Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa
File:                     e157a092-8e79-32f4-a337-609a52ee2fb5.roa (raw, json)
Hash identifier:          9KwS8R+O1BiRQ8dqDnynk4yNiyx+7UL0MDlmiWnz32s=
Subject key identifier:   D7:6F:0A:F1:70:B2:A7:A6:26:76:63:C4:DA:F4:3D:9B:63:22:CD:68
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584F20F7BFF0EB248E790FA13F20
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     398159
IP address blocks:        162.244.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bf:f0:eb:24:8e:79:0f:a1:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=174968c6-773d-4c4a-a209-8b31a0dec103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:f1:4d:cd:ec:64:2a:d9:ee:68:9c:ee:8f:
                    e3:53:a1:7f:86:42:c5:29:1a:b9:f7:79:91:15:83:
                    95:e6:5b:81:8e:65:1a:f4:f5:74:29:7a:13:40:5b:
                    68:9b:37:c7:aa:04:d9:ee:ce:01:fe:9d:92:3a:cb:
                    9b:b8:a8:f9:04:c4:bc:71:eb:c1:32:ee:b7:94:b9:
                    f4:71:b4:51:f3:ae:f1:79:20:9b:3b:73:c5:0f:e2:
                    00:5a:9e:d1:f2:16:ee:e3:40:11:38:bb:01:89:54:
                    ec:73:0f:36:19:44:e3:d9:c4:33:5b:19:5f:15:97:
                    e4:a2:48:0d:ca:a0:e7:38:d6:dd:05:9e:1d:e8:01:
                    0d:b9:09:62:01:f5:35:0b:b3:c8:7e:0b:c9:00:94:
                    45:fd:44:8e:76:6f:69:92:ea:f5:48:5e:4e:06:29:
                    5e:8e:fa:f4:31:ce:6d:97:32:c8:90:fe:0d:4f:29:
                    ec:ad:7b:db:c5:ed:1c:0b:6b:ae:66:d3:c4:e5:d8:
                    22:24:87:3b:09:80:ae:98:6e:02:18:25:67:2a:a0:
                    e7:3b:e0:0b:6a:4e:7f:7a:4b:86:12:92:e2:6a:c2:
                    60:2d:d5:90:50:14:48:36:9f:4a:94:a0:28:42:29:
                    12:91:47:32:fc:a8:f4:a2:0a:57:ee:bb:46:e2:7e:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:0A:F1:70:B2:A7:A6:26:76:63:C4:DA:F4:3D:9B:63:22:CD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:22:b3:60:59:95:7d:51:44:f3:25:1f:f0:6d:29:36:9f:25:
         4a:04:39:4d:fc:b7:46:68:fe:85:fe:28:11:70:bf:4e:a4:59:
         05:7d:4e:5f:c4:f1:57:46:c8:da:54:0f:e0:65:ef:19:ef:de:
         4b:51:7f:37:1d:e5:10:7e:6f:50:93:89:94:6a:57:05:74:2d:
         1b:7f:2a:0c:93:2d:ab:79:bc:1f:a0:4e:85:bf:51:41:b4:df:
         c1:cc:84:dc:0f:76:14:7b:de:14:92:eb:4e:c3:85:ac:94:3b:
         d0:9f:a2:da:b3:8a:ce:50:bf:60:77:24:bd:ff:e1:cb:60:1a:
         96:c3:a2:2e:19:5b:54:4d:13:9e:97:56:6d:5b:f9:b5:0c:52:
         be:2c:c8:b9:85:34:eb:94:8b:cf:0a:b2:8c:31:ce:12:2d:59:
         57:aa:ea:34:21:89:c2:76:fd:ce:9a:09:5d:21:4d:7a:45:87:
         0c:f5:1d:24:ec:25:4f:7d:d0:a0:db:8e:7a:3a:b9:25:0c:5f:
         cf:a0:bf:24:ad:f1:d7:24:e2:e2:c0:07:3c:a6:00:5e:01:05:
         7f:de:52:fa:b9:ed:d6:b7:1a:43:a3:6e:6c:d9:ad:61:cd:2b:
         4e:ab:c0:c5:a0:a2:70:5b:e6:f1:40:4b:04:35:15:98:9b:3d:
         1d:91:05:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97/w6ySOeQ+hPyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi
ZjllMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MTc0OTY4YzYtNzczZC00YzRhLWEyMDktOGIzMWEwZGVjMTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOrxTc3sZCrZ7mic7o/jU6F/hkLFKRq593mR
FYOV5luBjmUa9PV0KXoTQFtomzfHqgTZ7s4B/p2SOsubuKj5BMS8cevBMu63lLn0
cbRR867xeSCbO3PFD+IAWp7R8hbu40AROLsBiVTscw82GUTj2cQzWxlfFZfkokgN
yqDnONbdBZ4d6AENuQliAfU1C7PIfgvJAJRF/USOdm9pkur1SF5OBilejvr0Mc5t
lzLIkP4NTynsrXvbxe0cC2uuZtPE5dgiJIc7CYCumG4CGCVnKqDnO+ALak5/ekuG
EpLiasJgLdWQUBRINp9KlKAoQikSkUcy/Kj0ogpX7rtG4n4bmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdvCvFwsqemJnZjxNr0PZtjIs1oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi
YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvZTE1N2EwOTItOGU3OS0z
MmY0LWEzMzctNjA5YTUyZWUyZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5
YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl
YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0
YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcis2BZlX1RRPMlH/BtKTafJUoEOU38t0Zo/oX+KBFwv06kWQV9Tl/E
8VdGyNpUD+Bl7xnv3ktRfzcd5RB+b1CTiZRqVwV0LRt/KgyTLat5vB+gToW/UUG0
38HMhNwPdhR73hSS607DhayUO9Cfotqzis5Qv2B3JL3/4ctgGpbDoi4ZW1RNE56X
Vm1b+bUMUr4syLmFNOuUi88KsowxzhItWVeq6jQhicJ2/c6aCV0hTXpFhwz1HSTs
JU990KDbjno6uSUMX8+gvySt8dck4uLABzymAF4BBX/eUvq57da3GkOjbmzZrWHN
K06rwMWgonBb5vFASwQ1FZibPR2RBaI=
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:13:27 2026 by rpki-client