Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa
File:                     2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa (raw, json)
Hash identifier:          Vqz4Dk42rQGAoAiFTH29Z26F+UIozg0lCanapL9SJG0=
Subject key identifier:   38:13:65:9E:F4:AB:89:73:70:E5:40:1D:49:6A:31:6A:52:01:C3:28
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584F6C5838916D42F7188ABB6020
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        144.81.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:38:91:6d:42:f7:18:8a:bb:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=81faee17-53e7-457f-b31b-56d5aeb431d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:11:06:ed:84:26:54:12:65:96:4c:8a:39:
                    a8:8f:9e:78:36:8b:89:13:9d:52:b9:2e:67:71:ef:
                    87:40:34:37:56:6f:e8:34:cc:15:2d:fd:fa:55:e5:
                    8a:8d:df:da:04:fe:8c:c2:3f:e4:39:13:9a:4c:e0:
                    70:c0:5b:20:f4:fb:27:c5:0b:ea:96:1d:8e:10:5d:
                    f9:e3:f2:87:42:d5:11:69:60:c0:38:f2:0d:74:93:
                    b4:6b:9b:55:e9:16:83:91:01:44:f2:99:fb:6e:43:
                    86:ce:8b:24:da:ca:fc:c8:db:6f:4c:22:6f:7d:a7:
                    e5:4c:9a:e2:4b:a7:f8:e1:9e:dc:ba:84:0e:a0:12:
                    fe:ac:bc:01:07:0f:6c:bd:94:44:bb:74:f2:c5:10:
                    d8:72:54:e8:64:f7:16:81:d3:22:4d:f6:57:f6:90:
                    26:29:92:3d:1c:bd:91:34:36:fb:4e:61:ae:bf:67:
                    13:2a:2e:50:93:fc:f8:ef:04:ef:e7:03:10:36:a0:
                    cd:b8:a7:2c:c2:67:c2:08:c2:3b:8b:ab:40:e0:da:
                    f5:3f:db:c0:ae:d1:df:cc:50:ac:33:ac:42:ea:3a:
                    b5:eb:2f:d5:16:a2:01:24:1a:16:db:65:4f:0a:69:
                    75:ea:68:f4:9a:4e:6a:0b:79:83:5b:f2:70:18:e2:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:13:65:9E:F4:AB:89:73:70:E5:40:1D:49:6A:31:6A:52:01:C3:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:52:4c:ee:ce:52:ac:79:aa:aa:9d:3f:27:5e:d0:6c:ff:
         f8:6b:f8:84:76:30:1a:90:23:ae:d1:02:eb:15:6f:e5:2a:b4:
         c0:5a:2f:8b:6e:8c:cd:90:e4:5b:ae:35:b7:b5:3d:6a:16:4a:
         9e:6d:39:93:33:37:56:50:b1:77:b4:e1:14:87:71:1c:48:13:
         f0:69:b0:03:96:48:3f:40:7f:6e:79:f6:dc:7f:18:d1:f7:7a:
         95:0b:7c:8e:3b:0b:aa:32:ac:53:2f:cf:2b:92:d8:38:e4:9d:
         69:78:37:3d:5b:99:f1:7e:0e:28:9e:5c:be:32:7f:02:ce:84:
         6b:65:53:0b:24:01:f9:21:d9:8d:6d:69:8e:d1:eb:25:f7:84:
         de:1c:9a:ce:a5:7e:35:0e:66:97:22:9c:e6:62:94:94:3c:7d:
         12:61:c8:9c:11:88:3b:cd:8a:43:90:58:f7:12:7c:8f:d4:51:
         c3:10:7c:e2:09:ba:f7:a1:6d:7a:15:f9:bb:27:c5:73:64:38:
         63:e6:c0:85:31:b4:c5:ca:aa:2c:48:20:8e:df:a9:d4:f7:17:
         47:94:b1:35:cb:87:45:8d:63:f9:57:21:7e:74:ef:8a:10:4b:
         02:b7:26:64:9d:12:8d:15:dd:7a:28:43:d8:41:4e:53:11:a0:
         70:96:85:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDiRbUL3GIq7YCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz
MTIwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
ODFmYWVlMTctNTNlNy00NTdmLWIzMWItNTZkNWFlYjQzMWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+URBu2EJlQSZZZMijmoj554NouJE51SuS5n
ce+HQDQ3Vm/oNMwVLf36VeWKjd/aBP6Mwj/kOROaTOBwwFsg9PsnxQvqlh2OEF35
4/KHQtURaWDAOPINdJO0a5tV6RaDkQFE8pn7bkOGzosk2sr8yNtvTCJvfaflTJri
S6f44Z7cuoQOoBL+rLwBBw9svZREu3TyxRDYclToZPcWgdMiTfZX9pAmKZI9HL2R
NDb7TmGuv2cTKi5Qk/z47wTv5wMQNqDNuKcswmfCCMI7i6tA4Nr1P9vArtHfzFCs
M6xC6jq16y/VFqIBJBoW22VPCml16mj0mk5qC3mDW/JwGOJc2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgTZZ70q4lzcOVAHUlqMWpSAcMoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz
ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMmRhMGVmMmEtODFmYy0z
N2Y5LTlhMDItNTllNGM0N2VkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj
NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx
MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey
NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHoUkzuzlKseaqqnT8nXtBs//hr+IR2MBqQI67RAusVb+UqtMBaL4tu
jM2Q5FuuNbe1PWoWSp5tOZMzN1ZQsXe04RSHcRxIE/BpsAOWSD9Af2559tx/GNH3
epULfI47C6oyrFMvzyuS2DjknWl4Nz1bmfF+DiieXL4yfwLOhGtlUwskAfkh2Y1t
aY7R6yX3hN4cms6lfjUOZpcinOZilJQ8fRJhyJwRiDvNikOQWPcSfI/UUcMQfOIJ
uvehbXoV+bsnxXNkOGPmwIUxtMXKqixIII7fqdT3F0eUsTXLh0WNY/lXIX5074oQ
SwK3JmSdEo0V3XooQ9hBTlMRoHCWhZ0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:39:03 2026 by rpki-client