Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa
File:                     30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa (raw, json)
Hash identifier:          EiIU9KxpmTqhI7Ou+AhUXMkZUlGk0blIQ9zzhDjjms4=
Subject key identifier:   18:33:FA:A8:4A:CA:18:8A:86:99:2E:01:0A:15:65:2F:3F:40:D3:A3
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584ED861E006DA3BF2AF2A14B600
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     13984
IP address blocks:        209.151.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e0:06:da:3b:f2:af:2a:14:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f6709e6d-d087-4f37-879f-b8ef5205f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:07:2a:5e:98:22:d9:43:9f:be:74:ef:1c:
                    59:ab:25:98:ea:2a:f9:ba:65:df:f3:1c:71:5a:82:
                    ca:79:80:28:f8:43:45:16:85:f7:0f:47:c5:c6:98:
                    f5:2d:29:4a:7d:b4:f8:95:77:c0:d2:78:38:1b:18:
                    0b:a8:68:0f:3b:33:75:e7:99:f3:f7:ba:24:47:2d:
                    0e:ac:b1:9e:e0:c0:55:69:8d:02:40:d2:5b:3f:45:
                    a3:f1:b4:84:33:95:98:cd:55:07:c1:86:71:3e:06:
                    a0:23:97:ae:7b:4a:ce:c2:90:88:dc:e8:d6:ee:bd:
                    69:9b:9b:7e:3b:2b:89:7a:d7:2e:7c:21:df:61:d3:
                    5a:12:8f:f9:d0:06:3d:f0:42:61:b6:30:e1:fc:24:
                    e7:7a:4b:f7:c9:e0:16:59:f6:54:b0:d0:4c:ba:b3:
                    c3:ab:7d:89:db:d7:c7:73:a9:d8:6e:e4:1c:1a:5f:
                    91:7d:e3:89:fc:6b:40:ca:34:fe:ee:bd:a4:e7:4d:
                    81:4e:06:5d:ae:92:78:10:ef:9c:11:ae:eb:35:d5:
                    91:4a:9b:ea:53:62:80:3a:2d:ec:9c:0a:65:da:a3:
                    bd:26:b3:a5:05:82:75:30:c8:27:f2:80:87:89:d6:
                    f7:18:97:43:39:37:f7:ea:ef:d5:5b:2c:af:0a:b5:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:33:FA:A8:4A:CA:18:8A:86:99:2E:01:0A:15:65:2F:3F:40:D3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f5:7f:d7:c8:d9:f3:b4:23:54:9d:c0:5f:d8:1c:47:61:41:
         0c:9e:96:77:0c:23:b1:17:a9:27:de:64:54:eb:38:d0:47:51:
         b4:97:7f:c2:5c:4c:80:c5:9f:7e:ff:25:d2:67:fa:8d:1d:28:
         f4:21:74:0e:e7:05:05:be:75:52:3b:52:a6:07:e9:ef:19:62:
         a0:15:69:43:55:7b:4c:a4:2a:7e:a7:62:60:b3:38:47:3d:a0:
         2c:4b:0b:39:be:e5:1c:bd:f3:81:b4:8f:19:0e:5e:50:a6:58:
         f2:e6:a5:af:1d:7a:e2:c9:66:3f:61:16:55:2f:87:c9:ff:89:
         70:4a:dc:13:64:59:2a:13:fd:74:66:01:dd:df:52:ad:1c:d3:
         37:45:5f:fd:da:68:24:42:13:90:78:53:c3:79:69:b8:ac:1d:
         2e:2e:c6:46:81:0d:4a:13:a8:f1:37:c6:16:8c:95:65:d6:e7:
         14:89:53:a4:c3:7a:8c:72:39:99:8c:fe:0b:98:4e:fd:e1:31:
         d6:b3:9d:f0:76:17:c4:54:ab:34:32:0b:34:b2:92:c0:0b:68:
         39:18:32:ad:3d:40:d8:cc:26:fd:3b:e0:d4:8f:d6:f2:9a:98:
         59:76:a5:37:e6:1e:56:f1:20:b3:c3:46:6a:56:a1:87:ea:9b:
         3c:72:7f:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeAG2jvyryoUtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2
NGMzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
ZjY3MDllNmQtZDA4Ny00ZjM3LTg3OWYtYjhlZjUyMDVmOWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTUHKl6YItlDn7507xxZqyWY6ir5umXf8xxx
WoLKeYAo+ENFFoX3D0fFxpj1LSlKfbT4lXfA0ng4GxgLqGgPOzN155nz97okRy0O
rLGe4MBVaY0CQNJbP0Wj8bSEM5WYzVUHwYZxPgagI5eue0rOwpCI3OjW7r1pm5t+
OyuJetcufCHfYdNaEo/50AY98EJhtjDh/CTnekv3yeAWWfZUsNBMurPDq32J29fH
c6nYbuQcGl+RfeOJ/GtAyjT+7r2k502BTgZdrpJ4EO+cEa7rNdWRSpvqU2KAOi3s
nApl2qO9JrOlBYJ1MMgn8oCHidb3GJdDOTf36u/VWyyvCrVmTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgz+qhKyhiKhpkuAQoVZS8/QNOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMzBkY2NjOTAtOGFhMy0z
OTg0LTk2N2ItNTFmMTFjOWVlNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk
MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1
NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj
OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz1f9fI2fO0I1SdwF/YHEdhQQyelncMI7EXqSfeZFTrONBHUbSXf8Jc
TIDFn37/JdJn+o0dKPQhdA7nBQW+dVI7UqYH6e8ZYqAVaUNVe0ykKn6nYmCzOEc9
oCxLCzm+5Ry984G0jxkOXlCmWPLmpa8deuLJZj9hFlUvh8n/iXBK3BNkWSoT/XRm
Ad3fUq0c0zdFX/3aaCRCE5B4U8N5abisHS4uxkaBDUoTqPE3xhaMlWXW5xSJU6TD
eoxyOZmM/guYTv3hMdaznfB2F8RUqzQyCzSyksALaDkYMq09QNjMJv074NSP1vKa
mFl2pTfmHlbxILPDRmpWoYfqmzxyf1U=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:00:49 2026 by rpki-client