Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa
File:                     70760a5b-5593-3ea2-8ec7-9240632ace5d.roa (raw, json)
Hash identifier:          KKfx0duylbO5/BZ0Ph63FJvHNSHqTnjF2M8KhO4lKRY=
Subject key identifier:   48:A3:E8:74:43:4D:DF:DA:49:AF:C4:1B:BE:86:F1:A6:54:2F:35:1B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F49894C332F4942DED2D92380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        172.253.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:4c:33:2f:49:42:de:d2:d9:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a2160670-1da6-43fe-a37e-d1b4c09a877c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:47:50:14:2c:e2:4e:d5:6e:ac:a4:dd:e1:
                    f3:04:7d:18:aa:00:35:f2:a7:44:f5:93:74:02:eb:
                    44:12:46:4e:29:63:bb:65:b4:fd:19:fb:09:90:4f:
                    7a:51:14:5f:27:f3:c4:e1:52:01:ca:35:14:a4:2b:
                    1e:b4:f0:21:45:d3:e5:fe:93:0c:35:4b:e4:e2:dd:
                    c5:a9:69:db:7b:e0:26:33:4d:0c:71:ec:04:bd:d6:
                    43:fa:2e:de:96:fc:cc:af:b7:0a:ac:13:ea:e4:f2:
                    01:8a:14:b2:e5:60:ce:94:17:c5:bc:54:e0:19:57:
                    e8:53:79:b6:4c:84:42:68:3b:84:0e:68:ac:f5:50:
                    33:86:17:2b:88:53:97:d9:81:9d:5e:dc:e7:78:b6:
                    dd:8e:d2:9e:b7:80:64:7c:6a:a3:5d:81:f1:ff:1d:
                    11:15:d7:76:49:c6:87:06:79:c6:7f:12:43:da:a1:
                    26:20:e0:c9:8d:a4:90:8e:4c:fb:1a:2c:1a:b3:d5:
                    ff:dc:cc:05:0a:8e:2b:73:ba:d3:36:4f:3e:af:5b:
                    3a:31:08:64:58:a8:1e:47:e5:03:05:23:c6:24:64:
                    cb:5c:0e:7e:26:59:b5:08:b6:6b:62:d5:94:3a:12:
                    bb:70:32:17:8f:ce:67:dc:c2:be:88:ce:94:ce:48:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:E8:74:43:4D:DF:DA:49:AF:C4:1B:BE:86:F1:A6:54:2F:35:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70760a5b-5593-3ea2-8ec7-9240632ace5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:43:71:be:38:bd:c0:c8:a6:62:23:8f:c9:00:ea:9e:d0:
         0a:df:40:f9:97:da:04:1a:3f:dc:b9:c7:f4:6d:02:c3:9d:99:
         3d:22:8d:c5:f6:77:eb:56:d1:7b:04:24:27:4c:20:7e:a9:ee:
         d7:ba:34:3b:85:7d:5a:af:b0:4b:4a:01:bc:bd:aa:a3:b2:35:
         15:67:c9:bd:92:4d:0e:bb:93:d2:4a:5d:cc:16:70:e7:28:ab:
         e1:4e:5f:fa:b7:2f:c4:bc:62:18:c7:4d:5f:20:49:5c:7a:87:
         89:4a:ae:7c:8f:37:f3:a7:f1:24:85:d3:97:10:58:da:3b:a7:
         49:06:c5:72:47:1a:91:bd:27:d5:c3:3c:0a:76:33:40:cc:d3:
         80:c7:9a:7c:94:b2:94:c8:cb:ce:a2:24:27:ec:04:93:a4:9e:
         be:de:cb:d5:61:68:d1:fb:5b:5a:ab:46:8b:b4:f1:e9:7e:57:
         08:a6:02:e6:f8:61:f2:d5:8f:93:d6:1c:8f:a6:50:80:28:0e:
         63:83:1e:b4:dd:6e:59:ce:de:93:96:2d:b6:08:21:bc:2a:33:
         96:ce:3e:a8:14:cf:68:76:52:18:74:d5:89:0c:88:7d:db:4f:
         db:a1:76:b7:b8:26:3a:2b:bb:d7:90:a7:81:f3:7d:94:be:fe:
         88:7c:58:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiUwzL0lC3tLZI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTIxNjA2NzAtMWRhNi00M2ZlLWEzN2UtZDFiNGMwOWE4NzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfxHUBQs4k7Vbqyk3eHzBH0YqgA18qdE9ZN0
AutEEkZOKWO7ZbT9GfsJkE96URRfJ/PE4VIByjUUpCsetPAhRdPl/pMMNUvk4t3F
qWnbe+AmM00McewEvdZD+i7elvzMr7cKrBPq5PIBihSy5WDOlBfFvFTgGVfoU3m2
TIRCaDuEDmis9VAzhhcriFOX2YGdXtzneLbdjtKet4BkfGqjXYHx/x0RFdd2ScaH
BnnGfxJD2qEmIODJjaSQjkz7Giwas9X/3MwFCo4rc7rTNk8+r1s6MQhkWKgeR+UD
BSPGJGTLXA5+Jlm1CLZrYtWUOhK7cDIXj85n3MK+iM6UzkhxMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEij6HRDTd/aSa/EG76G8aZULzUbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA3NjBhNWItNTU5My0z
ZWEyLThlYzctOTI0MDYzMmFjZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQqQ3G+OL3AyKZiI4/JAOqe0ArfQPmX2gQaP9y5x/RtAsOdmT0ijcX2
d+tW0XsEJCdMIH6p7te6NDuFfVqvsEtKAby9qqOyNRVnyb2STQ67k9JKXcwWcOco
q+FOX/q3L8S8YhjHTV8gSVx6h4lKrnyPN/On8SSF05cQWNo7p0kGxXJHGpG9J9XD
PAp2M0DM04DHmnyUspTIy86iJCfsBJOknr7ey9VhaNH7W1qrRou08el+VwimAub4
YfLVj5PWHI+mUIAoDmODHrTdblnO3pOWLbYIIbwqM5bOPqgUz2h2Uhh01YkMiH3b
T9uhdre4Jjoru9eQp4HzfZS+/oh8WBE=
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:42:01 2026 by rpki-client