Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa
File:                     ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa (raw, json)
Hash identifier:          /PzHA1jHpoy8UXO0fP3ajdmGWvtm9WaC6Q3JZQxMdtc=
Subject key identifier:   AC:C8:4E:2E:5F:4B:D7:D2:C8:BE:87:44:DC:B6:D1:10:1C:1F:37:1B
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584F698D8215112F355D17FD3F00
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     55178
IP address blocks:        192.230.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:82:15:11:2f:35:5d:17:fd:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=ef7939ce-529a-4855-965b-98e2eac6c28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:54:61:3e:f9:22:8a:9b:4d:a7:35:c3:6c:
                    dc:fb:88:69:be:f8:de:1a:f4:d6:a2:5e:00:06:c1:
                    52:36:8a:64:ca:24:bf:fe:c3:2b:d2:79:e7:aa:d9:
                    26:52:0d:10:ed:8d:0c:bb:5a:02:a0:ca:1d:c5:49:
                    1a:6b:0a:5d:89:52:54:6c:74:1e:36:9f:a0:53:51:
                    2c:0e:0a:3e:d3:5a:62:a9:3e:55:fd:1a:e5:e1:6e:
                    e9:d1:59:e3:ba:55:42:58:83:d6:e1:86:01:f1:a4:
                    4a:3a:90:60:77:75:a9:35:b9:db:48:69:91:33:62:
                    fa:c1:ea:ab:26:2c:b7:6e:38:c3:3f:a2:3c:98:e8:
                    a4:b1:ff:bc:16:ca:fb:30:70:7b:74:a4:c2:61:a3:
                    e5:51:e5:f2:9d:fd:08:68:c3:ad:05:0e:d4:d9:57:
                    0e:0a:b7:af:e2:fc:ef:19:8a:35:ca:a0:f7:e6:4c:
                    01:8c:8f:87:40:4c:5c:b6:dd:cf:96:ca:0c:66:b0:
                    ba:4d:f9:6d:6a:57:9f:8c:de:f5:3e:e7:64:08:d3:
                    16:18:4b:c3:29:1a:db:1c:95:84:3f:9a:ee:b1:a8:
                    de:5b:c1:4a:3d:7d:a7:51:c4:02:cf:39:54:b8:d3:
                    c3:56:ff:6b:59:33:6d:ba:58:e4:f2:e9:0b:76:3e:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:4E:2E:5F:4B:D7:D2:C8:BE:87:44:DC:B6:D1:10:1C:1F:37:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:04:be:6e:77:ce:2c:10:bb:a5:2f:c8:fc:fb:1b:0e:ee:
         ed:ed:dd:bb:fd:16:13:d8:86:63:01:76:dd:76:76:64:0e:83:
         df:eb:4a:0f:b7:b4:88:99:d8:c5:a9:9a:26:fe:10:10:dc:dc:
         75:0c:5a:1a:7c:41:0e:05:fa:b3:7f:bd:c6:81:4a:00:5d:69:
         b9:e3:88:17:e7:28:8d:e7:f8:2a:05:c8:44:85:e5:e3:43:11:
         3d:be:f7:ac:22:8e:6f:66:82:20:9b:55:cc:ba:1b:41:20:e6:
         83:bb:9f:f8:da:96:62:de:5c:c7:80:dd:83:c5:47:0f:07:18:
         2c:97:ac:3e:20:06:58:ff:27:82:6b:06:1f:35:c3:04:2f:17:
         49:84:fb:88:f2:29:b6:21:d3:3a:61:ec:1a:cd:eb:9b:1a:b6:
         6f:1d:12:07:cc:41:c9:35:c4:91:15:f8:49:69:7f:a4:7e:30:
         1c:3b:eb:6a:24:31:21:56:60:28:b6:79:af:ac:f2:76:e1:31:
         99:11:9a:9a:3c:7a:45:b9:04:1b:7c:5b:3b:61:be:36:b0:0c:
         f0:68:ba:da:2f:75:37:33:29:90:25:ae:eb:d7:6a:14:6d:39:
         78:1e:3b:35:eb:8b:81:c0:99:f2:5a:d5:cf:cb:1b:36:a6:48:
         fa:48:3f:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYIVES81XRf9PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2
MWE5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
ZWY3OTM5Y2UtNTI5YS00ODU1LTk2NWItOThlMmVhYzZjMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/pUYT75IoqbTac1w2zc+4hpvvjeGvTWol4A
BsFSNopkyiS//sMr0nnnqtkmUg0Q7Y0Mu1oCoModxUkaawpdiVJUbHQeNp+gU1Es
Dgo+01piqT5V/Rrl4W7p0VnjulVCWIPW4YYB8aRKOpBgd3WpNbnbSGmRM2L6weqr
Jiy3bjjDP6I8mOiksf+8Fsr7MHB7dKTCYaPlUeXynf0IaMOtBQ7U2VcOCrev4vzv
GYo1yqD35kwBjI+HQExctt3PlsoMZrC6TfltalefjN71PudkCNMWGEvDKRrbHJWE
P5rusajeW8FKPX2nUcQCzzlUuNPDVv9rWTNtuljk8ukLdj5oyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzITi5fS9fSyL6HRNy20RAcHzcbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw
M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvYWI0MmYyMWYtOTZmMS0z
ZWFkLThkNmYtZmMxZTU3ZDhjNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2
OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj
NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0
OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGmBL5ud84sELulL8j8+xsO7u3t3bv9FhPYhmMBdt12dmQOg9/rSg+3
tIiZ2MWpmib+EBDc3HUMWhp8QQ4F+rN/vcaBSgBdabnjiBfnKI3n+CoFyESF5eND
ET2+96wijm9mgiCbVcy6G0Eg5oO7n/jalmLeXMeA3YPFRw8HGCyXrD4gBlj/J4Jr
Bh81wwQvF0mE+4jyKbYh0zph7BrN65satm8dEgfMQck1xJEV+Elpf6R+MBw762ok
MSFWYCi2ea+s8nbhMZkRmpo8ekW5BBt8WzthvjawDPBoutovdTczKZAlruvXahRt
OXgeOzXri4HAmfJa1c/LGzamSPpIP7Q=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:04:02 2026 by rpki-client