Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
File:                     1fc2f9c1-18b2-3364-9d9a-02587108c597.roa (raw, json)
Hash identifier:          IIDTMa6rPQXNHSXsnppZ40iTVUiz9QNGs4pikp9uYC8=
Subject key identifier:   09:34:F2:F2:2B:AF:8F:97:84:E0:39:A2:FA:12:F6:2C:72:8A:F7:68
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F4328584EA788D9D68A35E141A4791680
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62802
IP address blocks:        170.4.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:d6:8a:35:e1:41:a4:79:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7cb3a106-f4e0-4a3a-8e4a-e6e193d990bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:c7:b2:05:f4:22:e0:91:2e:07:4e:6f:ef:
                    92:a9:ac:87:18:16:01:02:e4:24:b5:39:dc:db:91:
                    33:54:94:09:0f:36:80:a1:07:59:59:fb:ef:9f:bb:
                    c4:90:d1:9a:31:b1:af:7a:6e:67:9f:27:c4:82:41:
                    04:19:4d:97:ca:27:1f:14:b4:02:f9:7c:2e:77:92:
                    e4:a9:f9:95:2c:43:2b:eb:1b:8e:18:d0:1e:e9:54:
                    6f:5e:57:f8:89:7d:1c:e4:49:be:ee:57:eb:2c:b7:
                    5b:64:d4:d5:f8:e4:ea:bd:a2:73:c2:8d:ad:0c:7b:
                    d4:2a:65:22:a1:60:6c:d4:be:b0:d0:49:b2:02:e1:
                    a1:da:1a:73:70:5e:c0:83:4b:a7:e2:4c:86:cf:07:
                    1c:f6:3e:33:5b:2b:7f:78:df:4a:f8:1a:67:2f:9c:
                    ab:63:bb:e1:63:83:a6:3e:e2:b0:a6:2d:c7:91:d2:
                    fa:9a:6b:ce:59:8a:6d:31:f8:b6:4f:09:10:4d:d7:
                    e5:8a:ac:93:ee:44:83:d4:a3:88:2e:7a:79:a4:c7:
                    22:fb:2b:d9:bb:92:d9:aa:28:5d:d2:9f:de:bc:85:
                    7e:aa:7a:ae:59:34:e8:5d:fd:13:7f:7a:20:e2:35:
                    5f:05:2f:a2:9e:30:41:84:ab:b3:41:41:10:85:42:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:F2:F2:2B:AF:8F:97:84:E0:39:A2:FA:12:F6:2C:72:8A:F7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:b0:42:7c:d0:06:69:da:8b:c4:76:83:1b:75:06:f2:f6:
         0f:ed:47:81:b7:51:0f:0b:72:08:39:f8:bd:1e:21:b8:f1:d7:
         ae:0d:1c:36:d8:7f:96:a9:74:c9:98:bd:1b:db:0c:41:ab:00:
         a6:81:f5:88:fd:62:4f:89:fc:89:ce:90:14:90:20:fd:b6:24:
         63:db:56:f0:a4:77:a9:95:72:4f:0e:8a:a8:c9:c1:6b:e8:c9:
         38:7b:ff:c0:d4:ab:0e:41:9c:90:71:73:23:08:65:28:81:67:
         52:28:da:69:2d:e4:89:62:86:ea:2f:27:98:ef:77:b3:ff:5d:
         07:ad:4a:56:81:11:9d:69:59:bd:07:c3:2c:37:09:33:4c:c6:
         dc:30:72:30:ba:25:19:a7:51:23:ae:06:6f:7b:82:e1:a4:69:
         04:a1:37:06:42:94:3b:ca:06:bd:ed:66:0d:fd:c0:1e:ab:fc:
         71:02:18:6a:86:db:48:5e:91:36:fb:17:2e:4a:49:26:86:64:
         a4:d5:70:d1:9e:71:4e:c9:55:fe:57:60:f3:f4:e5:f3:a9:bf:
         45:05:a2:d1:d7:2b:39:ee:e0:d4:31:6a:1c:14:4b:44:8b:7b:
         d9:14:46:44:ae:5d:b2:38:65:10:3d:98:8d:9b:a5:5e:84:55:
         2a:bd:d3:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niNnWijXhQaR5FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh
MDE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2NiM2ExMDYtZjRlMC00YTNhLThlNGEtZTZlMTkzZDk5MGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkfHsgX0IuCRLgdOb++SqayHGBYBAuQktTnc
25EzVJQJDzaAoQdZWfvvn7vEkNGaMbGvem5nnyfEgkEEGU2XyicfFLQC+Xwud5Lk
qfmVLEMr6xuOGNAe6VRvXlf4iX0c5Em+7lfrLLdbZNTV+OTqvaJzwo2tDHvUKmUi
oWBs1L6w0EmyAuGh2hpzcF7Ag0un4kyGzwcc9j4zWyt/eN9K+BpnL5yrY7vhY4Om
PuKwpi3HkdL6mmvOWYptMfi2TwkQTdfliqyT7kSD1KOILnp5pMci+yvZu5LZqihd
0p/evIV+qnquWTToXf0Tf3og4jVfBS+injBBhKuzQUEQhUKAYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAk08vIrr4+XhOA5ovoS9ixyivdoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh
YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvMWZjMmY5YzEtMThiMi0z
MzY0LTlkOWEtMDI1ODcxMDhjNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0
MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy
YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4
ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACt2sEJ80AZp2ovEdoMbdQby9g/tR4G3UQ8Lcgg5+L0eIbjx164NHDbY
f5apdMmYvRvbDEGrAKaB9Yj9Yk+J/InOkBSQIP22JGPbVvCkd6mVck8OiqjJwWvo
yTh7/8DUqw5BnJBxcyMIZSiBZ1Io2mkt5IlihuovJ5jvd7P/XQetSlaBEZ1pWb0H
wyw3CTNMxtwwcjC6JRmnUSOuBm97guGkaQShNwZClDvKBr3tZg39wB6r/HECGGqG
20hekTb7Fy5KSSaGZKTVcNGecU7JVf5XYPP05fOpv0UFotHXKznu4NQxahwUS0SL
e9kURkSuXbI4ZRA9mI2bpV6EVSq905w=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:03 2026 by rpki-client