Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fe5049c1-c8fe-384d-9a39-ef978e5b87e9.roa
File:                     fe5049c1-c8fe-384d-9a39-ef978e5b87e9.roa (raw, json)
Hash identifier:          ZblO45WdE9r45DK+ueJ0heSKJ7W/R2JCDNTkTRyfZ70=
Subject key identifier:   69:C3:7D:29:99:E4:5E:AB:A7:09:31:CD:86:26:E5:1D:F2:1D:64:52
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584F4974DF2F0E2869AC6FA80258
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fe5049c1-c8fe-384d-9a39-ef978e5b87e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394922
IP address blocks:        199.180.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:df:2f:0e:28:69:ac:6f:a8:02:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b3e761a7-474e-4ad2-9816-b1f63a85372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:bd:a4:f0:66:e7:f1:8d:56:b9:87:66:12:
                    38:a2:f5:7f:58:d3:36:c4:56:28:f0:6a:5c:20:7e:
                    99:08:d4:07:a7:ad:e5:d9:db:9f:a4:91:47:d2:9a:
                    70:4b:b3:8a:fc:66:05:3b:4c:42:bb:9d:8a:37:b7:
                    2a:46:6b:8c:d9:66:44:d1:61:89:49:39:a0:3f:85:
                    5c:93:e1:c6:eb:fa:ac:b0:90:80:38:bd:65:59:47:
                    8a:84:e2:90:4c:24:4f:7d:77:13:88:9a:67:d3:8b:
                    97:9e:3f:91:d7:cf:de:a5:88:85:6b:42:c1:c1:bf:
                    95:8e:dc:69:19:20:ee:4c:1a:bc:2a:88:51:c6:f6:
                    bd:5e:67:98:8c:e5:a0:ac:d2:96:d9:09:50:26:fc:
                    63:f7:10:c2:1a:0e:53:7f:d3:55:57:3b:cc:44:49:
                    b6:d9:f7:08:f5:bd:be:50:90:a4:bf:26:ff:c5:90:
                    dc:69:57:02:3c:43:bd:fe:67:33:a1:cd:a3:75:df:
                    0f:d4:f1:85:23:cb:77:f3:10:24:ad:9c:7c:be:4b:
                    95:1c:ab:6d:a6:be:4f:03:f0:b8:bc:c5:32:2e:0b:
                    6e:cb:bb:0a:a7:06:b6:e7:9c:2b:90:4e:b7:28:ad:
                    85:9f:aa:38:e0:07:e5:3e:42:33:d5:88:bd:51:aa:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C3:7D:29:99:E4:5E:AB:A7:09:31:CD:86:26:E5:1D:F2:1D:64:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fe5049c1-c8fe-384d-9a39-ef978e5b87e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:cb:05:4e:46:89:51:5b:72:41:9f:31:f0:f1:2b:c6:4f:
         46:5d:26:5a:be:9a:13:f6:27:67:a3:7d:dd:e9:48:b8:4a:b1:
         f5:23:52:65:b5:9c:c5:e8:48:35:0b:d7:b6:72:b3:89:a9:04:
         f1:10:38:4c:13:db:8e:4b:e7:c7:f8:fa:e1:5d:9b:cd:5c:fa:
         be:16:95:e6:00:0b:20:66:e8:3f:c0:35:85:b5:dd:39:ac:ce:
         b8:58:07:9e:a3:c6:28:07:01:89:cd:c0:e9:d6:a8:1c:2f:46:
         bf:c4:83:a9:27:ec:22:f1:44:75:d1:9c:2c:e6:49:0d:d7:45:
         44:9b:c7:54:07:ef:2a:ee:ee:dc:fa:9b:4e:4b:ce:fb:9e:27:
         bd:cf:77:ea:b9:89:f2:fc:2d:cc:09:dc:84:39:d2:24:1a:ef:
         3a:96:fb:35:a9:c7:5e:3c:ea:ee:bf:98:2c:40:d1:de:b1:5d:
         2e:d4:9a:f1:a1:ed:55:80:ce:7f:b7:7c:98:26:dc:dd:16:4c:
         b3:b1:75:ad:12:34:d9:ba:8d:66:02:ec:b3:a7:83:6c:b0:53:
         8c:6b:73:3a:fc:90:92:6a:33:95:8e:bc:1f:ba:a7:cb:ea:e6:
         d2:e9:57:87:81:f3:9f:24:64:58:7a:56:29:fb:10:73:71:a9:
         4f:c1:fd:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdN8vDihprG+oAlgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTFlYzZlZjctZjc2MC00MmNkLWExZjMtYzZjMDM5M2Iy
NTE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjNlNzYxYTctNDc0ZS00YWQyLTk4MTYtYjFmNjNhODUzNzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rq9pPBm5/GNVrmHZhI4ovV/WNM2xFYo8Gpc
IH6ZCNQHp63l2dufpJFH0ppwS7OK/GYFO0xCu52KN7cqRmuM2WZE0WGJSTmgP4Vc
k+HG6/qssJCAOL1lWUeKhOKQTCRPfXcTiJpn04uXnj+R18/epYiFa0LBwb+Vjtxp
GSDuTBq8KohRxva9XmeYjOWgrNKW2QlQJvxj9xDCGg5Tf9NVVzvMREm22fcI9b2+
UJCkvyb/xZDcaVcCPEO9/mczoc2jdd8P1PGFI8t38xAkrZx8vkuVHKttpr5PA/C4
vMUyLgtuy7sKpwa255wrkE63KK2Fn6o44AflPkIz1Yi9Uao0YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnDfSmZ5F6rpwkxzYYm5R3yHWRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMWVj
NmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMwMzkzYjI1MTcvZmU1MDQ5YzEtYzhmZS0z
ODRkLTlhMzktZWY5NzhlNWI4N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTFlYzZlZjctZjc2MC00MmNkLWEx
ZjMtYzZjMDM5M2IyNTE3L2UxZWM2ZWY3LWY3NjAtNDJjZC1hMWYzLWM2YzAzOTNi
MjUxNy5jcmwwHwYDVR0jBBgwFoAUgdFN6cPkqEwQoUqJbqPK4yu+vgAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMWVjNmVmNy1mNzYwLTQyY2QtYTFmMy1jNmMw
MzkzYjI1MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7S+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7cywVORolRW3JBnzHw8SvGT0ZdJlq+mhP2J2ejfd3pSLhKsfUjUmW1
nMXoSDUL17Zys4mpBPEQOEwT245L58f4+uFdm81c+r4WleYACyBm6D/ANYW13Tms
zrhYB56jxigHAYnNwOnWqBwvRr/Eg6kn7CLxRHXRnCzmSQ3XRUSbx1QH7yru7tz6
m05LzvueJ73Pd+q5ifL8LcwJ3IQ50iQa7zqW+zWpx1486u6/mCxA0d6xXS7UmvGh
7VWAzn+3fJgm3N0WTLOxda0SNNm6jWYC7LOng2ywU4xrczr8kJJqM5WOvB+6p8vq
5tLpV4eB858kZFh6Vin7EHNxqU/B/Zw=
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:25:20 2026 by rpki-client