Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa
File:                     7077a281-f69a-3357-b654-2032d3ec3de2.roa (raw, json)
Hash identifier:          JYfn7h1AdGiL6INfgIfgFtiFrp7JFGyOKak7FtCoMbc=
Subject key identifier:   04:4E:40:D2:48:00:EE:5E:23:A7:57:90:2F:2E:70:95:BE:89:19:50
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497CBBB23376FF535E684A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        108.170.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:bb:b2:33:76:ff:53:5e:68:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8f135a55-8cc9-4464-bf1d-6c99aaa7b33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:9d:6c:b9:1b:23:e6:c6:eb:84:8c:f2:47:
                    29:83:f1:5f:c5:1c:29:1d:26:58:7c:db:b1:5f:4e:
                    4c:f7:f3:cd:fc:ed:48:23:2b:1c:b6:2b:4c:f5:3a:
                    20:f9:ff:36:58:39:95:36:4f:63:dd:e9:15:47:ef:
                    49:9c:0b:27:8a:44:07:1f:fd:b6:ca:7a:91:19:7e:
                    ac:75:ec:91:69:92:34:59:70:9e:37:30:e2:d5:ad:
                    9b:b4:a8:0b:d6:54:81:1e:04:78:fb:40:cf:93:bd:
                    e8:e5:79:ac:ce:84:88:f1:ea:de:fd:d0:5f:46:38:
                    bf:68:9f:d3:77:c4:0f:9f:b0:8c:15:20:1d:82:e5:
                    55:82:23:89:8d:53:d3:d0:ff:8c:e8:3e:af:40:b8:
                    c2:a9:9b:7b:78:4f:ba:43:de:bd:ec:8b:75:a2:50:
                    62:a3:4b:11:91:0d:f5:94:d6:99:7b:3e:a5:ad:cf:
                    c5:b3:20:50:7d:39:6a:ad:2a:77:9d:5b:d2:91:d1:
                    1b:a5:28:dc:0a:8f:d0:0b:0c:90:95:9a:be:96:2b:
                    15:6f:91:89:bf:d1:c4:ef:5b:b0:b4:25:4b:42:95:
                    41:96:0b:83:71:9c:13:c5:13:a9:85:58:0c:42:1c:
                    4a:c1:f2:5a:a1:21:4b:1b:09:0d:55:32:7f:8d:bf:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:40:D2:48:00:EE:5E:23:A7:57:90:2F:2E:70:95:BE:89:19:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:1e:be:a0:0d:3b:70:04:61:ad:de:7e:e1:af:91:36:75:
         a3:45:e5:a4:79:0f:b2:1f:7d:6e:46:9b:ef:15:27:c6:93:8d:
         08:24:0c:a3:48:ff:ba:d8:04:df:a3:39:e7:c7:f0:ae:8d:22:
         e3:b4:36:dd:e2:39:db:0b:c1:c0:60:33:25:e8:ef:14:b9:5f:
         36:1b:87:6b:14:37:03:12:29:d5:ae:27:5f:29:22:68:35:a8:
         fd:b7:37:78:6a:5e:d6:4d:ef:fc:01:98:05:bb:9d:f6:b1:f5:
         95:6c:55:00:d3:ce:9b:b6:08:40:35:50:9b:57:98:bd:41:9a:
         b9:6e:37:fc:37:d9:bf:92:f1:63:b3:80:d0:27:2e:ed:a0:af:
         95:b5:33:01:a9:34:0b:df:9e:20:8b:8a:ac:c7:a6:7d:3e:fb:
         6b:2d:10:a6:17:d5:cf:73:6f:08:9d:be:8e:c8:32:38:61:9f:
         26:f4:c1:ef:02:8e:47:31:5f:1c:9f:d4:69:1a:91:39:af:0e:
         e9:1f:16:92:41:6a:d2:dd:29:f3:b8:0e:f3:73:62:d8:e3:cc:
         a1:ad:7b:c1:f7:d5:56:6b:d5:c8:58:fc:ae:07:28:f4:d0:fb:
         09:9e:6e:10:9e:1d:27:d8:d9:65:ed:2c:b9:54:9b:39:d7:bd:
         cb:2d:8e:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLuyM3b/U15oSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGYxMzVhNTUtOGNjOS00NDY0LWJmMWQtNmM5OWFhYTdiMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSmdbLkbI+bG64SM8kcpg/FfxRwpHSZYfNux
X05M9/PN/O1IIysctitM9Tog+f82WDmVNk9j3ekVR+9JnAsnikQHH/22ynqRGX6s
deyRaZI0WXCeNzDi1a2btKgL1lSBHgR4+0DPk73o5XmszoSI8ere/dBfRji/aJ/T
d8QPn7CMFSAdguVVgiOJjVPT0P+M6D6vQLjCqZt7eE+6Q9697It1olBio0sRkQ31
lNaZez6lrc/FsyBQfTlqrSp3nVvSkdEbpSjcCo/QCwyQlZq+lisVb5GJv9HE71uw
tCVLQpVBlguDcZwTxROphVgMQhxKwfJaoSFLGwkNVTJ/jb9QfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAROQNJIAO5eI6dXkC8ucJW+iRlQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA3N2EyODEtZjY5YS0z
MzU3LWI2NTQtMjAzMmQzZWMzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtmHr6gDTtwBGGt3n7hr5E2daNF5aR5D7IffW5Gm+8VJ8aTjQgkDKNI
/7rYBN+jOefH8K6NIuO0Nt3iOdsLwcBgMyXo7xS5XzYbh2sUNwMSKdWuJ18pImg1
qP23N3hqXtZN7/wBmAW7nfax9ZVsVQDTzpu2CEA1UJtXmL1BmrluN/w32b+S8WOz
gNAnLu2gr5W1MwGpNAvfniCLiqzHpn0++2stEKYX1c9zbwidvo7IMjhhnyb0we8C
jkcxXxyf1GkakTmvDukfFpJBatLdKfO4DvNzYtjjzKGte8H31VZr1chY/K4HKPTQ
+wmebhCeHSfY2WXtLLlUmznXvcstjow=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:55:10 2026 by rpki-client