Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
File:                     1d51e06d-83a9-34c4-82ba-ea41b1192441.roa (raw, json)
Hash identifier:          4xgWKbXX0D5LogdhCHCipDQS+tUGfzmWe1qjUPHYq20=
Subject key identifier:   EE:64:C1:FA:CD:4B:12:5C:33:A6:F4:DE:50:CA:A7:49:75:A1:CD:ED
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F497709B8B410A3008BB05CC0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.241.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:09:b8:b4:10:a3:00:8b:b0:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9b34aa7a-1d44-4dd4-b11d-79db1341f491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:01:6d:d8:e6:ee:95:b3:ec:4d:43:3a:ba:01:
                    6a:a6:eb:53:61:31:2e:77:89:6f:15:ba:bb:9a:6f:
                    9a:42:40:f4:27:4a:8a:14:19:a1:30:f2:2d:ac:01:
                    6b:ca:9e:1a:92:b0:42:e6:b5:16:20:18:78:91:c4:
                    e1:a6:d0:4f:73:96:7b:ca:07:43:b9:24:4b:e8:41:
                    58:99:8d:9f:28:a3:74:07:6a:0e:df:80:f0:6f:ae:
                    ed:52:2a:5d:4c:2d:7b:eb:2b:4f:68:e7:27:83:3b:
                    c3:62:6a:2d:dd:4e:16:2f:bd:45:e6:dd:4c:70:62:
                    68:ee:a6:0c:db:a9:07:6d:b4:01:d0:2d:91:3f:69:
                    f0:6a:ca:83:5b:52:16:e6:16:c0:86:89:f1:c5:ec:
                    21:ce:ed:62:96:ac:53:df:c4:2c:ce:37:1d:29:57:
                    61:ac:b9:dd:fc:8c:b6:94:9e:2c:83:24:e3:d9:57:
                    08:a8:84:a0:d6:f0:e1:15:3f:5a:35:5a:c4:4e:a8:
                    76:46:e2:e9:62:96:e8:85:96:0e:f1:d6:e1:70:6c:
                    c9:b9:d1:3c:04:34:5c:ee:6a:5a:0c:78:f2:10:55:
                    1e:73:05:b5:18:67:42:2e:aa:d1:e9:57:6b:9d:fe:
                    ed:a8:9e:b1:24:e9:df:b0:29:19:d7:e6:48:b2:9c:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:C1:FA:CD:4B:12:5C:33:A6:F4:DE:50:CA:A7:49:75:A1:CD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:89:36:f6:0e:3b:4e:43:fa:d5:ab:af:26:1e:80:3b:d1:
         d8:c9:5f:77:fa:93:d3:ec:31:0b:90:21:85:4a:36:55:a6:0c:
         b2:a9:f2:8c:cd:5b:51:92:27:83:55:15:1b:9d:c1:c1:56:8c:
         63:ea:fc:82:81:af:87:a3:83:7e:d2:03:14:ec:6e:89:99:62:
         a7:c6:dc:14:9c:a9:27:c5:ef:61:43:eb:e3:fb:39:35:47:94:
         98:10:de:20:12:1f:0c:6b:44:85:b5:b1:ac:d2:58:5a:5d:e7:
         57:7e:6d:83:f0:99:9e:c3:9d:45:1d:61:e8:dc:fb:43:99:21:
         1c:03:3e:9c:ce:c2:6c:8d:17:93:b5:60:08:70:8c:84:63:69:
         5a:ee:74:26:1d:7f:6c:d4:f4:24:76:25:cb:48:da:cc:46:78:
         5d:82:36:b4:b1:8d:d4:10:28:40:51:8a:98:71:5e:b8:3a:de:
         a8:10:4f:69:1c:36:e2:09:da:77:3b:36:c8:6b:62:e4:14:f0:
         d7:9e:29:12:82:a0:03:5d:aa:71:6f:ba:d5:1e:a2:b5:52:27:
         0e:18:1e:b7:06:96:87:dd:c9:d8:3e:1a:28:34:1a:2a:78:f8:
         41:54:f0:2c:9c:e1:81:23:ea:29:4f:bd:5a:e1:e5:5b:d6:1a:
         5c:e7:6e:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdwm4tBCjAIuwXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWIzNGFhN2EtMWQ0NC00ZGQ0LWIxMWQtNzlkYjEzNDFmNDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gFt2ObulbPsTUM6ugFqputTYTEud4lvFbq7
mm+aQkD0J0qKFBmhMPItrAFryp4akrBC5rUWIBh4kcThptBPc5Z7ygdDuSRL6EFY
mY2fKKN0B2oO34Dwb67tUipdTC176ytPaOcngzvDYmot3U4WL71F5t1McGJo7qYM
26kHbbQB0C2RP2nwasqDW1IW5hbAhonxxewhzu1ilqxT38QszjcdKVdhrLnd/Iy2
lJ4sgyTj2VcIqISg1vDhFT9aNVrETqh2RuLpYpbohZYO8dbhcGzJudE8BDRc7mpa
DHjyEFUecwW1GGdCLqrR6Vdrnf7tqJ6xJOnfsCkZ1+ZIspx3LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5kwfrNSxJcM6b03lDKp0l1oc3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMWQ1MWUwNmQtODNhOS0z
NGM0LTgyYmEtZWE0MWIxMTkyNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHgiTb2DjtOQ/rVq68mHoA70djJX3f6k9PsMQuQIYVKNlWmDLKp8ozN
W1GSJ4NVFRudwcFWjGPq/IKBr4ejg37SAxTsbomZYqfG3BScqSfF72FD6+P7OTVH
lJgQ3iASHwxrRIW1sazSWFpd51d+bYPwmZ7DnUUdYejc+0OZIRwDPpzOwmyNF5O1
YAhwjIRjaVrudCYdf2zU9CR2JctI2sxGeF2CNrSxjdQQKEBRiphxXrg63qgQT2kc
NuIJ2nc7NshrYuQU8NeeKRKCoANdqnFvutUeorVSJw4YHrcGlofdydg+Gig0Gip4
+EFU8Cyc4YEj6ilPvVrh5VvWGlznbrU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:32:14 2026 by rpki-client