Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1bba7d78-5de2-3a8d-9478-0085e214f039.roa
File:                     1bba7d78-5de2-3a8d-9478-0085e214f039.roa (raw, json)
Hash identifier:          ij2rJRHw8HaTojRmzMz+5N1+/ml+9ajNK1N6JN88jFo=
Subject key identifier:   A0:3A:EA:90:06:44:AC:9F:E2:B8:18:7D:48:96:5C:E6:9E:A2:2A:37
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA79098991F4933016BFA7F40
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1bba7d78-5de2-3a8d-9478-0085e214f039.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.158.128.0/20 maxlen: 20
                          171.158.128.0/24 maxlen: 24
                          171.158.129.0/24 maxlen: 24
                          171.158.130.0/24 maxlen: 24
                          171.158.131.0/24 maxlen: 24
                          171.158.132.0/24 maxlen: 24
                          171.158.133.0/24 maxlen: 24
                          171.158.134.0/24 maxlen: 24
                          171.158.135.0/24 maxlen: 24
                          171.158.136.0/24 maxlen: 24
                          171.158.137.0/24 maxlen: 24
                          171.158.138.0/24 maxlen: 24
                          171.158.139.0/24 maxlen: 24
                          171.158.140.0/24 maxlen: 24
                          171.158.141.0/24 maxlen: 24
                          171.158.142.0/24 maxlen: 24
                          171.158.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:98:99:1f:49:33:01:6b:fa:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=207c4ee4-5b0f-4725-88f8-bacc229bc57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:bd:b4:63:d4:68:34:8e:da:24:67:6d:62:
                    76:fb:30:22:75:c6:d1:cf:cc:43:d3:5b:9d:87:cb:
                    30:e4:4d:dd:bd:84:a6:50:18:32:13:c3:d7:42:c3:
                    66:6b:4f:96:cf:14:01:45:7a:30:ba:4d:87:14:9d:
                    c2:27:4d:1a:e6:8b:33:51:d6:f0:3a:3d:d0:2f:77:
                    8b:26:aa:d9:10:b5:0b:32:75:3f:06:2f:1b:ac:2c:
                    23:74:9d:e8:92:2b:8e:df:d5:ec:27:91:c5:2f:f0:
                    7c:1b:20:81:89:87:f2:f4:9d:4a:c1:2f:b6:d6:b2:
                    5b:ad:bb:b0:c5:d8:4b:11:ad:6d:ab:06:8b:42:92:
                    26:76:2b:04:a4:31:ca:5a:27:3d:b9:82:ef:6f:92:
                    88:4c:8a:3a:25:1c:d0:38:0b:59:b0:15:01:db:27:
                    73:3d:9b:ae:5d:cd:1c:68:93:12:a1:22:63:f5:97:
                    36:91:6d:5a:39:b3:d0:95:d6:38:c2:2b:5b:e3:02:
                    cb:da:68:65:6e:88:3a:ed:f9:67:9a:e4:81:9d:72:
                    25:bb:67:d8:a9:4f:ed:32:79:73:17:b9:99:af:e3:
                    38:ad:b1:53:f4:db:bb:79:01:93:1e:c9:9d:e9:ad:
                    e3:c1:20:83:66:33:1d:55:0f:66:7d:ee:f5:4e:ab:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:EA:90:06:44:AC:9F:E2:B8:18:7D:48:96:5C:E6:9E:A2:2A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1bba7d78-5de2-3a8d-9478-0085e214f039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.158.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:b6:16:20:3c:9a:1c:28:2c:a7:29:90:f1:85:36:68:1d:
         a8:4d:48:18:3f:1a:27:0f:b3:f5:c7:a7:60:97:5c:66:f9:01:
         76:1d:d9:eb:eb:64:28:09:11:a4:3a:2b:63:f9:2e:de:82:8b:
         81:db:4d:cd:ce:b5:b3:71:39:6b:b2:22:ca:26:7c:79:1a:42:
         2a:44:5c:1d:6f:51:0b:b3:98:ca:ca:92:00:84:d7:25:1a:5e:
         5e:83:97:b6:ad:ac:fe:a7:b1:2e:c9:f5:c5:bf:07:a3:f3:0c:
         6a:0d:24:a7:e4:08:f4:7c:c9:24:01:3c:cb:a0:14:20:ba:fc:
         42:11:d2:7a:56:3e:ff:3f:48:63:0f:29:9c:5b:9c:f9:82:59:
         c1:39:61:70:df:9a:e5:7a:6d:4c:75:fb:e9:db:b5:20:bc:47:
         91:38:8f:03:e9:17:a1:f5:77:6f:3c:96:58:df:f1:a7:c6:24:
         a6:2e:45:71:c2:2f:f2:26:d5:9e:d4:49:ca:98:9b:e6:4e:b1:
         84:f4:05:83:9f:c6:6a:db:ad:f5:46:e8:93:b8:07:c8:ff:ff:
         ef:10:5e:86:33:f6:24:53:93:9d:f4:4f:0d:9b:34:83:20:5a:
         71:67:f8:d0:34:c3:3b:1f:0f:0d:00:25:f0:8e:08:9a:08:46:
         a0:04:ab:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkJiZH0kzAWv6f0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjA3YzRlZTQtNWIwZi00NzI1LTg4ZjgtYmFjYzIyOWJjNTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfO9tGPUaDSO2iRnbWJ2+zAidcbRz8xD01ud
h8sw5E3dvYSmUBgyE8PXQsNma0+WzxQBRXowuk2HFJ3CJ00a5oszUdbwOj3QL3eL
JqrZELULMnU/Bi8brCwjdJ3okiuO39XsJ5HFL/B8GyCBiYfy9J1KwS+21rJbrbuw
xdhLEa1tqwaLQpImdisEpDHKWic9uYLvb5KITIo6JRzQOAtZsBUB2ydzPZuuXc0c
aJMSoSJj9Zc2kW1aObPQldY4witb4wLL2mhlbog67flnmuSBnXIlu2fYqU/tMnlz
F7mZr+M4rbFT9Nu7eQGTHsmd6a3jwSCDZjMdVQ9mfe71TqtgOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKA66pAGRKyf4rgYfUiWXOaeoio3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMWJiYTdkNzgtNWRlMi0z
YThkLTk0NzgtMDA4NWUyMTRmMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEq56AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqCthYgPJocKCynKZDxhTZoHahNSBg/GicPs/XHp2CXXGb5AXYd2evr
ZCgJEaQ6K2P5Lt6Ci4HbTc3OtbNxOWuyIsomfHkaQipEXB1vUQuzmMrKkgCE1yUa
Xl6Dl7atrP6nsS7J9cW/B6PzDGoNJKfkCPR8ySQBPMugFCC6/EIR0npWPv8/SGMP
KZxbnPmCWcE5YXDfmuV6bUx1++nbtSC8R5E4jwPpF6H1d288lljf8afGJKYuRXHC
L/Im1Z7UScqYm+ZOsYT0BYOfxmrbrfVG6JO4B8j//+8QXoYz9iRTk530Tw2bNIMg
WnFn+NA0wzsfDw0AJfCOCJoIRqAEq3c=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:05 2026 by rpki-client