Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b62a9d32-600a-33e6-988b-45fceb147b7e.roa
File:                     b62a9d32-600a-33e6-988b-45fceb147b7e.roa (raw, json)
Hash identifier:          RCX3d2IO/pNL0y1x6rgI18b9rQqoXyiyqLMwiYk2oFU=
Subject key identifier:   A5:3E:A5:FE:DB:84:DE:E1:15:E5:98:03:39:1B:4A:C6:5E:96:1A:FE
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584F24E274C620B3B21497F4B5C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b62a9d32-600a-33e6-988b-45fceb147b7e.roa
Signing time:             Fri 11 Sep 2026 22:40:50 +0000
ROA not before:           Fri 11 Sep 2026 22:40:50 +0000
ROA not after:            Thu 10 Dec 2026 23:40:50 +0000
asID:                     398785
IP address blocks:        166.62.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:24:e2:74:c6:20:b3:b2:14:97:f4:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Sep 11 22:40:50 2026 GMT
            Not After : Dec 10 23:40:50 2026 GMT
        Subject: CN=af850b7f-eda8-4fe3-9d08-f12246542036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:e0:ca:8a:52:c3:31:b3:7f:ca:0e:12:f9:
                    ae:24:c3:6b:37:6e:37:d8:29:4c:d2:56:32:96:2c:
                    f6:da:58:01:7a:62:b2:b0:41:af:39:6d:e7:ef:c0:
                    74:97:8e:b1:35:42:bf:b1:bf:8d:00:23:fa:b1:6e:
                    0f:73:35:28:eb:47:7d:c5:c4:d9:4b:cb:eb:7f:37:
                    de:df:c4:de:37:8b:81:77:5a:e4:53:ad:77:34:3d:
                    77:19:f5:4e:0b:2d:6a:80:c8:7e:e6:8a:f5:1a:c4:
                    8a:a0:1b:33:65:e5:e2:14:6c:86:04:3b:79:a8:96:
                    5d:cf:92:ea:8e:f7:83:1a:93:65:aa:0a:c9:54:08:
                    4a:3b:6a:00:59:ea:4c:61:98:c4:e9:31:a0:67:59:
                    8a:cc:94:29:67:0c:2b:c1:0e:fa:34:cd:21:83:e2:
                    fd:5a:73:ab:81:cf:7d:12:72:1b:bc:de:b3:5f:53:
                    ee:52:d6:ff:e1:3a:e0:73:95:2d:e9:d6:59:22:2e:
                    1b:26:16:53:d4:73:32:3a:0f:ea:41:c2:e6:7d:f7:
                    1a:d3:f4:a8:f0:7b:30:e6:df:56:f7:72:bd:bd:49:
                    50:10:fa:25:33:01:4f:3a:b1:d5:64:d6:70:7a:4b:
                    8e:a5:0f:4b:46:f6:d7:5d:18:5b:65:b0:25:03:db:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3E:A5:FE:DB:84:DE:E1:15:E5:98:03:39:1B:4A:C6:5E:96:1A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b62a9d32-600a-33e6-988b-45fceb147b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.62.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:a0:0a:f9:f2:83:2c:b4:07:ec:99:fd:e0:3e:81:41:53:
         bb:c2:38:8e:19:4c:f3:4f:7a:ff:f3:da:e2:f1:39:2d:7d:fb:
         56:3a:98:78:b7:90:00:d2:1d:98:ee:d1:9c:a9:34:8a:b1:13:
         63:28:4a:ec:f6:88:74:e4:8f:80:8a:b2:f0:65:9e:2b:5e:a0:
         96:1a:fa:91:42:f6:39:16:a3:dc:8a:6e:9f:81:5c:af:fc:7a:
         38:88:15:3f:9e:ce:74:3d:0a:b0:17:5d:52:45:dc:ed:5e:e4:
         3c:ea:19:9a:4d:c0:99:ea:be:73:44:e9:df:0e:d8:52:2c:0d:
         b1:4b:18:58:04:83:65:bf:5e:49:f4:d5:c1:60:72:61:9b:0b:
         b3:56:d5:fa:ae:44:1f:da:a9:a6:47:8e:ac:a2:d1:d9:cf:76:
         63:11:23:68:e7:f8:fc:2e:47:bc:ff:24:5c:8b:18:24:06:eb:
         e7:87:c7:13:3c:99:b7:74:ac:dd:fc:d4:1e:cd:4c:3c:18:24:
         af:16:27:a6:bd:f7:f3:5a:2e:21:b4:10:fa:5b:a2:e5:33:86:
         12:86:d4:24:99:c5:57:47:45:03:b0:92:08:e6:db:2f:3c:c3:
         3b:4d:27:b4:2e:8c:f5:5a:84:ea:cd:38:1e:41:85:23:1d:d4:
         93:76:77:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8k4nTGILOyFJf0tcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDkxMTIyNDA1MFoXDTI2MTIxMDIzNDA1MFowLzEtMCsGA1UEAxMk
YWY4NTBiN2YtZWRhOC00ZmUzLTlkMDgtZjEyMjQ2NTQyMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhELgyopSwzGzf8oOEvmuJMNrN2432ClM0lYy
liz22lgBemKysEGvOW3n78B0l46xNUK/sb+NACP6sW4PczUo60d9xcTZS8vrfzfe
38TeN4uBd1rkU613ND13GfVOCy1qgMh+5or1GsSKoBszZeXiFGyGBDt5qJZdz5Lq
jveDGpNlqgrJVAhKO2oAWepMYZjE6TGgZ1mKzJQpZwwrwQ76NM0hg+L9WnOrgc99
EnIbvN6zX1PuUtb/4Trgc5Ut6dZZIi4bJhZT1HMyOg/qQcLmffca0/So8Hsw5t9W
93K9vUlQEPolMwFPOrHVZNZwekuOpQ9LRvbXXRhbZbAlA9tp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKU+pf7bhN7hFeWYAzkbSsZelhr+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvYjYyYTlkMzItNjAwYS0z
M2U2LTk4OGItNDVmY2ViMTQ3YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApj4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQOoAr58oMstAfsmf3gPoFBU7vCOI4ZTPNPev/z2uLxOS19+1Y6mHi3
kADSHZju0ZypNIqxE2MoSuz2iHTkj4CKsvBlniteoJYa+pFC9jkWo9yKbp+BXK/8
ejiIFT+eznQ9CrAXXVJF3O1e5DzqGZpNwJnqvnNE6d8O2FIsDbFLGFgEg2W/Xkn0
1cFgcmGbC7NW1fquRB/aqaZHjqyi0dnPdmMRI2jn+PwuR7z/JFyLGCQG6+eHxxM8
mbd0rN381B7NTDwYJK8WJ6a99/NaLiG0EPpbouUzhhKG1CSZxVdHRQOwkgjm2y88
wztNJ7QujPVahOrNOB5BhSMd1JN2d9Q=
-----END CERTIFICATE-----
Generated at Mon Sep 14 11:47:40 2026 by rpki-client