Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
File:                     9137315f-e06c-3852-8f0f-5067ab5e516a.roa (raw, json)
Hash identifier:          Fra0o1NUkhLgDLsh4k0OZ9UlhmrPG3CgHI8qnuDj7e8=
Subject key identifier:   12:F9:A9:61:10:F5:BA:92:6F:F9:D1:03:B0:78:29:5A:46:5B:34:8F
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584EA787A7C226DCDF1AC2C6FC40
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     174
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a7:c2:26:dc:df:1a:c2:c6:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=34c3ccdd-4e80-4524-ad6a-ee8452f938a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:a5:80:48:88:12:c4:1f:9e:68:73:bf:3a:
                    9e:80:79:08:45:15:2e:08:a3:fe:90:28:09:87:76:
                    9a:8a:9b:8b:e7:23:15:45:a0:4d:27:ce:34:8e:b4:
                    d2:a8:f8:42:1c:6b:cb:4b:80:1b:fb:77:0e:cf:b1:
                    f1:78:75:33:1d:a2:34:c6:ba:29:25:ce:a6:40:7c:
                    a3:ef:02:a3:7e:9c:71:c1:1a:20:4f:7f:02:7a:9c:
                    e8:1f:10:ce:8d:cf:60:ce:a0:59:29:a9:fe:2f:35:
                    ca:53:25:01:ed:6f:a0:b4:52:63:a7:b7:b4:8d:b0:
                    f8:e0:e7:e9:c8:20:a2:83:c5:c6:57:a3:a8:fe:7a:
                    1b:7f:91:82:57:c2:ec:4c:c4:78:3c:05:2f:42:ce:
                    4a:c8:fc:2c:6a:2d:a7:61:18:a7:0b:89:46:19:12:
                    90:2f:70:49:9a:34:e2:5a:2c:b4:32:b5:eb:95:ea:
                    ba:07:b2:74:6c:d9:a4:ec:2e:87:d0:86:b4:b8:d7:
                    09:cd:ae:aa:4d:66:a6:7e:04:45:6c:16:11:29:00:
                    5c:51:1b:a1:6a:fd:07:29:48:ee:72:ae:f6:3c:5d:
                    90:b2:08:fa:d3:c9:ec:00:72:85:43:81:46:95:ac:
                    d4:93:85:81:77:be:3f:db:11:5f:ff:eb:44:fa:5f:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:A9:61:10:F5:BA:92:6F:F9:D1:03:B0:78:29:5A:46:5B:34:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:8a:a6:62:03:ca:a2:1c:93:e8:84:9e:46:7c:56:b3:8c:
         f1:af:ed:92:62:1c:3d:24:d5:01:24:b7:b3:77:86:c3:ad:a0:
         6f:e3:93:28:6f:67:f3:ad:10:92:16:8e:67:35:bc:2c:8e:c1:
         a9:33:d0:05:9c:d7:b2:96:2c:1e:3b:69:ef:1e:61:7f:66:25:
         98:5c:c5:63:47:8a:a6:61:5c:87:7b:17:4e:51:d0:3f:36:8b:
         a7:0d:1b:91:01:9d:af:3d:30:f0:16:14:02:a7:85:49:e7:74:
         12:4d:37:ad:02:7a:a4:22:89:64:e5:f2:55:61:5b:21:9d:a8:
         7d:62:b0:14:0c:61:87:af:80:b9:5a:c0:86:ac:02:ee:6e:a1:
         b7:e9:3b:90:72:63:4d:70:5b:2e:6d:f7:09:f6:b7:b7:1e:0e:
         d6:1a:0a:e5:31:33:dc:fd:6e:f0:40:ba:a1:df:66:3e:ff:60:
         5b:a0:2a:e9:62:67:3e:5d:46:dc:01:b9:82:5a:16:00:3f:91:
         6f:b4:7f:ea:45:69:e3:37:97:eb:23:1a:1d:d9:3d:ca:c2:e4:
         cb:30:b3:fd:3d:e5:0f:fd:dc:38:38:91:45:c4:3e:75:42:cb:
         6f:db:11:df:b1:a6:0c:5e:eb:3a:a4:2a:d5:59:1e:8f:c6:fa:
         6b:bf:7b:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6fCJtzfGsLG/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNl
ZWZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzRjM2NjZGQtNGU4MC00NTI0LWFkNmEtZWU4NDUyZjkzOGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA726lgEiIEsQfnmhzvzqegHkIRRUuCKP+kCgJ
h3aaipuL5yMVRaBNJ840jrTSqPhCHGvLS4Ab+3cOz7HxeHUzHaI0xropJc6mQHyj
7wKjfpxxwRogT38CepzoHxDOjc9gzqBZKan+LzXKUyUB7W+gtFJjp7e0jbD44Ofp
yCCig8XGV6Oo/nobf5GCV8LsTMR4PAUvQs5KyPwsai2nYRinC4lGGRKQL3BJmjTi
Wiy0MrXrleq6B7J0bNmk7C6H0Ia0uNcJza6qTWamfgRFbBYRKQBcURuhav0HKUju
cq72PF2Qsgj608nsAHKFQ4FGlazUk4WBd74/2xFf/+tE+l9JAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL5qWEQ9bqSb/nRA7B4KVpGWzSPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTAz
OTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvOTEzNzMxNWYtZTA2Yy0z
ODUyLThmMGYtNTA2N2FiNWU1MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkwMzk5MzUtNDYyYS00YjE0LThl
OTYtNzg3OTgyODNlZWZmLzE5MDM5OTM1LTQ2MmEtNGIxNC04ZTk2LTc4Nzk4Mjgz
ZWVmZi5jcmwwHwYDVR0jBBgwFoAUMCKfdKNrwtqpZkAI0cw8U5Df3pkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5
ODI4M2VlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfDiqZiA8qiHJPohJ5GfFazjPGv7ZJiHD0k1QEkt7N3hsOtoG/jkyhv
Z/OtEJIWjmc1vCyOwakz0AWc17KWLB47ae8eYX9mJZhcxWNHiqZhXId7F05R0D82
i6cNG5EBna89MPAWFAKnhUnndBJNN60CeqQiiWTl8lVhWyGdqH1isBQMYYevgLla
wIasAu5uobfpO5ByY01wWy5t9wn2t7ceDtYaCuUxM9z9bvBAuqHfZj7/YFugKuli
Zz5dRtwBuYJaFgA/kW+0f+pFaeM3l+sjGh3ZPcrC5Msws/095Q/93Dg4kUXEPnVC
y2/bEd+xpgxe6zqkKtVZHo/G+mu/e/E=
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:07:23 2026 by rpki-client