Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32342d3234203d3e20343033303637.roa
File:                     3135362e392e38382e302f32342d3234203d3e20343033303637.roa (raw, json)
Hash identifier:          DbC++8pek0wFNr8m+rmhZOr7uyjEsyv912yTdF4apYw=
Subject key identifier:   CD:98:E2:1B:BB:33:D7:11:5C:12:A7:43:83:A1:47:F9:76:22:5B:9C
Certificate issuer:       /CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Certificate serial:       2EFBDBC929F8FDE09C29C055502D50B579694918
Authority key identifier: D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32342d3234203d3e20343033303637.roa
Signing time:             Fri 23 Oct 2026 16:21:57 +0000
ROA not before:           Fri 23 Oct 2026 16:16:57 +0000
ROA not after:            Fri 22 Oct 2027 16:21:57 +0000
asID:                     403067
IP address blocks:        156.9.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
                          rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 13:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fb:db:c9:29:f8:fd:e0:9c:29:c0:55:50:2d:50:b5:79:69:49:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
        Validity
            Not Before: Oct 23 16:16:57 2026 GMT
            Not After : Oct 22 16:21:57 2027 GMT
        Subject: CN=CD98E21BBB33D7115C12A74383A147F976225B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:c7:13:87:6d:e6:46:5b:e1:79:96:9f:9e:
                    80:4c:db:a9:4c:66:80:79:d2:47:a5:20:5a:88:d7:
                    b1:01:a1:65:eb:dc:cd:52:a4:a6:88:30:03:b2:3c:
                    6d:41:7d:33:f9:35:c5:07:d3:db:1f:15:fe:0e:d8:
                    d8:d6:61:d7:90:16:4e:dc:1b:21:53:5b:93:57:3f:
                    6f:a3:dd:5b:95:6b:b1:7e:e0:d9:42:37:59:f7:1a:
                    51:cf:83:0e:57:51:af:30:6c:bb:a2:8a:0c:c7:71:
                    0f:9d:38:54:e6:39:29:40:19:22:a5:aa:bc:f2:f0:
                    b9:09:46:4b:11:b6:5d:78:81:ef:52:63:50:ad:a2:
                    3a:97:8f:0a:6b:c5:12:ce:1b:17:38:f7:7c:ab:e0:
                    08:4f:9c:b2:45:97:17:38:6c:29:31:8d:0b:ab:43:
                    42:43:61:8d:2f:13:5c:07:9d:97:75:16:51:e5:64:
                    1a:6d:f9:68:d2:5f:d8:85:8a:08:38:7c:31:90:49:
                    4f:04:a0:10:db:29:69:ed:3e:dd:ec:1a:91:74:22:
                    6d:7d:32:93:f5:8c:6d:b9:41:f8:43:6a:b2:d1:f9:
                    54:bf:2b:f6:bf:5b:cb:ac:7f:d9:c5:39:05:d4:e3:
                    28:42:2a:68:6f:c7:0a:81:eb:6e:10:42:5f:6d:58:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:E2:1B:BB:33:D7:11:5C:12:A7:43:83:A1:47:F9:76:22:5B:9C
            X509v3 Authority Key Identifier:
                keyid:D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32342d3234203d3e20343033303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:36:af:5f:42:50:62:12:d3:0e:ed:18:61:0a:4d:60:d0:f1:
