Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e343884-7331-3080-9800-4ede835cf664.roa
File:                     3e343884-7331-3080-9800-4ede835cf664.roa (raw, json)
Hash identifier:          wQx2F6nQWHGLcKq8piw8ZFT7lmwRwke5CShsiYWb6eg=
Subject key identifier:   06:B3:12:E8:10:C8:0C:DE:78:61:C8:6A:5A:9F:C8:5E:6D:50:D5:0C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF737C7B796A5CD748FB4A0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e343884-7331-3080-9800-4ede835cf664.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:37:c7:b7:96:a5:cd:74:8f:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=9eacc3b8-4d45-4d3a-adb1-056c53cd9472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:56:87:8a:1f:f1:75:7c:e9:67:09:ac:cf:
                    8c:b4:7a:d3:93:c6:90:df:39:4a:d9:53:17:e2:88:
                    77:63:c4:00:39:1b:21:9b:5b:c7:a4:a8:ee:82:3c:
                    4c:c8:be:a7:fc:7b:e6:47:fc:59:4b:54:b1:f7:50:
                    53:77:0e:59:b5:b5:27:5d:2d:9f:55:17:78:8f:29:
                    66:e1:19:9c:54:43:1c:81:9c:cb:67:46:88:bd:7b:
                    ea:12:26:36:8d:07:22:36:c9:94:f8:7a:31:60:cc:
                    3c:3b:86:3b:cf:d8:00:e2:dc:01:fb:b0:75:c8:08:
                    c3:92:13:91:05:d8:89:88:46:14:70:60:de:2d:85:
                    81:f0:8d:bd:c7:59:86:ff:72:6c:eb:78:55:fa:4f:
                    9c:e6:a2:e8:c2:b3:9f:9e:4c:aa:da:59:83:03:6a:
                    07:0a:9b:71:50:40:c7:cb:b1:c1:8e:44:f6:e1:c8:
                    03:2b:d5:2b:82:c1:c8:d0:9d:42:d2:53:f1:2a:bc:
                    42:5d:48:0f:45:ff:be:e8:84:a2:14:5e:33:d4:c2:
                    a2:38:c0:b1:12:97:fd:b5:9e:27:c4:9f:60:ea:d6:
                    6d:7d:12:48:f3:e4:b8:2a:94:68:5d:29:1d:72:29:
                    82:06:9c:04:cd:c9:fb:be:76:64:b0:80:b6:14:e4:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:12:E8:10:C8:0C:DE:78:61:C8:6A:5A:9F:C8:5E:6D:50:D5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e343884-7331-3080-9800-4ede835cf664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:68:c0:af:99:f0:e1:c4:d4:22:c4:ba:f7:a4:dc:5b:c8:
         e7:58:c1:76:52:10:ec:12:1b:5a:c2:2b:47:fe:42:0c:cc:24:
         5b:9e:88:22:42:5d:85:7d:e0:81:c8:0d:6a:e8:06:a6:2d:fc:
         9f:df:a5:8a:77:ac:41:b0:63:05:36:56:72:8d:7e:9e:ed:a3:
         0d:f5:67:c7:79:a1:fb:5a:8a:c6:46:2f:22:4d:8c:77:39:b6:
         33:09:1b:80:61:df:cc:aa:28:89:54:0c:b5:2e:5c:70:f6:4b:
         b5:5d:00:35:2c:d4:0f:e6:96:eb:d4:82:f4:22:27:89:e2:fe:
         c6:ef:93:1c:52:21:63:d4:1b:c0:86:9b:5c:c4:bf:70:d6:f2:
         07:fa:c8:84:f8:7e:ed:bf:7f:e4:aa:8b:19:af:39:ca:1c:ef:
         a5:06:f4:b5:a4:3b:45:36:ad:1d:fa:82:5a:2e:9a:05:57:12:
         da:6a:d8:60:95:b9:c4:e3:a8:0c:d3:20:80:74:50:21:ed:ca:
         ed:ee:38:1b:b2:1b:f4:82:8b:15:92:5f:f4:c2:94:00:9a:1c:
         bb:15:74:71:8b:dd:69:1e:06:55:94:30:94:62:1f:aa:a7:7c:
         4c:c5:96:e3:25:b4:47:f3:fa:0b:61:fe:89:0b:53:12:9f:5c:
         48:5d:d3:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zfHt5alzXSPtKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
OWVhY2MzYjgtNGQ0NS00ZDNhLWFkYjEtMDU2YzUzY2Q5NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qJWh4of8XV86WcJrM+MtHrTk8aQ3zlK2VMX
4oh3Y8QAORshm1vHpKjugjxMyL6n/HvmR/xZS1Sx91BTdw5ZtbUnXS2fVRd4jylm
4RmcVEMcgZzLZ0aIvXvqEiY2jQciNsmU+HoxYMw8O4Y7z9gA4twB+7B1yAjDkhOR
BdiJiEYUcGDeLYWB8I29x1mG/3Js63hV+k+c5qLowrOfnkyq2lmDA2oHCptxUEDH
y7HBjkT24cgDK9UrgsHI0J1C0lPxKrxCXUgPRf++6ISiFF4z1MKiOMCxEpf9tZ4n
xJ9g6tZtfRJI8+S4KpRoXSkdcimCBpwEzcn7vnZksIC2FOTWSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAazEugQyAzeeGHIalqfyF5tUNUMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2UzNDM4ODQtNzMzMS0z
MDgwLTk4MDAtNGVkZTgzNWNmNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnmaMCvmfDhxNQixLr3pNxbyOdYwXZSEOwSG1rCK0f+QgzMJFueiCJC
XYV94IHIDWroBqYt/J/fpYp3rEGwYwU2VnKNfp7tow31Z8d5oftaisZGLyJNjHc5
tjMJG4Bh38yqKIlUDLUuXHD2S7VdADUs1A/mluvUgvQiJ4ni/sbvkxxSIWPUG8CG
m1zEv3DW8gf6yIT4fu2/f+SqixmvOcoc76UG9LWkO0U2rR36gloumgVXEtpq2GCV
ucTjqAzTIIB0UCHtyu3uOBuyG/SCixWSX/TClACaHLsVdHGL3WkeBlWUMJRiH6qn
fEzFluMltEfz+gth/okLUxKfXEhd0xM=
-----END CERTIFICATE-----
Generated at Sun Sep 13 19:43:38 2026 by rpki-client