Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa
File:                     81cc69f6-3395-35b3-9df7-3be9373d6008.roa (raw, json)
Hash identifier:          jG+i70hypSDgUgzlZ+bNcyMeVWINSfGQr3u25wUrJVk=
Subject key identifier:   DF:C7:16:70:D5:78:08:A3:32:C6:0E:3E:A5:81:1E:F4:DE:7C:14:31
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584F497743467D2A7A4E8C7A5500
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400304
IP address blocks:        216.126.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:43:46:7d:2a:7a:4e:8c:7a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=013d2d6c-5b39-4ff1-992a-16f87879f2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:b4:3b:83:7c:7b:c5:65:8e:95:93:75:90:
                    55:7b:7d:4b:4c:cc:7a:11:b0:85:ee:9c:90:f3:5a:
                    29:b3:93:b7:7d:d8:d9:66:82:a4:dd:e3:16:46:1d:
                    36:29:41:71:2b:10:aa:d7:14:4c:2c:83:b2:da:b8:
                    74:c1:23:e9:97:72:13:b2:98:f4:e8:fa:2a:9a:d8:
                    ea:70:f2:f0:e8:21:a8:48:38:51:95:27:95:a4:ab:
                    c6:ef:d1:d7:53:cf:98:17:37:62:03:09:8d:17:44:
                    c9:c6:8c:b9:c9:99:f1:e5:2b:d4:3e:c1:72:be:ab:
                    fa:9f:f7:db:1e:df:7a:28:f8:c0:78:85:67:df:9d:
                    cb:f6:f3:5a:a1:63:f6:07:42:d7:6a:2f:f0:3d:e4:
                    f2:15:8c:29:84:f8:b5:e7:7d:c8:bf:80:45:af:d8:
                    0c:5f:f0:0e:e7:ab:ff:21:ff:23:a8:c9:de:c0:0a:
                    fa:d3:cb:5b:71:d2:df:01:0f:04:7e:fa:a3:94:f0:
                    f3:0a:01:b0:b6:aa:b9:87:12:8b:0e:ae:02:b4:92:
                    da:3a:56:90:9c:65:b3:86:33:ce:c1:45:fd:3a:f4:
                    78:d6:9b:73:9d:b8:60:10:7d:1d:9d:89:8a:48:1c:
                    77:13:60:03:37:7b:88:2d:80:87:dc:e9:df:65:4a:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C7:16:70:D5:78:08:A3:32:C6:0E:3E:A5:81:1E:F4:DE:7C:14:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:58:55:92:c9:a2:8d:87:52:d0:50:31:42:ac:1a:a1:b1:75:
         88:4d:29:8b:f9:63:c8:59:63:30:a5:d4:51:a4:e7:f6:9c:61:
         fb:1e:32:df:82:cc:19:5b:37:00:b1:e9:c8:b1:0d:44:6d:27:
         b9:a8:d3:f0:e2:bc:70:d4:ed:5a:50:b9:0a:1f:4e:c9:ac:c7:
         77:0f:de:bf:d9:3f:e1:03:d7:2d:ff:e2:15:13:75:19:7e:f1:
         7d:76:8f:d7:1b:f0:6d:b8:71:14:22:78:a0:77:08:80:53:a6:
         13:cc:7c:a2:2f:01:52:2e:d2:ae:ff:cd:4c:c2:d2:5a:11:19:
         d0:2b:1b:f3:01:1e:69:22:24:1b:8b:85:2e:61:66:e9:0a:ce:
         53:c7:74:f8:6a:f7:e4:53:60:87:3c:9d:10:87:2b:4a:22:60:
         e7:5e:a7:37:3e:e3:ec:5b:fb:bc:61:1a:ff:d3:bf:49:c9:7a:
         0e:14:85:28:07:26:a7:dd:85:9e:cb:b3:03:fd:2f:26:12:3d:
         14:82:dc:8b:7c:92:2d:3e:43:6d:9e:3a:8f:05:fd:25:fe:56:
         5c:db:4a:9c:cf:ac:5c:6b:f3:af:ba:53:85:16:d2:ee:85:6e:
         53:b2:b6:6a:2c:23:0a:27:2b:99:e4:28:78:b7:69:bd:d3:88:
         3f:fc:53:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0NGfSp6Tox6VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDEzZDJkNmMtNWIzOS00ZmYxLTk5MmEtMTZmODc4NzlmMmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKa0O4N8e8VljpWTdZBVe31LTMx6EbCF7pyQ
81ops5O3fdjZZoKk3eMWRh02KUFxKxCq1xRMLIOy2rh0wSPpl3ITspj06Poqmtjq
cPLw6CGoSDhRlSeVpKvG79HXU8+YFzdiAwmNF0TJxoy5yZnx5SvUPsFyvqv6n/fb
Ht96KPjAeIVn353L9vNaoWP2B0LXai/wPeTyFYwphPi1533Iv4BFr9gMX/AO56v/
If8jqMnewAr608tbcdLfAQ8EfvqjlPDzCgGwtqq5hxKLDq4CtJLaOlaQnGWzhjPO
wUX9OvR41ptznbhgEH0dnYmKSBx3E2ADN3uILYCH3OnfZUq2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/HFnDVeAijMsYOPqWBHvTefBQxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvODFjYzY5ZjYtMzM5NS0z
NWIzLTlkZjctM2JlOTM3M2Q2MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2H7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANRYVZLJoo2HUtBQMUKsGqGxdYhNKYv5Y8hZYzCl1FGk5/acYfseMt+C
zBlbNwCx6cixDURtJ7mo0/DivHDU7VpQuQofTsmsx3cP3r/ZP+ED1y3/4hUTdRl+
8X12j9cb8G24cRQieKB3CIBTphPMfKIvAVIu0q7/zUzC0loRGdArG/MBHmkiJBuL
hS5hZukKzlPHdPhq9+RTYIc8nRCHK0oiYOdepzc+4+xb+7xhGv/Tv0nJeg4UhSgH
JqfdhZ7LswP9LyYSPRSC3It8ki0+Q22eOo8F/SX+VlzbSpzPrFxr86+6U4UW0u6F
blOytmosIwonK5nkKHi3ab3TiD/8U/M=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:04:14 2026 by rpki-client