Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
File:                     a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa (raw, json)
Hash identifier:          vedbFiaOynMoDeBmKuASV3fEL9IwREtova0mExy8FJA=
Subject key identifier:   8E:2F:E3:59:F3:AE:63:0F:61:9C:C4:4E:D0:66:9C:2C:82:1F:18:D7
Certificate issuer:       /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial:       010D0C9F4328584ECBD1E16C689E0998C3A84600
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     34
IP address blocks:        128.4.0.0/16 maxlen: 17
                          128.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e1:6c:68:9e:09:98:c3:a8:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=26fe90e2-8069-40ca-a217-6c3de42067a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:08:8b:90:d7:5f:16:26:ce:9c:3d:1e:db:
                    73:58:db:4e:46:63:e7:f9:43:b0:7e:85:8e:83:b1:
                    f0:32:44:19:61:39:b6:f6:07:fe:f3:c7:a6:80:e5:
                    8f:cc:5e:11:7b:19:ad:59:27:4d:4d:1b:92:c5:58:
                    57:4a:00:71:c6:b7:aa:ce:72:04:51:ae:f5:f1:b9:
                    fa:35:3d:20:a0:b2:a7:b5:d0:37:f4:cd:c8:2c:b7:
                    e4:c6:81:48:d0:d7:0a:c0:d2:17:36:43:67:44:cf:
                    df:4e:54:20:e0:e4:7b:0f:26:7a:a9:3a:de:0c:6f:
                    55:1b:05:80:a3:c6:04:30:88:2c:6a:50:84:2e:84:
                    5b:ba:91:26:b4:88:30:36:45:9c:7c:66:5d:26:d4:
                    63:76:d2:e4:dd:00:c9:b8:56:5d:64:e4:aa:82:bd:
                    b6:54:31:4b:be:c0:6f:21:d0:d8:b2:d8:7f:d3:bc:
                    3d:2c:53:d1:7e:9c:71:be:d5:5c:62:98:a7:70:1a:
                    c8:ac:9a:a8:fc:55:6b:85:96:86:30:7e:db:9b:af:
                    6e:96:72:b7:cf:94:8f:44:c1:98:94:f0:94:fb:c6:
                    10:20:24:8c:f6:3b:01:70:df:a1:da:ee:2f:04:e9:
                    e4:9f:81:ed:81:ab:f6:24:f5:2b:db:7d:3e:ab:fa:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2F:E3:59:F3:AE:63:0F:61:9C:C4:4E:D0:66:9C:2C:82:1F:18:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.4.0.0/16
                  128.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:66:17:c0:73:b4:17:7d:93:20:6b:63:ce:dc:be:28:12:f0:
         85:a1:ab:71:e3:17:7e:5b:a2:03:44:47:bd:50:37:f5:a0:ba:
         3d:ef:cf:38:63:35:ce:db:63:ff:f7:f1:95:51:05:18:89:91:
         5c:b2:9a:49:4a:a2:12:b4:65:bb:3c:98:97:bc:bd:e4:8f:73:
         3d:49:de:a3:13:f8:80:ac:51:2f:a7:3d:49:51:ea:57:10:fc:
         58:95:d1:ea:19:0b:10:2c:0e:78:bd:64:ba:00:29:ca:f0:c4:
         95:88:19:8a:ad:b8:62:de:4f:75:2f:28:df:d4:79:59:41:27:
         9c:c4:15:9d:07:77:d0:7b:69:28:1e:61:a0:3d:5b:08:8d:24:
         33:d2:e8:ea:c0:19:cf:57:5e:99:73:ba:05:bb:4b:7d:19:44:
         cc:9d:25:ba:27:05:99:f6:98:3b:05:0e:94:b2:aa:16:2e:f3:
         92:fe:aa:5f:ce:85:60:17:83:7c:80:15:d7:c4:f5:67:95:75:
         9c:c2:7f:54:d7:ce:4d:41:a4:93:c0:f7:10:a9:df:ad:35:1c:
         ef:f8:a4:f4:a6:6c:38:9b:35:86:21:b1:af:73:4a:69:98:ba:
         82:2f:57:a7:6a:68:c2:fb:76:40:b4:73:8e:af:bc:01:9b:39:
         74:a0:f2:20
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE7L0eFsaJ4JmMOoRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0OTQtZjA0YmYyZTM2
MDZmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
MjZmZTkwZTItODA2OS00MGNhLWEyMTctNmMzZGU0MjA2N2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIIIi5DXXxYmzpw9HttzWNtORmPn+UOwfoWO
g7HwMkQZYTm29gf+88emgOWPzF4RexmtWSdNTRuSxVhXSgBxxreqznIEUa718bn6
NT0goLKntdA39M3ILLfkxoFI0NcKwNIXNkNnRM/fTlQg4OR7DyZ6qTreDG9VGwWA
o8YEMIgsalCELoRbupEmtIgwNkWcfGZdJtRjdtLk3QDJuFZdZOSqgr22VDFLvsBv
IdDYsth/07w9LFPRfpxxvtVcYpincBrIrJqo/FVrhZaGMH7bm69ulnK3z5SPRMGY
lPCU+8YQICSM9jsBcN+h2u4vBOnkn4Htgav2JPUr230+q/pP/QIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFI4v41nzrmMPYZzETtBmnCyCHxjXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRk
MTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRiZjJlMzYwNmYvYTdlMWFjZTAtZjliOC0z
Y2JlLThhZDAtODRkOGZkZjY0NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0
OTQtZjA0YmYyZTM2MDZmL2U0NGQxNjg4LWY4YzgtNGNlOC1iNDk0LWYwNGJmMmUz
NjA2Zi5jcmwwHwYDVR0jBBgwFoAUTbwiaOwwLGXGptIvsMYSS6Gs2qowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRkMTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRi
ZjJlMzYwNmYuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgAQDAwCA
rzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQBJZhfAc7QXfZMga2PO3L4oEvCFoatx4xd+W6IDREe9UDf1oLo9
7884YzXO22P/9/GVUQUYiZFcsppJSqIStGW7PJiXvL3kj3M9Sd6jE/iArFEvpz1J
UepXEPxYldHqGQsQLA54vWS6ACnK8MSViBmKrbhi3k91Lyjf1HlZQSecxBWdB3fQ
e2koHmGgPVsIjSQz0ujqwBnPV16Zc7oFu0t9GUTMnSW6JwWZ9pg7BQ6UsqoWLvOS
/qpfzoVgF4N8gBXXxPVnlXWcwn9U185NQaSTwPcQqd+tNRzv+KT0pmw4mzWGIbGv
c0ppmLqCL1enamjC+3ZAtHOOr7wBmzl0oPIg
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:24:46 2026 by rpki-client