Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35448898-4ecd-3bd3-aaf8-5d596d0f15dd.roa
File:                     35448898-4ecd-3bd3-aaf8-5d596d0f15dd.roa (raw, json)
Hash identifier:          XTMW+7xBuq6eG4VcgMP+IwUVcQnFyQKQhBkB7oLosQs=
Subject key identifier:   E9:F6:17:AD:E2:A9:5F:5C:CB:32:53:20:73:93:42:18:73:17:E6:A5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEEB771E1AC7E0811C3EF3400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35448898-4ecd-3bd3-aaf8-5d596d0f15dd.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     35994
IP address blocks:        96.17.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:71:e1:ac:7e:08:11:c3:ef:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=d470d358-52bf-4fa5-9aa5-4e548a4afff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:2d:8e:ab:e6:64:ce:ae:20:35:fb:8d:4e:
                    03:76:9e:df:b5:5d:1f:75:77:a4:3b:26:14:7f:99:
                    89:8d:21:2a:a7:a9:63:af:cf:a0:91:53:7e:0c:92:
                    42:74:3f:aa:7f:55:1b:be:43:f7:27:d8:0c:e5:57:
                    e9:32:db:08:03:a4:3b:e0:47:4a:e2:87:00:82:50:
                    6e:56:0f:2d:5e:18:cb:b0:1e:96:d8:1d:07:90:90:
                    52:a5:bb:a4:3a:9b:49:96:77:22:00:9e:05:6f:29:
                    ca:41:be:2c:62:3c:76:90:ac:4b:dc:ec:54:b9:9b:
                    3a:08:ef:e3:6c:8c:89:a9:6a:ee:50:2a:d0:39:63:
                    f9:53:28:5c:3e:51:fe:9c:27:95:d1:a4:f8:20:9b:
                    74:6c:65:6f:72:3e:91:33:42:11:de:8e:49:9b:a5:
                    a7:b5:e6:06:07:7e:1a:e0:27:f3:95:4c:b4:fd:23:
                    67:fa:44:eb:11:90:33:72:af:99:a3:85:46:52:da:
                    2a:ae:d2:8c:a3:f1:73:29:29:0a:2e:d9:61:2c:39:
                    58:84:32:bb:d8:c4:2f:3c:78:c3:4d:f9:e5:4f:14:
                    e0:98:3a:08:3c:14:fa:3e:63:fb:19:f3:5f:4d:48:
                    89:0c:71:ed:7c:5f:fc:4c:59:d9:c2:d7:7c:8d:ff:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:17:AD:E2:A9:5F:5C:CB:32:53:20:73:93:42:18:73:17:E6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35448898-4ecd-3bd3-aaf8-5d596d0f15dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:66:6a:5c:6c:db:d7:3d:db:0d:8d:bb:0b:e8:80:37:03:
         bd:2f:cb:61:bf:f2:5b:63:bd:8a:af:40:15:1f:e2:6e:72:71:
         32:17:ec:98:fd:85:9c:3b:0c:d8:ec:b7:ef:4c:bc:de:8d:08:
         bf:8d:d8:ec:be:fa:bb:d3:89:d8:64:ef:d5:42:5c:77:90:bc:
         ed:73:92:be:05:a6:3c:27:88:49:3c:1f:35:74:f4:2c:6c:68:
         1b:6b:c2:ab:14:63:f1:e9:01:c7:a3:bd:bf:c7:f7:36:85:c1:
         21:37:8c:3e:64:e0:ab:47:d5:66:17:03:af:e4:0e:a5:b1:76:
         4d:1b:be:85:86:ac:81:7b:ca:5f:f5:c4:75:84:c9:fe:79:e7:
         88:d1:2c:a3:06:65:ac:91:92:bb:47:27:1b:32:2f:d8:0a:4c:
         ac:ea:4d:60:79:ff:23:c0:ca:23:aa:3c:32:d5:61:aa:2d:8b:
         5f:ea:f1:ec:f4:6b:b8:a5:7a:85:48:63:0e:d1:98:1a:5d:a1:
         0c:1b:ef:dc:22:e1:97:98:1d:fb:bf:f7:ef:6d:32:2e:cc:47:
         42:5a:53:5d:55:3c:88:d8:96:f5:85:5b:37:6d:4a:1a:32:fc:
         d3:5c:d0:a2:e2:1f:1a:dd:6e:47:ec:f7:de:84:6a:19:5b:e9:
         a2:e9:55:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3HhrH4IEcPvNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZDQ3MGQzNTgtNTJiZi00ZmE1LTlhYTUtNGU1NDhhNGFmZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJEtjqvmZM6uIDX7jU4Ddp7ftV0fdXekOyYU
f5mJjSEqp6ljr8+gkVN+DJJCdD+qf1UbvkP3J9gM5VfpMtsIA6Q74EdK4ocAglBu
Vg8tXhjLsB6W2B0HkJBSpbukOptJlnciAJ4FbynKQb4sYjx2kKxL3OxUuZs6CO/j
bIyJqWruUCrQOWP5UyhcPlH+nCeV0aT4IJt0bGVvcj6RM0IR3o5Jm6WnteYGB34a
4CfzlUy0/SNn+kTrEZAzcq+Zo4VGUtoqrtKMo/FzKSkKLtlhLDlYhDK72MQvPHjD
TfnlTxTgmDoIPBT6PmP7GfNfTUiJDHHtfF/8TFnZwtd8jf+apQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOn2F63iqV9cyzJTIHOTQhhzF+alMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU0NDg4OTgtNGVjZC0z
YmQzLWFhZjgtNWQ1OTZkMGYxNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpiZmpcbNvXPdsNjbsL6IA3A70vy2G/8ltjvYqvQBUf4m5ycTIX7Jj9
hZw7DNjst+9MvN6NCL+N2Oy++rvTidhk79VCXHeQvO1zkr4FpjwniEk8HzV09Cxs
aBtrwqsUY/HpAcejvb/H9zaFwSE3jD5k4KtH1WYXA6/kDqWxdk0bvoWGrIF7yl/1
xHWEyf5554jRLKMGZayRkrtHJxsyL9gKTKzqTWB5/yPAyiOqPDLVYaoti1/q8ez0
a7ileoVIYw7RmBpdoQwb79wi4ZeYHfu/9+9tMi7MR0JaU11VPIjYlvWFWzdtShoy
/NNc0KLiHxrdbkfs996Eahlb6aLpVTw=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:46:09 2026 by rpki-client