Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/9bdf426f-fcc3-3352-9302-577eeeea3e0d.roa
File:                     9bdf426f-fcc3-3352-9302-577eeeea3e0d.roa (raw, json)
Hash identifier:          9X5B2Axedhfck1+5s5OJzhXaDkKv1kVrmE8jz97E6rA=
Subject key identifier:   55:BD:31:03:FF:48:9C:D2:B2:77:99:76:0B:61:A7:13:98:AA:13:3A
Certificate issuer:       /CN=f0064322-6e7f-4584-a179-efc5e9b44dbd
Certificate serial:       010D0C9F4328584F4C3D625193F8DBCAC2F34140
Authority key identifier: E1:BC:3E:F4:6B:01:23:35:26:31:1D:9E:8E:A3:B7:80:75:87:54:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/9bdf426f-fcc3-3352-9302-577eeeea3e0d.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     16509
IP address blocks:        199.255.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/f0064322-6e7f-4584-a179-efc5e9b44dbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/f0064322-6e7f-4584-a179-efc5e9b44dbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:62:51:93:f8:db:ca:c2:f3:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0064322-6e7f-4584-a179-efc5e9b44dbd
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=ce4d39f4-04e2-4771-8413-7a673a143e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:87:07:4f:c6:da:87:f3:df:cc:5a:48:66:
                    df:e6:50:0b:85:f9:10:5d:31:86:28:6b:79:9b:72:
                    46:99:98:a6:83:e0:8b:99:fd:16:74:c5:49:f5:8f:
                    25:f9:2f:38:e0:3a:82:15:10:5b:98:f1:10:5a:20:
                    ed:1f:d1:c6:a4:1e:4e:ff:ce:e0:b4:cd:d4:ab:e8:
                    ff:75:c3:56:ea:66:51:16:e8:66:78:1e:d7:f0:9a:
                    ac:81:9f:3f:c9:16:1a:18:7b:c9:79:e4:3c:2f:2f:
                    7b:48:46:f7:22:1a:f3:6f:bd:7c:a9:6f:b4:db:5b:
                    d8:4f:8f:b2:52:07:81:ac:a5:6b:c5:db:cc:38:6f:
                    4c:db:60:81:74:1b:20:71:3c:12:7d:06:ad:53:a1:
                    b7:ea:7e:ad:3c:67:f3:fc:85:9a:18:b4:85:e3:06:
                    1c:52:f4:73:0b:fc:7b:62:bb:87:5e:1c:48:d1:4e:
                    1c:70:e4:24:94:fb:c6:42:73:71:66:49:5a:e6:5c:
                    ec:e1:ec:0a:4c:72:93:79:ed:c1:61:70:77:e4:2a:
                    10:8a:1a:77:6a:7c:28:c2:54:3b:64:6b:de:f8:06:
                    17:d1:19:6f:f5:08:74:f7:ee:57:43:50:6d:81:28:
                    2a:a7:54:a0:84:75:b0:56:28:5d:cb:03:94:ee:0c:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BD:31:03:FF:48:9C:D2:B2:77:99:76:0B:61:A7:13:98:AA:13:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/9bdf426f-fcc3-3352-9302-577eeeea3e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd/f0064322-6e7f-4584-a179-efc5e9b44dbd.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BC:3E:F4:6B:01:23:35:26:31:1D:9E:8E:A3:B7:80:75:87:54:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f0064322-6e7f-4584-a179-efc5e9b44dbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:5f:13:fc:ef:78:57:68:46:36:08:1b:d1:2a:3c:1c:7b:
