Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/9d783f73-7dc0-3f55-b385-c9b373e4390d.roa
File:                     9d783f73-7dc0-3f55-b385-c9b373e4390d.roa (raw, json)
Hash identifier:          W5Od0Tk6jW5PauNvXleJlaXD8wwXELvBNwTBzc5Oovo=
Subject key identifier:   5B:3D:0F:74:C7:D7:BA:54:BF:2E:F2:60:80:83:60:F0:8D:54:5C:EB
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584EA78760EDFA867F060D779200
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/9d783f73-7dc0-3f55-b385-c9b373e4390d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        216.157.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:60:ed:fa:86:7f:06:0d:77:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=23d8e99d-d682-409a-b7b2-9b3bbda2130e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:f7:df:c2:bd:d0:65:c3:77:3c:80:17:0b:
                    a1:1e:f8:4a:aa:f1:b4:98:e4:21:90:1c:b5:bd:d1:
                    60:73:2a:fc:2f:6b:e3:5e:96:40:e4:05:e2:20:e0:
                    54:33:79:84:3c:20:38:dc:ad:0a:1e:5e:0e:ae:05:
                    43:f5:a9:46:1d:cc:21:02:2a:ca:45:c8:fc:0e:a7:
                    18:83:20:2b:04:bd:a2:0e:58:9a:81:50:e9:93:7c:
                    eb:90:12:7a:3c:93:e2:4e:4a:e4:f8:25:6c:64:aa:
                    72:d7:7f:4a:5d:1f:04:7c:10:81:f0:7d:72:24:49:
                    8e:f4:93:08:3a:7a:8c:96:a2:1e:6c:b9:d8:2e:a6:
                    66:82:29:3f:14:f8:e1:2d:67:b5:b8:3f:c4:1c:56:
                    7a:b2:62:38:c8:60:57:20:f0:23:b5:ea:30:22:cc:
                    47:81:86:b6:cf:da:f0:19:e5:2a:81:b6:4c:7a:7b:
                    f7:96:3d:f3:af:f6:a9:07:1a:e0:1c:44:5e:7e:6d:
                    54:3a:a0:6b:ef:88:4a:15:1b:2d:eb:c6:c6:44:a5:
                    3d:3c:38:18:05:20:67:a7:39:4f:ca:a1:5b:68:ff:
                    36:b1:ae:33:44:05:f1:2b:03:23:79:ba:c4:7a:1e:
                    5a:8d:44:91:d3:62:f1:55:7f:53:41:c1:9c:a6:cf:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:0F:74:C7:D7:BA:54:BF:2E:F2:60:80:83:60:F0:8D:54:5C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/9d783f73-7dc0-3f55-b385-c9b373e4390d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:67:e8:53:7e:8c:30:92:67:35:ce:6d:a0:d0:db:e1:89:
         4a:59:53:cf:6b:dc:8d:49:17:c3:8a:e4:1f:18:58:e9:85:3c:
         39:d7:cc:48:13:a9:8d:f2:37:56:d3:7c:dc:f5:84:4e:c2:a9:
         c1:32:cc:b7:88:60:32:45:c2:9e:8a:20:55:5c:9c:2d:6e:71:
         bd:45:b4:4d:3c:b7:f4:d3:8d:45:62:25:0b:f7:0f:22:a0:74:
         83:1e:de:00:1c:08:e5:22:2b:ae:60:51:95:65:be:4b:40:75:
         0a:c2:d4:f2:36:28:9d:75:a8:6f:90:11:95:1e:35:26:0f:20:
         70:d9:ec:76:88:1b:b9:54:70:31:92:b1:bd:eb:f4:d0:a1:74:
         7d:f6:c2:5d:d6:ed:80:f6:f2:f5:c1:27:ba:04:b4:ca:c1:b2:
         71:45:a2:25:c4:31:1a:23:60:51:2f:2a:23:85:4a:56:af:b3:
         5e:2c:87:0d:ef:ca:a2:74:c2:a2:ec:98:2d:ae:dc:ff:00:34:
         a9:ad:32:6c:52:78:4b:57:ae:78:0a:95:52:c6:3b:5b:90:b6:
         5b:54:aa:95:b6:4d:70:d5:25:59:97:49:e4:f1:56:00:2a:82:
         29:66:74:b1:48:69:1b:54:a1:76:d1:29:03:d9:c6:b3:ac:e9:
         f6:62:fa:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2Dt+oZ/Bg13kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjNkOGU5OWQtZDY4Mi00MDlhLWI3YjItOWIzYmJkYTIxMzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkr338K90GXDdzyAFwuhHvhKqvG0mOQhkBy1
vdFgcyr8L2vjXpZA5AXiIOBUM3mEPCA43K0KHl4OrgVD9alGHcwhAirKRcj8DqcY
gyArBL2iDliagVDpk3zrkBJ6PJPiTkrk+CVsZKpy139KXR8EfBCB8H1yJEmO9JMI
OnqMlqIebLnYLqZmgik/FPjhLWe1uD/EHFZ6smI4yGBXIPAjteowIsxHgYa2z9rw
GeUqgbZMenv3lj3zr/apBxrgHERefm1UOqBr74hKFRst68bGRKU9PDgYBSBnpzlP
yqFbaP82sa4zRAXxKwMjebrEeh5ajUSR02LxVX9TQcGcps+RqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFs9D3TH17pUvy7yYICDYPCNVFzrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvOWQ3ODNmNzMtN2RjMC0z
ZjU1LWIzODUtYzliMzczZTQzOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKifZ+hTfowwkmc1zm2g0NvhiUpZU89r3I1JF8OK5B8YWOmFPDnXzEgT
qY3yN1bTfNz1hE7CqcEyzLeIYDJFwp6KIFVcnC1ucb1FtE08t/TTjUViJQv3DyKg
dIMe3gAcCOUiK65gUZVlvktAdQrC1PI2KJ11qG+QEZUeNSYPIHDZ7HaIG7lUcDGS
sb3r9NChdH32wl3W7YD28vXBJ7oEtMrBsnFFoiXEMRojYFEvKiOFSlavs14shw3v
yqJ0wqLsmC2u3P8ANKmtMmxSeEtXrngKlVLGO1uQtltUqpW2TXDVJVmXSeTxVgAq
gilmdLFIaRtUoXbRKQPZxrOs6fZi+nA=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:56:50 2026 by rpki-client