Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa
File:                     82557685-7b5f-3eb5-a736-6796688e9f9a.roa (raw, json)
Hash identifier:          Mh5YQZjH7j9mqmwtyNTdEAnZAlWhx7xg7S7upey6BTk=
Subject key identifier:   7D:41:20:9E:69:63:66:B3:AE:E3:BC:31:CD:98:D8:BF:E9:53:0C:E1
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F3CE276507DCBC36CAE35B000
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     40010
IP address blocks:        65.124.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:76:50:7d:cb:c3:6c:ae:35:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=20907179-cb57-4059-9324-2d8e9e644320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:67:10:7b:74:a5:6a:31:93:3a:d2:4c:d2:
                    48:4f:e6:47:92:33:04:1f:66:b2:73:10:ef:bd:7c:
                    5a:29:69:7f:13:39:31:e6:ee:cf:9e:ff:85:6a:48:
                    4a:43:1e:b0:4e:eb:69:37:92:74:77:8e:47:fd:02:
                    69:35:5a:95:6b:f2:0a:0c:27:fe:de:86:40:92:f1:
                    a0:c4:aa:e0:f6:9f:70:16:39:e2:76:69:b8:2c:5b:
                    c5:c4:7f:7d:6d:a8:a8:35:31:89:91:fc:24:7f:22:
                    e6:ed:a9:88:22:a9:d8:37:13:35:e1:30:6c:37:6f:
                    8c:0b:a9:b2:eb:83:fe:4a:12:70:f7:50:0f:7f:81:
                    7b:b6:d2:08:bc:4a:bd:2e:1c:16:8c:1f:12:da:34:
                    4d:ab:fb:07:a8:09:18:30:4c:82:f6:e3:85:96:f5:
                    fe:76:e9:ae:92:9b:1f:bb:f9:c1:38:14:f1:20:78:
                    88:d5:de:fd:c6:da:d6:f7:49:3d:49:ab:5f:c5:88:
                    00:cd:cc:92:fd:31:ed:46:d1:59:d7:6f:69:94:cb:
                    c0:24:3f:ed:ca:47:41:14:d9:ad:a3:bb:86:2c:fa:
                    f2:84:77:d8:85:a4:92:49:10:09:80:14:b7:4c:24:
                    9a:f3:77:02:d2:32:f0:b1:38:63:81:f3:8c:d0:ef:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:20:9E:69:63:66:B3:AE:E3:BC:31:CD:98:D8:BF:E9:53:0C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.124.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:94:c4:48:19:2d:4a:75:82:d9:d4:81:96:d6:86:22:5a:22:
         9a:93:b2:03:b6:cc:bd:a9:58:d2:61:50:e0:9f:3a:59:12:a2:
         6b:a5:bf:5e:13:11:6a:a8:67:cd:5e:7c:c0:25:71:ce:1c:0c:
         e4:c5:4b:0a:7f:59:86:5d:6f:50:0c:ae:3a:53:25:23:56:d7:
         7b:49:9f:e5:74:7a:00:cb:0d:7e:b9:47:e9:2f:b8:2c:f7:0a:
         fa:9c:88:f7:76:c1:16:0b:8d:e6:56:46:02:12:8c:3e:36:e3:
         8a:c3:ad:9a:26:0a:fa:1b:99:95:bf:ce:33:a9:ef:0a:bb:20:
         c6:5f:6b:fd:22:85:92:19:48:04:93:40:f4:44:47:78:70:05:
         7c:60:fc:84:05:41:3a:8f:21:ae:59:ca:11:74:ce:6c:99:f0:
         6b:87:61:4c:1c:30:16:35:e5:aa:9e:73:2f:da:30:c2:31:2e:
         87:66:38:6a:88:84:9f:d8:2d:05:75:0c:db:8f:a9:fc:7b:9f:
         32:8d:11:af:b7:98:ae:c6:af:20:4e:3d:86:b5:e7:da:7a:f7:
         5c:a4:ea:0c:01:3f:9d:26:98:ba:59:e5:59:11:90:13:d1:6e:
         48:a6:4d:83:51:d2:49:06:33:7d:f9:64:f1:c4:13:5b:b8:74:
         eb:52:46:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nZQfcvDbK41sAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MjA5MDcxNzktY2I1Ny00MDU5LTkzMjQtMmQ4ZTllNjQ0MzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ZnEHt0pWoxkzrSTNJIT+ZHkjMEH2aycxDv
vXxaKWl/Ezkx5u7Pnv+FakhKQx6wTutpN5J0d45H/QJpNVqVa/IKDCf+3oZAkvGg
xKrg9p9wFjnidmm4LFvFxH99baioNTGJkfwkfyLm7amIIqnYNxM14TBsN2+MC6my
64P+ShJw91APf4F7ttIIvEq9LhwWjB8S2jRNq/sHqAkYMEyC9uOFlvX+dumukpsf
u/nBOBTxIHiI1d79xtrW90k9SatfxYgAzcyS/THtRtFZ129plMvAJD/tykdBFNmt
o7uGLPryhHfYhaSSSRAJgBS3TCSa83cC0jLwsThjgfOM0O8OGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1BIJ5pY2azruO8Mc2Y2L/pUwzhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODI1NTc2ODUtN2I1Zi0z
ZWI1LWE3MzYtNjc5NjY4OGU5ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQXx2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaUxEgZLUp1gtnUgZbWhiJaIpqTsgO2zL2pWNJhUOCfOlkSomulv14T
EWqoZ81efMAlcc4cDOTFSwp/WYZdb1AMrjpTJSNW13tJn+V0egDLDX65R+kvuCz3
CvqciPd2wRYLjeZWRgISjD4244rDrZomCvobmZW/zjOp7wq7IMZfa/0ihZIZSAST
QPRER3hwBXxg/IQFQTqPIa5ZyhF0zmyZ8GuHYUwcMBY15aqecy/aMMIxLodmOGqI
hJ/YLQV1DNuPqfx7nzKNEa+3mK7GryBOPYa159p691yk6gwBP50mmLpZ5VkRkBPR
bkimTYNR0kkGM335ZPHEE1u4dOtSRkU=
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:28 2026 by rpki-client