Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
File:                     3f3593ee-3773-397b-a47c-3d02f42f64d4.roa (raw, json)
Hash identifier:          mK1PUu5iFAxLuuGgSU54w19wm3ejn0VwE7P15Qu2Blw=
Subject key identifier:   18:DB:FE:6F:91:FA:54:7F:1F:12:E9:1E:B8:50:58:56:0C:45:00:4D
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F2957B2AC45596D37FC650A40
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     1239
IP address blocks:        141.193.96.0/23 maxlen: 23
                          158.115.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b2:ac:45:59:6d:37:fc:65:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=53a83aee-c619-4b31-957b-87d39df3b3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:55:f1:87:2c:80:fb:ee:e8:00:56:67:63:
                    e6:41:c6:51:94:7f:5d:e7:9d:60:3f:16:44:2e:4a:
                    da:44:bf:3f:ec:b7:40:7f:3a:77:67:b8:b0:ad:d0:
                    e5:03:88:24:1a:8b:32:ed:3c:94:d5:cc:74:ab:80:
                    ee:17:f4:a2:b5:e7:2e:54:73:50:6a:e5:cc:6e:31:
                    67:12:fe:55:7a:07:4f:57:3e:a6:ec:99:61:84:87:
                    98:56:7d:bd:63:81:42:4d:91:bc:b3:a4:a2:0a:15:
                    bf:db:73:b6:ac:ec:46:44:02:81:8d:a2:2a:a4:7c:
                    9f:8d:bd:d7:ef:db:66:e7:5f:3d:98:0e:4a:36:cc:
                    1f:c4:7f:11:47:93:3f:c9:04:be:bf:98:e0:fa:0a:
                    c2:51:38:2e:16:d3:35:97:e8:87:27:8d:e8:19:67:
                    6d:95:62:24:39:5c:23:57:72:68:d3:31:f4:0c:59:
                    ab:e9:2a:4a:be:80:62:56:cc:6f:7e:f4:3c:3b:2e:
                    b2:94:a7:18:21:58:a1:ed:4b:e9:f0:2f:37:1f:19:
                    ef:c1:34:21:9a:69:93:1b:41:be:f3:e7:e4:89:5c:
                    d2:2b:48:b7:a5:0f:09:31:e8:58:fe:78:6c:95:9d:
                    8c:c3:43:ed:83:ef:77:2b:62:9d:8a:25:a0:16:92:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:FE:6F:91:FA:54:7F:1F:12:E9:1E:B8:50:58:56:0C:45:00:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.96.0/23
                  158.115.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:a6:17:39:d9:e6:b0:22:14:8a:f1:7f:ea:d5:ca:f1:04:
         a0:3f:0c:d0:82:e4:80:de:96:5f:98:58:f6:76:43:46:02:36:
         92:0f:45:94:3d:19:f6:13:88:64:26:48:cf:8f:5c:91:84:76:
         02:37:62:4e:3a:7a:4a:f0:65:dd:9b:ea:90:fc:36:60:7b:44:
         79:9f:bb:bf:7a:fa:14:bc:3d:6b:ae:1b:39:e8:2a:84:a1:59:
         09:57:06:9a:3a:93:ae:45:a6:58:ac:e3:15:2e:13:0c:01:ec:
         2f:5d:91:b9:d5:ec:cc:14:98:12:91:22:82:5c:7e:cc:10:d7:
         2e:8d:e3:e7:ff:bb:10:37:91:a0:0e:d3:b7:ab:4d:ad:54:2f:
         b7:bd:76:e1:29:f0:29:2a:ae:95:ab:1c:36:95:5c:1c:f2:24:
         b6:10:fe:11:ee:33:48:a0:b1:00:57:87:d1:ed:7d:7d:9c:72:
         a1:81:9b:b5:d7:13:b7:e3:fe:7d:20:29:d2:3d:47:c6:8e:76:
         bb:73:1a:8a:78:51:93:d5:40:23:e4:5f:5b:42:80:98:5e:4a:
         2d:bd:8b:08:e3:2d:f3:07:72:76:de:9a:2b:35:56:a6:1c:35:
         31:bb:79:f8:81:3a:5c:50:4b:16:87:97:d1:1a:67:a4:69:23:
         27:8a:59:4b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8pV7KsRVltN/xlCkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
NTNhODNhZWUtYzYxOS00YjMxLTk1N2ItODdkMzlkZjNiM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bNV8YcsgPvu6ABWZ2PmQcZRlH9d551gPxZE
LkraRL8/7LdAfzp3Z7iwrdDlA4gkGosy7TyU1cx0q4DuF/SitecuVHNQauXMbjFn
Ev5VegdPVz6m7JlhhIeYVn29Y4FCTZG8s6SiChW/23O2rOxGRAKBjaIqpHyfjb3X
79tm5189mA5KNswfxH8RR5M/yQS+v5jg+grCUTguFtM1l+iHJ43oGWdtlWIkOVwj
V3Jo0zH0DFmr6SpKvoBiVsxvfvQ8Oy6ylKcYIVih7Uvp8C83HxnvwTQhmmmTG0G+
8+fkiVzSK0i3pQ8JMehY/nhslZ2Mw0Ptg+93K2KdiiWgFpI+xQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBjb/m+R+lR/HxLpHrhQWFYMRQBNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2YzNTkzZWUtMzc3My0z
OTdiLWE0N2MtM2QwMmY0MmY2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjcFgAwQB
nnPkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHEMphc52eawIhSK8X/q1crxBKA/DNCC5IDell+YWPZ2Q0YC
NpIPRZQ9GfYTiGQmSM+PXJGEdgI3Yk46ekrwZd2b6pD8NmB7RHmfu796+hS8PWuu
GznoKoShWQlXBpo6k65Fplis4xUuEwwB7C9dkbnV7MwUmBKRIoJcfswQ1y6N4+f/
uxA3kaAO07erTa1UL7e9duEp8CkqrpWrHDaVXBzyJLYQ/hHuM0igsQBXh9HtfX2c
cqGBm7XXE7fj/n0gKdI9R8aOdrtzGop4UZPVQCPkX1tCgJheSi29iwjjLfMHcnbe
mis1VqYcNTG7efiBOlxQSxaHl9EaZ6RpIyeKWUs=
-----END CERTIFICATE-----
Generated at Tue Sep 15 06:04:12 2026 by rpki-client