Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6176416c-9637-32f8-9ce3-c50eb949f839.roa
File:                     6176416c-9637-32f8-9ce3-c50eb949f839.roa (raw, json)
Hash identifier:          fw28HjgG6e4K9JwDa3UtYmqzi2MKmEJm8/mfARKK2nk=
Subject key identifier:   E6:5A:80:38:04:60:59:A1:76:2E:FF:F3:62:40:F6:85:A3:5A:F7:04
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584F4F080BF3EECF43485717DF00
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6176416c-9637-32f8-9ce3-c50eb949f839.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     1
IP address blocks:        69.87.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0b:f3:ee:cf:43:48:57:17:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=45137eeb-8ad8-40fd-a80f-c2806987d0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:15:9b:ae:0f:40:0f:22:4e:27:dc:78:44:
                    98:3f:33:3e:59:74:08:27:67:b8:6b:55:57:27:be:
                    1b:7f:36:5c:f8:8d:d3:59:b3:05:44:df:b0:45:0c:
                    3a:b5:1b:44:c7:98:95:4e:b8:33:04:de:94:09:a6:
                    a2:3f:1f:22:53:82:55:7d:d2:e5:15:17:1f:39:d8:
                    d7:84:06:38:99:49:de:6d:72:37:9c:3e:15:80:af:
                    93:f6:cd:d3:6e:7a:cb:d4:f0:0a:b5:2a:d1:11:69:
                    8f:7d:fb:ed:b2:08:97:70:ba:00:f9:2c:41:e9:7e:
                    2e:e3:63:ba:bc:2d:89:d1:22:10:40:fc:4e:ed:ed:
                    92:8b:4f:2e:b4:8f:8b:68:ba:cb:3b:b9:ab:65:40:
                    46:fd:02:3f:a0:96:6f:f0:41:35:2a:54:be:a5:78:
                    71:85:df:4c:c7:a3:70:c3:c5:c1:ca:74:4e:eb:4b:
                    5c:58:c2:0f:41:bf:46:df:83:ce:0f:35:d4:51:f0:
                    be:ed:48:87:f1:63:b6:9b:e6:96:82:b1:a6:5d:b1:
                    d1:82:dc:2b:dd:1d:aa:b4:13:b3:e2:02:7c:87:1e:
                    32:03:8b:70:f9:8a:7a:41:7f:fa:0c:7a:90:50:17:
                    0e:fd:85:00:59:47:92:11:c7:85:ec:f4:36:3d:da:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5A:80:38:04:60:59:A1:76:2E:FF:F3:62:40:F6:85:A3:5A:F7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6176416c-9637-32f8-9ce3-c50eb949f839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:40:d4:b6:8b:a8:89:b1:a7:87:72:1b:d3:8a:88:c2:37:ad:
         2f:b3:19:f8:1e:8f:40:98:24:94:92:83:6c:7a:61:c1:19:3b:
         49:53:eb:af:1a:fe:bd:b4:15:16:44:f7:46:3d:e2:e5:70:17:
         2b:3a:11:b0:48:77:77:cb:00:73:1e:7b:e1:39:fb:2e:0c:11:
         a0:10:6a:c7:9b:c7:7c:9e:88:b7:8e:2b:6c:77:b4:b9:11:70:
         62:03:f8:e6:24:d4:3b:27:ce:1d:96:bf:7b:43:4b:68:89:f5:
         69:7f:7c:ee:6c:52:a5:75:01:9d:46:ae:87:59:b8:5b:05:3a:
         14:c0:c2:3f:ee:e5:53:ae:59:4e:5e:d3:e4:40:bf:4e:79:b2:
         57:29:1d:50:7c:b8:3c:e6:51:20:b2:cb:1f:5c:4d:e0:f0:6a:
         fd:f8:bf:b0:23:1b:07:47:ed:39:2e:42:2a:1b:d9:f7:7b:56:
         f1:f6:b8:bb:27:b1:76:6b:24:7d:7b:70:5d:b4:32:f9:71:b7:
         6a:9d:ac:8e:4e:b7:33:c3:4f:a8:36:20:9c:6c:78:85:7f:de:
         de:f5:ec:d1:ae:79:fd:0f:00:30:b5:a7:0c:eb:b4:91:28:9d:
         d7:26:bb:a2:e8:ec:fb:fb:97:2b:71:ff:9c:bc:de:6d:08:35:
         be:e1:59:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAvz7s9DSFcX3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NDUxMzdlZWItOGFkOC00MGZkLWE4MGYtYzI4MDY5ODdkMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv04Vm64PQA8iTifceESYPzM+WXQIJ2e4a1VX
J74bfzZc+I3TWbMFRN+wRQw6tRtEx5iVTrgzBN6UCaaiPx8iU4JVfdLlFRcfOdjX
hAY4mUnebXI3nD4VgK+T9s3TbnrL1PAKtSrREWmPffvtsgiXcLoA+SxB6X4u42O6
vC2J0SIQQPxO7e2Si08utI+LaLrLO7mrZUBG/QI/oJZv8EE1KlS+pXhxhd9Mx6Nw
w8XBynRO60tcWMIPQb9G34PODzXUUfC+7UiH8WO2m+aWgrGmXbHRgtwr3R2qtBOz
4gJ8hx4yA4tw+Yp6QX/6DHqQUBcO/YUAWUeSEceF7PQ2PdpfAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZagDgEYFmhdi7/82JA9oWjWvcEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvNjE3NjQxNmMtOTYzNy0z
MmY4LTljZTMtYzUwZWI5NDlmODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVe8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRA1LaLqImxp4dyG9OKiMI3rS+zGfgej0CYJJSSg2x6YcEZO0lT668a
/r20FRZE90Y94uVwFys6EbBId3fLAHMee+E5+y4MEaAQasebx3yeiLeOK2x3tLkR
cGID+OYk1Dsnzh2Wv3tDS2iJ9Wl/fO5sUqV1AZ1GrodZuFsFOhTAwj/u5VOuWU5e
0+RAv055slcpHVB8uDzmUSCyyx9cTeDwav34v7AjGwdH7TkuQiob2fd7VvH2uLsn
sXZrJH17cF20Mvlxt2qdrI5OtzPDT6g2IJxseIV/3t717NGuef0PADC1pwzrtJEo
ndcmu6Lo7Pv7lytx/5y83m0INb7hWck=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:04:29 2026 by rpki-client