Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3322d96e-b3ae-3e51-bacc-39e2148d52b0.roa
File:                     3322d96e-b3ae-3e51-bacc-39e2148d52b0.roa (raw, json)
Hash identifier:          IB0O1bKOi8tPav5qSiyeQcIozuZYBujyRTph14UbNXM=
Subject key identifier:   22:EE:3E:53:94:AA:C5:73:F3:B3:5F:2F:61:3C:95:2A:9A:8D:95:70
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73C1D6DD3E014C2994480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3322d96e-b3ae-3e51-bacc-39e2148d52b0.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3c:1d:6d:d3:e0:14:c2:99:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=fc441bdf-26f1-46a8-bc32-81fc49e43a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:59:a7:2a:eb:91:57:53:cf:90:ce:69:8a:
                    25:43:ba:9c:25:f8:46:95:7f:76:30:9f:01:cc:cf:
                    59:76:cc:57:58:0a:fc:d3:d6:6d:77:2c:f4:50:36:
                    fb:65:8f:84:1c:c0:5b:84:6f:9c:43:0d:d5:99:0d:
                    b5:34:92:e7:9b:b6:21:91:38:4a:fb:8f:99:95:c9:
                    4d:33:31:aa:2a:ff:70:f1:68:3a:d1:83:d1:47:e2:
                    19:32:59:0c:53:e2:4c:1d:68:51:95:69:6d:5a:e7:
                    ae:8c:eb:f8:cf:cf:84:59:f5:09:19:9a:16:af:0f:
                    ea:36:97:b3:cf:6a:62:1a:bd:c5:b3:35:ea:13:cc:
                    7f:d5:7e:e2:b8:a3:17:91:01:1b:49:f1:f6:c3:ab:
                    44:0f:e7:f1:6c:df:c1:2e:50:06:58:31:d7:a9:2d:
                    b1:86:9b:4c:e0:42:06:40:b2:85:f6:4e:6a:ad:0a:
                    c5:17:3b:0c:85:14:43:92:ed:56:ee:41:3f:5f:a0:
                    98:23:cb:15:37:2f:5b:6c:38:48:5e:0c:7a:57:e1:
                    86:b8:5a:43:5f:25:2b:94:67:3b:ea:12:f3:4d:5a:
                    57:dc:7a:f3:99:05:fe:74:32:ad:f9:ed:07:bd:52:
                    42:f2:72:33:e0:5d:12:53:cf:92:9b:bb:18:22:06:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EE:3E:53:94:AA:C5:73:F3:B3:5F:2F:61:3C:95:2A:9A:8D:95:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3322d96e-b3ae-3e51-bacc-39e2148d52b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:36:07:c4:c7:83:66:1a:21:03:f9:c7:b4:eb:ad:55:7e:f5:
         1d:1e:72:3a:0c:86:0d:11:f7:e9:a0:a6:bc:b3:7d:74:d8:15:
         a8:ee:ed:27:2d:2d:54:76:8f:04:d2:4c:25:5f:b2:dc:87:2d:
         25:2c:f3:68:8a:c5:fb:9b:db:b6:dc:a6:e5:c6:4c:d0:50:cd:
         92:37:13:3e:7e:d8:6d:20:ec:28:9d:10:6d:2a:71:c8:85:e8:
         48:4d:e5:5e:ac:7e:72:1d:fe:c9:16:8e:50:0d:b5:33:7e:c7:
         8d:6a:59:88:1e:94:bb:e0:59:35:e8:00:2e:4f:50:d6:2e:ee:
         d8:1e:7f:36:06:7c:fe:90:bb:9a:c7:4c:a4:08:86:9e:47:54:
         7d:cc:bb:92:cf:f0:d0:e5:53:db:22:89:82:c1:43:b6:87:0f:
         e0:7c:70:8d:79:50:01:a2:73:ca:89:91:59:bc:d6:aa:7c:ba:
         22:d0:04:29:23:86:44:fe:cb:33:d7:92:29:25:c2:44:21:d7:
         e8:ac:8d:42:36:a9:3d:c7:34:16:5c:bd:90:d0:fd:0f:84:24:
         d3:d3:d6:23:c8:b4:1e:9c:35:e1:79:04:96:e3:4f:41:9c:93:
         86:e9:83:e7:32:fc:13:74:6d:d5:68:07:16:1b:f2:de:58:b4:
         32:e7:46:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zwdbdPgFMKZRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZmM0NDFiZGYtMjZmMS00NmE4LWJjMzItODFmYzQ5ZTQzYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6dZpyrrkVdTz5DOaYolQ7qcJfhGlX92MJ8B
zM9ZdsxXWAr809Ztdyz0UDb7ZY+EHMBbhG+cQw3VmQ21NJLnm7YhkThK+4+ZlclN
MzGqKv9w8Wg60YPRR+IZMlkMU+JMHWhRlWltWueujOv4z8+EWfUJGZoWrw/qNpez
z2piGr3FszXqE8x/1X7iuKMXkQEbSfH2w6tED+fxbN/BLlAGWDHXqS2xhptM4EIG
QLKF9k5qrQrFFzsMhRRDku1W7kE/X6CYI8sVNy9bbDhIXgx6V+GGuFpDXyUrlGc7
6hLzTVpX3HrzmQX+dDKt+e0HvVJC8nIz4F0SU8+Sm7sYIgbu6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLuPlOUqsVz87NfL2E8lSqajZVwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzMyMmQ5NmUtYjNhZS0z
ZTUxLWJhY2MtMzllMjE0OGQ1MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMU2B8THg2YaIQP5x7TrrVV+9R0ecjoMhg0R9+mgpryzfXTYFaju7Sct
LVR2jwTSTCVfstyHLSUs82iKxfub27bcpuXGTNBQzZI3Ez5+2G0g7CidEG0qcciF
6EhN5V6sfnId/skWjlANtTN+x41qWYgelLvgWTXoAC5PUNYu7tgefzYGfP6Qu5rH
TKQIhp5HVH3Mu5LP8NDlU9siiYLBQ7aHD+B8cI15UAGic8qJkVm81qp8uiLQBCkj
hkT+yzPXkiklwkQh1+isjUI2qT3HNBZcvZDQ/Q+EJNPT1iPItB6cNeF5BJbjT0Gc
k4bpg+cy/BN0bdVoBxYb8t5YtDLnRjk=
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:49 2026 by rpki-client