Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa
File:                     9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa (raw, json)
Hash identifier:          nNk94R2S7pFuI4wWNeWdaWkHH30EHHuFD/2rvbpXfQw=
Subject key identifier:   E5:E0:40:EE:E0:99:3E:BC:8E:BD:A2:30:E8:CE:FE:28:01:16:56:92
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA786F6867BEDC3FA5BC20380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54253
IP address blocks:        167.234.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f6:86:7b:ed:c3:fa:5b:c2:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e680b927-4e75-4b7f-8360-330874df27f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:a7:11:d5:e9:77:96:9e:db:97:bb:88:af:
                    68:57:35:b1:96:82:b5:c6:ec:e1:80:ab:a5:45:60:
                    36:da:fa:0c:32:9b:dc:c5:63:31:70:ca:25:02:9a:
                    da:fa:40:ca:c0:22:fe:86:1e:65:0c:6f:1b:e6:a9:
                    0b:58:19:ad:8d:22:63:dd:de:7c:d3:b6:d5:e9:49:
                    59:f8:64:ea:30:e8:0a:00:0a:df:a8:47:65:28:31:
                    10:d4:c3:82:6e:d4:2b:94:2b:5f:7b:34:b9:37:40:
                    26:b0:aa:54:1f:81:5a:31:a7:a5:e0:3b:27:a4:a9:
                    4a:79:a4:3f:3d:04:23:1d:6d:de:c2:23:7b:09:57:
                    5e:16:7e:70:91:f6:01:84:b5:50:11:33:20:65:c1:
                    c3:90:84:37:59:2a:94:20:db:59:84:39:50:d0:1f:
                    15:42:3f:e7:1e:a2:63:15:f0:3b:44:8b:74:75:de:
                    d9:f2:66:22:42:49:81:9e:a7:b2:30:dd:e2:1d:3c:
                    c7:58:1d:d0:3e:bd:3d:bc:4b:81:14:d4:6b:e2:37:
                    81:03:c2:6d:42:1d:0b:3b:0f:59:fc:ad:26:51:6e:
                    e0:e5:da:46:e3:3f:9b:f2:75:ac:d4:42:1f:72:e4:
                    88:3c:0b:7f:f4:88:99:12:d5:d0:2b:9c:d4:6a:de:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E0:40:EE:E0:99:3E:BC:8E:BD:A2:30:E8:CE:FE:28:01:16:56:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:50:6f:e1:1f:51:b2:06:40:ed:02:4a:e2:4e:45:ba:c8:c4:
         eb:63:ec:c5:ed:ee:ee:19:ec:20:28:9d:44:62:e3:ee:3f:8b:
         1d:5f:4f:31:80:63:0c:cb:85:aa:04:7c:d0:5d:57:62:18:ee:
         e5:59:08:f2:95:76:b9:d8:7d:67:cb:d5:34:73:e8:c7:bb:45:
         37:d8:fd:38:6f:1f:f0:dd:56:4c:6e:de:e4:4f:24:5c:e1:95:
         f4:0c:02:8a:34:ce:e0:53:d8:a2:84:aa:0a:ff:ad:c6:12:6e:
         9e:7c:8d:03:90:a9:7f:9f:bb:e5:88:ae:84:d1:51:a2:7e:20:
         6a:ef:cc:6c:42:cf:7e:7f:ee:4d:ce:94:9b:d3:2e:15:92:2b:
         4c:77:00:28:89:93:4c:bb:fc:6e:39:2a:77:ca:16:06:39:dc:
         6a:23:32:22:8d:b5:5b:f3:43:27:b3:e6:83:20:4f:28:d4:47:
         93:af:3f:fb:50:e9:da:d5:e0:e6:22:26:33:33:93:af:39:b2:
         f5:52:7a:0a:f7:c1:7e:c9:57:d4:8b:cd:ce:bb:40:ff:41:c3:
         3e:a3:c4:fa:0d:52:0d:88:fd:3c:0b:78:5a:d7:73:25:7b:95:
         41:76:e3:e6:d9:0b:72:ab:b3:74:71:6c:8f:fe:1d:50:03:d7:
         d5:a5:aa:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvaGe+3D+lvCA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTY4MGI5MjctNGU3NS00YjdmLTgzNjAtMzMwODc0ZGYyN2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfWnEdXpd5ae25e7iK9oVzWxloK1xuzhgKul
RWA22voMMpvcxWMxcMolApra+kDKwCL+hh5lDG8b5qkLWBmtjSJj3d5807bV6UlZ
+GTqMOgKAArfqEdlKDEQ1MOCbtQrlCtfezS5N0AmsKpUH4FaMael4DsnpKlKeaQ/
PQQjHW3ewiN7CVdeFn5wkfYBhLVQETMgZcHDkIQ3WSqUINtZhDlQ0B8VQj/nHqJj
FfA7RIt0dd7Z8mYiQkmBnqeyMN3iHTzHWB3QPr09vEuBFNRr4jeBA8JtQh0LOw9Z
/K0mUW7g5dpG4z+b8nWs1EIfcuSIPAt/9IiZEtXQK5zUat7+sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXgQO7gmT68jr2iMOjO/igBFlaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0ZGU1ZWMtZDE5Zi0z
ZGMwLWEyYjQtYmFiOThjMmRjNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp+qQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5Qb+EfUbIGQO0CSuJORbrIxOtj7MXt7u4Z7CAonURi4+4/ix1fTzGA
YwzLhaoEfNBdV2IY7uVZCPKVdrnYfWfL1TRz6Me7RTfY/ThvH/DdVkxu3uRPJFzh
lfQMAoo0zuBT2KKEqgr/rcYSbp58jQOQqX+fu+WIroTRUaJ+IGrvzGxCz35/7k3O
lJvTLhWSK0x3ACiJk0y7/G45KnfKFgY53GojMiKNtVvzQyez5oMgTyjUR5OvP/tQ
6drV4OYiJjMzk685svVSegr3wX7JV9SLzc67QP9Bwz6jxPoNUg2I/TwLeFrXcyV7
lUF24+bZC3Krs3RxbI/+HVAD19WlqoE=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:37 2026 by rpki-client