         3e:8d:60:03:92:a1:72:f3:9d:1f:21:4b:48:83:7f:f5:3b:ee:
         58:ca:7f:a5:07:e7:65:48:ce:c8:7a:85:11:08:3b:95:e8:7c:
         69:85:1d:0a:5b:8a:c5:1e:a0:ac:19:19:6e:d5:be:36:53:44:
         89:00:97:9f:5e:b3:88:06:6e:bb:82:6b:52:c8:ff:72:4f:07:
         f9:3a:2c:fb:83:fb:39:b0:98:c9:e0:1c:05:bb:b7:71:e1:92:
         34:5f:a3:53:4a:81:d0:da:f0:cd:e9:cb:d8:a9:37:af:54:7d:
         31:5a:d3:bb:7a:10:20:b5:82:4d:27:5e:4c:49:b2:c1:84:74:
         a7:45:81:77:d5:fe:bc:cf:ee:8a:40:1a:73:6c:c8:52:0e:aa:
         73:28:c5:41:4e:e7:56:eb:b7:cd:b5:da:6f:80:b1:ce:df:91:
         d8:11:64:cf:95:31:84:ec:38:51:42:7c:54:f8:e9:43:71:72:
         41:81:74:43:b0:9e:cd:d1:89:38:8c:bf:4f:50:ce:24:d1:fc:
         94:ce:24:3a:ff:34:bf:98:b9:71:81:7f:d4:79:5a:f9:f5:08:
         f4:0f:53:2c:e9:f9:f8:66:da:72:e7:a6:28:57:b5:91:36:95:
         f9:0a:fb:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWJRk/jbysLzQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjAwNjQzMjItNmU3Zi00NTg0LWExNzktZWZjNWU5YjQ0
ZGJkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
Y2U0ZDM5ZjQtMDRlMi00NzcxLTg0MTMtN2E2NzNhMTQzZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKuHB0/G2ofz38xaSGbf5lALhfkQXTGGKGt5
m3JGmZimg+CLmf0WdMVJ9Y8l+S844DqCFRBbmPEQWiDtH9HGpB5O/87gtM3Uq+j/
dcNW6mZRFuhmeB7X8JqsgZ8/yRYaGHvJeeQ8Ly97SEb3Ihrzb718qW+021vYT4+y
UgeBrKVrxdvMOG9M22CBdBsgcTwSfQatU6G36n6tPGfz/IWaGLSF4wYcUvRzC/x7
YruHXhxI0U4ccOQklPvGQnNxZkla5lzs4ewKTHKTee3BYXB35CoQihp3anwowlQ7
ZGve+AYX0Rlv9Qh09+5XQ1BtgSgqp1SghHWwVihdywOU7gyW0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFW9MQP/SJzSsneZdgthpxOYqhM6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMDA2
NDMyMi02ZTdmLTQ1ODQtYTE3OS1lZmM1ZTliNDRkYmQvOWJkZjQyNmYtZmNjMy0z
MzUyLTkzMDItNTc3ZWVlZWEzZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjAwNjQzMjItNmU3Zi00NTg0LWEx
NzktZWZjNWU5YjQ0ZGJkL2YwMDY0MzIyLTZlN2YtNDU4NC1hMTc5LWVmYzVlOWI0
NGRiZC5jcmwwHwYDVR0jBBgwFoAU4bw+9GsBIzUmMR2ejqO3gHWHVG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMDA2NDMyMi02ZTdmLTQ1ODQtYTE3OS1lZmM1
ZTliNDRkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrZXxP873hXaEY2CBvRKjwcez6NYAOSoXLznR8hS0iDf/U77ljKf6UH
52VIzsh6hREIO5XofGmFHQpbisUeoKwZGW7VvjZTRIkAl59es4gGbruCa1LI/3JP
B/k6LPuD+zmwmMngHAW7t3HhkjRfo1NKgdDa8M3py9ipN69UfTFa07t6ECC1gk0n
XkxJssGEdKdFgXfV/rzP7opAGnNsyFIOqnMoxUFO51brt8212m+Asc7fkdgRZM+V
MYTsOFFCfFT46UNxckGBdEOwns3RiTiMv09QziTR/JTOJDr/NL+YuXGBf9R5Wvn1
CPQPUyzp+fhm2nLnpihXtZE2lfkK++c=
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:06:31 2026 by rpki-client