Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa
File:                     c7177ce2-86bc-3906-bf40-1e0fedcda713.roa (raw, json)
Hash identifier:          S6EZ3A5FhGEkReyjhTFhrUyHAeJPXlhSkVN8JKZxYlQ=
Subject key identifier:   B9:8B:85:9B:6F:AC:51:B5:74:33:29:4B:CE:5A:20:8D:1D:24:F6:80
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584F49764E8F1B700E076B72D700
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23528
IP address blocks:        168.203.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:4e:8f:1b:70:0e:07:6b:72:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6618932-017d-48ed-8c1c-36ea65bb28cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:62:86:42:35:b9:2d:d7:5f:cb:16:08:c3:
                    01:1a:c6:fa:15:7c:84:fd:a6:c2:9b:f2:ce:77:bd:
                    58:31:5f:68:63:11:e2:2f:c9:4d:be:2f:68:74:db:
                    62:d3:68:76:95:93:c7:81:db:1e:d5:ea:de:f0:80:
                    36:9b:9b:6e:e7:fb:ec:62:8f:2e:84:29:1a:09:68:
                    f3:55:9c:d9:b7:a4:e9:34:cf:ef:d8:48:5d:58:6c:
                    6d:9c:7a:50:df:3f:6a:cf:8f:eb:bc:9f:34:00:9a:
                    aa:21:83:23:19:4d:91:7d:a9:c9:63:ac:9e:4d:17:
                    93:e0:df:17:e0:45:99:fa:05:1b:44:3c:0e:21:27:
                    85:7a:0a:ee:c0:03:d3:8f:01:43:34:39:20:ae:2e:
                    43:58:00:e7:c3:f8:ec:7a:e1:74:d8:52:fd:2d:d9:
                    32:04:fb:67:8c:b3:ca:52:6c:1c:db:c3:f9:d7:f5:
                    15:cd:90:f2:2a:7f:52:10:0a:ee:73:8b:e2:4f:1b:
                    d5:23:17:25:95:30:61:84:aa:72:2f:9d:1b:88:2c:
                    38:0c:8e:98:fe:3b:f1:bf:fd:8c:25:93:fd:90:20:
                    e1:7b:fe:74:17:99:f4:7d:69:91:5d:06:6e:79:e3:
                    3d:c0:08:dc:c0:92:37:78:53:84:62:85:bf:22:0c:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:85:9B:6F:AC:51:B5:74:33:29:4B:CE:5A:20:8D:1D:24:F6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/c7177ce2-86bc-3906-bf40-1e0fedcda713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:f5:30:cb:64:4b:f7:be:1a:e9:99:a9:d2:be:51:df:62:
         ac:46:6b:19:06:0e:1f:ad:3a:20:c7:1b:53:40:68:e4:5a:f9:
         45:52:9f:41:5e:d6:1f:54:5c:cb:24:22:0f:a3:5a:1e:2e:78:
         01:d0:44:32:57:2a:4f:d8:8d:6e:24:ae:3d:78:98:43:ed:49:
         ec:33:49:67:70:5b:e1:15:e4:0d:c7:60:db:dd:02:31:af:4e:
         c7:92:e4:e1:c4:9b:d3:70:b3:ab:7a:0b:55:07:e9:9f:22:51:
         a2:af:70:79:14:a8:8d:46:1a:8a:fd:a8:1a:31:22:c9:25:8b:
         b4:95:6a:eb:44:6f:13:90:d9:81:9e:50:42:88:ad:e6:73:9a:
         52:92:bf:95:0c:61:2e:1e:c3:89:fe:b6:fa:0e:79:ca:bf:31:
         ce:8a:dd:fb:3f:fb:1c:f4:7c:30:4d:db:da:8d:e6:7e:96:99:
         85:9e:ab:c4:69:89:ed:b2:d6:70:15:67:5b:37:9e:3b:0c:83:
         18:cf:32:18:ae:ab:28:50:60:ee:b7:4c:ec:f7:b1:08:3d:c6:
         cc:c2:6f:fd:96:98:dc:32:e6:6a:0e:44:11:7f:88:89:2f:c8:
         27:72:42:0e:0d:2f:07:ca:c7:2b:7d:88:b0:f4:9d:ff:7b:b5:
         ec:a7:27:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdk6PG3AOB2ty1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi
MDRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTY2MTg5MzItMDE3ZC00OGVkLThjMWMtMzZlYTY1YmIyOGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJVihkI1uS3XX8sWCMMBGsb6FXyE/abCm/LO
d71YMV9oYxHiL8lNvi9odNti02h2lZPHgdse1ere8IA2m5tu5/vsYo8uhCkaCWjz
VZzZt6TpNM/v2EhdWGxtnHpQ3z9qz4/rvJ80AJqqIYMjGU2RfanJY6yeTReT4N8X
4EWZ+gUbRDwOISeFegruwAPTjwFDNDkgri5DWADnw/jseuF02FL9LdkyBPtnjLPK
Umwc28P51/UVzZDyKn9SEAruc4viTxvVIxcllTBhhKpyL50biCw4DI6Y/jvxv/2M
JZP9kCDhe/50F5n0fWmRXQZueeM9wAjcwJI3eFOEYoW/IgyoqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmLhZtvrFG1dDMpS85aII0dJPaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj
ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYzcxNzdjZTItODZiYy0z
OTA2LWJmNDAtMWUwZmVkY2RhNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5
ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw
YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2
ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvR9TDLZEv3vhrpmanSvlHfYqxGaxkGDh+tOiDHG1NAaORa+UVSn0Fe
1h9UXMskIg+jWh4ueAHQRDJXKk/YjW4krj14mEPtSewzSWdwW+EV5A3HYNvdAjGv
TseS5OHEm9Nws6t6C1UH6Z8iUaKvcHkUqI1GGor9qBoxIskli7SVautEbxOQ2YGe
UEKIreZzmlKSv5UMYS4ew4n+tvoOecq/Mc6K3fs/+xz0fDBN29qN5n6WmYWeq8Rp
ie2y1nAVZ1s3njsMgxjPMhiuqyhQYO63TOz3sQg9xszCb/2WmNwy5moORBF/iIkv
yCdyQg4NLwfKxyt9iLD0nf97teynJ/0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:39:32 2026 by rpki-client