
rzwovSjZZiXwQOjj7r/Nx+86XNlsLoYrfWpTiHh9O2GOnwV+7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0Lp6B0pgJa2sVGajKXJadvJcg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvZTE1YjkxMDItZWU1ZC0z
OGI4LTgxOWYtMjkyMzU2OWZjMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwIXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4PlxesVAhkjLfZMWCICXf05lQL0VsRcUekmUeUU8Go8T/IaRvMX+WY
ZYYgcXWOuoFMqp14Owl1npgjwq3ID9nakMqkXI6KeeCTwfSUIcoDpdkDRlVms9vE
4Gbf4V1WTB1BMYhDw5K3Oog3U4VQRnN0lxIP2Kjf1rm9qQybd/qPlEtyz4ROJZNT
pcC7o2Nf4dMfnDjfq3BwuGl0u89Jkolcav6377DOHR+GaEpMPRvSnNwec/BD3VI1
tLoMUAgxkPPS5N753VQetmoiNHDtoP1AYkFU3wmopRbEJ/FnCCZm1L9MsU5me3S9
zAt+gf71AteY0Eadkqs6wpRJz4lBsLw=
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:09:43 2026 by rpki-client