Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa
File:                     4a94751e-73d8-3e00-b787-2e81cb282413.roa (raw, json)
Hash identifier:          aWFhd4/BoO8SH+amsIm6mgazjPKQcNNyjlSqUn2msnI=
Subject key identifier:   8C:8C:32:D0:1B:B7:83:D3:D0:87:BE:B2:86:00:B1:8B:C1:18:F8:7F
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584EF7176BFEC6CF3851298A2900
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     4476
IP address blocks:        192.68.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6b:fe:c6:cf:38:51:29:8a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=fe635484-dfa5-4d89-a3ed-0613fe5a6e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:f7:5e:bf:0e:e2:32:cf:d9:e8:b6:b0:7e:
                    00:12:ff:83:06:e1:97:3d:1a:8f:91:48:c8:84:b2:
                    cf:ef:f9:0b:82:81:55:02:b2:b1:a7:bb:8c:94:f0:
                    24:1f:1d:12:85:3d:11:75:40:41:19:a6:49:c7:1b:
                    8e:54:3f:40:43:92:a6:70:32:3b:08:41:45:7b:fc:
                    22:a9:58:be:c2:0f:48:54:03:05:25:86:48:cb:5b:
                    3c:3f:eb:08:7d:27:43:7b:96:99:06:0d:df:13:93:
                    27:4e:12:e8:9f:82:39:8c:4a:f8:70:31:f4:d4:c6:
                    f5:12:50:06:b9:88:03:ce:e7:09:30:af:dd:e8:dd:
                    a0:24:5d:46:90:99:aa:95:2e:ca:ed:d7:c3:59:c5:
                    fa:43:dc:2b:48:36:ce:d3:d8:5e:5a:63:a2:d6:a1:
                    cb:24:99:67:26:05:f7:1e:fe:2f:ae:f6:cd:8c:c4:
                    73:2d:7b:fd:a3:d8:1c:d0:6a:49:16:a0:a6:3f:34:
                    97:17:a9:cf:9e:35:30:f1:5d:ac:2b:f2:ef:b7:51:
                    0f:a4:3e:f1:5d:3b:b7:b9:98:5a:f7:f7:fc:c3:3b:
                    2c:ca:67:91:f5:47:17:52:95:6b:28:3c:64:63:8c:
                    95:89:f0:9b:17:ed:82:93:4b:e0:14:52:14:3b:7e:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:32:D0:1B:B7:83:D3:D0:87:BE:B2:86:00:B1:8B:C1:18:F8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:66:d3:17:11:71:91:2c:62:3e:33:47:4e:76:36:56:e3:
         c0:dd:1a:11:40:9e:ec:21:60:c0:2d:a7:56:9b:22:9c:65:d6:
         e0:85:9f:2b:cc:66:2c:27:ac:ee:42:df:0f:af:f3:88:2b:63:
         58:ad:b1:df:36:dd:ee:17:6b:aa:de:63:99:54:03:62:8c:36:
         a1:ce:79:17:7f:f6:a0:a6:48:3a:50:88:1c:17:8a:58:e6:e1:
         28:3e:06:c5:4a:4c:01:fc:41:b3:32:a5:af:58:cd:8f:8e:62:
         57:2e:3f:8a:29:7e:66:9b:07:0b:66:bc:7e:a5:cb:8e:cc:ac:
         7c:06:a9:59:b8:65:fa:0f:5e:d5:dd:39:79:03:a3:2a:19:24:
         bb:88:19:b3:0f:e4:f3:d4:11:ea:ed:8f:7f:cf:ec:21:35:de:
         53:80:9f:35:d9:8d:81:14:07:1e:93:a4:6c:c8:52:45:66:55:
         17:ea:a9:e5:5f:de:6e:a6:ca:53:61:e7:42:91:4c:d4:51:19:
         cf:bb:0f:fa:1d:ba:5a:ca:76:72:e0:c3:62:48:fc:c3:17:f4:
         ae:c6:21:b4:90:3c:a1:12:20:16:5f:39:ef:ec:44:53:62:4f:
         79:50:73:b4:38:48:31:91:15:69:f8:6d:05:0b:2a:2c:37:6e:
         d7:e9:1a:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2v+xs84USmKKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2
OTYzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZmU2MzU0ODQtZGZhNS00ZDg5LWEzZWQtMDYxM2ZlNWE2ZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngD3Xr8O4jLP2ei2sH4AEv+DBuGXPRqPkUjI
hLLP7/kLgoFVArKxp7uMlPAkHx0ShT0RdUBBGaZJxxuOVD9AQ5KmcDI7CEFFe/wi
qVi+wg9IVAMFJYZIy1s8P+sIfSdDe5aZBg3fE5MnThLon4I5jEr4cDH01Mb1ElAG
uYgDzucJMK/d6N2gJF1GkJmqlS7K7dfDWcX6Q9wrSDbO09heWmOi1qHLJJlnJgX3
Hv4vrvbNjMRzLXv9o9gc0GpJFqCmPzSXF6nPnjUw8V2sK/Lvt1EPpD7xXTu3uZha
9/f8wzssymeR9UcXUpVrKDxkY4yVifCbF+2Ck0vgFFIUO341/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyMMtAbt4PT0Ie+soYAsYvBGPh/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5
YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvNGE5NDc1MWUtNzNkOC0z
ZTAwLWI3ODctMmU4MWNiMjgyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4
NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi
Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2
ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVvZtMXEXGRLGI+M0dOdjZW48DdGhFAnuwhYMAtp1abIpxl1uCFnyvM
ZiwnrO5C3w+v84grY1itsd823e4Xa6reY5lUA2KMNqHOeRd/9qCmSDpQiBwXiljm
4Sg+BsVKTAH8QbMypa9YzY+OYlcuP4opfmabBwtmvH6ly47MrHwGqVm4ZfoPXtXd
OXkDoyoZJLuIGbMP5PPUEertj3/P7CE13lOAnzXZjYEUBx6TpGzIUkVmVRfqqeVf
3m6mylNh50KRTNRRGc+7D/odulrKdnLgw2JI/MMX9K7GIbSQPKESIBZfOe/sRFNi
T3lQc7Q4SDGRFWn4bQULKiw3btfpGm8=
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:08:29 2026 by rpki-client