Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa
File:                     a086db20-cecc-3588-b15a-42b6851f1b47.roa (raw, json)
Hash identifier:          hmQB6yuDZwqS4nrVIjJLADsTIeAXUEvjtKg31H/+T9A=
Subject key identifier:   8F:4A:E1:04:F8:A8:1E:E9:0A:DF:AB:48:F9:AF:8B:21:3E:2C:11:FB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EEA875F048605B79B70FF9C90
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     17025
IP address blocks:        209.133.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5f:04:86:05:b7:9b:70:ff:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=ce03ad7e-4fd8-458b-8d7a-796491662968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:80:75:b4:3a:1c:3e:28:4f:27:b5:82:e7:
                    22:1f:ad:f6:d3:cb:0f:fe:ce:bf:90:f0:94:ea:cc:
                    dc:c0:17:ba:96:b2:16:93:5f:c5:cf:4a:78:f9:26:
                    92:57:a8:54:f2:72:f1:9d:89:0e:23:de:f1:33:ff:
                    97:d5:7a:9b:b2:49:f3:81:ad:bf:53:3c:e0:83:a1:
                    f8:e9:68:71:5c:71:73:ab:b6:c7:67:74:da:da:b4:
                    66:42:3d:55:d8:50:80:5b:25:17:c9:21:92:b5:c7:
                    7d:1c:d3:b9:2c:33:28:bb:89:51:95:b0:0e:01:c0:
                    03:a9:53:32:c5:e2:19:26:f6:9f:1b:c3:96:ee:eb:
                    24:d4:91:46:f8:ba:96:6d:09:03:8a:29:85:78:7e:
                    e0:24:a2:41:20:2e:c0:17:67:53:44:14:da:4f:82:
                    e7:06:5a:12:2c:e5:ab:2f:fd:81:08:35:03:38:49:
                    15:dc:d9:12:80:c9:22:e9:00:c6:89:bd:bb:e7:b7:
                    7c:bb:6c:9f:c0:a3:5b:74:36:32:0a:00:af:f7:29:
                    61:1a:8c:3d:4c:77:db:a1:34:81:ea:24:16:dc:96:
                    8f:1f:a4:fd:d7:80:ad:89:0b:d2:2c:29:37:1e:e6:
                    d6:26:c0:5f:bb:fe:74:b6:f9:a8:fd:ac:aa:32:37:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:E1:04:F8:A8:1E:E9:0A:DF:AB:48:F9:AF:8B:21:3E:2C:11:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:e2:2d:f8:17:a8:23:a6:8b:9d:e1:72:8e:35:c4:4c:74:
         c6:02:47:42:62:93:87:02:7b:9a:f0:66:bd:c9:2c:b0:c9:fb:
         cf:7c:32:e5:67:05:ad:c7:ee:19:85:4a:fe:f4:e2:e1:f3:52:
         27:3d:28:e3:62:a6:5f:05:c5:05:20:f2:18:1f:6e:85:25:61:
         22:7e:be:9e:49:1b:f4:25:eb:8a:fb:21:25:ac:47:6d:80:05:
         29:14:ab:b5:12:29:81:07:4c:d1:69:e3:fd:29:da:53:42:25:
         b1:3e:07:a0:5b:5f:9c:52:74:07:06:68:d5:bc:fc:a3:fc:df:
         02:ee:35:b8:41:1a:bf:07:81:a2:43:e5:dc:6a:81:3b:87:9f:
         7c:9b:11:34:41:76:0f:4e:43:26:77:81:87:aa:91:54:cb:14:
         6b:a2:db:09:a1:26:4a:59:55:df:f3:3a:a4:3b:6e:b5:cf:f6:
         de:36:8b:83:e6:49:2b:fe:50:fe:17:65:7d:ff:f1:b6:1a:a2:
         46:1d:fe:24:19:3a:67:13:93:92:69:42:80:72:eb:b0:e5:27:
         5f:ef:b8:c7:78:bc:bd:f2:3e:3f:46:31:62:73:46:83:2b:af:
         ce:21:f5:a0:ed:de:81:c2:0f:58:a1:3a:c8:1c:76:4f:76:16:
         76:63:3a:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh18EhgW3m3D/nJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2UwM2FkN2UtNGZkOC00NThiLThkN2EtNzk2NDkxNjYyOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmmAdbQ6HD4oTye1guciH63208sP/s6/kPCU
6szcwBe6lrIWk1/Fz0p4+SaSV6hU8nLxnYkOI97xM/+X1Xqbsknzga2/Uzzgg6H4
6WhxXHFzq7bHZ3Ta2rRmQj1V2FCAWyUXySGStcd9HNO5LDMou4lRlbAOAcADqVMy
xeIZJvafG8OW7usk1JFG+LqWbQkDiimFeH7gJKJBIC7AF2dTRBTaT4LnBloSLOWr
L/2BCDUDOEkV3NkSgMki6QDGib2757d8u2yfwKNbdDYyCgCv9ylhGow9THfboTSB
6iQW3JaPH6T914CtiQvSLCk3HubWJsBfu/50tvmo/ayqMjdxcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9K4QT4qB7pCt+rSPmviyE+LBH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYTA4NmRiMjAtY2VjYy0z
NTg4LWIxNWEtNDJiNjg1MWYxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdL4i34F6gjpoud4XKONcRMdMYCR0Jik4cCe5rwZr3JLLDJ+898MuVn
Ba3H7hmFSv704uHzUic9KONipl8FxQUg8hgfboUlYSJ+vp5JG/Ql64r7ISWsR22A
BSkUq7USKYEHTNFp4/0p2lNCJbE+B6BbX5xSdAcGaNW8/KP83wLuNbhBGr8HgaJD
5dxqgTuHn3ybETRBdg9OQyZ3gYeqkVTLFGui2wmhJkpZVd/zOqQ7brXP9t42i4Pm
SSv+UP4XZX3/8bYaokYd/iQZOmcTk5JpQoBy67DlJ1/vuMd4vL3yPj9GMWJzRoMr
r84h9aDt3oHCD1ihOsgcdk92FnZjOhI=
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:18:41 2026 by rpki-client