Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
File:                     ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa (raw, json)
Hash identifier:          jHyYZ13UI8dHw89KVSc6iIowcb9dbJbe3KC9G/tM4oA=
Subject key identifier:   D0:51:56:0D:B9:9B:9B:0B:1C:AE:81:B6:46:BA:D8:89:9A:6C:2F:8E
Certificate issuer:       /CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Certificate serial:       010D0C9F4328584FA42DC860A188B7812967A980
Authority key identifier: C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     979
IP address blocks:        72.172.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:c8:60:a1:88:b7:81:29:67:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=e7211f80-e3bb-43e3-8cab-5930f2a53ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:de:fd:24:98:17:16:00:ca:a4:03:ea:d4:
                    2c:4a:b5:3d:e4:12:22:bd:50:f2:d1:cb:7f:c3:08:
                    3d:e6:40:52:af:1d:b7:05:c5:d4:c4:3c:6b:07:b4:
                    87:cc:a9:0f:6f:1a:46:ec:30:74:ec:08:c6:b4:eb:
                    22:f8:24:53:b3:3c:83:0e:dd:31:31:3f:8a:d7:3a:
                    c2:34:65:0e:5e:18:c3:fd:82:cf:d7:67:16:86:9b:
                    b3:f0:65:de:fe:9c:d9:cd:8f:d7:b1:b5:46:2d:00:
                    84:fc:5f:a0:14:f4:0d:72:70:d6:8c:04:29:13:d1:
                    2c:c3:5f:0c:14:63:38:a6:17:44:4a:b2:b0:fe:de:
                    f4:65:e8:93:c9:95:8b:b9:af:66:b9:65:14:61:4b:
                    e7:3d:23:e4:5d:2c:54:fe:29:ed:19:9e:53:2b:ae:
                    a1:df:17:b4:51:cc:27:2f:9d:35:f3:87:f2:45:d4:
                    0b:89:97:ff:dc:12:42:ae:b8:55:48:dd:c7:0f:2a:
                    49:94:c6:7e:9f:6c:70:21:e0:f6:7d:e7:46:9d:49:
                    65:61:55:0d:fa:e0:0b:6e:d0:57:a6:39:df:bb:6e:
                    2a:b4:85:e7:63:6a:d9:60:6b:da:c6:2c:ed:de:bf:
                    a1:a9:e0:5d:2e:fb:58:2b:f6:c6:0c:2a:17:07:f9:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:56:0D:B9:9B:9B:0B:1C:AE:81:B6:46:BA:D8:89:9A:6C:2F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:cf:51:96:6a:f2:a8:7e:72:61:a1:69:49:13:4e:f3:e1:
         2a:de:2b:99:72:9f:74:29:85:8d:c0:06:03:1f:60:c8:65:20:
         00:9b:fa:c2:0e:cb:a4:64:e5:fd:a3:f5:ea:1a:70:d5:fa:ec:
         77:a8:8b:46:80:34:ea:d9:7e:35:04:d3:e4:c5:86:58:11:4c:
         dd:ed:a4:ff:33:91:41:79:b7:ff:e8:ae:4b:7e:ad:92:ec:92:
         69:b5:a4:cb:5c:27:6c:5d:6f:1d:31:03:b7:f5:4e:6c:ba:22:
         c7:bd:dd:0e:75:3c:11:f5:35:54:8e:59:b8:44:e7:3f:64:89:
         ec:bf:df:57:86:d2:95:2c:13:18:06:d2:8c:4b:85:51:74:ee:
         08:30:ae:3f:2d:61:5f:f0:13:92:d2:1d:24:3f:c6:96:75:a1:
         50:9e:6f:21:63:19:1e:0f:23:d3:18:38:71:b3:aa:2a:9a:a5:
         13:e4:21:e2:18:0e:45:e3:22:73:fc:8b:1d:ee:7f:2a:90:10:
         c4:31:7e:38:8d:9d:60:21:8c:8a:26:c8:2d:13:c6:60:8e:93:
         48:d8:8e:73:9c:2f:18:96:78:d9:d8:46:8c:b2:76:17:80:44:
         8d:6d:e5:0b:bf:d7:0a:c3:c2:7a:37:81:6a:ad:a2:e8:47:12:
         c9:77:ab:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLchgoYi3gSlnqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTYzZDQwNTYtM2YyMy00NGVjLWIxZjEtN2NkOTRlYjY4
YTlkMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk
ZTcyMTFmODAtZTNiYi00M2UzLThjYWItNTkzMGYyYTUzYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroLe/SSYFxYAyqQD6tQsSrU95BIivVDy0ct/
wwg95kBSrx23BcXUxDxrB7SHzKkPbxpG7DB07AjGtOsi+CRTszyDDt0xMT+K1zrC
NGUOXhjD/YLP12cWhpuz8GXe/pzZzY/XsbVGLQCE/F+gFPQNcnDWjAQpE9Esw18M
FGM4phdESrKw/t70ZeiTyZWLua9muWUUYUvnPSPkXSxU/intGZ5TK66h3xe0Ucwn
L50184fyRdQLiZf/3BJCrrhVSN3HDypJlMZ+n2xwIeD2fedGnUllYVUN+uALbtBX
pjnfu24qtIXnY2rZYGvaxizt3r+hqeBdLvtYK/bGDCoXB/kyYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBRVg25m5sLHK6Btka62ImabC+OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85NjNk
NDA1Ni0zZjIzLTQ0ZWMtYjFmMS03Y2Q5NGViNjhhOWQvYWU2YjlmOWQtNzhiOC0z
YmY2LWFmY2MtZjkzNjM0YjQwZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTYzZDQwNTYtM2YyMy00NGVjLWIx
ZjEtN2NkOTRlYjY4YTlkLzk2M2Q0MDU2LTNmMjMtNDRlYy1iMWYxLTdjZDk0ZWI2
OGE5ZC5jcmwwHwYDVR0jBBgwFoAUww75EZAvrTWFXVDTUTUA7B8PTVUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85NjNkNDA1Ni0zZjIzLTQ0ZWMtYjFmMS03Y2Q5
NGViNjhhOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKxZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHZz1GWavKofnJhoWlJE07z4SreK5lyn3QphY3ABgMfYMhlIACb+sIO
y6Rk5f2j9eoacNX67Heoi0aANOrZfjUE0+TFhlgRTN3tpP8zkUF5t//orkt+rZLs
kmm1pMtcJ2xdbx0xA7f1Tmy6Ise93Q51PBH1NVSOWbhE5z9kiey/31eG0pUsExgG
0oxLhVF07ggwrj8tYV/wE5LSHSQ/xpZ1oVCebyFjGR4PI9MYOHGzqiqapRPkIeIY
DkXjInP8ix3ufyqQEMQxfjiNnWAhjIomyC0TxmCOk0jYjnOcLxiWeNnYRoyydheA
RI1t5Qu/1wrDwno3gWqtouhHEsl3q3o=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:47:46 2026 by rpki-client