Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/5393dd40-3b9d-3eda-9e9f-33b6332cf8eb.roa
File:                     5393dd40-3b9d-3eda-9e9f-33b6332cf8eb.roa (raw, json)
Hash identifier:          7h1cNQrt/PUu9hX2F7pQ9hT4bTbtBJ3mM5P+/o3HgTs=
Subject key identifier:   2E:99:93:A6:FA:BD:3B:EF:7C:27:A9:33:C0:D3:63:80:AE:FE:B5:28
Certificate issuer:       /CN=d61142c5-6dad-41b6-88e5-f1a6061a1e0d
Certificate serial:       010D0C9F4328584EEA6C774D306C3013E54320E0
Authority key identifier: EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/5393dd40-3b9d-3eda-9e9f-33b6332cf8eb.roa
Signing time:             Sat 22 Aug 2026 00:06:13 +0000
ROA not before:           Sat 22 Aug 2026 00:06:13 +0000
ROA not after:            Fri 20 Nov 2026 01:06:13 +0000
asID:                     25740
IP address blocks:        208.85.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:6c:77:4d:30:6c:30:13:e5:43:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61142c5-6dad-41b6-88e5-f1a6061a1e0d
        Validity
            Not Before: Aug 22 00:06:13 2026 GMT
            Not After : Nov 20 01:06:13 2026 GMT
        Subject: CN=3a018e08-4d25-499e-b726-8826a0e01937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:a5:6b:60:f4:a3:28:74:77:c3:e1:dc:64:
                    6f:89:9a:26:7e:40:aa:21:0d:93:92:09:91:2d:43:
                    41:0b:2b:d5:1b:61:ae:84:49:50:3e:46:20:6e:b8:
                    58:b8:db:ca:08:28:7d:53:b7:91:32:c4:59:fd:f4:
                    1a:a5:d6:1c:b9:84:9b:b0:a5:6d:17:f3:85:bb:f7:
                    8d:d7:6a:11:dd:be:bb:a5:a5:8d:1a:39:a5:55:b5:
                    20:5c:04:1e:5c:ef:cf:50:d9:d3:ef:29:3d:c8:21:
                    be:a2:6b:d6:7e:00:03:2a:54:7d:e2:17:c8:6f:cf:
                    36:76:eb:c4:03:cc:f6:4a:0c:fd:b6:f7:6d:7c:92:
                    14:c6:ca:c7:c5:30:a4:90:11:7b:c9:52:22:05:d1:
                    c7:c5:1f:4c:08:08:e5:c9:02:b4:29:9f:2f:1d:28:
                    9c:dc:87:1b:a4:82:f8:59:1e:e0:20:b9:f3:0e:37:
                    39:b7:d6:6d:65:03:31:82:15:8f:24:68:46:1b:50:
                    51:df:1a:50:53:7b:14:77:e5:91:27:34:cc:4d:aa:
                    a6:dc:29:cf:4d:fb:8e:12:0e:d6:9c:a7:08:9f:da:
                    8f:a3:cb:bc:ac:2e:ac:53:9c:16:69:5a:22:b3:7f:
                    fa:5e:88:7b:75:94:c0:e1:53:66:6a:86:d9:26:83:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:93:A6:FA:BD:3B:EF:7C:27:A9:33:C0:D3:63:80:AE:FE:B5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/5393dd40-3b9d-3eda-9e9f-33b6332cf8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:e2:1b:95:5d:ad:95:48:a5:86:94:01:22:2c:5c:12:d1:
