Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa
File:                     faed1f11-c26a-3505-a20c-ec43adab65f9.roa (raw, json)
Hash identifier:          YhkP/jmsiwlGya1HHc5zFuCUkIDuB9bfZgmb0gD2iz4=
Subject key identifier:   A6:82:EC:DE:6F:48:98:CA:C6:04:86:75:DD:15:06:22:B1:EC:61:6C
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584F480D3E04CDED8DC669237740
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3e:04:cd:ed:8d:c6:69:23:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=141965e1-29eb-4da3-a96a-05130983b635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:93:20:46:36:3c:81:ce:1b:2d:08:cc:49:
                    04:22:71:01:2d:b6:d3:38:1f:28:7a:b0:d6:1f:9d:
                    09:16:cc:4d:9a:be:0f:68:f2:36:da:2b:d8:5a:c8:
                    05:76:ea:92:ea:9f:ac:3f:10:88:85:c9:f2:e5:d1:
                    38:f9:28:b9:54:6b:18:c9:d4:8f:b2:c8:41:8c:30:
                    0a:51:ad:e0:59:a6:14:ef:fc:38:cf:aa:76:6e:69:
                    42:61:b0:cd:08:7b:1f:bd:82:07:63:fb:61:bc:5b:
                    cd:51:e9:10:c1:1f:9f:a6:b2:30:ed:aa:a1:29:60:
                    0e:35:01:65:a8:66:ce:3c:f9:fa:5c:44:00:f3:85:
                    73:43:7b:34:b4:93:f9:fb:cb:07:c6:7b:20:58:8b:
                    d2:79:0f:84:0f:9d:77:d5:19:9b:ef:3d:a9:09:91:
                    f6:46:d5:75:db:05:4e:ff:04:6c:38:46:a3:2f:75:
                    12:19:9b:82:80:65:34:4a:08:97:d0:d1:93:2e:b7:
                    76:51:bd:9b:23:2d:fe:c6:c5:64:47:3d:63:aa:39:
                    96:ae:fa:f2:13:dd:43:f6:ae:7b:53:fc:f7:50:48:
                    de:26:26:fb:cf:fd:6c:f2:9b:36:81:39:33:58:b4:
                    3c:55:f8:cb:38:fd:45:a3:26:3a:47:aa:83:11:7f:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:EC:DE:6F:48:98:CA:C6:04:86:75:DD:15:06:22:B1:EC:61:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:87:5e:d3:69:64:83:52:5d:7a:ba:1d:8c:cb:30:d6:12:
         15:69:5a:55:7f:5c:93:63:76:c5:37:5b:d9:b4:8f:1f:39:cc:
         fc:74:97:31:a7:4f:4a:7f:88:22:b9:89:fd:a6:ee:db:fe:3b:
         cb:df:76:31:6b:30:3d:6a:f1:94:5b:35:00:1c:48:c2:0a:5a:
         b6:d6:ce:fd:14:87:2f:63:5a:25:1e:0b:c9:7b:fa:33:20:af:
         0d:83:83:e0:67:d4:be:6a:a1:8c:54:e7:ec:7b:39:5d:a1:35:
         11:5f:d6:3f:92:d1:cb:de:15:5b:14:7b:2f:3c:46:07:76:47:
         de:94:8a:37:ba:a2:9a:c4:3e:77:b9:5f:d7:0a:19:4a:00:fc:
         5a:d7:22:9f:2b:89:26:db:59:fc:c6:a8:37:9e:5e:b3:31:f8:
         dc:14:76:52:a4:57:27:81:f9:6b:18:22:9c:56:29:2e:65:88:
         74:aa:05:63:99:73:f8:6f:2a:ad:f3:72:eb:38:6b:86:0b:d1:
         c4:f6:97:20:12:b3:5d:b7:6e:6f:6d:98:85:87:fa:1b:2a:f3:
         55:56:ec:77:ad:36:07:7d:2c:d5:81:6e:72:b1:17:da:0a:2a:
         0c:a0:d3:47:4d:c9:52:78:18:92:84:21:84:fc:8b:2b:66:d5:
         e3:c1:73:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDT4Eze2Nxmkjd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhZGUwZDYtZGY4NC00ODE2LWE1Y2YtY2Y1Njg0OThm
Y2U5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTQxOTY1ZTEtMjllYi00ZGEzLWE5NmEtMDUxMzA5ODNiNjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaWTIEY2PIHOGy0IzEkEInEBLbbTOB8oerDW
H50JFsxNmr4PaPI22ivYWsgFduqS6p+sPxCIhcny5dE4+Si5VGsYydSPsshBjDAK
Ua3gWaYU7/w4z6p2bmlCYbDNCHsfvYIHY/thvFvNUekQwR+fprIw7aqhKWAONQFl
qGbOPPn6XEQA84VzQ3s0tJP5+8sHxnsgWIvSeQ+ED5131Rmb7z2pCZH2RtV12wVO
/wRsOEajL3USGZuCgGU0SgiX0NGTLrd2Ub2bIy3+xsVkRz1jqjmWrvryE91D9q57
U/z3UEjeJib7z/1s8ps2gTkzWLQ8VfjLOP1FoyY6R6qDEX8FEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaC7N5vSJjKxgSGdd0VBiKx7GFsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lN2Fk
ZTBkNi1kZjg0LTQ4MTYtYTVjZi1jZjU2ODQ5OGZjZTkvZmFlZDFmMTEtYzI2YS0z
NTA1LWEyMGMtZWM0M2FkYWI2NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTdhZGUwZDYtZGY4NC00ODE2LWE1
Y2YtY2Y1Njg0OThmY2U5L2U3YWRlMGQ2LWRmODQtNDgxNi1hNWNmLWNmNTY4NDk4
ZmNlOS5jcmwwHwYDVR0jBBgwFoAUiqjOMY5saG8TsiHl941JD+duia8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lN2FkZTBkNi1kZjg0LTQ4MTYtYTVjZi1jZjU2
ODQ5OGZjZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqO5kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqBh17TaWSDUl16uh2MyzDWEhVpWlV/XJNjdsU3W9m0jx85zPx0lzGn
T0p/iCK5if2m7tv+O8vfdjFrMD1q8ZRbNQAcSMIKWrbWzv0Uhy9jWiUeC8l7+jMg
rw2Dg+Bn1L5qoYxU5+x7OV2hNRFf1j+S0cveFVsUey88Rgd2R96Uije6oprEPne5
X9cKGUoA/FrXIp8riSbbWfzGqDeeXrMx+NwUdlKkVyeB+WsYIpxWKS5liHSqBWOZ
c/hvKq3zcus4a4YL0cT2lyASs123bm9tmIWH+hsq81VW7HetNgd9LNWBbnKxF9oK
Kgyg00dNyVJ4GJKEIYT8iytm1ePBcxU=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:50:08 2026 by rpki-client