Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/97e43bd6-612d-368e-8b6a-abbd0734d6f6.roa
File:                     97e43bd6-612d-368e-8b6a-abbd0734d6f6.roa (raw, json)
Hash identifier:          ED49Rd3TsKDC67sMa+ReJ1xtv1mU9fk3wpgOkZcehKY=
Subject key identifier:   B7:5B:5F:25:0A:D2:56:58:EA:64:C5:63:52:AB:07:9F:2B:0C:C5:C2
Certificate issuer:       /CN=44a561a3-0ac9-4535-922f-85de35ad8de7
Certificate serial:       010D0C9F4328584F0D6CE39E8B0559519D8A45E0
Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/97e43bd6-612d-368e-8b6a-abbd0734d6f6.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        216.238.136.0/24 maxlen: 24
                          216.238.137.0/24 maxlen: 24
                          216.238.142.0/24 maxlen: 24
                          216.238.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e3:9e:8b:05:59:51:9d:8a:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=a8e8210d-bae5-4fb0-b5b4-ef0d92156423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:bd:81:f2:92:bc:a4:ba:3f:e3:56:d9:4c:
                    fd:e5:90:c6:aa:67:79:8b:a4:2d:54:89:94:b8:d3:
                    29:6a:ab:23:8c:43:f5:d6:27:1c:b7:aa:75:a4:20:
                    bf:b9:f2:cb:0f:ab:68:47:2a:b0:8f:7a:5f:00:97:
                    f6:39:ad:ec:d9:5a:4d:25:e3:16:36:8f:96:8b:de:
                    ef:9f:45:a1:26:91:ad:77:b2:6c:19:2c:d7:0d:c7:
                    06:b1:c3:81:eb:f8:1c:bd:b5:81:1a:d6:0a:70:9f:
                    44:08:27:96:5a:7c:78:76:f9:8b:40:2b:0f:ed:f3:
                    2e:0a:34:fe:aa:72:55:97:5d:24:f5:65:97:b3:8c:
                    81:43:a7:7e:fe:67:21:47:61:3c:ef:a1:b9:9d:ce:
                    23:55:c5:c2:ff:f4:83:69:79:b2:40:ad:f0:60:05:
                    b0:d7:e5:b6:f3:3d:ad:ed:69:92:fd:b8:7b:7d:1b:
                    6f:3e:74:66:a6:7e:75:fe:eb:7b:27:8b:84:02:ae:
                    e9:dc:d6:55:90:71:01:d5:be:f9:57:6a:ce:75:a9:
                    42:a7:4e:6d:7e:b2:be:1d:58:bc:0c:77:6b:2c:85:
                    43:2f:d0:96:37:9a:a1:20:98:ca:9a:2e:95:83:90:
                    6f:b3:3a:02:6a:30:17:da:0e:67:a7:ad:25:12:94:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:5F:25:0A:D2:56:58:EA:64:C5:63:52:AB:07:9F:2B:0C:C5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/97e43bd6-612d-368e-8b6a-abbd0734d6f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.136.0/23
                  216.238.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:66:74:70:a4:0d:86:16:49:6d:97:57:98:93:15:5d:2e:
         96:c6:64:01:52:9a:b7:3b:7f:37:51:a3:e1:a9:b4:e9:fc:04:
         c2:ef:d3:97:22:8f:46:85:10:7d:f0:7b:d2:88:6a:52:a5:74:
         74:79:12:88:12:f8:ad:b7:a3:d1:2c:05:e2:2d:13:3b:50:d0:
         bc:ca:e1:b2:b2:e1:86:88:28:7b:d6:9c:b5:4f:c2:c0:b9:9d:
         96:eb:88:cd:eb:66:cc:63:08:ea:17:0f:2d:4b:7f:be:3d:48:
         32:9f:ad:1b:91:1f:0d:7f:cd:da:ce:7a:0c:38:8e:d4:84:21:
         89:b6:9d:03:d2:f1:15:aa:38:40:16:b0:d0:1f:29:3a:9d:87:
         c3:85:b4:21:b5:70:78:75:c3:59:f2:78:0e:32:6d:44:8d:8d:
         c8:4b:61:1a:5b:aa:d9:3b:ef:9b:f1:5b:db:b1:5d:89:07:04:
         40:06:77:20:10:ff:fd:ac:21:0b:af:47:ee:6a:2b:af:be:4c:
         bb:e1:8b:bb:28:c4:26:9b:6f:50:eb:12:b3:df:14:67:2e:12:
         53:fa:0b:c6:16:07:e6:7b:52:bc:9c:42:b1:91:aa:3c:37:50:
         f6:0d:cd:c7:97:44:a9:16:65:fd:1c:dd:8b:fd:b4:92:cb:7b:
         d2:c5:22:49
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8NbOOeiwVZUZ2KReAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRhNTYxYTMtMGFjOS00NTM1LTkyMmYtODVkZTM1YWQ4
ZGU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
YThlODIxMGQtYmFlNS00ZmIwLWI1YjQtZWYwZDkyMTU2NDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4a9gfKSvKS6P+NW2Uz95ZDGqmd5i6QtVImU
uNMpaqsjjEP11icct6p1pCC/ufLLD6toRyqwj3pfAJf2Oa3s2VpNJeMWNo+Wi97v
n0WhJpGtd7JsGSzXDccGscOB6/gcvbWBGtYKcJ9ECCeWWnx4dvmLQCsP7fMuCjT+
qnJVl10k9WWXs4yBQ6d+/mchR2E876G5nc4jVcXC//SDaXmyQK3wYAWw1+W28z2t
7WmS/bh7fRtvPnRmpn51/ut7J4uEAq7p3NZVkHEB1b75V2rOdalCp05tfrK+HVi8
DHdrLIVDL9CWN5qhIJjKmi6Vg5BvszoCajAX2g5np60lEpRsIQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLdbXyUK0lZY6mTFY1KrB58rDMXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1
NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRlMzVhZDhkZTcvOTdlNDNiZDYtNjEyZC0z
NjhlLThiNmEtYWJiZDA3MzRkNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRhNTYxYTMtMGFjOS00NTM1LTky
MmYtODVkZTM1YWQ4ZGU3LzQ0YTU2MWEzLTBhYzktNDUzNS05MjJmLTg1ZGUzNWFk
OGRlNy5jcmwwHwYDVR0jBBgwFoAULEAFU1NGceZffbcPG2/11pFYGS0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRl
MzVhZDhkZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2O6IAwQB
2O6OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACu0ZnRwpA2GFkltl1eYkxVdLpbGZAFSmrc7fzdRo+GptOn8
BMLv05cij0aFEH3we9KIalKldHR5EogS+K23o9EsBeItEztQ0LzK4bKy4YaIKHvW
nLVPwsC5nZbriM3rZsxjCOoXDy1Lf749SDKfrRuRHw1/zdrOegw4jtSEIYm2nQPS
8RWqOEAWsNAfKTqdh8OFtCG1cHh1w1nyeA4ybUSNjchLYRpbqtk775vxW9uxXYkH
BEAGdyAQ//2sIQuvR+5qK6++TLvhi7soxCabb1DrErPfFGcuElP6C8YWB+Z7Uryc
QrGRqjw3UPYNzceXRKkWZf0c3Yv9tJLLe9LFIkk=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:09:48 2026 by rpki-client