Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/18fbfa8a-cb2f-3e26-bab8-edb2105ea86f.roa
File:                     18fbfa8a-cb2f-3e26-bab8-edb2105ea86f.roa (raw, json)
Hash identifier:          H3+alooCTRQsXoVUwJ/QimA7enIARc/L3A3V5OxHsQc=
Subject key identifier:   58:D7:67:63:0B:74:FA:7B:48:DA:24:22:6F:08:FD:06:A3:50:F6:F3
Certificate issuer:       /CN=2af9df74-e88e-4433-b765-051efef6177a
Certificate serial:       010D0C9F4328584F4988C83BFBD5A8EBAC579AC0
Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/18fbfa8a-cb2f-3e26-bab8-edb2105ea86f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13567
IP address blocks:        205.203.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:c8:3b:fb:d5:a8:eb:ac:57:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7662a568-2f5e-4087-a3da-1ea604eba2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:0f:97:1e:14:9a:dc:58:38:7a:9a:32:26:
                    b0:36:8b:87:cf:0e:6d:19:7f:5f:74:f8:e4:05:a8:
                    6f:4a:c2:d2:ba:ff:14:b7:48:d9:cf:39:aa:8e:b8:
                    79:c9:04:df:fb:a9:38:5d:b3:5c:d3:54:0f:86:c0:
                    84:05:70:ff:ba:47:34:ab:0a:85:23:d4:fe:63:cc:
                    18:e2:15:43:9b:8b:2d:c6:a4:5d:0e:60:a7:54:61:
                    83:59:f9:a7:95:ed:c5:48:13:4e:85:4a:a1:42:59:
                    da:92:b2:b6:b3:e3:19:79:1a:6e:2e:4f:83:21:7f:
                    2b:38:bf:06:e1:c1:42:22:d0:a1:4e:7a:76:08:d7:
                    6c:3f:3b:8e:26:4f:d4:af:92:9d:c2:a4:bb:93:fd:
                    00:f1:57:8a:02:fb:93:4e:a9:65:3c:ee:7d:31:bd:
                    b3:fb:48:4c:3d:8d:8d:a7:5c:20:bc:ae:7c:a6:4e:
                    83:f3:9b:e0:bf:5f:6a:9d:f3:84:ee:ff:4d:e4:ea:
                    74:46:d6:52:d0:7a:eb:3a:6c:bf:28:2f:2a:97:e9:
                    ec:22:77:ae:14:0e:80:96:fa:f8:01:4e:48:d3:be:
                    8c:4e:a8:89:e0:38:5b:a4:be:a3:4e:c3:d8:1c:f8:
                    51:14:8b:41:b0:5e:79:67:56:a5:f0:34:1b:1e:0a:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:67:63:0B:74:FA:7B:48:DA:24:22:6F:08:FD:06:A3:50:F6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/18fbfa8a-cb2f-3e26-bab8-edb2105ea86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl

            X509v3 Authority Key Identifier:
                keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.203.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:cb:c0:3c:05:95:cd:52:75:33:a1:f7:35:0c:15:5c:7b:
         e3:5c:f6:5f:df:ff:14:52:87:af:ef:15:1e:81:30:77:77:23:
         2a:dc:ac:ac:b0:d5:a5:4d:c3:90:66:98:5c:36:06:fc:4f:b7:
         c5:c6:2d:85:f3:49:e2:6f:b6:61:ed:1d:fe:e9:fa:63:bc:7c:
         8c:10:6f:d3:30:82:c6:2d:69:27:c4:63:bf:1c:87:79:d8:a1:
         e6:7c:ba:00:6c:cc:2a:ee:23:20:29:89:cd:1a:12:47:16:73:
         20:c1:49:df:b4:01:75:94:d5:17:19:3c:b6:6c:0e:19:5c:11:
         6f:7f:fb:13:d0:a1:41:b6:dd:89:c7:2b:bf:ed:58:3c:4d:73:
         9d:88:1b:30:2f:c9:3b:52:71:50:3c:c9:e1:5d:11:34:90:6b:
         43:7d:85:f6:a7:68:97:09:dc:d7:c1:b9:d8:c3:d4:1f:a6:cd:
         4a:cf:ee:7c:1f:19:af:25:7f:21:04:f0:ed:12:a1:c0:96:ff:
         3f:d4:61:1b:67:7e:20:ca:99:9d:bf:43:36:f2:39:3c:9d:33:
         b4:ce:ed:67:5b:52:2c:61:81:88:6f:cf:58:a9:ce:4a:25:9f:
         33:ae:35:b6:7f:72:f5:80:20:26:d6:6e:4e:58:ea:b9:1d:d2:
         8b:6f:3f:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiMg7+9Wo66xXmsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFmOWRmNzQtZTg4ZS00NDMzLWI3NjUtMDUxZWZlZjYx
NzdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzY2MmE1NjgtMmY1ZS00MDg3LWEzZGEtMWVhNjA0ZWJhMmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8oPlx4UmtxYOHqaMiawNouHzw5tGX9fdPjk
BahvSsLSuv8Ut0jZzzmqjrh5yQTf+6k4XbNc01QPhsCEBXD/ukc0qwqFI9T+Y8wY
4hVDm4stxqRdDmCnVGGDWfmnle3FSBNOhUqhQlnakrK2s+MZeRpuLk+DIX8rOL8G
4cFCItChTnp2CNdsPzuOJk/Ur5KdwqS7k/0A8VeKAvuTTqllPO59Mb2z+0hMPY2N
p1wgvK58pk6D85vgv19qnfOE7v9N5Op0RtZS0HrrOmy/KC8ql+nsIneuFA6Alvr4
AU5I076MTqiJ4DhbpL6jTsPYHPhRFItBsF55Z1al8DQbHgqOHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjXZ2MLdPp7SNokIm8I/QajUPbzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5
ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVmNjE3N2EvMThmYmZhOGEtY2IyZi0z
ZTI2LWJhYjgtZWRiMjEwNWVhODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFmOWRmNzQtZTg4ZS00NDMzLWI3
NjUtMDUxZWZlZjYxNzdhLzJhZjlkZjc0LWU4OGUtNDQzMy1iNzY1LTA1MWVmZWY2
MTc3YS5jcmwwHwYDVR0jBBgwFoAUiyZaUSN12FMLO/GXY5KWF7AiEBYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFl
ZmVmNjE3N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzctPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItVy8A8BZXNUnUzofc1DBVce+Nc9l/f/xRSh6/vFR6BMHd3IyrcrKyw
1aVNw5BmmFw2BvxPt8XGLYXzSeJvtmHtHf7p+mO8fIwQb9MwgsYtaSfEY78ch3nY
oeZ8ugBszCruIyApic0aEkcWcyDBSd+0AXWU1RcZPLZsDhlcEW9/+xPQoUG23YnH
K7/tWDxNc52IGzAvyTtScVA8yeFdETSQa0N9hfanaJcJ3NfBudjD1B+mzUrP7nwf
Ga8lfyEE8O0SocCW/z/UYRtnfiDKmZ2/QzbyOTydM7TO7WdbUixhgYhvz1ipzkol
nzOuNbZ/cvWAICbWbk5Y6rkd0otvP8Y=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:51:10 2026 by rpki-client