Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aaed73a8-5f38-330d-b7fd-243a077d4cb6.roa
File:                     aaed73a8-5f38-330d-b7fd-243a077d4cb6.roa (raw, json)
Hash identifier:          c2OPFSzgTQCmJH8XOCYnmzMuC66WN0guWNVPukjwK+k=
Subject key identifier:   86:78:BF:3F:16:3A:FB:B5:A2:A9:53:C6:A3:7A:F0:FF:F2:C0:99:49
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4989D7984896ABF8964B72A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aaed73a8-5f38-330d-b7fd-243a077d4cb6.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     215728
IP address blocks:        170.62.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d7:98:48:96:ab:f8:96:4b:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=4cab812f-66e1-474c-a446-81c4d14326df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:26:d4:9d:13:eb:39:11:5a:22:d2:8e:63:
                    9e:a0:5c:7b:8e:75:df:f7:27:b3:7c:78:1b:fd:28:
                    fd:a2:9f:00:ad:92:5b:ee:cd:6a:7b:58:c4:79:f1:
                    2d:24:b0:41:2b:41:94:01:3a:dc:b8:9c:3a:dc:34:
                    c8:bb:2c:46:53:92:c5:97:5a:1d:99:02:9c:e1:f9:
                    0d:9e:0e:dc:68:ba:97:d2:95:7a:6b:b2:37:70:e4:
                    09:78:d0:27:8c:7c:7d:cf:da:70:f2:0f:06:8e:78:
                    99:d5:a2:92:3d:2f:ec:43:a1:eb:0f:33:bf:70:13:
                    df:02:e4:08:ed:7a:9e:c7:ea:16:3d:4e:c1:44:f9:
                    4f:cd:08:c4:6b:16:b5:65:e3:d5:2a:d8:22:85:af:
                    64:48:c7:be:f6:97:5b:b2:39:fc:f4:69:52:0c:87:
                    3d:54:63:e0:d1:04:73:09:b9:82:8e:ff:f4:b2:21:
                    ba:ce:4f:87:63:d9:89:4b:3c:20:67:27:ec:49:69:
                    ac:f8:b0:94:34:7b:91:a8:99:97:ea:e9:6e:a4:c0:
                    40:ab:d1:67:7e:ea:c8:d8:4e:64:81:d6:eb:d5:a5:
                    9c:e3:9e:de:0e:2e:68:d9:a7:fb:89:62:b9:b3:57:
                    26:f7:63:19:d2:67:73:e4:a3:4b:49:95:4c:2b:c7:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:BF:3F:16:3A:FB:B5:A2:A9:53:C6:A3:7A:F0:FF:F2:C0:99:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aaed73a8-5f38-330d-b7fd-243a077d4cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:72:ae:21:f4:5b:73:76:b0:29:02:52:dd:05:de:8f:86:
         a6:5d:38:ff:35:17:f9:e7:0b:bb:40:93:98:27:a3:71:2e:66:
         cd:54:7b:d3:ff:72:d5:25:0a:33:00:eb:f3:ef:ad:4b:81:eb:
         31:1f:4f:b1:16:6b:6f:be:cd:d0:38:34:a2:0e:3c:a9:87:84:
         d2:5b:21:0f:bb:fe:5f:35:af:24:28:b3:d2:4b:97:4c:e9:6c:
         b8:18:4a:2c:17:70:84:8e:d6:6a:98:9e:3c:a1:8e:40:1b:e7:
         74:54:9e:5b:2b:4f:a1:48:95:17:dd:00:c0:77:47:ef:aa:8e:
         16:2b:4b:19:6e:3a:d1:50:67:b6:3f:03:3d:c2:00:65:12:9c:
         f9:0f:4d:a4:82:48:aa:64:fb:ee:c9:2c:79:0e:19:ed:63:4a:
         2b:77:6d:e6:76:79:67:86:3d:be:65:a3:03:a5:b6:7c:77:26:
         b3:58:0f:19:b3:2e:c1:c3:90:f8:cd:e1:e4:1b:cb:ef:94:ba:
         2b:33:83:a7:cd:b4:d0:aa:96:77:27:a8:e2:9d:26:70:7d:dc:
         0b:71:35:bc:51:2f:a1:1a:6c:69:12:f6:59:9c:5f:a9:f6:1a:
         6a:93:51:44:c5:ed:bd:2b:14:51:08:3f:a9:8e:23:b4:93:89:
         4f:d2:d3:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JideYSJar+JZLcqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk
NGNhYjgxMmYtNjZlMS00NzRjLWE0NDYtODFjNGQxNDMyNmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAIm1J0T6zkRWiLSjmOeoFx7jnXf9yezfHgb
/Sj9op8ArZJb7s1qe1jEefEtJLBBK0GUATrcuJw63DTIuyxGU5LFl1odmQKc4fkN
ng7caLqX0pV6a7I3cOQJeNAnjHx9z9pw8g8GjniZ1aKSPS/sQ6HrDzO/cBPfAuQI
7Xqex+oWPU7BRPlPzQjEaxa1ZePVKtgiha9kSMe+9pdbsjn89GlSDIc9VGPg0QRz
CbmCjv/0siG6zk+HY9mJSzwgZyfsSWms+LCUNHuRqJmX6ulupMBAq9FnfurI2E5k
gdbr1aWc457eDi5o2af7iWK5s1cm92MZ0mdz5KNLSZVMK8cwTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZ4vz8WOvu1oqlTxqN68P/ywJlJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWFlZDczYTgtNWYzOC0z
MzBkLWI3ZmQtMjQzYTA3N2Q0Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOwcq4h9FtzdrApAlLdBd6PhqZdOP81F/nnC7tAk5gno3EuZs1Ue9P/
ctUlCjMA6/PvrUuB6zEfT7EWa2++zdA4NKIOPKmHhNJbIQ+7/l81ryQos9JLl0zp
bLgYSiwXcISO1mqYnjyhjkAb53RUnlsrT6FIlRfdAMB3R++qjhYrSxluOtFQZ7Y/
Az3CAGUSnPkPTaSCSKpk++7JLHkOGe1jSit3beZ2eWeGPb5lowOltnx3JrNYDxmz
LsHDkPjN4eQby++Uuiszg6fNtNCqlncnqOKdJnB93AtxNbxRL6EabGkS9lmcX6n2
GmqTUUTF7b0rFFEIP6mOI7STiU/S0yc=
-----END CERTIFICATE-----
Generated at Mon Jul 13 08:40:39 2026 by rpki-client