Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/de2e4eb7-279a-334e-a14e-8735edd4be2d.roa
File:                     de2e4eb7-279a-334e-a14e-8735edd4be2d.roa (raw, json)
Hash identifier:          vmmimgfNaK08wQ2oZ8VFUtouGMpYEOgYVeMZDy7m5YY=
Subject key identifier:   F3:A2:18:20:63:6E:C6:17:A5:3C:FC:EE:1C:8A:60:1C:43:ED:C3:C4
Certificate issuer:       /CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce
Certificate serial:       010D0C9F4328584F4DA28F70CF32B0FF67ABE500
Authority key identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/de2e4eb7-279a-334e-a14e-8735edd4be2d.roa
Signing time:             Sat 26 Sep 2026 13:00:12 +0000
ROA not before:           Sat 26 Sep 2026 13:00:12 +0000
ROA not after:            Fri 25 Dec 2026 14:00:12 +0000
asID:                     36413
IP address blocks:        144.126.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:a2:8f:70:cf:32:b0:ff:67:ab:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce
        Validity
            Not Before: Sep 26 13:00:12 2026 GMT
            Not After : Dec 25 14:00:12 2026 GMT
        Subject: CN=c587410f-6700-4455-9226-25fa6937f4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:23:11:82:04:f8:0d:23:87:3c:f8:f2:ed:
                    b9:18:0c:a9:3d:41:4b:88:a7:38:30:22:47:c2:48:
                    3b:18:cf:66:92:6f:0f:57:08:3c:b4:08:76:53:23:
                    42:25:99:ac:e5:89:b7:a9:8d:23:0e:d6:10:fc:7f:
                    51:4d:93:8c:a3:02:a9:47:31:98:8f:d8:3f:42:9a:
                    70:ea:55:5d:ee:22:e2:41:80:de:f8:fc:42:01:ca:
                    a2:db:01:f7:56:85:7a:cf:a1:e5:4f:7a:f5:b3:ac:
                    2a:4d:18:08:89:47:9a:a5:fe:9a:d0:26:4d:0b:22:
                    10:b5:15:62:f1:19:fe:66:2c:2e:77:f0:be:81:93:
                    c2:03:f2:d3:f4:38:6c:cc:1b:23:58:ea:e0:f0:48:
                    cc:ba:76:16:a5:7f:0f:eb:98:93:75:36:eb:52:2d:
                    3f:8e:78:98:ae:94:15:2c:c1:7e:d8:4b:e2:32:fc:
                    16:bb:bd:6e:1a:c6:1f:e9:46:47:a9:dc:95:da:05:
                    a9:76:86:25:d5:c1:c7:7e:c4:31:70:7b:88:8f:d2:
                    18:d7:12:74:9b:f0:12:1c:ca:f4:a2:f0:58:5f:1d:
                    9c:31:c5:ef:be:dd:22:4d:e5:2b:e1:4d:6c:2e:83:
                    d7:d1:e5:9b:64:4b:cf:f8:0a:98:3d:63:21:21:cc:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:18:20:63:6E:C6:17:A5:3C:FC:EE:1C:8A:60:1C:43:ED:C3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/de2e4eb7-279a-334e-a14e-8735edd4be2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.crl

            X509v3 Authority Key Identifier:
