Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa
File:                     0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa (raw, json)
Hash identifier:          s8plwPqjUtZWibwmZOV3dZV4PqpU5MtuXvu64KJVbM8=
Subject key identifier:   12:FB:6F:8F:AA:10:8A:AA:95:97:D0:23:45:E8:67:13:D8:AA:71:78
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584E577F40D82875FB35CD81A500
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     19886
IP address blocks:        171.162.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:40:d8:28:75:fb:35:cd:81:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=cb3fef35-882d-4d00-8f74-d82e75f6bb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:dd:43:89:9f:f0:f6:f2:f7:37:c3:21:c1:
                    e2:6a:69:6a:c9:02:6c:58:d6:0a:0b:55:15:96:fc:
                    cc:c8:86:bc:e5:98:10:fb:92:e9:f2:75:bc:8f:18:
                    ed:66:d2:e6:0b:0f:53:a8:7a:35:bc:7a:72:d5:72:
                    0d:bd:ec:8b:96:ed:6c:3a:a6:bf:de:a0:61:28:c6:
                    21:05:97:2a:22:55:e3:bf:a4:22:04:12:71:8c:93:
                    a0:f4:5a:bc:59:d4:d9:4e:36:95:81:aa:42:e8:86:
                    bf:24:0d:83:27:ac:3c:a8:02:c9:c6:e9:5d:3e:87:
                    d0:84:d0:ab:04:78:af:a0:3c:7f:78:20:0a:23:c4:
                    c7:3e:81:c5:6f:cf:78:87:ad:c7:cb:c9:eb:fa:d5:
                    cf:81:e3:ef:51:d0:d2:89:e4:c3:d6:05:d7:ee:04:
                    08:48:98:d7:46:e3:7b:55:6e:a7:bd:2a:d6:8c:94:
                    82:65:bb:f9:77:53:dc:e4:89:68:70:ea:85:3d:10:
                    ca:eb:b7:b1:42:85:d3:48:4b:89:4d:f8:0b:f0:da:
                    49:75:24:d8:ef:3d:79:55:76:50:b8:f9:65:ba:15:
                    f4:1d:36:f2:c8:6f:7c:ca:88:1b:ac:0e:5d:2e:aa:
                    5e:b1:da:d8:3c:8c:9d:04:6f:f8:c5:88:75:f5:6e:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:6F:8F:AA:10:8A:AA:95:97:D0:23:45:E8:67:13:D8:AA:71:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:0e:db:91:6c:fd:ec:e5:75:b2:b5:a5:fd:57:4e:40:a0:
         fd:a3:fd:bc:14:33:ab:24:9b:eb:c7:4a:8f:f0:54:e7:7b:58:
         05:2a:74:b4:5e:85:57:d9:e4:23:8d:12:9f:db:38:03:12:57:
         7f:c2:d9:79:f9:04:b7:e1:4b:d9:f5:af:1b:03:21:7a:92:45:
         e9:17:08:89:bc:36:5f:84:09:0e:7b:d9:6b:19:b1:b5:0d:77:
         8d:05:49:31:4b:29:5a:04:d1:62:b4:99:e4:7e:b9:17:3b:7a:
         84:a3:6b:5b:5b:90:76:4d:21:0f:01:01:9b:0c:95:29:ce:05:
         8a:9e:9d:61:80:fb:eb:c7:d1:f0:b1:18:15:3d:f6:bd:0c:2e:
         85:64:58:77:d5:46:d3:c1:36:80:79:17:bb:96:6b:d5:0a:1e:
         e8:f2:c6:8b:92:b7:0c:d4:76:7f:af:c9:41:f9:73:d7:96:f7:
         d0:d7:8f:0b:14:cf:ad:6f:2e:81:5c:70:28:f0:33:03:ee:3c:
         93:c0:bc:d3:8d:d4:cf:ec:b4:71:e2:49:79:e6:a5:7f:4b:b7:
         37:c6:76:75:9e:23:8a:df:53:05:b9:1c:70:ac:1e:7b:3d:02:
         ef:83:1a:03:fc:bb:9d:54:a5:a8:f8:86:27:77:45:1a:15:77:
         82:bd:67:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0DYKHX7Nc2BpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
Y2IzZmVmMzUtODgyZC00ZDAwLThmNzQtZDgyZTc1ZjZiYjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfTdQ4mf8Pby9zfDIcHiamlqyQJsWNYKC1UV
lvzMyIa85ZgQ+5Lp8nW8jxjtZtLmCw9TqHo1vHpy1XINveyLlu1sOqa/3qBhKMYh
BZcqIlXjv6QiBBJxjJOg9Fq8WdTZTjaVgapC6Ia/JA2DJ6w8qALJxuldPofQhNCr
BHivoDx/eCAKI8THPoHFb894h63Hy8nr+tXPgePvUdDSieTD1gXX7gQISJjXRuN7
VW6nvSrWjJSCZbv5d1Pc5IlocOqFPRDK67exQoXTSEuJTfgL8NpJdSTY7z15VXZQ
uPlluhX0HTbyyG98yogbrA5dLqpesdrYPIydBG/4xYh19W4CQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL7b4+qEIqqlZfQI0XoZxPYqnF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGFjNDJlMTMtMWZiZi0z
M2IxLTkyNGYtMjRmOWU2MWJhMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF43DtuRbP3s5XWytaX9V05AoP2j/bwUM6skm+vHSo/wVOd7WAUqdLRe
hVfZ5CONEp/bOAMSV3/C2Xn5BLfhS9n1rxsDIXqSRekXCIm8Nl+ECQ572WsZsbUN
d40FSTFLKVoE0WK0meR+uRc7eoSja1tbkHZNIQ8BAZsMlSnOBYqenWGA++vH0fCx
GBU99r0MLoVkWHfVRtPBNoB5F7uWa9UKHujyxouStwzUdn+vyUH5c9eW99DXjwsU
z61vLoFccCjwMwPuPJPAvNON1M/stHHiSXnmpX9LtzfGdnWeI4rfUwW5HHCsHns9
Au+DGgP8u51Upaj4hid3RRoVd4K9ZwY=
-----END CERTIFICATE-----
Generated at Thu Jul 16 20:51:05 2026 by rpki-client