Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
File:                     cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa (raw, json)
Hash identifier:          Zf9VkDD8c7h57j2yu+eL8oJtLoC6pJRqAnAhMLRJYRY=
Subject key identifier:   BE:C9:3B:C8:0A:9D:51:2A:79:0D:37:C3:10:DB:5A:7F:75:7D:2E:23
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584EE4F1F84F5DB82C63AB4BB780
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23243
IP address blocks:        209.124.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f8:4f:5d:b8:2c:63:ab:4b:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=88dc2419-487e-43c5-ab52-2065c0ddf4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:9c:e4:a8:e2:2c:55:7b:93:21:ff:12:09:
                    e0:a2:8a:c8:8c:59:5c:b0:d2:30:bc:fe:b8:77:af:
                    bd:83:ae:8f:6d:f2:44:cd:da:49:4f:99:f0:42:52:
                    99:01:35:b4:b2:9d:84:10:bf:8f:4e:92:dc:f4:1c:
                    2f:14:92:ec:03:b1:16:32:a1:fe:98:75:d3:8e:cc:
                    fe:40:46:79:7d:14:99:4c:9d:0e:83:c5:d1:6e:a1:
                    da:e2:a8:4b:50:b9:ef:33:d3:3e:9a:7c:fd:f0:b7:
                    44:52:e2:43:04:de:99:0d:ea:c4:27:0a:f0:ff:54:
                    ab:db:f0:9c:70:7f:b8:df:f7:f4:d0:31:80:a4:34:
                    dc:92:5f:5e:ca:35:78:1f:a9:e9:26:7d:bf:e1:05:
                    a9:e1:3d:e0:27:17:66:10:a6:c0:73:c2:75:9c:50:
                    57:2a:ef:db:8f:f6:35:56:63:7d:cc:57:45:6c:0f:
                    75:06:ab:34:ae:da:34:63:90:d7:c0:48:fa:fb:77:
                    04:fa:a9:91:ab:53:eb:1c:97:de:48:f6:71:23:e7:
                    47:cd:c7:fe:8c:4b:ad:24:2d:fc:17:16:be:5d:29:
                    3e:81:0e:68:0e:af:a7:60:7b:d9:56:9c:6f:b6:6e:
                    de:d2:92:93:5e:4b:65:b7:8d:05:e8:0d:05:8b:a9:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C9:3B:C8:0A:9D:51:2A:79:0D:37:C3:10:DB:5A:7F:75:7D:2E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:48:fe:1f:8d:df:ab:c1:df:e7:9e:31:06:1f:54:a9:08:98:
         99:af:c5:a7:a1:6d:0c:eb:2d:0c:85:26:b8:0e:7e:ea:bd:8a:
         c3:da:c6:01:70:9c:df:5b:84:52:b2:03:de:db:78:95:fd:ad:
         0c:a1:46:57:24:45:e9:15:e9:1b:c6:dc:19:f0:9e:1c:ad:03:
         fa:5e:af:d3:68:d3:2f:1d:33:57:d3:77:9f:1b:ff:3d:89:0f:
         9a:11:4f:68:1a:ac:4f:6b:56:6a:72:c1:b0:ec:c0:4c:70:21:
         05:e1:8b:2b:68:4b:06:60:85:c0:17:b8:b6:ed:fd:a7:55:c7:
         ee:80:bf:d5:8d:e4:7a:3e:83:73:10:c7:aa:48:1b:08:b1:ef:
         79:6d:ae:ac:92:f0:b3:44:f1:88:01:b9:40:e8:b5:bd:5f:f4:
         d4:9b:b6:ed:ea:fc:cb:e3:c1:19:ce:3f:c8:fa:70:36:97:3d:
         5f:ac:e5:ef:05:b6:ab:89:b9:97:f1:88:82:02:cd:2c:88:50:
         eb:45:d0:a6:6e:69:f1:54:78:3d:78:0e:d4:f8:a4:be:b7:ce:
         f8:64:09:ee:af:11:df:30:44:31:e0:97:78:9b:ad:9f:82:3f:
         f6:d7:fe:a4:68:77:45:63:04:d7:b9:ec:f8:00:b4:c4:11:c5:
         1d:8a:88:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fhPXbgsY6tLt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj
ZjYyMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
ODhkYzI0MTktNDg3ZS00M2M1LWFiNTItMjA2NWMwZGRmNGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIqc5KjiLFV7kyH/EgngoorIjFlcsNIwvP64
d6+9g66PbfJEzdpJT5nwQlKZATW0sp2EEL+PTpLc9BwvFJLsA7EWMqH+mHXTjsz+
QEZ5fRSZTJ0Og8XRbqHa4qhLULnvM9M+mnz98LdEUuJDBN6ZDerEJwrw/1Sr2/Cc
cH+43/f00DGApDTckl9eyjV4H6npJn2/4QWp4T3gJxdmEKbAc8J1nFBXKu/bj/Y1
VmN9zFdFbA91Bqs0rto0Y5DXwEj6+3cE+qmRq1PrHJfeSPZxI+dHzcf+jEutJC38
Fxa+XSk+gQ5oDq+nYHvZVpxvtm7e0pKTXktlt40F6A0Fi6kPtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7JO8gKnVEqeQ03wxDbWn91fS4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz
MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvY2I0YjQ4MjMtNDYwMC0z
NWJiLWIxOGMtMmRiOWQ1ZmVkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2
NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5
Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz
M2ZiOWNmNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Xx9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdI/h+N36vB3+eeMQYfVKkImJmvxaehbQzrLQyFJrgOfuq9isPaxgFw
nN9bhFKyA97beJX9rQyhRlckRekV6RvG3BnwnhytA/per9No0y8dM1fTd58b/z2J
D5oRT2garE9rVmpywbDswExwIQXhiytoSwZghcAXuLbt/adVx+6Av9WN5Ho+g3MQ
x6pIGwix73ltrqyS8LNE8YgBuUDotb1f9NSbtu3q/MvjwRnOP8j6cDaXPV+s5e8F
tquJuZfxiIICzSyIUOtF0KZuafFUeD14DtT4pL63zvhkCe6vEd8wRDHgl3ibrZ+C
P/bX/qRod0VjBNe57PgAtMQRxR2KiOA=
-----END CERTIFICATE-----
Generated at Sun Sep 13 21:00:29 2026 by rpki-client