         5f:c6:a4:71:3c:70:a8:6b:3f:2a:82:11:da:12:4c:e3:32:ab:
         92:40:f6:a7:89:73:69:1b:9d:43:a8:fb:7c:cb:a3:6c:83:cc:
         f5:2c:d3:99:a5:6f:ce:5b:12:01:8a:52:81:00:8f:5f:12:e8:
         67:17:b6:db:56:5f:13:95:ad:78:fb:e1:59:fb:c9:7a:68:21:
         1f:d0:ca:57:4f:6b:a2:bf:f8:d9:58:70:99:d7:a7:dd:8e:4c:
         62:73:9d:82:00:d8:a1:c2:c8:e0:06:35:72:df:90:42:ba:38:
         03:1f:e7:a7:c6:ae:f1:af:23:01:b1:e1:0b:d2:08:aa:e3:45:
         6b:a3:71:4f:f2:07:1a:9b:51:a8:d3:f4:b7:f0:d2:df:ec:15:
         31:36:69:c0:59:27:cc:c7:3e:19:1e:e9:7a:88:66:95:cf:7a:
         19:50:9d:bb:fc:80:eb:0c:9e:cf:41:d8:db:c3:73:f7:75:2d:
         c4:0f:b7:b8:e1:1b:05:01:78:0b:12:53:14:ff:bd:19:62:5f:
         ca:75:b7:c7:ac:50:4e:b6:31:2a:2f:3d:2c:6f:26:32:0e:e5:
         19:6d:0f:cf:3a:78:11:eb:e1:9b:3c:b5:2b:19:92:d5:8c:c8:
         3a:d9:b0:20
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIULvvbySn4/eCcKcBVUC1QtXlpSRgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjVjYTllZmExM2U5MzNiYWQ5ZDFkYmVhMDYxYmJkNDVl
Zjg0NGJkZmQ2MWFiYTgwYzgwHhcNMjYxMDIzMTYxNjU3WhcNMjcxMDIyMTYyMTU3
WjAzMTEwLwYDVQQDEyhDRDk4RTIxQkJCMzNENzExNUMxMkE3NDM4M0ExNDdGOTc2
MjI1QjlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEPHE4dt5kZb
4XmWn56ATNupTGaAedJHpSBaiNexAaFl69zNUqSmiDADsjxtQX0z+TXFB9PbHxX+
DtjY1mHXkBZO3BshU1uTVz9vo91blWuxfuDZQjdZ9xpRz4MOV1GvMGy7oooMx3EP
nThU5jkpQBkipaq88vC5CUZLEbZdeIHvUmNQraI6l48Ka8USzhsXOPd8q+AIT5yy
RZcXOGwpMY0Lq0NCQ2GNLxNcB52XdRZR5WQabflo0l/YhYoIOHwxkElPBKAQ2ylp
7T7d7BqRdCJtfTKT9YxtuUH4Q2qy0flUvyv2v1vLrH/ZxTkF1OMoQipob8cKgetu
EEJfbVjSkwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFM2Y4hu7M9cRXBKnQ4OhR/l2
IlucMB8GA1UdIwQYMBaAFNIXvihBOYKTSjxAKw5nELmFqZNWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkYjk1YzAwYzhlMjQ3NjFhZWNlNzkxODM1Y2UzMTZjLzAv
RDIxN0JFMjg0MTM5ODI5MzRBM0M0MDJCMEU2NzEwQjk4NUE5OTM1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzI5NDVkZmI3LWJkMDctNDk5NS04OWVlLWYxZmYxNjlkNGJkNC9iNWNh
OWVmYTEzZTkzM2JhZDlkMWRiZWEwNjFiYmQ0NWVmODQ0YmRmZDYxYWJhODBjOC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80ZGI5NWMwMGM4ZTI0NzYxYWVjZTc5
MTgzNWNlMzE2Yy8wLzMxMzUzNjJlMzkyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzNDMwMzMzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcCVgwDQYJKoZIhvcNAQELBQAD
ggEBAHI2r19CUGIS0w7tGGEKTWDQ8V/GpHE8cKhrPyqCEdoSTOMyq5JA9qeJc2kb
nUOo+3zLo2yDzPUs05mlb85bEgGKUoEAj18S6GcXtttWXxOVrXj74Vn7yXpoIR/Q
yldPa6K/+NlYcJnXp92OTGJznYIA2KHCyOAGNXLfkEK6OAMf56fGrvGvIwGx4QvS
CKrjRWujcU/yBxqbUajT9Lfw0t/sFTE2acBZJ8zHPhke6XqIZpXPehlQnbv8gOsM
ns9B2NvDc/d1LcQPt7jhGwUBeAsSUxT/vRliX8p1t8esUE62MSovPSxvJjIO5Rlt
D886eBHr4Zs8tSsZktWMyDrZsCA=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:26 2026 by rpki-client