Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa
File:                     40adc3e1-1982-3811-9bd9-58e5849782e8.roa (raw, json)
Hash identifier:          HeeH/AK07grxPAdVWmI9lRJPXExNJgoFWbFo6FxVQoc=
Subject key identifier:   1B:06:9A:13:38:EE:D3:0F:AF:94:66:46:17:D6:12:39:06:40:C3:A8
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584F31B7BB71D4AE421EBED66680
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        198.145.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bb:71:d4:ae:42:1e:be:d6:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=bcf944c0-d013-4f7c-8133-eaa4b58f8abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:84:36:2d:bd:ec:c6:0e:fd:db:13:41:33:
                    5e:f9:2a:02:45:27:3d:1b:ed:03:45:1f:66:3f:92:
                    02:77:d4:cb:29:b2:ea:80:ca:4c:86:6a:53:65:c6:
                    bf:ec:69:d4:e9:bb:53:c9:b0:6f:64:20:7a:25:f5:
                    a1:18:83:20:fb:2d:7d:e0:e0:3a:4f:d8:50:5b:76:
                    a3:33:4a:3d:ff:b2:b2:20:0b:63:68:29:d1:b1:d4:
                    0d:34:9b:9c:f2:57:60:5e:a2:4a:9c:76:55:c0:94:
                    b1:6c:b0:7e:be:2e:55:80:62:28:41:5f:86:36:13:
                    c3:c0:66:07:30:70:76:16:ce:42:85:b7:a3:35:fb:
                    7a:08:8c:40:32:51:13:63:db:94:ac:0c:d5:af:65:
                    97:be:4a:e1:fe:ad:4d:7e:c6:29:4c:ea:c9:c6:82:
                    c8:e3:79:c1:e4:98:83:b4:18:1e:c2:1a:1e:f8:e9:
                    50:82:f9:13:20:fb:79:e2:1f:32:fe:1f:97:dd:87:
                    84:00:8d:e6:7c:76:fb:63:70:0a:94:75:99:63:c7:
                    65:98:ea:63:f0:54:4d:59:e7:e7:36:9c:04:12:3f:
                    20:6b:a5:be:ba:e9:17:a6:00:c4:a0:77:9f:b1:64:
                    53:bb:26:5f:7a:e0:da:c0:e5:b7:11:16:b0:ba:1f:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:9A:13:38:EE:D3:0F:AF:94:66:46:17:D6:12:39:06:40:C3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:9a:b1:67:fb:da:0c:3f:00:cd:a8:63:05:34:78:1b:2d:
         97:65:e7:2c:bb:50:b5:a3:fb:6d:61:75:3d:da:3f:53:24:36:
         c0:da:d5:93:64:f7:97:fe:2c:67:ca:ad:27:27:8a:5e:dc:1c:
         c6:bf:c9:61:a4:43:67:04:4f:b2:a6:2f:4d:de:e7:41:c0:94:
         e7:a9:97:f0:8d:99:49:ee:7c:a5:04:54:05:13:08:ce:b0:5f:
         87:09:8a:63:74:f8:5e:58:97:d0:ec:37:83:99:0e:fc:cf:5a:
         e5:8d:64:72:15:e5:23:e8:ac:ec:34:07:e9:a1:51:52:1e:38:
         b9:55:c8:2a:2d:94:a3:46:88:5b:05:9d:3e:29:68:64:ac:ab:
         5c:49:01:81:22:4b:bc:32:b9:12:0e:01:f8:ac:f6:39:2c:04:
         50:17:12:98:95:13:aa:50:f4:59:e0:d7:56:37:dc:12:fb:42:
         96:b7:23:e3:80:5c:e7:cf:96:61:4d:3c:de:64:c7:9b:62:95:
         dd:5c:db:b8:b8:4b:1b:de:af:f1:2b:80:7b:19:fc:ad:bc:f2:
         ca:bb:4a:3a:3a:d7:1d:6a:44:1e:00:0c:d3:d9:3c:b8:f5:de:
         ff:62:24:5e:fc:df:83:49:7f:02:96:9e:bb:d0:d7:ef:71:b5:
         ed:08:c4:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt7tx1K5CHr7WZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk
YmNmOTQ0YzAtZDAxMy00ZjdjLTgxMzMtZWFhNGI1OGY4YWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxSENi297MYO/dsTQTNe+SoCRSc9G+0DRR9m
P5ICd9TLKbLqgMpMhmpTZca/7GnU6btTybBvZCB6JfWhGIMg+y194OA6T9hQW3aj
M0o9/7KyIAtjaCnRsdQNNJuc8ldgXqJKnHZVwJSxbLB+vi5VgGIoQV+GNhPDwGYH
MHB2Fs5ChbejNft6CIxAMlETY9uUrAzVr2WXvkrh/q1NfsYpTOrJxoLI43nB5JiD
tBgewhoe+OlQgvkTIPt54h8y/h+X3YeEAI3mfHb7Y3AKlHWZY8dlmOpj8FRNWefn
NpwEEj8ga6W+uukXpgDEoHefsWRTuyZfeuDawOW3ERawuh8SFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsGmhM47tMPr5RmRhfWEjkGQMOoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDBhZGMzZTEtMTk4Mi0z
ODExLTliZDktNThlNTg0OTc4MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTNmrFn+9oMPwDNqGMFNHgbLZdl5yy7ULWj+21hdT3aP1MkNsDa1ZNk
95f+LGfKrScnil7cHMa/yWGkQ2cET7KmL03e50HAlOepl/CNmUnufKUEVAUTCM6w
X4cJimN0+F5Yl9DsN4OZDvzPWuWNZHIV5SPorOw0B+mhUVIeOLlVyCotlKNGiFsF
nT4paGSsq1xJAYEiS7wyuRIOAfis9jksBFAXEpiVE6pQ9Fng11Y33BL7Qpa3I+OA
XOfPlmFNPN5kx5tild1c27i4Sxver/ErgHsZ/K288sq7Sjo61x1qRB4ADNPZPLj1
3v9iJF7834NJfwKWnrvQ1+9xte0IxH0=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:20:05 2026 by rpki-client