Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa
File:                     e6bc8b59-9ec0-3bce-9613-5085d606d708.roa (raw, json)
Hash identifier:          UTa1OV8JtD1S6v89+S7cTscOhSbD6/Y/Xq0MAxtJF8w=
Subject key identifier:   00:5A:9C:B5:50:5A:1C:5A:57:E0:E4:58:56:91:61:D6:E0:AC:6F:31
Certificate issuer:       /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
Certificate serial:       010D0C9F4328584F5E62BDD68E03A46F94D91980
Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        208.81.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:bd:d6:8e:03:a4:6f:94:d9:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=70364b95-8a75-4eda-ae97-061514ac38dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:ff:0d:a3:dd:18:47:c2:57:8b:61:ee:d8:
                    22:dc:60:a6:6b:70:15:8d:65:e6:39:2e:55:0b:7e:
                    4e:fa:89:ed:6a:b3:72:1c:ce:ef:bb:2e:62:fb:db:
                    71:58:5e:c3:1a:66:ac:39:5d:cd:ca:99:01:a4:85:
                    82:2c:72:e8:f9:87:82:da:24:7f:ed:8f:de:45:97:
                    ed:4a:31:ab:38:66:86:4e:16:ad:9e:d5:c3:94:32:
                    f6:ea:7b:b0:7c:1a:31:1f:fd:ba:18:10:6b:39:85:
                    91:b0:01:d2:c5:12:cf:b9:48:f9:a6:51:e4:e9:9b:
                    7e:78:ff:3c:ec:fe:c9:2b:4d:f7:f0:e6:11:c8:30:
                    02:e8:c8:c0:61:fc:1d:0c:48:04:34:ac:1a:fa:53:
                    84:e8:ac:67:4d:5c:88:3d:0d:03:45:da:44:df:10:
                    96:82:86:70:7a:64:81:e5:32:9d:27:64:7c:b0:f8:
                    fa:9e:cc:94:cf:d5:f0:5f:a8:1b:f6:f3:40:fd:23:
                    df:a3:1c:b4:0e:ad:df:82:d0:40:40:78:eb:35:ee:
                    8b:c2:cd:11:05:fc:ed:e0:0b:27:8d:cd:ee:04:39:
                    99:8c:dc:bf:e0:5f:96:3d:32:7c:e7:e9:54:1c:03:
                    cb:f2:83:76:f9:f0:de:88:a5:a8:a3:f4:f8:86:37:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:9C:B5:50:5A:1C:5A:57:E0:E4:58:56:91:61:D6:E0:AC:6F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:7b:4d:29:73:f5:93:03:25:77:97:e4:8b:ee:a4:63:86:
         b4:75:09:9b:06:82:cb:bc:9e:e4:b8:9d:68:b5:da:a3:a5:fd:
         b2:88:18:e2:d1:16:e5:70:e8:54:a6:6f:f8:4b:e5:15:cf:35:
         65:bf:33:1a:ff:cd:b6:9c:7c:61:06:03:77:9a:2b:54:ff:c9:
         fe:b7:97:ab:be:92:ae:20:65:b1:4b:61:1b:98:d1:90:7a:5b:
         94:c6:8e:8f:1f:fb:4f:0c:b0:d3:6e:12:62:bb:30:ee:3a:95:
         ce:5c:b0:d1:d4:89:3b:f8:82:06:e0:47:9a:8e:ca:f3:b4:3f:
         49:72:44:fd:ca:2d:05:21:2d:c9:41:d5:57:ee:c9:b2:6a:ea:
         1d:a6:c2:f0:f0:6d:31:ca:5c:48:fa:97:26:f2:5a:44:47:82:
         4e:4e:c2:88:d8:e6:b4:ac:ee:c8:27:96:68:72:07:0c:1b:ef:
         b4:f2:09:02:6b:e1:e1:93:a7:8b:ea:fb:4d:1c:2f:e5:5b:9c:
         af:8d:de:3f:f5:56:ac:07:5f:0d:e4:30:fd:48:4b:ff:be:40:
         81:27:ed:6e:09:bf:54:3a:ab:d8:52:0e:a3:15:10:a7:03:94:
         d4:78:c6:6e:be:d7:3e:a4:dc:b4:d3:f8:85:29:d4:6c:54:e8:
         6f:8e:cb:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYr3WjgOkb5TZGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU3MGExYzktYjlkYS00NGMwLTk2ZDgtYzViNDc4YjUy
YTA0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NzAzNjRiOTUtOGE3NS00ZWRhLWFlOTctMDYxNTE0YWMzOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+L/DaPdGEfCV4th7tgi3GCma3AVjWXmOS5V
C35O+ontarNyHM7vuy5i+9txWF7DGmasOV3NypkBpIWCLHLo+YeC2iR/7Y/eRZft
SjGrOGaGThatntXDlDL26nuwfBoxH/26GBBrOYWRsAHSxRLPuUj5plHk6Zt+eP88
7P7JK0338OYRyDAC6MjAYfwdDEgENKwa+lOE6KxnTVyIPQ0DRdpE3xCWgoZwemSB
5TKdJ2R8sPj6nsyUz9XwX6gb9vNA/SPfoxy0Dq3fgtBAQHjrNe6Lws0RBfzt4Asn
jc3uBDmZjNy/4F+WPTJ85+lUHAPL8oN2+fDeiKWoo/T4hjeIxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABanLVQWhxaV+DkWFaRYdbgrG8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTcw
YTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0NzhiNTJhMDQvZTZiYzhiNTktOWVjMC0z
YmNlLTk2MTMtNTA4NWQ2MDZkNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTU3MGExYzktYjlkYS00NGMwLTk2
ZDgtYzViNDc4YjUyYTA0LzU1NzBhMWM5LWI5ZGEtNDRjMC05NmQ4LWM1YjQ3OGI1
MmEwNC5jcmwwHwYDVR0jBBgwFoAUkyTMEprpDJi38dT5F/psxhkuGOAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81NTcwYTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0
NzhiNTJhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FHcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/Ze00pc/WTAyV3l+SL7qRjhrR1CZsGgsu8nuS4nWi12qOl/bKIGOLR
FuVw6FSmb/hL5RXPNWW/Mxr/zbacfGEGA3eaK1T/yf63l6u+kq4gZbFLYRuY0ZB6
W5TGjo8f+08MsNNuEmK7MO46lc5csNHUiTv4ggbgR5qOyvO0P0lyRP3KLQUhLclB
1VfuybJq6h2mwvDwbTHKXEj6lybyWkRHgk5OwojY5rSs7sgnlmhyBwwb77TyCQJr
4eGTp4vq+00cL+VbnK+N3j/1VqwHXw3kMP1IS/++QIEn7W4Jv1Q6q9hSDqMVEKcD
lNR4xm6+1z6k3LTT+IUp1GxU6G+Oyxg=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:05:57 2026 by rpki-client