Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6f997c65-12db-3b97-980c-a728f55a5070.roa
File:                     6f997c65-12db-3b97-980c-a728f55a5070.roa (raw, json)
Hash identifier:          AIT+TWHxx+OiyGew72Sr0z/UssNVIj+v6Z4cVRlYa40=
Subject key identifier:   A5:C4:9C:65:05:97:FB:8D:72:65:83:3B:0D:01:B0:8D:B2:FF:75:F9
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD5B439EA2FD0E17C48600
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6f997c65-12db-3b97-980c-a728f55a5070.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        216.220.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:5b:43:9e:a2:fd:0e:17:c4:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=563b3593-cc9a-462a-9a9b-643b0e3c7190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:66:50:77:ff:13:51:90:ac:92:d4:26:16:
                    5f:31:09:f3:eb:f8:10:00:7e:c0:57:40:cc:5c:35:
                    82:a1:a8:a2:0c:8c:5b:87:ff:0e:bd:6f:57:7d:46:
                    99:8a:86:a0:5e:4a:07:03:8d:57:65:71:d6:09:c8:
                    23:3b:44:00:7f:dc:5f:49:8f:89:17:c9:a7:85:da:
                    da:72:65:6c:0e:be:23:0f:af:75:80:f4:24:65:25:
                    1e:3b:7b:1a:a9:83:a9:40:80:61:5e:40:ea:0c:29:
                    3d:60:59:45:c4:0e:19:4b:1e:aa:e9:03:b6:45:13:
                    85:77:56:4a:03:27:fe:a0:eb:e2:84:05:2c:2e:27:
                    08:a8:1d:c3:b2:01:02:77:3a:c0:86:15:22:04:37:
                    b5:a8:0c:31:67:a0:dc:25:4b:9a:7e:1d:c9:02:f4:
                    41:2b:e7:ad:8a:15:3c:5a:e8:c3:95:51:b0:e2:f9:
                    16:aa:20:48:f7:89:49:aa:83:e6:96:db:f7:30:2f:
                    ff:42:ee:82:11:7d:f1:1f:da:d2:6a:b3:b1:b3:60:
                    c9:f8:76:9f:59:5f:34:83:2d:19:ab:c2:65:a5:58:
                    22:4a:6f:b0:33:1d:cf:cd:8c:58:16:5a:88:e4:e3:
                    af:fd:24:7d:3f:56:81:5b:b7:a2:85:f9:46:37:89:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C4:9C:65:05:97:FB:8D:72:65:83:3B:0D:01:B0:8D:B2:FF:75:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/6f997c65-12db-3b97-980c-a728f55a5070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:11:0f:36:30:01:1e:7f:66:08:da:49:9a:8c:ed:a7:1f:cb:
         af:6c:6f:cd:94:7c:7c:bb:a8:76:c7:69:6a:e7:42:e6:ce:f9:
         3a:2a:f7:00:63:dc:c1:f5:25:4b:45:ae:8d:53:f7:1c:9b:9a:
         de:5b:ef:6a:de:2b:da:12:dd:4a:36:19:df:9b:ac:eb:34:ca:
         85:da:22:c8:61:17:c6:04:d8:c3:db:3f:3c:de:c7:59:4a:45:
         ec:e1:2f:94:ec:aa:9e:89:aa:21:1c:e2:4c:df:d6:99:fc:77:
         4d:04:d6:1c:00:a1:3d:13:4b:be:bf:39:d5:21:65:35:d3:25:
         d2:47:cd:fc:78:29:72:c7:39:9a:d9:f5:c6:4c:42:2b:a0:b2:
         49:e9:62:59:82:88:e8:b7:a7:0a:05:d9:43:33:4a:3f:df:e3:
         20:17:cf:6e:57:6e:92:ae:77:81:33:15:53:27:a3:e5:eb:97:
         d4:bd:14:89:31:6c:f5:28:bd:62:2e:e4:fe:28:a8:b8:98:03:
         14:21:e9:bb:26:8a:ea:b2:34:8e:b6:df:ae:76:f5:16:7f:e5:
         c5:44:68:c9:21:10:16:f5:c6:d7:30:1e:00:09:1b:fa:21:fb:
         83:92:78:17:a7:b0:77:54:cd:12:28:4a:be:1a:35:2c:99:de:
         0b:0e:1b:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VtDnqL9DhfEhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk
NTYzYjM1OTMtY2M5YS00NjJhLTlhOWItNjQzYjBlM2M3MTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/BmUHf/E1GQrJLUJhZfMQnz6/gQAH7AV0DM
XDWCoaiiDIxbh/8OvW9XfUaZioagXkoHA41XZXHWCcgjO0QAf9xfSY+JF8mnhdra
cmVsDr4jD691gPQkZSUeO3saqYOpQIBhXkDqDCk9YFlFxA4ZSx6q6QO2RROFd1ZK
Ayf+oOvihAUsLicIqB3DsgECdzrAhhUiBDe1qAwxZ6DcJUuafh3JAvRBK+etihU8
WujDlVGw4vkWqiBI94lJqoPmltv3MC//Qu6CEX3xH9rSarOxs2DJ+HafWV80gy0Z
q8JlpVgiSm+wMx3PzYxYFlqI5OOv/SR9P1aBW7eihflGN4lmHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXEnGUFl/uNcmWDOw0BsI2y/3X5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvNmY5OTdjNjUtMTJkYi0z
Yjk3LTk4MGMtYTcyOGY1NWE1MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NwbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMRDzYwAR5/ZgjaSZqM7acfy69sb82UfHy7qHbHaWrnQubO+Toq9wBj
3MH1JUtFro1T9xybmt5b72reK9oS3Uo2Gd+brOs0yoXaIshhF8YE2MPbPzzex1lK
RezhL5Tsqp6JqiEc4kzf1pn8d00E1hwAoT0TS76/OdUhZTXTJdJHzfx4KXLHOZrZ
9cZMQiugsknpYlmCiOi3pwoF2UMzSj/f4yAXz25XbpKud4EzFVMno+Xrl9S9FIkx
bPUovWIu5P4oqLiYAxQh6bsmiuqyNI6236529RZ/5cVEaMkhEBb1xtcwHgAJG/oh
+4OSeBensHdUzRIoSr4aNSyZ3gsOG3M=
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:46:47 2026 by rpki-client