Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa
File:                     1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa (raw, json)
Hash identifier:          j4dczhCbWXRMi7iQ51MJBou2BY5ynsL9LixglMzzld0=
Subject key identifier:   76:49:79:A5:75:28:84:A9:88:43:CA:6A:4E:77:B5:A0:D6:C4:B2:65
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFCACC84C9ED60C092C5F7980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     3949
IP address blocks:        165.254.60.176/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c8:4c:9e:d6:0c:09:2c:5f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=04379639-70df-4658-90fb-90d86fe31ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:31:e4:fd:6b:6e:3a:b1:de:0f:62:6f:aa:
                    5c:d5:51:89:38:9b:dc:09:48:06:73:e1:3c:04:c1:
                    3e:66:d9:e2:22:55:dd:25:e9:bf:4f:0f:6c:55:4c:
                    d0:0e:97:6b:4d:b2:f4:82:b7:6c:f6:61:4a:76:12:
                    ce:95:1e:ca:bf:45:ad:46:4f:bf:05:60:9c:82:65:
                    b4:89:cc:e7:f3:89:51:4a:28:70:b9:71:db:d4:b8:
                    28:5a:1f:b5:df:8a:b8:74:01:4c:31:15:2b:9f:94:
                    d5:01:c3:75:db:38:d2:e9:08:e0:13:ae:88:5a:ce:
                    28:64:63:72:9c:91:d5:32:3b:83:76:47:d2:ad:cb:
                    12:6b:ee:7f:56:77:62:82:ec:d2:3f:0e:0d:80:d7:
                    8e:da:50:c5:55:81:66:5b:ca:c1:ac:7f:36:4b:68:
                    20:2e:95:cf:38:04:c9:70:e5:6a:99:56:de:8a:90:
                    32:13:0c:b1:08:fc:38:f5:95:e2:8e:99:1a:94:39:
                    46:3e:c4:2a:92:61:16:38:2d:8c:41:ea:6f:e5:4b:
                    f6:b3:ef:f2:e7:6f:e3:8a:b6:a8:b5:93:af:ef:1d:
                    bf:48:a7:15:e0:d9:60:ed:2c:28:c2:00:f7:f5:3a:
                    f0:2a:90:85:3b:85:4a:f3:5f:42:89:f8:a1:d8:24:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:49:79:A5:75:28:84:A9:88:43:CA:6A:4E:77:B5:A0:D6:C4:B2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.60.176/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:42:47:e8:e4:1d:93:a0:3b:b4:36:ec:dd:e1:4b:43:8e:
         a0:95:e1:d8:97:15:a1:fd:9b:cd:8d:4f:44:79:f0:4c:d5:2a:
         4c:85:99:7c:a7:e9:d8:aa:b3:9f:b1:83:33:09:56:f5:fb:45:
         65:dd:8e:84:0b:c8:87:e0:b2:dc:56:d8:cc:e0:77:76:bd:f0:
         62:54:69:1c:7c:39:15:8f:8f:e7:c0:e8:c7:fa:79:d0:b6:2d:
         d6:ce:ea:5d:c2:0a:dd:fd:9d:8e:de:35:ee:27:26:44:c7:ce:
         e3:c9:6a:b6:60:51:72:b9:96:ba:c9:c8:a0:b7:ee:a0:66:fd:
         10:62:04:10:cb:35:2a:97:e0:b8:38:2c:ea:b8:d7:5e:03:36:
         40:66:ba:5b:03:ac:91:fa:80:2a:dc:ae:2b:a6:af:da:9c:2c:
         f2:bd:ea:e5:60:5e:a5:c9:57:97:46:0b:bf:98:63:e6:19:de:
         44:b3:fa:cc:9d:9a:de:8a:1d:ec:a4:17:58:b5:75:e9:58:5c:
         95:ab:59:be:82:80:e1:5b:93:c6:fa:94:d3:86:23:45:e8:20:
         91:b1:a9:9a:5b:61:3e:9e:9b:f9:95:92:fc:3c:66:b6:68:c5:
         9f:2d:dc:f9:6c:c3:ec:77:0e:ed:11:5a:69:ec:20:63:78:78:
         51:c7:4b:fd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMhMntYMCSxfeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
MDQzNzk2MzktNzBkZi00NjU4LTkwZmItOTBkODZmZTMxYWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Ux5P1rbjqx3g9ib6pc1VGJOJvcCUgGc+E8
BME+ZtniIlXdJem/Tw9sVUzQDpdrTbL0grds9mFKdhLOlR7Kv0WtRk+/BWCcgmW0
iczn84lRSihwuXHb1LgoWh+134q4dAFMMRUrn5TVAcN12zjS6QjgE66IWs4oZGNy
nJHVMjuDdkfSrcsSa+5/VndiguzSPw4NgNeO2lDFVYFmW8rBrH82S2ggLpXPOATJ
cOVqmVbeipAyEwyxCPw49ZXijpkalDlGPsQqkmEWOC2MQepv5Uv2s+/y52/jirao
tZOv7x2/SKcV4Nlg7SwowgD39TrwKpCFO4VK819Cifih2CTOtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHZJeaV1KISpiEPKak53taDWxLJlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWJhZmU4YjQtNjU4Yi0z
N2VmLTliYTgtYjZiMzYxZWJiNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf48sDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCWXEJH6OQdk6A7tDbs3eFLQ46gleHYlxWh/ZvNjU9EefBM1SpMhZl8
p+nYqrOfsYMzCVb1+0Vl3Y6EC8iH4LLcVtjM4Hd2vfBiVGkcfDkVj4/nwOjH+nnQ
ti3Wzupdwgrd/Z2O3jXuJyZEx87jyWq2YFFyuZa6ycigt+6gZv0QYgQQyzUql+C4
OCzquNdeAzZAZrpbA6yR+oAq3K4rpq/anCzyverlYF6lyVeXRgu/mGPmGd5Es/rM
nZreih3spBdYtXXpWFyVq1m+goDhW5PG+pTThiNF6CCRsamaW2E+npv5lZL8PGa2
aMWfLdz5bMPsdw7tEVpp7CBjeHhRx0v9
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:33 2026 by rpki-client