Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
File:                     86de017a-6584-31e8-922e-02cebceb38a9.roa (raw, json)
Hash identifier:          I2K6QjavT0a8gDqeF9qUwJKcEw/o+TwKgBcsVEbWZac=
Subject key identifier:   8D:95:FB:F5:38:F3:F8:E5:12:8D:73:79:F6:B9:40:6C:54:1F:8D:47
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584E8B24ED65310C92F789C8CA40
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     13779
IP address blocks:        216.93.241.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ed:65:31:0c:92:f7:89:c8:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=ec284a43-3594-4af4-aacf-33094c0ce1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:05:7e:51:fe:7f:0b:72:ef:b9:cf:b4:64:
                    9d:a2:32:7b:38:0a:1c:82:01:63:d9:18:76:c7:df:
                    74:69:de:62:1b:27:ca:d4:7c:24:cc:9a:e8:26:83:
                    b8:af:52:6d:a0:e3:45:bb:59:ca:5f:ca:b9:7d:58:
                    08:25:10:86:de:b8:36:5d:a5:7e:13:35:22:48:10:
                    03:f8:5e:a8:b0:7d:d8:36:b5:45:af:4a:60:f6:c8:
                    1e:98:14:13:fb:ad:7f:69:aa:8c:4d:dc:74:49:7f:
                    62:8a:e6:e3:71:d0:f0:d5:5b:99:c5:f1:07:f6:f1:
                    90:fd:dc:14:b0:6f:21:49:e2:28:3d:a2:e6:e9:a1:
                    58:67:5d:cd:97:63:4d:94:4d:54:b9:f1:ac:ff:3d:
                    cd:95:aa:a4:bc:e6:a6:f1:a8:02:38:48:15:1e:1c:
                    76:64:24:3f:06:27:0f:dd:93:6b:fc:a7:17:f1:f6:
                    4d:fd:5d:b2:01:42:30:4f:71:19:10:00:8f:b2:64:
                    10:e5:ca:c3:43:a4:59:94:3a:25:9c:ad:eb:f9:83:
                    93:d0:06:b9:97:6d:90:2a:89:95:04:80:8d:56:ea:
                    df:09:69:c2:0a:5b:cd:89:63:44:1b:28:6b:73:a7:
                    76:30:ab:6e:ea:5f:85:dc:54:78:75:8f:38:98:ef:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:FB:F5:38:F3:F8:E5:12:8D:73:79:F6:B9:40:6C:54:1F:8D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.241.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:61:c4:21:23:01:fd:6c:fe:de:b0:08:d9:3e:7b:b5:60:
         27:61:22:d6:de:d2:85:4b:ce:fc:1f:ea:f3:68:71:21:46:b2:
         ff:45:07:cc:1a:20:45:d5:ad:5f:f8:a1:09:f3:b0:f1:56:72:
         b5:a7:55:62:e2:15:91:51:fb:61:38:c8:7e:7f:b5:fa:66:50:
         d2:44:f8:f9:ab:de:11:5d:1b:11:f3:8f:54:8d:51:1e:47:0f:
         2a:33:9e:f2:5b:4c:0c:e6:a3:73:68:ce:e9:99:5f:45:28:27:
         d4:92:e2:c6:02:c0:c1:9c:86:18:21:4d:9b:43:3d:9f:50:b2:
         db:1b:44:5e:81:4c:f9:22:48:1b:75:88:5c:59:48:f1:67:2f:
         44:12:9c:40:18:1c:aa:e9:85:6a:8d:2d:09:8c:f7:63:77:54:
         54:b9:32:31:92:51:16:77:c9:d9:37:a3:7b:c5:a8:01:19:d5:
         96:4c:6c:0b:d0:58:b0:5b:b3:a1:2d:74:7a:bd:24:17:0a:dc:
         66:23:b9:39:07:b8:aa:e9:42:96:65:09:cf:fd:21:75:b3:1d:
         36:49:c4:88:bc:1d:e6:3e:d2:e9:06:3f:87:44:84:7f:da:1d:
         01:ea:e8:8d:06:4e:45:84:b0:79:f6:34:5d:01:79:c8:b6:35:
         56:e7:48:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6LJO1lMQyS94nIykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
ZWMyODRhNDMtMzU5NC00YWY0LWFhY2YtMzMwOTRjMGNlMWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBgFflH+fwty77nPtGSdojJ7OAocggFj2Rh2
x990ad5iGyfK1HwkzJroJoO4r1JtoONFu1nKX8q5fVgIJRCG3rg2XaV+EzUiSBAD
+F6osH3YNrVFr0pg9sgemBQT+61/aaqMTdx0SX9iiubjcdDw1VuZxfEH9vGQ/dwU
sG8hSeIoPaLm6aFYZ13Nl2NNlE1UufGs/z3NlaqkvOam8agCOEgVHhx2ZCQ/BicP
3ZNr/KcX8fZN/V2yAUIwT3EZEACPsmQQ5crDQ6RZlDolnK3r+YOT0Aa5l22QKomV
BICNVurfCWnCClvNiWNEGyhrc6d2MKtu6l+F3FR4dY84mO/srQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI2V+/U48/jlEo1zefa5QGxUH41HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvODZkZTAxN2EtNjU4NC0z
MWU4LTkyMmUtMDJjZWJjZWIzOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE2F3xADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4fmHEISMB/Wz+3rAI2T57tWAnYSLW3tKFS878H+rzaHEhRrL/RQfM
GiBF1a1f+KEJ87DxVnK1p1Vi4hWRUfthOMh+f7X6ZlDSRPj5q94RXRsR849UjVEe
Rw8qM57yW0wM5qNzaM7pmV9FKCfUkuLGAsDBnIYYIU2bQz2fULLbG0RegUz5Ikgb
dYhcWUjxZy9EEpxAGByq6YVqjS0JjPdjd1RUuTIxklEWd8nZN6N7xagBGdWWTGwL
0FiwW7OhLXR6vSQXCtxmI7k5B7iq6UKWZQnP/SF1sx02ScSIvB3mPtLpBj+HRIR/
2h0B6uiNBk5FhLB59jRdAXnItjVW50gZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:28 2026 by rpki-client