Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
File:                     dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json)
Hash identifier:          IcQZ5UJp4z2hIrLgIv4tsCHt6rqUJdlv44kQQyL+8yM=
Subject key identifier:   79:18:35:79:57:82:54:10:4A:4C:F1:00:0D:5E:03:46:10:FB:1F:7A
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584F6C5837A73B08B9CC5FCE7110
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     55178
IP address blocks:        192.230.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:37:a7:3b:08:b9:cc:5f:ce:71:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=7fff84ca-f661-48bc-9e9f-ad50da982157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:9a:1e:53:a3:53:11:27:99:5b:6c:62:ec:
                    c1:db:07:7b:bf:8a:95:ff:cf:de:95:b9:bb:17:08:
                    2a:e4:ae:52:29:14:88:f1:64:2f:8e:d0:c4:6d:7a:
                    d6:d4:d5:4b:fc:a4:a5:bf:f8:ad:e5:1c:cb:9b:4f:
                    ce:e9:19:78:0f:99:c8:25:cd:6b:2d:ab:96:c6:93:
                    7a:a0:a0:13:7d:47:b7:f7:a6:0e:53:31:6e:b0:fe:
                    15:8c:ba:11:b8:c0:f9:2d:92:2e:55:89:1a:d2:56:
                    65:6f:46:56:0f:49:7c:80:27:c0:62:d3:09:15:f7:
                    90:0f:2f:7a:0b:3d:b3:d1:67:4e:bc:48:ed:97:8e:
                    de:a0:1e:52:df:fd:7c:0e:16:2b:6d:20:73:e7:6c:
                    29:aa:70:1d:b3:37:83:1d:8b:ed:e0:a7:54:2e:70:
                    c1:a2:7d:2d:84:b5:66:45:f1:5a:e7:1c:91:ab:97:
                    44:53:17:a9:6c:42:16:7e:2f:7b:a9:3b:84:f6:b9:
                    d9:43:b8:1b:03:a6:59:89:fd:cb:4f:f5:ce:c5:35:
                    6a:1c:3d:e5:82:b1:f7:99:83:0c:f4:69:c3:15:ab:
                    8c:fb:2e:1f:98:b7:8a:1c:a5:34:2c:6b:4b:63:c6:
                    f2:23:5d:b8:9f:86:59:0f:76:7f:27:89:76:18:de:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:35:79:57:82:54:10:4A:4C:F1:00:0D:5E:03:46:10:FB:1F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:a5:27:db:f4:1f:54:0b:33:49:70:48:1e:d6:5e:ea:52:
         a4:39:73:dd:ad:e9:27:71:54:49:0f:08:4c:3d:40:be:0b:97:
         92:1b:4c:ba:c8:36:69:e7:1f:3a:a5:77:62:81:6f:8b:4e:d0:
         f6:00:e4:1c:b8:ea:64:c3:e3:38:5e:cb:de:66:39:7f:a0:d5:
         d3:81:f8:80:ed:fa:7f:ec:a2:b1:ed:bb:90:c6:a0:5e:e4:e9:
         00:a6:59:8d:fd:3c:21:41:71:49:8b:3c:c2:43:c8:60:c1:ed:
         25:80:87:4b:e9:c1:c6:9a:9c:ed:14:9d:f8:7e:8b:27:be:59:
         77:ac:f3:e3:fe:d5:62:28:3a:1a:9a:ce:0e:d7:3f:e7:5b:36:
         87:f1:29:28:68:49:d3:bc:4e:f5:f5:19:fc:aa:59:2e:cd:6c:
         7f:b8:6a:58:1c:3b:05:14:80:1d:ae:f8:b9:76:d1:51:b1:db:
         e6:ff:22:b9:79:8a:79:7d:d8:0d:28:fe:44:fa:8e:30:4e:43:
         89:b4:dc:9e:cf:6c:21:da:3e:de:e6:02:14:ef:14:92:0a:59:
         da:9e:84:bf:8a:00:9f:c9:98:95:bd:be:d0:06:2a:9b:80:37:
         7e:52:d9:74:0b:af:22:99:c8:f3:d4:04:3a:69:5d:72:e6:10:
         4d:69:9b:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDenOwi5zF/OcRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2
MWE5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
N2ZmZjg0Y2EtZjY2MS00OGJjLTllOWYtYWQ1MGRhOTgyMTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOaHlOjUxEnmVtsYuzB2wd7v4qV/8/elbm7
Fwgq5K5SKRSI8WQvjtDEbXrW1NVL/KSlv/it5RzLm0/O6Rl4D5nIJc1rLauWxpN6
oKATfUe396YOUzFusP4VjLoRuMD5LZIuVYka0lZlb0ZWD0l8gCfAYtMJFfeQDy96
Cz2z0WdOvEjtl47eoB5S3/18DhYrbSBz52wpqnAdszeDHYvt4KdULnDBon0thLVm
RfFa5xyRq5dEUxepbEIWfi97qTuE9rnZQ7gbA6ZZif3LT/XOxTVqHD3lgrH3mYMM
9GnDFauM+y4fmLeKHKU0LGtLY8byI124n4ZZD3Z/J4l2GN41aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkYNXlXglQQSkzxAA1eA0YQ+x96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw
M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvZGFiNzFmZmYtY2JhYy0z
ZTI3LTlmYzctZjEyYjAxM2E3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2
OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj
NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0
OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqtpSfb9B9UCzNJcEge1l7qUqQ5c92t6SdxVEkPCEw9QL4Ll5IbTLrI
NmnnHzqld2KBb4tO0PYA5By46mTD4zhey95mOX+g1dOB+IDt+n/sorHtu5DGoF7k
6QCmWY39PCFBcUmLPMJDyGDB7SWAh0vpwcaanO0Unfh+iye+WXes8+P+1WIoOhqa
zg7XP+dbNofxKShoSdO8TvX1GfyqWS7NbH+4algcOwUUgB2u+Ll20VGx2+b/Irl5
inl92A0o/kT6jjBOQ4m03J7PbCHaPt7mAhTvFJIKWdqehL+KAJ/JmJW9vtAGKpuA
N35S2XQLryKZyPPUBDppXXLmEE1pm8Q=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:01:07 2026 by rpki-client