Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
File:                     c914ae45-f96a-379f-b2e6-986e217df7d0.roa (raw, json)
Hash identifier:          Pxdzq0wGyhlLk7op4hlKIsLeoVI6C+1Jz8SJQUk3DJE=
Subject key identifier:   E0:A6:19:83:D4:EA:EE:4A:6B:D1:FD:30:39:41:6E:C6:44:31:85:BE
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584ED9C741AF1196BA797F6CEF80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16904
IP address blocks:        209.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:41:af:11:96:ba:79:7f:6c:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=5f1ad3bf-f6ae-48a8-9b99-2832bb51e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:ad:74:dd:6b:1a:83:e9:68:1a:0d:62:ac:
                    fd:31:0b:41:15:11:b1:13:2d:35:67:39:61:84:79:
                    d0:5e:95:9b:c2:47:e0:bc:ab:7b:17:ff:df:dc:09:
                    02:ee:63:17:c3:aa:40:f1:14:bd:dc:be:97:02:31:
                    e4:a7:7b:f7:2b:5f:92:79:cb:c8:17:78:38:10:52:
                    a7:95:30:d9:27:a8:ce:0e:2d:27:b5:e6:73:5a:45:
                    54:af:72:9c:d8:bd:cd:4e:df:92:c9:de:81:a7:1b:
                    c8:21:a0:7c:71:c6:46:41:71:b2:f8:57:3d:fd:11:
                    40:6a:a7:4e:83:2f:d4:a9:a5:92:74:97:b9:a7:3f:
                    90:27:b5:34:6a:da:84:9a:cc:fe:f0:33:25:6c:4f:
                    07:98:ca:37:60:50:17:04:6d:30:b9:d7:26:a3:44:
                    90:86:80:80:67:f5:c4:11:3d:de:71:c0:9e:ec:ca:
                    d7:5b:99:e2:1c:78:ea:79:08:ac:52:b6:8b:89:10:
                    69:12:04:44:fa:e3:c0:56:6d:05:e6:1d:a4:b1:f2:
                    71:2e:12:29:ca:aa:53:b3:e8:98:95:33:81:93:b7:
                    3c:a2:2b:13:f4:91:41:80:80:1f:54:fd:db:9b:7c:
                    ed:54:71:8b:a9:23:c3:41:44:30:5f:07:b5:97:7b:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A6:19:83:D4:EA:EE:4A:6B:D1:FD:30:39:41:6E:C6:44:31:85:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:5a:72:24:e1:ac:27:0d:c7:4e:e6:68:45:5e:4c:ac:2f:
         3f:c0:c2:b1:ce:b9:0a:d2:a7:10:fa:0f:76:86:44:42:26:37:
         e8:e5:6b:a4:1d:08:63:46:1c:2e:06:0c:8e:b8:08:d5:3e:b4:
         5b:85:c8:67:92:aa:83:1e:10:d0:a7:cc:c6:d4:ed:00:1a:8a:
         f6:81:7e:e9:8a:e0:bd:3e:9a:69:7c:50:a0:17:50:44:96:d0:
         fe:c4:51:b3:6e:72:df:0e:8a:ad:94:2a:2b:28:cf:2c:c2:46:
         be:f9:88:3e:29:12:54:f6:68:0f:fd:a9:8c:ab:62:50:c3:de:
         f4:79:1b:81:c8:0a:88:b0:6e:ac:79:00:6f:ab:65:77:77:36:
         28:b2:66:0f:26:a9:8e:03:03:f9:38:ed:21:dc:df:df:62:f0:
         fb:30:31:05:6e:d3:03:e7:7d:42:f8:fc:8f:1d:05:29:a0:16:
         29:61:f6:da:5c:01:90:20:50:1a:80:af:c5:f0:86:6e:8d:1d:
         0a:1b:04:91:38:09:84:b6:00:5d:d5:28:17:54:49:9e:e6:ec:
         f2:ac:ae:cb:b3:b4:7b:a2:e6:c7:c1:97:2d:67:c9:9f:0f:e3:
         38:d4:e5:86:a7:41:5e:9d:ef:7d:fa:f1:27:e1:bb:6c:2b:60:
         2e:0a:58:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx0GvEZa6eX9s74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
NWYxYWQzYmYtZjZhZS00OGE4LTliOTktMjgzMmJiNTFlOGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+tdN1rGoPpaBoNYqz9MQtBFRGxEy01Zzlh
hHnQXpWbwkfgvKt7F//f3AkC7mMXw6pA8RS93L6XAjHkp3v3K1+SecvIF3g4EFKn
lTDZJ6jODi0nteZzWkVUr3Kc2L3NTt+Syd6BpxvIIaB8ccZGQXGy+Fc9/RFAaqdO
gy/UqaWSdJe5pz+QJ7U0atqEmsz+8DMlbE8HmMo3YFAXBG0wudcmo0SQhoCAZ/XE
ET3eccCe7MrXW5niHHjqeQisUraLiRBpEgRE+uPAVm0F5h2ksfJxLhIpyqpTs+iY
lTOBk7c8oisT9JFBgIAfVP3bm3ztVHGLqSPDQUQwXwe1l3s6gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCmGYPU6u5Ka9H9MDlBbsZEMYW+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYzkxNGFlNDUtZjk2YS0z
NzlmLWIyZTYtOTg2ZTIxN2RmN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/jWnIk4awnDcdO5mhFXkysLz/AwrHOuQrSpxD6D3aGREImN+jla6Qd
CGNGHC4GDI64CNU+tFuFyGeSqoMeENCnzMbU7QAaivaBfumK4L0+mml8UKAXUESW
0P7EUbNuct8Oiq2UKisozyzCRr75iD4pElT2aA/9qYyrYlDD3vR5G4HICoiwbqx5
AG+rZXd3NiiyZg8mqY4DA/k47SHc399i8PswMQVu0wPnfUL4/I8dBSmgFilh9tpc
AZAgUBqAr8Xwhm6NHQobBJE4CYS2AF3VKBdUSZ7m7PKsrsuztHui5sfBly1nyZ8P
4zjU5YanQV6d73368Sfhu2wrYC4KWCQ=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:51 2026 by rpki-client