Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/13dce1ae-5fc3-3b65-a316-5c11da5c4ee2.roa
File:                     13dce1ae-5fc3-3b65-a316-5c11da5c4ee2.roa (raw, json)
Hash identifier:          srOSfQjG8H4tT9KA9LHCSgP2Hd1jLfr3a5C+fM/crxY=
Subject key identifier:   74:DF:C7:CE:B2:ED:B2:DF:6A:33:94:D1:1F:6F:B7:C6:D5:D6:4B:37
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F69B14235B2A70C5D7C9BE880
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/13dce1ae-5fc3-3b65-a316-5c11da5c4ee2.roa
Signing time:             Tue 06 Oct 2026 14:12:29 +0000
ROA not before:           Tue 06 Oct 2026 14:12:29 +0000
ROA not after:            Mon 04 Jan 2027 15:12:29 +0000
asID:                     21433
IP address blocks:        170.248.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:b1:42:35:b2:a7:0c:5d:7c:9b:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  6 14:12:29 2026 GMT
            Not After : Jan  4 15:12:29 2027 GMT
        Subject: CN=3e22cf9a-0c0f-457e-adc6-26f2280ec267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:2c:8a:c7:58:d7:77:43:68:e6:61:3f:50:
                    20:52:6c:a6:77:22:4b:70:c1:74:d6:c3:62:1b:39:
                    1a:80:0e:7d:64:82:72:6c:4c:bb:b0:e3:cb:c4:c2:
                    9f:2a:c8:c7:b0:37:6f:e1:f0:08:34:8d:70:e8:f7:
                    17:15:04:b4:17:c9:30:82:16:39:1d:50:d7:c2:1e:
                    f1:63:ba:e8:52:11:5e:0e:b7:1a:ab:62:b9:69:27:
                    a4:4c:5f:52:f3:87:ce:0f:81:a2:d5:e1:b2:5b:e1:
                    2c:c3:1e:3f:5f:61:63:00:f8:e6:2f:cb:62:55:76:
                    28:94:57:6f:61:96:32:96:23:2e:f2:3c:f0:aa:3a:
                    f9:f1:3c:a1:5a:59:58:7d:d9:25:40:c1:7f:e0:eb:
                    a8:02:70:f3:cf:51:05:b7:47:9f:60:f9:fe:2e:28:
                    90:1a:75:d7:1b:78:2d:1b:15:29:e6:a9:2a:de:35:
                    08:f3:91:6b:e4:71:d0:09:82:1e:e8:9c:62:6b:d9:
                    09:c8:24:68:68:0a:5f:f7:68:bd:17:4c:a0:5b:09:
                    99:1a:c7:59:a6:90:5b:25:60:65:c2:5d:3e:a7:1c:
                    0d:30:6e:35:c4:d3:d9:bd:04:9c:d1:be:9f:3e:dc:
                    c0:a0:28:bf:8a:fa:69:76:1f:fa:cd:15:09:9b:d5:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DF:C7:CE:B2:ED:B2:DF:6A:33:94:D1:1F:6F:B7:C6:D5:D6:4B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/13dce1ae-5fc3-3b65-a316-5c11da5c4ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:97:50:57:59:31:a9:17:19:90:38:7d:07:49:2f:d9:4f:
         29:9b:f9:69:d8:c9:4d:26:52:0c:9f:83:53:de:44:08:2d:f8:
         a1:02:ce:63:14:fb:93:ff:99:42:86:97:11:06:7e:d6:2e:1f:
         02:8a:18:1f:a4:9b:fe:e9:b4:39:55:1a:28:1f:de:a7:09:14:
         b1:eb:b8:fd:f5:79:e4:1f:a0:02:b3:61:3e:0e:c4:39:81:a4:
         35:82:c8:33:7b:59:06:88:0f:75:fd:ac:cf:bb:0e:29:39:74:
         3b:4e:28:ce:1a:e7:38:8f:00:13:80:14:92:47:19:62:4f:e0:
         d9:92:be:4a:46:37:f7:ae:f2:00:f3:dd:40:5a:83:ba:bc:6d:
         9f:1f:32:25:37:48:d1:25:8b:3c:c1:a7:01:7c:af:a8:8a:7a:
         84:4c:d9:ef:d4:90:33:6e:ef:9b:80:74:c9:13:b8:88:f9:81:
         c6:19:34:9a:d9:7b:52:2e:c5:aa:47:f0:d8:2d:a3:e1:03:f5:
         b9:35:11:53:95:97:e8:28:83:e4:7f:67:20:73:12:00:84:2c:
         10:d6:c4:c4:9c:90:6e:58:ad:2b:7c:27:03:6c:3a:90:39:a9:
         ff:13:47:c7:fc:b5:f4:2f:32:c5:57:54:2f:08:7c:5d:1e:c4:
         3a:16:38:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9psUI1sqcMXXyb6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNjE0MTIyOVoXDTI3MDEwNDE1MTIyOVowLzEtMCsGA1UEAxMk
M2UyMmNmOWEtMGMwZi00NTdlLWFkYzYtMjZmMjI4MGVjMjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgycsisdY13dDaOZhP1AgUmymdyJLcMF01sNi
GzkagA59ZIJybEy7sOPLxMKfKsjHsDdv4fAINI1w6PcXFQS0F8kwghY5HVDXwh7x
Y7roUhFeDrcaq2K5aSekTF9S84fOD4Gi1eGyW+Eswx4/X2FjAPjmL8tiVXYolFdv
YZYyliMu8jzwqjr58TyhWllYfdklQMF/4OuoAnDzz1EFt0efYPn+LiiQGnXXG3gt
GxUp5qkq3jUI85Fr5HHQCYIe6Jxia9kJyCRoaApf92i9F0ygWwmZGsdZppBbJWBl
wl0+pxwNMG41xNPZvQSc0b6fPtzAoCi/ivppdh/6zRUJm9VjVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTfx86y7bLfajOU0R9vt8bV1ks3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMTNkY2UxYWUtNWZjMy0z
YjY1LWEzMTYtNWMxMWRhNWM0ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvh8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETll1BXWTGpFxmQOH0HSS/ZTymb+WnYyU0mUgyfg1PeRAgt+KECzmMU
+5P/mUKGlxEGftYuHwKKGB+km/7ptDlVGigf3qcJFLHruP31eeQfoAKzYT4OxDmB
pDWCyDN7WQaID3X9rM+7Dik5dDtOKM4a5ziPABOAFJJHGWJP4NmSvkpGN/eu8gDz
3UBag7q8bZ8fMiU3SNElizzBpwF8r6iKeoRM2e/UkDNu75uAdMkTuIj5gcYZNJrZ
e1IuxapH8Ngto+ED9bk1EVOVl+gog+R/ZyBzEgCELBDWxMSckG5YrSt8JwNsOpA5
qf8TR8f8tfQvMsVXVC8IfF0exDoWOP4=
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:18:02 2026 by rpki-client