Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96e16030-0b93-38ca-8f78-cf395d835875.roa
File:                     96e16030-0b93-38ca-8f78-cf395d835875.roa (raw, json)
Hash identifier:          nCIjZ82X9zCnPtIz3II6ezzXPh5NUASb0jhamTVCZfY=
Subject key identifier:   FB:7C:82:75:37:E7:90:A7:E3:9F:46:66:E7:11:5F:9F:46:49:1F:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232C710FB43525A7543980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96e16030-0b93-38ca-8f78-cf395d835875.roa
Signing time:             Wed 19 Aug 2026 18:03:41 +0000
ROA not before:           Wed 19 Aug 2026 18:03:41 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        128.121.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2c:71:0f:b4:35:25:a7:54:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:41 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=93ca0c61-d5d2-421f-a850-dfe3e062409c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:6a:8e:a9:1a:a5:6b:28:81:49:e2:c3:5f:
                    ea:53:ad:a2:e3:b5:fc:fc:63:ec:4f:e4:20:53:c6:
                    a6:b3:8b:b8:ee:5a:19:3f:11:9e:75:59:10:82:29:
                    70:17:ce:0e:c2:cf:a8:86:66:f7:f9:bc:22:56:51:
                    eb:37:30:c5:d3:91:6a:d1:51:0e:25:a2:5d:48:d2:
                    61:25:96:e9:55:f3:f4:ad:f8:ab:12:eb:f3:42:53:
                    2e:ea:72:16:98:de:6e:3e:0b:32:9a:80:35:a4:e5:
                    b1:59:ed:4f:a8:cb:24:f3:f2:7f:c0:21:35:9c:80:
                    a8:1c:9e:66:fb:26:c2:33:c7:1a:87:23:43:7b:32:
                    f9:c2:1c:74:38:5c:e2:ea:be:c1:bb:66:1a:61:b8:
                    9a:30:36:22:d9:ad:2c:9f:cf:ca:16:c7:2b:dc:14:
                    6b:af:36:92:ad:4f:d1:34:e9:13:ed:30:2b:be:52:
                    56:a6:16:09:ce:29:1d:24:2d:16:4d:f3:0e:35:22:
                    c7:9a:30:45:3e:7f:4d:e7:f1:b2:a2:6d:b3:a7:b2:
                    5f:57:1a:3e:ed:4d:c6:ba:2f:d1:4f:69:cd:c7:0a:
                    a8:96:3b:39:9e:1f:86:6c:da:f5:06:72:b3:3f:ac:
                    a0:de:8a:87:44:ab:01:b7:e1:bd:fe:b1:f7:63:86:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:82:75:37:E7:90:A7:E3:9F:46:66:E7:11:5F:9F:46:49:1F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96e16030-0b93-38ca-8f78-cf395d835875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:49:d3:04:a6:2c:68:75:19:8c:59:19:9e:34:a6:65:2f:3f:
         6e:2a:a6:7b:7e:99:24:c9:18:aa:ae:3d:94:8e:19:fe:63:47:
         a0:93:e5:52:70:b9:b3:ab:ca:48:fd:85:92:7f:a7:e1:f4:f5:
         8b:ed:b9:b1:b2:32:66:4f:1e:25:5b:fc:5a:4a:8d:37:2e:76:
         e2:da:b9:35:68:5c:4b:a2:51:f6:39:f2:e1:94:aa:b5:be:06:
         ec:e8:2e:16:0d:d7:de:5f:ba:73:63:83:08:26:5f:32:b9:e8:
         35:53:d5:76:d4:47:b9:12:21:74:ee:25:8d:a8:80:1c:d7:10:
         05:19:65:e2:dd:47:73:62:16:f8:f6:14:f9:24:45:6b:5e:54:
         79:df:df:55:d7:f9:de:aa:af:9f:95:c6:ab:c9:d7:d5:3e:8b:
         80:d8:92:c2:f8:d9:7f:4e:a6:8d:8b:e0:f7:03:ff:55:bb:02:
         77:dd:6f:44:ec:0f:2b:d1:e3:b5:5c:9b:ff:16:00:b8:2c:6a:
         33:c0:0c:59:93:a6:98:39:09:85:b5:60:72:e7:88:5d:7e:81:
         93:35:96:96:7a:32:5c:02:51:72:56:c4:80:85:7a:98:43:27:
         82:2e:10:51:95:b7:08:db:46:0b:6b:91:39:ce:83:46:54:9c:
         ca:21:a3:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyxxD7Q1JadUOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTNjYTBjNjEtZDVkMi00MjFmLWE4NTAtZGZlM2UwNjI0MDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw9qjqkapWsogUniw1/qU62i47X8/GPsT+Qg
U8ams4u47loZPxGedVkQgilwF84Ows+ohmb3+bwiVlHrNzDF05Fq0VEOJaJdSNJh
JZbpVfP0rfirEuvzQlMu6nIWmN5uPgsymoA1pOWxWe1PqMsk8/J/wCE1nICoHJ5m
+ybCM8cahyNDezL5whx0OFzi6r7Bu2YaYbiaMDYi2a0sn8/KFscr3BRrrzaSrU/R
NOkT7TArvlJWphYJzikdJC0WTfMONSLHmjBFPn9N5/Gyom2zp7JfVxo+7U3Gui/R
T2nNxwqoljs5nh+GbNr1BnKzP6yg3oqHRKsBt+G9/rH3Y4Z+bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPt8gnU355Cn459GZucRX59GSR97MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTZlMTYwMzAtMGI5My0z
OGNhLThmNzgtY2YzOTVkODM1ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgHkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMhJ0wSmLGh1GYxZGZ40pmUvP24qpnt+mSTJGKquPZSOGf5jR6CT5VJw
ubOrykj9hZJ/p+H09YvtubGyMmZPHiVb/FpKjTcuduLauTVoXEuiUfY58uGUqrW+
BuzoLhYN195funNjgwgmXzK56DVT1XbUR7kSIXTuJY2ogBzXEAUZZeLdR3NiFvj2
FPkkRWteVHnf31XX+d6qr5+VxqvJ19U+i4DYksL42X9Opo2L4PcD/1W7Anfdb0Ts
DyvR47Vcm/8WALgsajPADFmTppg5CYW1YHLniF1+gZM1lpZ6MlwCUXJWxICFephD
J4IuEFGVtwjbRgtrkTnOg0ZUnMoho80=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:25:13 2026 by rpki-client