Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0302ec21-13aa-3664-9c8a-05d28b68c591.roa
File:                     0302ec21-13aa-3664-9c8a-05d28b68c591.roa (raw, json)
Hash identifier:          Kk0HlYoI6ZHnAOvmUVLgAXg3GDO6n7EIma6TLRJ6cDI=
Subject key identifier:   D0:1D:20:EB:58:A8:55:19:6B:83:55:6A:32:78:FF:0A:0C:B7:61:74
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA7912F909512E799F9086480
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0302ec21-13aa-3664-9c8a-05d28b68c591.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.162.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:2f:90:95:12:e7:99:f9:08:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d2bdff3f-dc37-4436-97f7-cc1820b992a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:01:8b:3b:20:14:67:41:33:ec:60:a4:77:
                    21:6c:b7:35:ed:ae:67:ff:f9:02:84:32:25:54:3e:
                    53:f4:4b:ae:e3:5d:f8:0d:05:49:29:87:02:b5:ee:
                    88:d0:e4:85:8c:31:86:04:89:ac:a0:92:45:2c:2c:
                    34:06:6e:3a:c7:40:94:80:c2:e4:2b:d2:e6:c4:74:
                    b5:38:86:7b:4c:35:c5:26:c8:58:fd:6e:0d:60:9c:
                    5e:cd:69:8e:34:2f:33:df:cd:a3:e1:a0:2c:d0:af:
                    36:78:b6:7e:3f:cd:68:78:2b:94:40:dc:cd:af:dd:
                    a6:cc:16:80:45:00:e5:f8:88:62:43:2e:25:f8:b1:
                    b5:6f:d2:e3:fe:42:38:37:9b:6c:47:0b:f7:9a:e9:
                    ef:98:cd:8e:bc:c7:55:73:c4:cf:92:0b:82:17:90:
                    d8:e1:ed:84:e2:3b:cc:32:42:c0:f3:bc:df:97:e4:
                    e7:5d:e5:59:b8:33:a5:af:48:60:e4:d1:20:d5:3b:
                    ce:c7:9c:3c:19:de:c2:42:29:f5:5b:78:e2:ca:9d:
                    7e:21:9f:a8:a2:df:64:d6:ef:02:ad:ee:3f:64:ee:
                    38:b5:32:c5:a6:4f:05:d1:9e:b4:fc:1d:66:5a:bb:
                    46:3a:07:e0:26:f4:f1:2a:07:ea:30:6c:2b:54:c1:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:20:EB:58:A8:55:19:6B:83:55:6A:32:78:FF:0A:0C:B7:61:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0302ec21-13aa-3664-9c8a-05d28b68c591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:bd:46:21:37:57:bb:34:67:7a:26:dd:a3:e6:0d:84:ce:
         53:65:ea:05:5c:ad:f0:19:ee:24:6e:14:26:0b:2d:fa:54:c0:
         32:d4:6b:ed:cb:33:0a:19:6e:50:47:a5:01:ad:85:1d:59:3b:
         dc:48:de:38:71:af:77:fd:f8:4b:c8:64:88:5a:fe:08:78:0b:
         e0:af:e8:4a:14:27:d9:00:21:a5:a8:bc:99:a2:9d:4a:5e:41:
         94:4a:e8:ca:96:c6:69:8e:c9:a7:68:fd:e8:fc:d9:44:77:2b:
         3a:b8:71:67:36:b2:3b:54:6d:e2:67:3a:d2:db:87:f6:5b:1b:
         7b:d7:00:4b:16:3d:ec:b9:b0:d1:c8:6f:d9:c3:94:45:fd:d9:
         80:a3:ab:46:4c:6c:cb:84:c4:f9:4d:ba:10:61:c1:9f:03:4c:
         42:be:f8:30:51:88:3d:3a:eb:cb:19:e9:8e:6c:5d:52:d4:fb:
         17:88:f1:f5:93:0e:e6:ec:c5:a9:12:73:c6:0e:22:cb:84:ca:
         46:24:e1:97:24:bf:9c:53:78:f6:69:7a:46:96:3d:44:a4:21:
         74:97:d3:d3:d3:df:21:6d:a4:df:df:15:a5:fc:92:72:d1:d9:
         14:f3:af:9b:cc:95:f3:52:6d:37:f4:6a:ee:81:da:b4:41:d4:
         ce:f1:b6:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkS+QlRLnmfkIZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDJiZGZmM2YtZGMzNy00NDM2LTk3ZjctY2MxODIwYjk5MmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ8BizsgFGdBM+xgpHchbLc17a5n//kChDIl
VD5T9Euu4134DQVJKYcCte6I0OSFjDGGBImsoJJFLCw0Bm46x0CUgMLkK9LmxHS1
OIZ7TDXFJshY/W4NYJxezWmONC8z382j4aAs0K82eLZ+P81oeCuUQNzNr92mzBaA
RQDl+IhiQy4l+LG1b9Lj/kI4N5tsRwv3munvmM2OvMdVc8TPkguCF5DY4e2E4jvM
MkLA87zfl+TnXeVZuDOlr0hg5NEg1TvOx5w8Gd7CQin1W3jiyp1+IZ+oot9k1u8C
re4/ZO44tTLFpk8F0Z60/B1mWrtGOgfgJvTxKgfqMGwrVME4NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAdIOtYqFUZa4NVajJ4/woMt2F0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMDMwMmVjMjEtMTNhYS0z
NjY0LTljOGEtMDVkMjhiNjhjNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6JsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1ivUYhN1e7NGd6Jt2j5g2EzlNl6gVcrfAZ7iRuFCYLLfpUwDLUa+3L
MwoZblBHpQGthR1ZO9xI3jhxr3f9+EvIZIha/gh4C+Cv6EoUJ9kAIaWovJminUpe
QZRK6MqWxmmOyado/ej82UR3Kzq4cWc2sjtUbeJnOtLbh/ZbG3vXAEsWPey5sNHI
b9nDlEX92YCjq0ZMbMuExPlNuhBhwZ8DTEK++DBRiD0668sZ6Y5sXVLU+xeI8fWT
DubsxakSc8YOIsuEykYk4Zckv5xTePZpekaWPUSkIXSX09PT3yFtpN/fFaX8knLR
2RTzr5vMlfNSbTf0au6B2rRB1M7xtps=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:18 2026 by rpki-client