Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
File:                     ccc41170-0c0f-3b56-b819-710416195ea9.roa (raw, json)
Hash identifier:          KPnJapY2B8NG8ery6SwB34Gr+/1L7lMCv09rq2gsYc4=
Subject key identifier:   01:C5:52:71:A8:94:E5:CF:A9:0B:59:2B:D5:5A:28:25:06:9B:4C:0B
Certificate issuer:       /CN=ceb51013-50fe-40c8-8358-fbacb2186cda
Certificate serial:       010D0C9F4328584F4973DAE96ACA676014B08420
Authority key identifier: 92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13460
IP address blocks:        192.111.38.0/24 maxlen: 24
                          204.107.64.0/24 maxlen: 24
                          2620:130::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:da:e9:6a:ca:67:60:14:b0:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb51013-50fe-40c8-8358-fbacb2186cda
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=49aac979-b459-4358-8d08-b9a09cb33a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:4c:67:a8:ea:14:ac:a2:e2:5e:df:33:34:
                    ad:15:24:fc:d8:60:b1:5b:1a:4a:80:e8:dd:26:47:
                    b7:26:6f:d6:f2:f0:49:ea:1b:20:43:77:e7:e5:a9:
                    0f:05:58:a5:82:38:39:6b:64:fc:45:6b:12:f0:af:
                    7b:1e:a1:78:15:dd:d0:d5:d2:ec:8e:70:c4:cf:60:
                    ba:69:ce:9f:e2:9a:63:2b:e8:49:c5:a0:7c:13:65:
                    1e:f6:5c:ff:84:e4:26:6b:9d:e6:e1:a3:97:42:53:
                    82:9d:20:44:89:ed:75:9b:39:0d:41:d6:60:8c:91:
                    50:3b:58:34:6c:65:52:5f:71:4f:3a:e8:0d:6f:25:
                    d3:ea:9c:10:15:4a:66:98:8f:99:a1:bc:aa:a4:6b:
                    c8:58:37:bf:96:35:ee:df:11:56:27:9f:98:2c:a5:
                    18:0a:05:25:41:67:f8:a6:b5:b2:d8:1a:20:08:bb:
                    c3:d2:9e:8f:a5:de:3c:0b:82:f5:4b:3d:c8:6d:9b:
                    80:ad:af:f9:77:88:1c:9b:f2:ff:3e:fb:dc:ce:9f:
                    cc:17:08:c5:a7:f3:90:30:3c:55:4e:c8:c3:c2:3e:
                    52:84:56:16:83:79:34:80:8f:08:41:b7:63:40:d7:
                    78:91:fa:9d:8a:ef:1b:75:18:26:39:28:64:37:a9:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:52:71:A8:94:E5:CF:A9:0B:59:2B:D5:5A:28:25:06:9B:4C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl

            X509v3 Authority Key Identifier:
                keyid:92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.38.0/24
                  204.107.64.0/24
                IPv6:
                  2620:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:31:36:86:0f:6d:ec:84:0e:db:f9:68:99:3b:8b:98:db:
         ac:cd:8a:55:da:ab:c7:cd:0f:6e:9e:62:aa:41:d5:8f:96:ba:
         15:4a:3f:2e:a6:70:3b:0f:4b:03:55:48:20:85:c2:82:93:2f:
         7d:0d:ae:4f:0d:38:71:75:e2:0f:aa:0d:5d:91:b4:a9:4b:7a:
         e1:8f:5e:9c:11:20:4d:1a:54:3c:c7:82:c1:5a:41:91:c7:ad:
         c7:19:f6:70:52:6b:23:ca:00:9d:a9:76:41:66:68:fa:3b:21:
         2a:20:82:14:90:73:e6:13:2f:f6:38:f5:fe:7f:82:32:bf:34:
         4e:47:b9:8b:2a:0a:17:03:34:6e:a7:5e:5b:cb:e4:49:d1:80:
         8a:85:b2:49:02:f5:e9:61:77:1a:7a:e4:3a:66:f9:90:64:28:
         23:a1:72:7b:68:35:26:2f:06:d9:8f:dd:56:c8:d9:8f:1a:f3:
         32:ba:88:fa:ce:cb:b7:b3:8f:bc:40:ef:26:7f:11:77:8c:93:
         05:98:99:10:db:f0:6e:90:35:ce:71:fd:37:0f:53:9b:ae:aa:
         5b:b4:2b:e0:dc:68:b6:90:97:8e:d3:b3:2f:e0:95:19:bc:74:
         f1:0d:fe:eb:6f:bf:f6:35:e8:72:59:61:43:67:21:d6:61:84:
         27:71:34:7c
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE9Jc9rpaspnYBSwhCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ViNTEwMTMtNTBmZS00MGM4LTgzNTgtZmJhY2IyMTg2
Y2RhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDlhYWM5NzktYjQ1OS00MzU4LThkMDgtYjlhMDljYjMzYTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiBMZ6jqFKyi4l7fMzStFST82GCxWxpKgOjd
Jke3Jm/W8vBJ6hsgQ3fn5akPBVilgjg5a2T8RWsS8K97HqF4Fd3Q1dLsjnDEz2C6
ac6f4ppjK+hJxaB8E2Ue9lz/hOQma53m4aOXQlOCnSBEie11mzkNQdZgjJFQO1g0
bGVSX3FPOugNbyXT6pwQFUpmmI+ZobyqpGvIWDe/ljXu3xFWJ5+YLKUYCgUlQWf4
prWy2BogCLvD0p6Ppd48C4L1Sz3IbZuAra/5d4gcm/L/Pvvczp/MFwjFp/OQMDxV
TsjDwj5ShFYWg3k0gI8IQbdjQNd4kfqdiu8bdRgmOShkN6k76QIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFAHFUnGolOXPqQtZK9VaKCUGm0wLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZWI1
MTAxMy01MGZlLTQwYzgtODM1OC1mYmFjYjIxODZjZGEvY2NjNDExNzAtMGMwZi0z
YjU2LWI4MTktNzEwNDE2MTk1ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2ViNTEwMTMtNTBmZS00MGM4LTgz
NTgtZmJhY2IyMTg2Y2RhL2NlYjUxMDEzLTUwZmUtNDBjOC04MzU4LWZiYWNiMjE4
NmNkYS5jcmwwHwYDVR0jBBgwFoAUktKlePVeRNwu6S+asfJAxAyBE00wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZWI1MTAxMy01MGZlLTQwYzgtODM1OC1mYmFj
YjIxODZjZGEuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwG8mAwQA
zGtAMA8EAgACMAkDBwQmIAEwAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHicxNoYPbeyEDtv5aJk7i5jb
rM2KVdqrx80Pbp5iqkHVj5a6FUo/LqZwOw9LA1VIIIXCgpMvfQ2uTw04cXXiD6oN
XZG0qUt64Y9enBEgTRpUPMeCwVpBkcetxxn2cFJrI8oAnal2QWZo+jshKiCCFJBz
5hMv9jj1/n+CMr80Tke5iyoKFwM0bqdeW8vkSdGAioWySQL16WF3GnrkOmb5kGQo
I6Fye2g1Ji8G2Y/dVsjZjxrzMrqI+s7Lt7OPvEDvJn8Rd4yTBZiZENvwbpA1znH9
Nw9Tm66qW7Qr4NxotpCXjtOzL+CVGbx08Q3+62+/9jXocllhQ2ch1mGEJ3E0fA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:25:50 2026 by rpki-client