Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
File:                     3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa (raw, json)
Hash identifier:          AUIk1hQIZJTkYQYn727MY1xxB4SF2pwOZ46OAb7nJjM=
Subject key identifier:   C2:A1:0D:FF:3F:C4:7A:4F:DE:C6:7F:20:A7:BC:49:8B:60:2B:2D:A1
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C41B4AA2FEE84E3DCDC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        170.248.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c4:1b:4a:a2:fe:e8:4e:3d:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=57db297c-c8d7-445f-94e7-e899cc3f5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:95:e4:0b:a1:c8:29:47:dc:55:99:cd:7e:
                    6b:db:41:a6:07:78:9d:9e:67:94:85:dd:fd:7a:d4:
                    09:f7:ca:6a:d2:fa:6c:57:00:51:e7:f4:ce:ff:c1:
                    d3:1d:c9:2c:a5:7a:07:41:d8:b6:f3:53:63:71:82:
                    b0:38:ec:e2:34:16:43:a3:30:8c:5b:2d:82:5b:1a:
                    6c:d7:dc:38:d4:93:29:c9:e1:a9:51:c1:83:8d:79:
                    46:76:fa:75:14:04:34:50:94:05:8d:1d:df:a1:7c:
                    1f:97:34:46:43:44:15:bf:96:a4:25:85:4a:3b:66:
                    8f:31:63:ce:10:55:4c:95:8a:c0:72:70:b9:a9:88:
                    68:b9:68:79:7a:ce:92:d8:7b:7e:c9:dc:ab:1b:89:
                    39:91:cb:f7:a1:6f:ac:77:f8:ff:90:21:8a:92:ff:
                    fa:14:d5:54:f1:b1:87:ff:1b:8f:af:91:61:df:1d:
                    57:78:ab:1a:cb:db:88:52:99:cf:4a:5d:a7:70:b5:
                    14:26:7b:0f:71:a3:4d:5a:19:6d:ac:46:bb:3e:8b:
                    03:63:a0:b1:05:8c:83:a7:03:25:b9:18:1a:b0:06:
                    5f:ca:32:3c:2d:6f:d4:41:3e:c0:67:6c:63:ef:e8:
                    8d:a6:a1:cb:85:45:a6:b0:26:0e:ee:36:bf:f4:95:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:0D:FF:3F:C4:7A:4F:DE:C6:7F:20:A7:BC:49:8B:60:2B:2D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:42:3c:32:33:19:d1:5a:02:a7:73:2d:02:20:ae:2d:06:
         94:79:07:48:d6:10:dd:93:bf:15:ad:ac:19:bb:5d:59:76:6f:
         0d:f4:d5:b6:25:ba:7c:76:20:08:d8:5a:20:b6:3f:be:40:33:
         a3:3c:fc:f6:8f:42:4e:0b:58:c1:00:d5:c4:8c:9d:de:55:14:
         59:1c:00:27:f8:72:c5:27:01:d3:72:df:39:48:11:61:21:c8:
         0b:fa:f5:77:34:4e:2b:15:69:80:fd:10:b4:cc:85:4f:7e:08:
         1f:ef:06:fc:31:82:48:8a:ad:fb:0c:d8:b4:81:81:47:10:e2:
         56:20:47:04:5a:e2:30:1b:44:43:ce:41:2a:70:9c:bc:2b:7a:
         8a:ee:2a:69:6a:27:be:05:ff:cf:0e:46:0e:bc:f6:d9:88:a9:
         d2:0e:19:89:f2:6e:c6:f5:52:69:bf:40:9c:53:ef:bc:7a:97:
         6f:44:da:52:0f:ff:0e:15:24:99:1f:24:9d:6c:fd:4c:1d:89:
         25:d9:e6:a3:a0:62:ed:92:85:f6:d4:44:0a:d3:cc:d4:90:bc:
         49:d3:6d:1b:aa:ed:9a:e4:4a:c7:1a:87:35:ab:e5:04:c3:5d:
         0c:ea:c7:4c:a8:72:f9:ad:b8:76:c6:87:e5:6e:74:c3:ab:f1:
         a4:c8:53:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsQbSqL+6E49zcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
NTdkYjI5N2MtYzhkNy00NDVmLTk0ZTctZTg5OWNjM2Y1NzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNGV5AuhyClH3FWZzX5r20GmB3idnmeUhd39
etQJ98pq0vpsVwBR5/TO/8HTHckspXoHQdi281NjcYKwOOziNBZDozCMWy2CWxps
19w41JMpyeGpUcGDjXlGdvp1FAQ0UJQFjR3foXwflzRGQ0QVv5akJYVKO2aPMWPO
EFVMlYrAcnC5qYhouWh5es6S2Ht+ydyrG4k5kcv3oW+sd/j/kCGKkv/6FNVU8bGH
/xuPr5Fh3x1XeKsay9uIUpnPSl2ncLUUJnsPcaNNWhltrEa7PosDY6CxBYyDpwMl
uRgasAZfyjI8LW/UQT7AZ2xj7+iNpqHLhUWmsCYO7ja/9JXaNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKhDf8/xHpP3sZ/IKe8SYtgKy2hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvM2NjZmRjODAtM2NkOC0z
YTEyLWJkODktMjdlYmUxZmZjOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOLQjwyMxnRWgKncy0CIK4tBpR5B0jWEN2TvxWtrBm7XVl2bw301bYl
unx2IAjYWiC2P75AM6M8/PaPQk4LWMEA1cSMnd5VFFkcACf4csUnAdNy3zlIEWEh
yAv69Xc0TisVaYD9ELTMhU9+CB/vBvwxgkiKrfsM2LSBgUcQ4lYgRwRa4jAbREPO
QSpwnLwreoruKmlqJ74F/88ORg689tmIqdIOGYnybsb1Umm/QJxT77x6l29E2lIP
/w4VJJkfJJ1s/UwdiSXZ5qOgYu2ShfbURArTzNSQvEnTbRuq7ZrkSscahzWr5QTD
XQzqx0yocvmtuHbGh+VudMOr8aTIU9Y=
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:08:19 2026 by rpki-client