Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/efa81d17-cd3a-3039-be5f-bbc3a0a299f0.roa
File:                     efa81d17-cd3a-3039-be5f-bbc3a0a299f0.roa (raw, json)
Hash identifier:          wZgzEaUcd9GH4+c3W4uKf3Q0uiJUdjj4jUp9qzkiOVc=
Subject key identifier:   DF:F9:3B:24:35:E7:66:60:44:C6:1F:77:06:B4:93:44:AB:9D:BA:79
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FF037735A9F04C9B3127500
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/efa81d17-cd3a-3039-be5f-bbc3a0a299f0.roa
Signing time:             Sat 03 Oct 2026 02:21:15 +0000
ROA not before:           Sat 03 Oct 2026 02:21:15 +0000
ROA not after:            Fri 01 Jan 2027 03:21:15 +0000
asID:                     14299
IP address blocks:        170.146.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:f0:37:73:5a:9f:04:c9:b3:12:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 02:21:15 2026 GMT
            Not After : Jan  1 03:21:15 2027 GMT
        Subject: CN=40ae60af-9ed2-4622-9cc1-dfb3169c1e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:d8:91:79:30:86:14:a0:b5:0d:5e:ea:e3:
                    ee:a4:7e:a9:e5:27:3d:64:17:24:6b:63:68:c7:e2:
                    ae:90:42:d4:c8:fb:30:be:48:83:71:96:96:05:63:
                    2a:0c:a5:e6:5a:e8:51:33:5e:d3:4d:39:bc:34:1a:
                    ab:48:5c:ed:61:c1:0a:b9:46:54:3c:02:23:d1:ae:
                    96:8a:d7:ee:bd:f4:bb:e1:a9:ae:c5:64:4a:1e:b6:
                    e0:d9:17:09:fe:24:7f:76:df:98:c5:2d:35:f5:49:
                    97:f7:9a:7b:41:0a:aa:98:81:ba:a1:b9:d1:0c:fb:
                    aa:14:a5:84:83:a3:34:97:37:e1:de:77:10:01:bc:
                    90:4c:ca:b2:57:e4:02:18:1b:25:ea:4e:d9:66:f3:
                    5b:2d:66:4a:df:5f:f9:53:d4:61:a4:e8:07:77:a4:
                    a1:fb:55:a4:25:7c:11:39:fd:2c:b2:4f:f2:e3:ef:
                    01:36:7e:ba:40:6d:df:a2:81:aa:30:f1:70:0f:d4:
                    31:91:45:bc:e7:d6:31:36:1e:f4:d2:b0:cb:11:2c:
                    ad:a7:e3:0d:4c:35:14:c1:b8:48:c5:81:6b:e1:1d:
                    ce:01:a7:80:89:d7:19:a2:8b:d0:72:06:dc:0b:33:
                    68:c9:51:59:2d:3a:3c:c0:74:a5:31:c0:b4:0b:6c:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:3B:24:35:E7:66:60:44:C6:1F:77:06:B4:93:44:AB:9D:BA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/efa81d17-cd3a-3039-be5f-bbc3a0a299f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:be:86:a7:33:cd:6e:a1:92:8f:42:c1:33:ef:79:3a:e6:
         e6:6f:dc:5b:f0:6f:66:e4:f0:00:5e:7d:b6:cf:29:cf:cd:47:
         1f:b1:66:04:c8:bc:c2:16:07:07:bb:21:33:9c:4e:63:6e:a4:
         ac:86:6e:1d:ae:34:6e:ab:5c:74:29:b6:ee:a9:41:9d:f3:a5:
         5b:e6:2f:92:dc:49:a0:c4:34:f9:8c:61:5c:d4:89:14:89:c6:
         2e:2f:92:fb:14:41:f5:3c:25:3c:c6:89:fa:04:58:67:5b:2d:
         5f:36:e6:f7:36:95:4f:d5:e3:9f:50:b9:8d:5d:fd:b6:71:d9:
         4a:04:af:5c:9f:aa:d9:66:c9:3f:16:4d:cb:0f:b6:c9:c6:32:
         0b:61:19:68:1a:ad:c2:10:0f:9e:b0:e4:09:a4:28:e1:45:47:
         08:22:32:09:49:8f:22:21:16:35:18:44:61:4a:29:c3:b6:bc:
         f3:4a:7b:9b:96:de:31:07:8c:0d:ef:57:26:77:9f:88:d0:7b:
         81:d8:64:17:b9:af:28:c4:ae:26:0e:48:cf:a8:ae:bb:99:85:
         bd:ee:5e:d3:23:89:e5:52:05:8f:4d:a9:ec:d8:1f:31:f1:ee:
         f7:73:64:40:60:c5:42:45:6e:97:c4:8c:1e:d8:16:11:6d:73:
         91:f5:56:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9f8DdzWp8EybMSdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM0YjIwNjEtZDJjNy00OGYwLThlZTktNWZmMGM0ZTM1
OWI1MB4XDTI2MTAwMzAyMjExNVoXDTI3MDEwMTAzMjExNVowLzEtMCsGA1UEAxMk
NDBhZTYwYWYtOWVkMi00NjIyLTljYzEtZGZiMzE2OWMxZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVvYkXkwhhSgtQ1e6uPupH6p5Sc9ZBcka2No
x+KukELUyPswvkiDcZaWBWMqDKXmWuhRM17TTTm8NBqrSFztYcEKuUZUPAIj0a6W
itfuvfS74amuxWRKHrbg2RcJ/iR/dt+YxS019UmX95p7QQqqmIG6obnRDPuqFKWE
g6M0lzfh3ncQAbyQTMqyV+QCGBsl6k7ZZvNbLWZK31/5U9RhpOgHd6Sh+1WkJXwR
Of0ssk/y4+8BNn66QG3fooGqMPFwD9QxkUW859YxNh700rDLESytp+MNTDUUwbhI
xYFr4R3OAaeAidcZoovQcgbcCzNoyVFZLTo8wHSlMcC0C2z5tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/5OyQ152ZgRMYfdwa0k0Srnbp5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xYzRi
MjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYwYzRlMzU5YjUvZWZhODFkMTctY2QzYS0z
MDM5LWJlNWYtYmJjM2EwYTI5OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWM0YjIwNjEtZDJjNy00OGYwLThl
ZTktNWZmMGM0ZTM1OWI1LzFjNGIyMDYxLWQyYzctNDhmMC04ZWU5LTVmZjBjNGUz
NTliNS5jcmwwHwYDVR0jBBgwFoAU/Rr6cV0DbYAtJwwVbcNOW7uPlmYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8xYzRiMjA2MS1kMmM3LTQ4ZjAtOGVlOS01ZmYw
YzRlMzU5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpIqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsCvoanM81uoZKPQsEz73k65uZv3Fvwb2bk8ABefbbPKc/NRx+xZgTI
vMIWBwe7ITOcTmNupKyGbh2uNG6rXHQptu6pQZ3zpVvmL5LcSaDENPmMYVzUiRSJ
xi4vkvsUQfU8JTzGifoEWGdbLV825vc2lU/V459QuY1d/bZx2UoEr1yfqtlmyT8W
TcsPtsnGMgthGWgarcIQD56w5AmkKOFFRwgiMglJjyIhFjUYRGFKKcO2vPNKe5uW
3jEHjA3vVyZ3n4jQe4HYZBe5ryjEriYOSM+orruZhb3uXtMjieVSBY9NqezYHzHx
7vdzZEBgxUJFbpfEjB7YFhFtc5H1Vuw=
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:52 2026 by rpki-client