Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/edb76b7a-f8b2-3dc3-a145-932c0d82527e.roa
File:                     edb76b7a-f8b2-3dc3-a145-932c0d82527e.roa (raw, json)
Hash identifier:          vB+XpJaRRBvQHfWjTPA+ag5bXHaXO/VJPU1LVTao4Rw=
Subject key identifier:   49:95:D6:86:96:2A:F8:D5:67:77:B9:4C:81:AC:0F:63:4D:C8:20:42
Certificate issuer:       /CN=063770e0-ab2c-4beb-a19d-f909ae040ed5
Certificate serial:       010D0C9F4328584F2EED29F95DEF63388FA869C0
Authority key identifier: 16:1D:F6:E2:F2:4F:F0:9B:1C:57:DE:37:A7:54:42:16:88:3E:7F:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/edb76b7a-f8b2-3dc3-a145-932c0d82527e.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     33534
IP address blocks:        192.30.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/063770e0-ab2c-4beb-a19d-f909ae040ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/063770e0-ab2c-4beb-a19d-f909ae040ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:29:f9:5d:ef:63:38:8f:a8:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063770e0-ab2c-4beb-a19d-f909ae040ed5
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=18713c04-c4cf-4514-b258-f4a35306d608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:d5:d4:6a:ac:13:30:bc:89:06:b7:6e:cb:
                    c8:15:c0:41:89:4f:2e:b9:eb:56:4f:34:29:7b:9f:
                    66:ae:5a:fc:da:15:f5:3e:c6:cd:cd:b9:a5:e0:8f:
                    6f:59:de:c9:48:09:1b:44:fd:a6:42:e7:82:a5:b3:
                    fa:09:05:3d:52:ae:be:71:63:a1:8f:93:f8:a9:b0:
                    5c:6b:fb:9d:b5:00:11:dc:8d:25:6b:95:fb:2d:83:
                    84:17:55:17:30:5b:0f:7a:cb:f6:ed:42:b6:e7:19:
                    e6:a9:b9:69:b9:0f:6e:50:e5:3a:49:93:e8:e9:9f:
                    cc:18:e9:25:24:4d:52:83:49:a8:85:d4:f8:b8:fe:
                    27:be:39:fd:0f:ff:a6:c2:68:53:16:65:0c:c2:49:
                    c8:37:1a:ed:09:81:28:73:ec:09:36:1f:26:37:1b:
                    7d:7e:1a:da:67:dc:48:88:ef:50:eb:c5:9b:1c:d7:
                    df:a3:bc:c0:17:dd:f9:6d:dc:31:01:4c:8a:2b:18:
                    c4:76:58:b4:1a:05:9a:1b:4c:e6:66:0f:d0:d7:ef:
                    31:64:28:2f:2f:b4:1c:8b:84:30:f5:e3:4e:cd:d3:
                    e5:4d:c5:9d:93:72:4d:03:e1:35:cc:3a:93:b7:77:
                    17:a0:ed:c1:49:50:ef:9f:cf:99:4b:8e:d4:f4:5a:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:D6:86:96:2A:F8:D5:67:77:B9:4C:81:AC:0F:63:4D:C8:20:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/edb76b7a-f8b2-3dc3-a145-932c0d82527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5/063770e0-ab2c-4beb-a19d-f909ae040ed5.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:F6:E2:F2:4F:F0:9B:1C:57:DE:37:A7:54:42:16:88:3E:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/063770e0-ab2c-4beb-a19d-f909ae040ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:43:31:ad:56:ae:13:3d:c5:2e:f5:9a:8a:79:4d:ee:a5:69:
