Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
File:                     099a6177-074f-3801-a40d-53cbd0937cc0.roa (raw, json)
Hash identifier:          c+D1XNcSzMp4Kx2SpxccSjA5yQKic3S2t+1M8Ni2IUc=
Subject key identifier:   D3:40:86:46:4F:B8:81:C1:10:49:B1:18:FE:DB:D2:03:3E:3C:16:0D
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584F497532879E0E2B6054473000
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.205.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:32:87:9e:0e:2b:60:54:47:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9b9cc33c-5c56-4ea7-8f92-48467f9d77b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:a6:7a:74:a9:3c:a6:a1:65:08:81:d3:30:
                    81:75:d0:5e:81:29:68:cf:8d:30:61:ef:dd:98:d6:
                    62:cc:de:78:f2:0a:19:f7:bd:4a:19:b3:ac:33:6c:
                    25:ab:c3:f1:e9:e4:5a:6d:29:d8:44:a6:8c:02:4e:
                    48:b3:3d:dc:54:3b:3c:cd:c2:e6:02:bc:8b:4d:c9:
                    d9:a0:bc:0d:46:77:41:cc:b1:43:49:fa:7b:7c:30:
                    22:78:df:a3:39:88:24:a0:06:15:04:fd:dd:a0:f2:
                    2a:96:18:ae:0f:0e:8f:80:e7:8f:c2:d9:5e:e4:9f:
                    3c:eb:78:21:3a:3e:f9:91:12:14:2d:b8:34:65:d0:
                    e4:41:10:f7:5e:86:fc:a2:e8:d5:94:4f:93:41:43:
                    ad:d6:ca:d4:f3:b3:60:ae:24:ef:04:c8:7b:15:58:
                    68:29:7b:e0:2c:07:88:be:a0:72:d0:f1:7c:3d:4d:
                    5d:05:6b:b7:32:e7:da:3c:d4:70:12:66:44:18:b2:
                    d3:13:40:5a:e6:ce:6f:97:8c:2a:a9:b7:7e:ff:97:
                    af:11:63:7e:c1:26:3b:9c:b7:da:29:48:a8:ec:6c:
                    7b:03:7a:18:ab:20:95:47:54:31:56:8f:0f:35:e6:
                    c7:1b:ab:f0:5a:08:5c:40:03:b4:7d:2d:fc:89:29:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:86:46:4F:B8:81:C1:10:49:B1:18:FE:DB:D2:03:3E:3C:16:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/099a6177-074f-3801-a40d-53cbd0937cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:55:c7:a9:9a:a5:c1:7c:6c:d6:de:00:99:8c:7d:42:e4:
         19:e3:79:25:e3:ba:3e:10:72:31:d4:90:54:9c:93:84:07:57:
         ba:87:17:7f:df:46:b2:2d:c2:c5:24:53:0d:70:da:a8:5d:6d:
         07:ed:10:c3:cf:a4:0d:48:17:ca:5b:55:f5:18:f0:ab:60:26:
         96:33:78:5e:f1:6a:1d:a9:d4:30:54:46:de:8a:86:d4:43:c5:
         3f:5c:c0:40:05:52:d6:78:00:f0:ea:90:e8:fa:07:be:5b:2e:
         24:0a:b3:c2:a6:d0:c2:8a:85:e1:fd:c8:5b:84:b7:21:52:1d:
         eb:77:59:e7:0f:af:c4:e8:52:7b:27:2f:00:41:8c:c9:fc:67:
         88:75:63:c6:98:80:d5:4e:0a:84:4c:56:b8:1b:9d:b1:16:57:
         66:4f:56:8a:6c:5d:7f:6a:97:85:1d:d5:28:7b:e9:bb:58:43:
         8a:33:61:c1:01:9e:3a:4d:38:0c:6b:45:52:3e:26:46:96:97:
         16:5a:d7:94:4e:1a:b6:bc:65:56:2f:35:9c:fd:6a:25:28:ee:
         08:fb:fd:20:eb:a6:3d:08:7d:ac:b2:c0:cb:10:ba:71:33:6b:
         34:00:79:62:ad:dc:10:11:25:52:90:c6:24:f5:e8:1f:a1:b3:
         61:df:0b:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdTKHng4rYFRHMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWI5Y2MzM2MtNWM1Ni00ZWE3LThmOTItNDg0NjdmOWQ3N2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8WmenSpPKahZQiB0zCBddBegSloz40wYe/d
mNZizN548goZ971KGbOsM2wlq8Px6eRabSnYRKaMAk5Isz3cVDs8zcLmAryLTcnZ
oLwNRndBzLFDSfp7fDAieN+jOYgkoAYVBP3doPIqlhiuDw6PgOePwtle5J8863gh
Oj75kRIULbg0ZdDkQRD3Xob8oujVlE+TQUOt1srU87NgriTvBMh7FVhoKXvgLAeI
vqBy0PF8PU1dBWu3MufaPNRwEmZEGLLTE0Ba5s5vl4wqqbd+/5evEWN+wSY7nLfa
KUio7Gx7A3oYqyCVR1QxVo8PNebHG6vwWghcQAO0fS38iSkRrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNAhkZPuIHBEEmxGP7b0gM+PBYNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvMDk5YTYxNzctMDc0Zi0z
ODAxLWE0MGQtNTNjYmQwOTM3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M03MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJINVcepmqXBfGzW3gCZjH1C5BnjeSXjuj4QcjHUkFSck4QHV7qHF3/f
RrItwsUkUw1w2qhdbQftEMPPpA1IF8pbVfUY8KtgJpYzeF7xah2p1DBURt6KhtRD
xT9cwEAFUtZ4APDqkOj6B75bLiQKs8Km0MKKheH9yFuEtyFSHet3WecPr8ToUnsn
LwBBjMn8Z4h1Y8aYgNVOCoRMVrgbnbEWV2ZPVopsXX9ql4Ud1Sh76btYQ4ozYcEB
njpNOAxrRVI+JkaWlxZa15ROGra8ZVYvNZz9aiUo7gj7/SDrpj0IfayywMsQunEz
azQAeWKt3BARJVKQxiT16B+hs2HfC6k=
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:55:11 2026 by rpki-client