Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
File:                     8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa (raw, json)
Hash identifier:          Ed0Qooy9Nu3GGSHVCsOYE4b9gDtBWMTYhh+O2l7Bmco=
Subject key identifier:   07:15:4E:78:D8:7C:09:0F:50:53:42:58:9F:49:BA:88:19:F6:03:6E
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328584F4542856D9BD24F063337E000
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     14155
IP address blocks:        192.208.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:85:6d:9b:d2:4f:06:33:37:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=8f468c2d-20b2-4c8d-9abc-0b4a08b3d643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:de:4a:ae:ee:4e:2b:4d:e8:ed:7c:7b:da:
                    ac:19:07:76:92:bf:36:39:76:e5:50:e5:98:a2:04:
                    56:86:4d:94:b9:d9:33:cd:11:e5:af:3f:3c:c8:75:
                    d0:e7:f8:43:72:b6:e1:94:67:fe:ed:0c:7e:e6:a2:
                    8f:2d:90:24:fa:b5:14:17:37:d4:3f:b9:77:0f:11:
                    09:27:f1:0e:e8:21:46:13:f7:cb:de:78:44:9b:79:
                    92:94:d7:fa:28:8a:07:da:4a:41:da:11:34:92:28:
                    ba:ad:22:e1:2f:a4:3a:77:45:a6:96:8f:ab:fc:a0:
                    a6:16:62:7c:4f:b2:47:47:f5:47:4f:8a:af:88:18:
                    76:ee:ec:bd:95:6a:b8:d5:dc:43:22:ce:68:ca:c6:
                    fd:bf:f0:5b:20:3b:6e:e9:a5:df:40:c8:d8:21:c1:
                    f2:4a:25:2f:87:3c:4f:af:d9:8f:69:f6:13:4d:93:
                    25:8e:8a:4d:a2:24:9c:1e:90:f5:78:f3:84:d8:8b:
                    09:e7:8a:e4:f8:5c:e7:6d:37:39:69:47:7c:55:9e:
                    39:8c:93:f3:65:b0:e7:06:79:2f:6b:88:ff:b4:5f:
                    e5:c2:57:93:8c:97:15:7a:45:5e:77:48:d8:3f:78:
                    dc:bd:8c:8a:34:92:c5:f8:75:b3:ec:d2:05:cd:0e:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:15:4E:78:D8:7C:09:0F:50:53:42:58:9F:49:BA:88:19:F6:03:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:e7:52:72:86:4e:ad:09:8d:5f:41:cd:c7:48:1b:57:6b:
         14:58:81:50:69:2b:12:53:ad:44:71:ba:92:69:0f:62:93:f3:
         44:3c:c6:16:8b:73:c6:b4:df:55:84:8e:4a:aa:aa:5a:ec:b4:
         80:7c:09:39:af:4f:43:43:80:eb:0b:8a:b9:fb:28:bb:91:50:
         1a:bf:22:6f:07:1c:bd:5a:4f:99:ce:fa:16:d8:e1:22:31:30:
         19:e2:92:12:5e:9c:fc:c4:04:38:b0:1d:44:bc:b2:35:8d:82:
         a1:9b:af:40:43:6a:31:ac:90:42:cd:7f:e6:2b:64:ac:bc:93:
         3c:71:ac:60:41:3b:c4:30:b9:9a:35:d2:5c:5a:22:d6:b8:60:
         61:a9:27:82:2b:8a:20:fc:16:43:5a:ed:59:1e:f0:7a:e2:ab:
         45:92:a2:cd:b5:d9:19:05:9f:5a:9c:df:dd:23:78:01:7f:a6:
         2c:1d:38:16:e8:04:04:75:8a:14:22:35:82:3b:0a:92:60:dc:
         c6:7f:44:a1:e2:5b:60:79:a3:11:dc:da:bf:56:07:29:aa:c3:
         a5:f0:b0:37:5d:57:c3:ea:88:34:91:70:2e:d9:45:14:7c:af:
         a7:80:e3:d0:17:5c:2f:7f:8e:07:03:99:70:c2:d7:06:83:aa:
         16:46:61:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoVtm9JPBjM34AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyZTNmNTAtYzQyYi00YWY2LTllMjAtMWU5MWFkYzE0
MDJmMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk
OGY0NjhjMmQtMjBiMi00YzhkLTlhYmMtMGI0YTA4YjNkNjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7HeSq7uTitN6O18e9qsGQd2kr82OXblUOWY
ogRWhk2UudkzzRHlrz88yHXQ5/hDcrbhlGf+7Qx+5qKPLZAk+rUUFzfUP7l3DxEJ
J/EO6CFGE/fL3nhEm3mSlNf6KIoH2kpB2hE0kii6rSLhL6Q6d0Wmlo+r/KCmFmJ8
T7JHR/VHT4qviBh27uy9lWq41dxDIs5oysb9v/BbIDtu6aXfQMjYIcHySiUvhzxP
r9mPafYTTZMljopNoiScHpD1ePOE2IsJ54rk+FznbTc5aUd8VZ45jJPzZbDnBnkv
a4j/tF/lwleTjJcVekVed0jYP3jcvYyKNJLF+HWz7NIFzQ6k0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcVTnjYfAkPUFNCWJ9JuogZ9gNuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODJl
M2Y1MC1jNDJiLTRhZjYtOWUyMC0xZTkxYWRjMTQwMmYvOGViZjJmZWEtMmE1NS0z
NmQwLTkxMDMtZTIwMDMyYTUyZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTgyZTNmNTAtYzQyYi00YWY2LTll
MjAtMWU5MWFkYzE0MDJmL2U4MmUzZjUwLWM0MmItNGFmNi05ZTIwLTFlOTFhZGMx
NDAyZi5jcmwwHwYDVR0jBBgwFoAUCXV9E3AGrYl8c4Wr5Qgznagf//AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODJlM2Y1MC1jNDJiLTRhZjYtOWUyMC0xZTkx
YWRjMTQwMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwNCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2H51Jyhk6tCY1fQc3HSBtXaxRYgVBpKxJTrURxupJpD2KT80Q8xhaL
c8a031WEjkqqqlrstIB8CTmvT0NDgOsLirn7KLuRUBq/Im8HHL1aT5nO+hbY4SIx
MBnikhJenPzEBDiwHUS8sjWNgqGbr0BDajGskELNf+YrZKy8kzxxrGBBO8QwuZo1
0lxaIta4YGGpJ4IriiD8FkNa7Vke8Hriq0WSos212RkFn1qc390jeAF/piwdOBbo
BAR1ihQiNYI7CpJg3MZ/RKHiW2B5oxHc2r9WBymqw6XwsDddV8PqiDSRcC7ZRRR8
r6eA49AXXC9/jgcDmXDC1waDqhZGYX8=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:48 2026 by rpki-client