Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa
File:                     3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa (raw, json)
Hash identifier:          1UF+Dju5/GqJUU/4MkwL43N6POWHDdJXXWlFD+aWtn8=
Subject key identifier:   34:2F:63:4A:B9:57:74:9A:EA:32:51:9B:62:64:82:58:9F:9F:65:EB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF746AD6B760FA1B7F8CA00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:46:ad:6b:76:0f:a1:b7:f8:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=03c0206b-ec83-4613-9c6d-e7e53c68f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:00:f0:ae:cb:e0:1e:c1:19:7e:0c:11:cf:
                    6b:57:1a:3f:22:0e:fc:a0:1e:4b:5d:1e:dc:83:92:
                    03:df:31:34:06:c6:ed:92:12:a4:d5:ce:b4:7f:96:
                    e9:e5:2d:b5:03:a5:72:11:18:ec:86:54:a5:e3:ec:
                    1d:0c:d8:05:c6:24:30:ac:5e:52:2d:ee:b3:8f:3f:
                    23:b7:1c:a5:cd:53:fd:c7:0a:4e:40:2e:89:a7:a8:
                    b9:d6:e3:c2:7f:d9:90:e3:f0:86:0a:3d:cb:78:af:
                    97:2d:1f:64:b3:d0:7d:44:b8:19:45:38:cb:64:27:
                    0e:67:52:b0:93:7e:7a:09:67:c4:a4:20:c2:6e:8e:
                    76:dd:4c:af:01:90:64:f8:48:ca:39:63:e7:f8:e6:
                    36:29:22:4f:57:96:db:a9:2c:0e:86:33:f6:f8:bc:
                    62:0c:55:22:a4:d1:5b:05:de:99:20:60:e2:5a:27:
                    6b:56:f0:c7:d1:d2:d4:db:be:17:df:bd:84:e6:f0:
                    bb:9e:4d:15:bf:06:9a:6e:b4:3d:22:b9:5a:23:ca:
                    ec:d8:a5:c8:fe:41:11:73:c0:25:2c:98:f7:db:c9:
                    0d:ad:82:29:54:02:0c:bf:74:8d:cf:b7:0c:51:6a:
                    ff:37:38:06:cd:d8:80:68:f0:a8:e7:4a:07:17:cd:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2F:63:4A:B9:57:74:9A:EA:32:51:9B:62:64:82:58:9F:9F:65:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:08:19:57:2c:8e:5b:31:53:32:29:f8:a2:26:61:29:08:
         11:5b:3e:ca:a5:10:5b:90:05:b4:52:7d:3a:32:5c:fe:4b:7e:
         15:c5:1b:f8:9b:1e:ca:eb:93:19:09:f4:93:2a:7a:20:2b:22:
         e5:8f:f1:e2:90:5d:f3:52:5f:9c:c1:53:c2:24:e2:0d:d7:62:
         1f:3b:f6:bc:9f:4c:e5:45:37:dd:27:32:3f:b2:86:82:96:be:
         10:b1:6a:ca:45:e2:8c:1c:d3:cd:f9:bb:d3:ae:a3:87:ea:78:
         44:75:a2:0d:32:83:3d:a2:a7:56:35:75:a8:5a:c1:d4:99:f5:
         1d:66:55:bb:66:3d:49:1f:aa:41:09:52:6f:b0:77:12:df:f4:
         b1:26:13:9f:76:a7:b5:77:38:58:69:11:55:79:2d:c6:80:9f:
         7e:1c:3e:a6:44:09:ac:56:8c:d1:a2:02:e0:9d:6b:73:51:76:
         7a:16:3f:c3:04:47:9d:6d:a8:7f:68:b1:1c:0e:06:79:ab:f6:
         02:f1:aa:fa:b8:1c:ff:f3:5f:e2:a4:fa:46:de:28:23:08:da:
         7b:49:13:c0:b2:ad:6d:f7:3e:16:b4:0e:fc:84:e6:df:5c:66:
         ec:cd:21:9e:7b:17:b8:d6:f0:9a:7e:da:96:fe:84:b9:c3:c0:
         42:ed:3b:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90ata3YPobf4ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
MDNjMDIwNmItZWM4My00NjEzLTljNmQtZTdlNTNjNjhmMjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYMA8K7L4B7BGX4MEc9rVxo/Ig78oB5LXR7c
g5ID3zE0BsbtkhKk1c60f5bp5S21A6VyERjshlSl4+wdDNgFxiQwrF5SLe6zjz8j
txylzVP9xwpOQC6Jp6i51uPCf9mQ4/CGCj3LeK+XLR9ks9B9RLgZRTjLZCcOZ1Kw
k356CWfEpCDCbo523UyvAZBk+EjKOWPn+OY2KSJPV5bbqSwOhjP2+LxiDFUipNFb
Bd6ZIGDiWidrVvDH0dLU274X372E5vC7nk0VvwaabrQ9IrlaI8rs2KXI/kERc8Al
LJj328kNrYIpVAIMv3SNz7cMUWr/NzgGzdiAaPCo50oHF81qAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQvY0q5V3Sa6jJRm2Jkglifn2XrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2JkNWE0YzItOWM1Ni0z
NGJlLTk0YTgtNmIyM2RjZTU5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhcCBlXLI5bMVMyKfiiJmEpCBFbPsqlEFuQBbRSfToyXP5LfhXFG/ib
HsrrkxkJ9JMqeiArIuWP8eKQXfNSX5zBU8Ik4g3XYh879ryfTOVFN90nMj+yhoKW
vhCxaspF4owc0835u9Ouo4fqeER1og0ygz2ip1Y1dahawdSZ9R1mVbtmPUkfqkEJ
Um+wdxLf9LEmE592p7V3OFhpEVV5LcaAn34cPqZECaxWjNGiAuCda3NRdnoWP8ME
R51tqH9osRwOBnmr9gLxqvq4HP/zX+Kk+kbeKCMI2ntJE8CyrW33Pha0DvyE5t9c
ZuzNIZ57F7jW8Jp+2pb+hLnDwELtO3k=
-----END CERTIFICATE-----
Generated at Sun Sep 13 17:25:14 2026 by rpki-client