Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa
File:                     ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa (raw, json)
Hash identifier:          hBaAZrTb21iXrkHviXN+FM3YZLGLMR4uWwVkoBTd+6U=
Subject key identifier:   F5:2E:23:80:1F:AE:36:5E:75:9D:2D:56:51:22:74:A7:2A:96:A2:D1
Certificate issuer:       /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
Certificate serial:       010D0C9F4328584F8F3DC0E0AB74FA73C2151CC0
Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     62642
IP address blocks:        172.82.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c0:e0:ab:74:fa:73:c2:15:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=75418946-84c3-4fb8-a274-a54b3a0bd04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:5b:6d:e4:b3:2d:50:f4:56:3a:35:e1:4c:
                    1c:9c:52:bb:ef:53:3a:be:85:f2:03:7f:59:70:56:
                    c1:ef:18:59:5a:7a:c1:7d:21:a0:08:38:43:32:00:
                    f9:17:30:b3:c6:82:86:14:d7:33:9c:b3:5e:d3:e9:
                    ef:8f:a0:55:3b:50:3c:29:b7:72:1c:2d:4a:17:3a:
                    b4:e8:e9:87:a0:0c:f8:2c:c5:0d:64:d8:d4:32:5e:
                    f0:08:f1:91:7e:7f:0f:f8:74:95:b0:a3:6f:13:55:
                    82:bc:ca:3d:f7:d0:6d:01:56:cc:bb:81:af:f4:65:
                    f7:42:e6:00:7a:e8:dd:75:62:67:ce:25:b3:66:d3:
                    6c:6a:04:48:af:12:b6:fa:c2:9f:8f:a3:19:05:5f:
                    14:5d:6f:15:16:98:1c:86:35:14:f4:70:56:c2:76:
                    0c:47:e9:cd:cb:cf:08:54:54:a3:83:87:65:5c:c4:
                    40:db:f3:e1:30:32:66:2e:a3:72:a3:10:40:07:96:
                    e2:a4:75:a1:b4:a8:02:e7:c6:68:74:8c:63:55:ec:
                    1d:df:83:e7:6f:07:7f:91:ce:9e:dd:bc:83:9c:5b:
                    be:bb:85:a9:c4:bb:97:0d:b5:5a:0f:5c:88:79:ec:
                    4a:f6:ae:13:5e:b4:36:13:c5:7b:8c:5b:75:4b:e7:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:23:80:1F:AE:36:5E:75:9D:2D:56:51:22:74:A7:2A:96:A2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl

            X509v3 Authority Key Identifier:
                keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:18:9b:da:b4:b9:3c:73:e1:7f:d2:50:7c:41:f6:1b:c7:
         a3:3e:35:3e:07:e6:c9:29:c0:04:65:47:93:d6:69:a5:b5:e7:
         7a:a3:6b:19:63:82:f0:ee:4c:c8:90:73:7d:66:4b:19:da:b3:
         31:3b:7d:41:3d:19:20:24:55:61:d6:1b:88:ee:37:0a:49:42:
         24:30:9b:30:d1:1d:ae:81:1f:4d:8a:63:a5:1e:29:5b:a0:f9:
         fc:8b:de:80:48:a2:84:0a:ec:e4:b5:c7:8a:82:03:e7:fe:2c:
         2e:79:a3:09:60:21:72:db:2a:06:da:c7:2a:3d:27:14:6c:8c:
         b4:22:98:8f:47:f8:d4:5d:7c:22:a5:04:e4:ad:07:66:e2:56:
         5b:3c:7f:8c:c6:8d:19:2f:34:c5:0b:59:6a:9d:0c:65:a0:5a:
         21:e5:3a:41:a4:a5:1f:d4:74:ae:41:51:a4:6c:b5:9f:62:ea:
         80:d8:de:81:02:cf:19:c2:95:2a:60:a1:ca:59:f0:85:73:92:
         8e:7b:ee:b1:d5:d2:4d:02:c8:88:0e:68:fe:41:b2:57:6e:f7:
         cf:09:47:39:7d:93:f7:70:ca:63:1d:38:ca:f8:9e:5f:c5:5f:
         c1:f6:3f:c1:6c:d4:4a:68:16:13:5c:6c:6d:d2:bb:ae:0c:cf:
         3c:5b:ab:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcDgq3T6c8IVHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0
MGVmMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk
NzU0MTg5NDYtODRjMy00ZmI4LWEyNzQtYTU0YjNhMGJkMDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVVbbeSzLVD0Vjo14UwcnFK771M6voXyA39Z
cFbB7xhZWnrBfSGgCDhDMgD5FzCzxoKGFNcznLNe0+nvj6BVO1A8KbdyHC1KFzq0
6OmHoAz4LMUNZNjUMl7wCPGRfn8P+HSVsKNvE1WCvMo999BtAVbMu4Gv9GX3QuYA
eujddWJnziWzZtNsagRIrxK2+sKfj6MZBV8UXW8VFpgchjUU9HBWwnYMR+nNy88I
VFSjg4dlXMRA2/PhMDJmLqNyoxBAB5bipHWhtKgC58ZodIxjVewd34Pnbwd/kc6e
3byDnFu+u4WpxLuXDbVaD1yIeexK9q4TXrQ2E8V7jFt1S+cn9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUuI4AfrjZedZ0tVlEidKcqlqLRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4
ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvY2UxODllYTEtMDM2MS0z
Y2UxLTlkYWUtNWRhODY0Y2ZjZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk
MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0
NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh
MzhlNDQwZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/FGJvatLk8c+F/0lB8QfYbx6M+NT4H5skpwARlR5PWaaW153qjaxlj
gvDuTMiQc31mSxnaszE7fUE9GSAkVWHWG4juNwpJQiQwmzDRHa6BH02KY6UeKVug
+fyL3oBIooQK7OS1x4qCA+f+LC55owlgIXLbKgbaxyo9JxRsjLQimI9H+NRdfCKl
BOStB2biVls8f4zGjRkvNMULWWqdDGWgWiHlOkGkpR/UdK5BUaRstZ9i6oDY3oEC
zxnClSpgocpZ8IVzko577rHV0k0CyIgOaP5Bsldu988JRzl9k/dwymMdOMr4nl/F
X8H2P8Fs1EpoFhNcbG3Su64Mzzxbq+4=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:36:25 2026 by rpki-client