Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/134596be-5b15-3d65-8047-f25a10d7e5e1.roa
File:                     134596be-5b15-3d65-8047-f25a10d7e5e1.roa (raw, json)
Hash identifier:          /7B8t5ec+3A7cvYmXBQhwQks6uQGKAavO2w+bfQTo7I=
Subject key identifier:   D7:BA:A2:02:56:32:56:F4:80:9E:C3:72:D1:9C:5F:4F:C5:A6:A7:CD
Certificate issuer:       /CN=b9c7c552-f63b-4d16-a564-9e63d1c2343f
Certificate serial:       010D0C9F4328584F0D85E7737A1068DC29182C00
Authority key identifier: AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/134596be-5b15-3d65-8047-f25a10d7e5e1.roa
Signing time:             Thu 03 Sep 2026 13:50:46 +0000
ROA not before:           Thu 03 Sep 2026 13:50:46 +0000
ROA not after:            Wed 02 Dec 2026 14:50:46 +0000
asID:                     0
IP address blocks:        204.79.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:85:e7:73:7a:10:68:dc:29:18:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c7c552-f63b-4d16-a564-9e63d1c2343f
        Validity
            Not Before: Sep  3 13:50:46 2026 GMT
            Not After : Dec  2 14:50:46 2026 GMT
        Subject: CN=5a7368ec-d2bb-4588-8cfa-1fb95e8e4eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:da:cd:b8:91:ee:29:72:c8:bc:dd:8a:b8:
                    e1:2a:cd:00:55:38:8f:eb:cd:95:e5:0e:f2:f3:c7:
                    9c:29:cf:0f:39:fe:ff:4f:b9:e2:43:f8:f6:26:b3:
                    8a:76:e1:2c:f0:b6:cb:5f:6d:05:f9:3b:d1:ec:30:
                    51:c7:5b:e2:92:5c:91:6a:ff:49:82:da:9f:d6:cf:
                    ae:18:7a:f2:ae:2e:c8:dc:5a:b7:c9:e0:c8:b6:44:
                    f4:30:b7:89:f4:0c:46:36:da:d1:a2:16:42:74:c4:
                    a5:c5:0f:a4:24:41:fb:ed:26:bf:e6:73:27:63:b1:
                    df:23:93:18:4d:73:ab:d5:c7:93:02:14:c0:6d:09:
                    1b:df:cb:d5:09:9c:45:1d:93:98:af:6c:be:6d:8c:
                    1e:99:fe:b7:8d:83:e9:4d:c3:06:06:64:78:95:f7:
                    d3:b0:61:8f:66:b8:1b:1c:0f:5b:8e:59:c3:6e:b4:
                    bc:0d:43:b4:95:79:2a:8d:b5:91:93:f9:40:b8:ef:
                    6f:60:99:9a:d8:6d:75:35:52:cb:6f:4e:5d:bf:eb:
                    5e:c7:22:3f:26:b9:b1:3c:de:4d:b9:9d:90:6e:95:
                    f2:7a:35:02:c0:7b:9e:d3:52:bb:75:79:0e:b0:5f:
                    36:dd:87:3a:0b:78:7a:e2:37:d5:4e:8e:c4:fd:01:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:A2:02:56:32:56:F4:80:9E:C3:72:D1:9C:5F:4F:C5:A6:A7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/134596be-5b15-3d65-8047-f25a10d7e5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.crl

            X509v3 Authority Key Identifier:
