Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
File:                     35a79ebf-4eb2-383e-9290-9d804567c62e.roa (raw, json)
Hash identifier:          W2ABwZOPcErrv/Tz83vTN1cP1uOrKXVrerE7ySUOqok=
Subject key identifier:   79:45:40:70:17:A9:4E:86:EF:A3:46:E9:E7:23:02:04:A4:72:15:48
Certificate issuer:       /CN=83588ae3-b763-413d-9823-3d3c20081120
Certificate serial:       010D0C9F4328584F5767FFFD31E84A1BF6101080
Authority key identifier: 3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     13866
IP address blocks:        198.251.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:ff:fd:31:e8:4a:1b:f6:10:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83588ae3-b763-413d-9823-3d3c20081120
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=3ef7d770-1a08-431e-aef2-7c32a522a92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:73:d5:8f:07:81:d8:a4:5c:06:a7:25:59:
                    a5:56:e1:32:24:5a:00:6b:8a:ca:c8:a3:26:17:0c:
                    cd:78:f2:f5:ef:f2:ad:f3:dc:40:60:50:f9:27:2a:
                    62:1a:54:42:1f:4a:1c:ea:a8:99:a6:50:f4:91:c9:
                    5b:c5:94:55:e7:52:93:50:02:80:10:55:66:a0:30:
                    fd:ac:b1:e9:5c:5b:e7:59:71:f9:cf:18:85:1d:ad:
                    3a:b7:42:ea:ac:d1:06:6b:13:39:29:5f:ae:84:3f:
                    8a:db:e7:ef:88:bb:ae:3d:0f:51:25:4d:b9:99:ce:
                    e7:9c:ec:4d:d0:8d:61:4a:ce:06:56:12:f8:7b:32:
                    0b:5d:64:46:d8:42:7e:92:74:85:8e:40:3a:ca:7a:
                    e4:a6:ce:bc:f8:00:ca:5b:33:e5:bc:ab:c6:45:f9:
                    79:72:15:30:13:dd:a0:c9:75:dd:08:3e:7d:29:7d:
                    fd:8e:a9:c8:a3:4c:6f:ad:09:29:41:bf:f2:3f:25:
                    f0:dc:b6:cf:d4:dc:d4:92:64:12:75:bf:87:d6:cd:
                    ec:5f:e9:88:8c:5e:74:ba:f7:b8:a7:0e:13:40:b0:
                    3b:17:24:a5:ec:5a:07:cb:5c:f0:26:8f:9e:c4:64:
                    ed:0a:e8:c2:d7:2d:ca:b9:5e:1e:8d:31:0f:c5:b8:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:40:70:17:A9:4E:86:EF:A3:46:E9:E7:23:02:04:A4:72:15:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl

            X509v3 Authority Key Identifier:
                keyid:3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:f3:69:5c:af:fc:9a:f7:3a:13:6b:16:14:96:83:d9:86:
         3b:6b:ee:e5:2a:b3:b3:f7:73:90:83:9d:d5:69:35:0c:a5:6a:
         51:ce:44:33:f2:da:ef:62:28:79:1c:1d:dd:0f:31:eb:e1:ac:
         6a:67:c7:7b:35:34:e9:ce:6d:19:01:24:08:70:55:da:3d:ce:
         1d:bd:e9:76:63:4f:87:af:f6:f9:d3:44:cd:e0:06:1e:08:41:
         86:13:8c:96:78:70:a7:4a:c5:16:41:e5:2a:a7:64:43:08:de:
         a3:1c:45:cb:76:00:72:7a:b3:23:1c:b1:40:66:98:a9:61:54:
         f6:ec:31:6d:07:b0:25:72:9d:38:e1:c0:d3:89:d8:69:b4:be:
         dc:1b:c7:2f:e0:5a:33:7d:56:be:6a:35:c4:b0:bd:8b:1a:bf:
         dc:10:9f:09:16:2c:34:d4:aa:9b:9d:9f:8c:7f:07:0d:a5:68:
         a1:57:37:c1:b4:ce:fd:4d:01:09:13:1f:31:52:8d:b7:84:17:
         71:2b:12:14:43:9c:61:13:db:1e:6d:e1:f2:d4:63:86:3d:06:
         c9:0b:81:af:3e:1e:0a:75:cd:c6:6a:e2:bc:4c:a4:84:74:98:
         bf:4a:58:96:dc:fb:a9:1d:d2:42:b5:a2:a5:55:b4:43:5d:11:
         7c:71:d6:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ//9MehKG/YQEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1ODhhZTMtYjc2My00MTNkLTk4MjMtM2QzYzIwMDgx
MTIwMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
M2VmN2Q3NzAtMWEwOC00MzFlLWFlZjItN2MzMmE1MjJhOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwNz1Y8HgdikXAanJVmlVuEyJFoAa4rKyKMm
FwzNePL17/Kt89xAYFD5JypiGlRCH0oc6qiZplD0kclbxZRV51KTUAKAEFVmoDD9
rLHpXFvnWXH5zxiFHa06t0LqrNEGaxM5KV+uhD+K2+fviLuuPQ9RJU25mc7nnOxN
0I1hSs4GVhL4ezILXWRG2EJ+knSFjkA6ynrkps68+ADKWzPlvKvGRfl5chUwE92g
yXXdCD59KX39jqnIo0xvrQkpQb/yPyXw3LbP1NzUkmQSdb+H1s3sX+mIjF50uve4
pw4TQLA7FySl7FoHy1zwJo+exGTtCujC1y3KuV4ejTEPxbhDawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlFQHAXqU6G76NG6ecjAgSkchVIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84MzU4
OGFlMy1iNzYzLTQxM2QtOTgyMy0zZDNjMjAwODExMjAvMzVhNzllYmYtNGViMi0z
ODNlLTkyOTAtOWQ4MDQ1NjdjNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODM1ODhhZTMtYjc2My00MTNkLTk4
MjMtM2QzYzIwMDgxMTIwLzgzNTg4YWUzLWI3NjMtNDEzZC05ODIzLTNkM2MyMDA4
MTEyMC5jcmwwHwYDVR0jBBgwFoAUOkkmlu8CS9sj5FMFe3elqLF4GX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84MzU4OGFlMy1iNzYzLTQxM2QtOTgyMy0zZDNj
MjAwODExMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAW782lcr/ya9zoTaxYUloPZhjtr7uUqs7P3c5CDndVpNQylalHORDPy
2u9iKHkcHd0PMevhrGpnx3s1NOnObRkBJAhwVdo9zh296XZjT4ev9vnTRM3gBh4I
QYYTjJZ4cKdKxRZB5SqnZEMI3qMcRct2AHJ6syMcsUBmmKlhVPbsMW0HsCVynTjh
wNOJ2Gm0vtwbxy/gWjN9Vr5qNcSwvYsav9wQnwkWLDTUqpudn4x/Bw2laKFXN8G0
zv1NAQkTHzFSjbeEF3ErEhRDnGET2x5t4fLUY4Y9BskLga8+Hgp1zcZq4rxMpIR0
mL9KWJbc+6kd0kK1oqVVtENdEXxx1pU=
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:52:58 2026 by rpki-client