                keyid:D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.126.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:b0:33:9a:28:22:20:e6:42:40:3b:a2:15:eb:5a:ee:2c:
         a6:bb:32:9a:4a:90:b4:69:ee:3f:43:99:1f:61:98:87:95:4c:
         91:f9:57:c8:07:a6:af:fa:07:a2:82:01:b2:1f:a6:5d:7a:29:
         37:d2:a1:4d:b2:87:c7:19:76:92:51:e0:92:b5:f4:30:1f:df:
         ad:3a:96:b7:1c:b9:f0:81:3b:bb:10:d0:a9:ed:93:a4:9c:a5:
         be:65:f2:36:97:c1:6c:24:02:11:d3:69:89:de:bb:85:95:84:
         99:aa:b3:c8:61:54:26:29:68:e7:23:56:0f:77:ac:9c:27:50:
         39:51:66:9a:36:1f:b3:7b:23:ba:fb:e1:5b:40:db:91:30:70:
         9a:98:89:17:6f:59:57:52:2c:2e:4b:a1:09:5b:11:9a:65:d1:
         9a:b9:a8:22:d5:a6:6a:b3:0f:2e:d7:f0:c3:34:6e:ff:b9:de:
         2a:3e:d6:09:06:30:f3:c9:17:71:1d:a4:88:b6:29:72:46:a3:
         a3:0f:35:61:2a:94:b3:43:99:32:31:17:84:e2:f3:62:e6:d3:
         6a:81:d5:57:8d:5c:50:e0:31:02:c3:e7:5f:1c:1f:bf:22:dc:
         73:30:cc:c0:5c:6d:a9:bc:ad:d4:ed:5f:e5:57:bd:71:3b:80:
         b5:c7:49:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo9wzzKw/2er5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4MjRiMTUtOTdmZC00YmE1LWIxMjQtNWEzZWY3OGFj
MmNlMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk
YzU4NzQxMGYtNjcwMC00NDU1LTkyMjYtMjVmYTY5MzdmNGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6cjEYIE+A0jhzz48u25GAypPUFLiKc4MCJH
wkg7GM9mkm8PVwg8tAh2UyNCJZms5Ym3qY0jDtYQ/H9RTZOMowKpRzGYj9g/Qppw
6lVd7iLiQYDe+PxCAcqi2wH3VoV6z6HlT3r1s6wqTRgIiUeapf6a0CZNCyIQtRVi
8Rn+Ziwud/C+gZPCA/LT9DhszBsjWOrg8EjMunYWpX8P65iTdTbrUi0/jniYrpQV
LMF+2EviMvwWu71uGsYf6UZHqdyV2gWpdoYl1cHHfsQxcHuIj9IY1xJ0m/ASHMr0
ovBYXx2cMcXvvt0iTeUr4U1sLoPX0eWbZEvP+AqYPWMhIcxZGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOiGCBjbsYXpTz87hyKYBxD7cPEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82Zjgy
NGIxNS05N2ZkLTRiYTUtYjEyNC01YTNlZjc4YWMyY2UvZGUyZTRlYjctMjc5YS0z
MzRlLWExNGUtODczNWVkZDRiZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmY4MjRiMTUtOTdmZC00YmE1LWIx
MjQtNWEzZWY3OGFjMmNlLzZmODI0YjE1LTk3ZmQtNGJhNS1iMTI0LTVhM2VmNzhh
YzJjZS5jcmwwHwYDVR0jBBgwFoAU1AbkvqGj09y8+sD7Bddn1rGOLmUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjgyNGIxNS05N2ZkLTRiYTUtYjEyNC01YTNl
Zjc4YWMyY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkH4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4ksDOaKCIg5kJAO6IV61ruLKa7MppKkLRp7j9DmR9hmIeVTJH5V8gH
pq/6B6KCAbIfpl16KTfSoU2yh8cZdpJR4JK19DAf3606lrccufCBO7sQ0Kntk6Sc
pb5l8jaXwWwkAhHTaYneu4WVhJmqs8hhVCYpaOcjVg93rJwnUDlRZpo2H7N7I7r7
4VtA25EwcJqYiRdvWVdSLC5LoQlbEZpl0Zq5qCLVpmqzDy7X8MM0bv+53io+1gkG
MPPJF3EdpIi2KXJGo6MPNWEqlLNDmTIxF4Ti82Lm02qB1VeNXFDgMQLD518cH78i
3HMwzMBcbam8rdTtX+VXvXE7gLXHSc4=
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:45 2026 by rpki-client