         5a:0a:e1:a1:4a:bb:be:df:fe:62:10:b8:2d:d7:7a:c3:4e:51:
         c3:17:d7:bf:25:04:79:03:7d:c0:4d:0c:2c:e3:f7:d3:ed:df:
         f7:06:19:55:dc:dd:3e:1c:88:03:54:d4:4a:86:7a:14:d1:e5:
         5c:34:12:84:fd:7c:6a:a3:8b:09:cf:3d:1e:6b:53:a4:b3:5a:
         dd:61:d3:38:6c:3b:fe:10:9e:51:18:ba:76:e5:d6:a7:b2:76:
         63:ab:16:ac:83:6e:86:7d:ba:4b:6d:76:4f:d6:7d:37:d0:96:
         da:22:c9:62:60:53:cc:d1:f6:ec:2d:ad:fb:5f:0b:6c:f9:d1:
         53:01:91:c6:ec:46:ce:69:42:4f:0e:1f:dd:7c:f6:28:b8:37:
         01:00:cd:52:bd:a8:7a:1d:98:86:fa:78:bc:01:f1:28:8a:7d:
         f1:02:f0:14:5a:51:ef:5f:8b:7d:59:10:6d:df:0e:43:f1:25:
         92:b9:85:96:c6:e5:fb:ce:6f:77:99:16:1e:15:7f:3b:36:c8:
         b3:2e:3b:69:1f:1d:8f:2f:c6:7d:47:e5:f6:3c:7a:61:ea:76:
         19:fe:3f:95:48:97:9c:1e:e4:32:19:da:5c:b6:df:66:d7:dd:
         06:20:bf:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qbHdNMGwwE+VDIOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYxMTQyYzUtNmRhZC00MWI2LTg4ZTUtZjFhNjA2MWEx
ZTBkMB4XDTI2MDgyMjAwMDYxM1oXDTI2MTEyMDAxMDYxM1owLzEtMCsGA1UEAxMk
M2EwMThlMDgtNGQyNS00OTllLWI3MjYtODgyNmEwZTAxOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdKla2D0oyh0d8Ph3GRviZomfkCqIQ2TkgmR
LUNBCyvVG2GuhElQPkYgbrhYuNvKCCh9U7eRMsRZ/fQapdYcuYSbsKVtF/OFu/eN
12oR3b67paWNGjmlVbUgXAQeXO/PUNnT7yk9yCG+omvWfgADKlR94hfIb882duvE
A8z2Sgz9tvdtfJIUxsrHxTCkkBF7yVIiBdHHxR9MCAjlyQK0KZ8vHSic3IcbpIL4
WR7gILnzDjc5t9ZtZQMxghWPJGhGG1BR3xpQU3sUd+WRJzTMTaqm3CnPTfuOEg7W
nKcIn9qPo8u8rC6sU5wWaVois3/6Xoh7dZTA4VNmaobZJoMyVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6Zk6b6vTvvfCepM8DTY4Cu/rUoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjEx
NDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2MDYxYTFlMGQvNTM5M2RkNDAtM2I5ZC0z
ZWRhLTllOWYtMzNiNjMzMmNmOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDYxMTQyYzUtNmRhZC00MWI2LTg4
ZTUtZjFhNjA2MWExZTBkL2Q2MTE0MmM1LTZkYWQtNDFiNi04OGU1LWYxYTYwNjFh
MWUwZC5jcmwwHwYDVR0jBBgwFoAU7+HlzrU/ZDzI8KlQrz/JCL3FjkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNjExNDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2
MDYxYTFlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqs4huVXa2VSKWGlAEiLFwS0VoK4aFKu77f/mIQuC3XesNOUcMX178l
BHkDfcBNDCzj99Pt3/cGGVXc3T4ciANU1EqGehTR5Vw0EoT9fGqjiwnPPR5rU6Sz
Wt1h0zhsO/4QnlEYunbl1qeydmOrFqyDboZ9ukttdk/WfTfQltoiyWJgU8zR9uwt
rftfC2z50VMBkcbsRs5pQk8OH9189ii4NwEAzVK9qHodmIb6eLwB8SiKffEC8BRa
Ue9fi31ZEG3fDkPxJZK5hZbG5fvOb3eZFh4Vfzs2yLMuO2kfHY8vxn1H5fY8emHq
dhn+P5VIl5we5DIZ2ly232bX3QYgv0w=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:27:24 2026 by rpki-client