         c4:5f:22:76:7a:5d:a5:fa:a3:91:1e:2c:8c:5c:55:38:37:30:
         a6:4d:85:f9:23:8f:e9:48:7c:79:fe:3c:b5:22:d4:cb:fc:69:
         5e:10:d6:dd:d0:ac:6c:5e:2d:48:3e:5c:7a:7b:c7:1e:0d:ad:
         4b:1e:e2:24:be:6b:d0:ca:8f:29:c6:e3:a9:1c:cd:ef:ce:62:
         4e:42:62:42:8c:78:54:d5:1f:b6:d2:ac:ca:e7:9e:f6:da:85:
         a8:e6:83:e9:52:07:68:98:7f:4f:fa:7f:2a:77:af:e5:9c:74:
         8c:34:3c:91:76:a7:27:12:1c:f0:fe:c1:a3:0a:95:05:9a:1a:
         a6:f4:be:0e:8d:cc:64:9b:68:af:50:89:0c:07:ab:e0:41:b1:
         ef:e1:0e:7b:f8:76:df:49:28:26:0c:9a:1a:37:3d:84:d8:20:
         c0:a3:b4:86:06:60:87:50:1e:7c:70:e8:ba:54:05:3d:f1:69:
         fb:e3:0e:29:c2:63:ea:da:16:c4:e9:21:44:4b:fe:ce:83:4a:
         c4:15:76:27:97:30:57:99:8a:bd:8d:f4:f9:1f:f4:ed:94:be:
         c9:8d:f1:ab:33:62:17:f6:93:2a:3a:7c:a4:66:d0:19:24:02:
         3d:a5:29:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Sn5Xe9jOI+oacAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYzNzcwZTAtYWIyYy00YmViLWExOWQtZjkwOWFlMDQw
ZWQ1MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
MTg3MTNjMDQtYzRjZi00NTE0LWIyNTgtZjRhMzUzMDZkNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTV1GqsEzC8iQa3bsvIFcBBiU8uuetWTzQp
e59mrlr82hX1PsbNzbml4I9vWd7JSAkbRP2mQueCpbP6CQU9Uq6+cWOhj5P4qbBc
a/udtQAR3I0la5X7LYOEF1UXMFsPesv27UK25xnmqblpuQ9uUOU6SZPo6Z/MGOkl
JE1Sg0mohdT4uP4nvjn9D/+mwmhTFmUMwknINxrtCYEoc+wJNh8mNxt9fhraZ9xI
iO9Q68WbHNffo7zAF935bdwxAUyKKxjEdli0GgWaG0zmZg/Q1+8xZCgvL7Qci4Qw
9eNOzdPlTcWdk3JNA+E1zDqTt3cXoO3BSVDvn8+ZS47U9FowrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmV1oaWKvjVZ3e5TIGsD2NNyCBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNjM3
NzBlMC1hYjJjLTRiZWItYTE5ZC1mOTA5YWUwNDBlZDUvZWRiNzZiN2EtZjhiMi0z
ZGMzLWExNDUtOTMyYzBkODI1MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDYzNzcwZTAtYWIyYy00YmViLWEx
OWQtZjkwOWFlMDQwZWQ1LzA2Mzc3MGUwLWFiMmMtNGJlYi1hMTlkLWY5MDlhZTA0
MGVkNS5jcmwwHwYDVR0jBBgwFoAUFh324vJP8JscV943p1RCFog+f24wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNjM3NzBlMC1hYjJjLTRiZWItYTE5ZC1mOTA5
YWUwNDBlZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhDMa1WrhM9xS71mop5Te6lacRfInZ6XaX6o5EeLIxcVTg3MKZNhfkj
j+lIfHn+PLUi1Mv8aV4Q1t3QrGxeLUg+XHp7xx4NrUse4iS+a9DKjynG46kcze/O
Yk5CYkKMeFTVH7bSrMrnnvbahajmg+lSB2iYf0/6fyp3r+WcdIw0PJF2pycSHPD+
waMKlQWaGqb0vg6NzGSbaK9QiQwHq+BBse/hDnv4dt9JKCYMmho3PYTYIMCjtIYG
YIdQHnxw6LpUBT3xafvjDinCY+raFsTpIURL/s6DSsQVdieXMFeZir2N9Pkf9O2U
vsmN8aszYhf2kyo6fKRm0BkkAj2lKY4=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:47:09 2026 by rpki-client