Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/93e40db0-228a-3593-a94b-9fbd37a7d694.roa
File:                     93e40db0-228a-3593-a94b-9fbd37a7d694.roa (raw, json)
Hash identifier:          CMNy/TdD0mM5vnvgpf/ZbBunx0AFOaAIE14zTqVswSc=
Subject key identifier:   2C:CB:9A:FE:D0:52:D7:FF:51:49:0D:DB:A4:CC:3C:EF:D2:DB:BE:73
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F09FF5B0115D31F9089DB9E40
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/93e40db0-228a-3593-a94b-9fbd37a7d694.roa
Signing time:             Wed 02 Sep 2026 07:32:14 +0000
ROA not before:           Wed 02 Sep 2026 07:32:14 +0000
ROA not after:            Tue 01 Dec 2026 08:32:14 +0000
asID:                     3573
IP address blocks:        170.251.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:ff:5b:01:15:d3:1f:90:89:db:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  2 07:32:14 2026 GMT
            Not After : Dec  1 08:32:14 2026 GMT
        Subject: CN=b902699c-1ba0-4397-8304-3ad811502cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:f7:87:ed:a1:c9:e5:9c:f5:31:5b:32:8b:
                    3a:02:5a:73:c2:b4:36:14:5b:26:f1:b2:28:a4:7b:
                    42:2d:54:08:29:5f:30:08:9e:52:15:3c:0a:86:72:
                    be:09:07:af:9d:96:69:d4:16:2f:85:aa:ed:48:c6:
                    28:be:b7:29:ee:64:65:bd:0e:b6:27:39:ff:da:3f:
                    0c:8f:62:1f:3f:df:02:7f:fb:4c:99:cb:9f:49:44:
                    b6:28:be:76:43:3b:e0:02:df:f8:ec:f2:b6:fa:5d:
                    6f:85:c4:57:69:03:24:a9:c9:61:ce:ed:d3:c8:6a:
                    8d:12:e7:14:39:78:9b:92:b1:ff:8f:3e:ab:f7:6f:
                    f2:94:30:39:5a:36:4a:d4:33:61:82:8a:3e:98:55:
                    b8:99:f3:9b:fd:3e:df:89:ca:91:4f:23:df:c4:3a:
                    91:eb:f7:53:1a:6d:fc:d9:fe:bf:0f:07:69:e7:ee:
                    bc:89:4d:f2:cf:a2:0d:4a:64:5e:73:1d:6b:e3:86:
                    1f:7c:0c:60:38:22:cc:aa:8f:df:4f:04:e0:c0:70:
                    bb:3e:30:ae:28:70:c2:33:f9:96:7c:57:12:af:c9:
                    d8:e7:44:01:54:30:3d:ef:e2:e1:26:d0:8a:b3:df:
                    8d:03:65:ff:3b:fb:2f:67:38:96:9c:f8:02:f6:74:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CB:9A:FE:D0:52:D7:FF:51:49:0D:DB:A4:CC:3C:EF:D2:DB:BE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/93e40db0-228a-3593-a94b-9fbd37a7d694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:66:22:6e:2f:1f:f7:e3:8b:ec:10:a5:9e:c3:8a:d2:56:96:
         e7:00:cd:b1:3c:35:e8:dc:a8:50:60:de:ee:88:c2:45:9f:b6:
         d7:43:37:b8:6d:18:32:97:7f:66:33:1c:d4:dc:79:59:64:cb:
         bb:b3:a2:a5:04:9c:e9:58:ac:0d:f0:79:d3:e7:e7:45:84:62:
         0b:5d:78:18:d1:b5:57:12:85:3f:d0:47:a8:75:91:6a:d3:50:
         1a:a8:e1:b9:83:fd:e1:64:b0:27:3e:8d:87:8f:a6:41:56:ec:
         0a:cf:77:9e:f9:a8:eb:d2:b1:b5:ac:2e:27:72:26:be:ef:f3:
         7b:36:b3:4f:1e:0b:e0:35:e3:8e:d2:8a:01:27:bb:54:c5:a7:
         cb:70:a7:86:ef:98:d9:96:15:c0:96:d8:91:9e:3f:49:c9:46:
         a2:b8:60:be:1d:cc:bc:72:a7:8e:9e:af:47:86:46:de:e8:ee:
         b3:11:86:eb:35:ec:2c:d9:c4:cf:02:b2:ac:80:a4:4b:11:5b:
         ec:0c:60:ec:cf:41:25:ab:06:54:d8:72:96:6c:00:70:dd:e0:
         9f:35:1f:53:d6:68:3f:8a:eb:1a:da:f0:53:c5:81:c4:c6:51:
         95:24:b2:18:b2:e9:11:9f:82:db:91:19:37:19:e2:d4:b1:f6:
         23:a5:10:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8J/1sBFdMfkInbnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDkwMjA3MzIxNFoXDTI2MTIwMTA4MzIxNFowLzEtMCsGA1UEAxMk
YjkwMjY5OWMtMWJhMC00Mzk3LTgzMDQtM2FkODExNTAyY2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmL3h+2hyeWc9TFbMos6AlpzwrQ2FFsm8bIo
pHtCLVQIKV8wCJ5SFTwKhnK+CQevnZZp1BYvhartSMYovrcp7mRlvQ62Jzn/2j8M
j2IfP98Cf/tMmcufSUS2KL52QzvgAt/47PK2+l1vhcRXaQMkqclhzu3TyGqNEucU
OXibkrH/jz6r92/ylDA5WjZK1DNhgoo+mFW4mfOb/T7ficqRTyPfxDqR6/dTGm38
2f6/Dwdp5+68iU3yz6INSmRecx1r44YffAxgOCLMqo/fTwTgwHC7PjCuKHDCM/mW
fFcSr8nY50QBVDA97+LhJtCKs9+NA2X/O/svZziWnPgC9nTfZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzLmv7QUtf/UUkN26TMPO/S275zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOTNlNDBkYjAtMjI4YS0z
NTkzLWE5NGItOWZiZDM3YTdkNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvu2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlmIm4vH/fji+wQpZ7DitJWlucAzbE8NejcqFBg3u6IwkWfttdDN7ht
GDKXf2YzHNTceVlky7uzoqUEnOlYrA3wedPn50WEYgtdeBjRtVcShT/QR6h1kWrT
UBqo4bmD/eFksCc+jYePpkFW7ArPd575qOvSsbWsLidyJr7v83s2s08eC+A1447S
igEnu1TFp8twp4bvmNmWFcCW2JGeP0nJRqK4YL4dzLxyp46er0eGRt7o7rMRhus1
7CzZxM8CsqyApEsRW+wMYOzPQSWrBlTYcpZsAHDd4J81H1PWaD+K6xra8FPFgcTG
UZUkshiy6RGfgtuRGTcZ4tSx9iOlEL4=
-----END CERTIFICATE-----
Generated at Wed Sep 16 18:02:53 2026 by rpki-client