                keyid:AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fb:1d:10:0d:ea:4f:c0:8b:41:a6:38:f5:8a:c2:f3:cf:98:
         e1:a3:9d:39:65:cd:1e:c5:25:a9:8b:df:2d:a7:a8:b1:2f:c1:
         d5:2d:68:3e:a9:d7:9e:b7:bd:3b:e6:31:b7:50:70:6e:aa:56:
         45:5d:72:fe:34:d1:bc:76:e7:20:96:d2:5d:b7:d6:39:b9:c3:
         2b:2e:6f:f6:8a:f8:a8:5d:76:a9:72:30:67:a0:f9:1b:6d:09:
         2c:c9:92:2f:ab:3f:7c:ea:cf:19:ab:f9:40:0f:7e:c8:1b:a0:
         34:41:7e:5f:d5:bb:57:51:76:69:6e:cf:b8:65:d4:a4:1c:d3:
         61:a0:df:68:a7:01:14:c6:63:4a:e5:35:f1:d4:f7:77:90:12:
         01:8e:73:74:ae:eb:99:ef:42:b5:70:48:b7:fd:a7:68:6e:08:
         14:23:7e:d5:df:c5:5d:b5:92:33:e3:97:b2:27:c7:a7:f4:2c:
         91:55:e7:9d:7b:57:42:23:e5:24:15:59:30:b5:70:ed:b1:bf:
         f3:c4:9e:a6:f4:02:10:6f:86:07:6c:49:a2:5c:45:36:6d:99:
         9e:8a:d0:4a:8e:56:23:6e:c7:e1:eb:91:90:9c:95:25:1e:78:
         77:93:b7:7a:42:d1:33:5c:c0:09:c6:d9:05:5d:84:31:bd:e8:
         3f:f4:0c:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NhedzehBo3CkYLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjljN2M1NTItZjYzYi00ZDE2LWE1NjQtOWU2M2QxYzIz
NDNmMB4XDTI2MDkwMzEzNTA0NloXDTI2MTIwMjE0NTA0NlowLzEtMCsGA1UEAxMk
NWE3MzY4ZWMtZDJiYi00NTg4LThjZmEtMWZiOTVlOGU0ZWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzzazbiR7ilyyLzdirjhKs0AVTiP682V5Q7y
88ecKc8POf7/T7niQ/j2JrOKduEs8LbLX20F+TvR7DBRx1viklyRav9Jgtqf1s+u
GHryri7I3Fq3yeDItkT0MLeJ9AxGNtrRohZCdMSlxQ+kJEH77Sa/5nMnY7HfI5MY
TXOr1ceTAhTAbQkb38vVCZxFHZOYr2y+bYwemf63jYPpTcMGBmR4lffTsGGPZrgb
HA9bjlnDbrS8DUO0lXkqjbWRk/lAuO9vYJma2G11NVLLb05dv+texyI/JrmxPN5N
uZ2QbpXyejUCwHue01K7dXkOsF823Yc6C3h64jfVTo7E/QG3lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNe6ogJWMlb0gJ7DctGcX0/FpqfNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iOWM3
YzU1Mi1mNjNiLTRkMTYtYTU2NC05ZTYzZDFjMjM0M2YvMTM0NTk2YmUtNWIxNS0z
ZDY1LTgwNDctZjI1YTEwZDdlNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYjljN2M1NTItZjYzYi00ZDE2LWE1
NjQtOWU2M2QxYzIzNDNmL2I5YzdjNTUyLWY2M2ItNGQxNi1hNTY0LTllNjNkMWMy
MzQzZi5jcmwwHwYDVR0jBBgwFoAUrDc7OlXrctk7qb2RMxc3c3i9l0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9iOWM3YzU1Mi1mNjNiLTRkMTYtYTU2NC05ZTYz
ZDFjMjM0M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE/HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf7HRAN6k/Ai0GmOPWKwvPPmOGjnTllzR7FJamL3y2nqLEvwdUtaD6p
1563vTvmMbdQcG6qVkVdcv400bx25yCW0l231jm5wysub/aK+KhddqlyMGeg+Rtt
CSzJki+rP3zqzxmr+UAPfsgboDRBfl/Vu1dRdmluz7hl1KQc02Gg32inARTGY0rl
NfHU93eQEgGOc3Su65nvQrVwSLf9p2huCBQjftXfxV21kjPjl7Inx6f0LJFV5517
V0Ij5SQVWTC1cO2xv/PEnqb0AhBvhgdsSaJcRTZtmZ6K0EqOViNux+HrkZCclSUe
eHeTt3pC0TNcwAnG2QVdhDG96D/0DFE=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:02:34 2026 by rpki-client