Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
File:                     efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json)
Hash identifier:          KXln0XCMmJv1WbYX87ZkhwJXU9GuB/m4B7Wz6KX0nJ4=
Subject key identifier:   EB:0D:F3:BA:7E:C1:9A:F3:1B:5B:E9:0A:9D:58:03:5F:40:0C:79:F8
Certificate issuer:       /CN=7054e196-fda1-4988-82d5-4d2f5013150d
Certificate serial:       010D0C9F4328584EF2E75EB1376F304420E84B80
Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     14648
IP address blocks:        170.39.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5e:b1:37:6f:30:44:20:e8:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=f9996208-2558-4da6-9254-d64d778f460c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:6b:93:f5:ca:f3:15:b8:7d:27:1a:d7:1d:
                    4f:7c:47:1f:a1:91:f6:25:07:07:1c:bf:13:db:46:
                    5d:16:f5:5b:cb:3c:c4:4d:2d:5d:62:fb:3a:45:db:
                    3a:fc:b0:8f:9a:17:97:4c:9d:be:6d:33:9a:c3:ff:
                    bf:4e:de:1c:b0:02:15:aa:3d:e6:cc:a3:bb:fd:f9:
                    04:05:f0:67:4e:88:9e:17:4b:15:aa:82:20:0f:78:
                    ea:57:b5:d7:7b:6c:12:0f:40:f6:04:88:0b:26:7d:
                    ed:d1:62:71:7c:0f:a8:11:4e:14:75:f9:da:00:44:
                    2e:be:ed:b6:40:30:a0:7d:52:a9:05:dd:fe:2a:49:
                    5e:94:3b:d2:94:02:74:e3:7a:79:85:09:47:ce:e2:
                    ba:d6:0b:88:62:c3:4c:b7:71:46:2c:fa:ae:e4:68:
                    d8:99:4d:46:6b:a0:43:80:6e:1f:ae:b7:f2:80:cd:
                    49:de:e4:da:a1:53:f1:9e:a3:17:44:5e:93:84:9c:
                    19:79:12:20:0f:cf:40:56:a4:fb:02:64:b8:1a:62:
                    82:2a:74:02:67:82:9f:61:fa:80:9b:6a:73:bd:ae:
                    f2:54:e9:75:3f:5a:e4:f6:8e:56:2f:c4:63:22:ff:
                    89:c7:e4:fe:ec:bb:87:84:b9:13:97:ca:e3:d3:68:
                    5b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:F3:BA:7E:C1:9A:F3:1B:5B:E9:0A:9D:58:03:5F:40:0C:79:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl

            X509v3 Authority Key Identifier:
                keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:6b:a3:17:d5:a9:07:7f:c2:dc:dd:78:00:9e:b7:f6:8b:
         7b:d9:af:6c:6d:2d:f2:42:ff:fa:c9:ec:fd:35:93:b7:36:59:
         01:85:27:59:48:9f:1c:a8:47:0d:c5:cf:38:77:f0:4a:0c:a3:
         f5:83:84:da:16:43:68:cf:92:79:0c:20:8e:03:bd:9a:1c:88:
         2c:1e:ea:98:ca:c7:c0:8a:52:ae:6e:7a:28:f0:81:95:9a:08:
         4b:78:0a:64:04:c0:d3:8e:f4:c9:47:99:c8:e8:b2:cd:6f:c8:
         27:72:79:db:84:8b:45:f2:cc:4c:24:41:a0:2f:54:f1:c4:77:
         8e:53:c9:9b:10:31:78:39:45:67:84:24:e5:94:d0:91:bf:2b:
         46:2f:56:8d:37:c5:88:d6:68:c7:13:4d:af:55:1b:40:37:4e:
         7c:f1:99:13:ca:54:78:aa:0f:c6:24:6d:2b:66:0d:20:ad:d0:
         bf:c8:f1:c4:7b:17:31:6e:bf:b2:e5:68:35:a0:23:84:f6:17:
         90:8e:a2:79:d1:a8:77:83:63:80:94:d1:42:f7:e6:27:ad:d1:
         e8:1b:2b:20:3c:f3:97:df:c6:48:ab:65:25:be:f9:b4:b8:20:
         55:30:30:cb:f9:2c:b0:f6:39:9a:90:8b:c3:da:c4:68:83:35:
         cb:ab:35:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y516xN28wRCDoS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx
NTBkMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
Zjk5OTYyMDgtMjU1OC00ZGE2LTkyNTQtZDY0ZDc3OGY0NjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Vrk/XK8xW4fSca1x1PfEcfoZH2JQcHHL8T
20ZdFvVbyzzETS1dYvs6Rds6/LCPmheXTJ2+bTOaw/+/Tt4csAIVqj3mzKO7/fkE
BfBnToieF0sVqoIgD3jqV7XXe2wSD0D2BIgLJn3t0WJxfA+oEU4UdfnaAEQuvu22
QDCgfVKpBd3+KklelDvSlAJ043p5hQlHzuK61guIYsNMt3FGLPqu5GjYmU1Ga6BD
gG4frrfygM1J3uTaoVPxnqMXRF6ThJwZeRIgD89AVqT7AmS4GmKCKnQCZ4KfYfqA
m2pzva7yVOl1P1rk9o5WL8RjIv+Jx+T+7LuHhLkTl8rj02hbfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsN87p+wZrzG1vpCp1YA19ADHn4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0
ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvZWZiMjJlOWItMWRiMS0z
MjM5LWIyZDMtNjVlMGRmNGFiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy
ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz
MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm
NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSaa6MX1akHf8Lc3XgAnrf2i3vZr2xtLfJC//rJ7P01k7c2WQGFJ1lI
nxyoRw3Fzzh38EoMo/WDhNoWQ2jPknkMII4DvZociCwe6pjKx8CKUq5ueijwgZWa
CEt4CmQEwNOO9MlHmcjoss1vyCdyeduEi0XyzEwkQaAvVPHEd45TyZsQMXg5RWeE
JOWU0JG/K0YvVo03xYjWaMcTTa9VG0A3TnzxmRPKVHiqD8YkbStmDSCt0L/I8cR7
FzFuv7LlaDWgI4T2F5COonnRqHeDY4CU0UL35iet0egbKyA885ffxkirZSW++bS4
IFUwMMv5LLD2OZqQi8PaxGiDNcurNWs=
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:40:54 2026 by rpki-client