Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
File:                     afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa (raw, json)
Hash identifier:          47KpLFIdDGDhP4BK626SbIoNXidYpRRxGEm5dZjVWqU=
Subject key identifier:   E0:FC:96:DE:96:5A:5E:25:D9:DB:9A:6D:18:DC:9B:71:78:C3:DE:79
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584F49730C96E8184D83C735CF80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46407
IP address blocks:        173.199.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:0c:96:e8:18:4d:83:c7:35:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7175111a-b76a-405f-b6a6-76ea38d14848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:86:37:f4:3c:d3:32:23:85:3a:e8:66:f5:
                    6b:82:f9:ae:8b:72:a9:7d:26:8c:04:38:83:86:39:
                    12:0f:ea:4b:ba:20:27:31:fc:6a:1f:be:17:24:ef:
                    4d:19:e1:54:8f:e4:0a:c3:22:ca:e2:68:24:ae:0a:
                    44:b9:f2:71:e9:f1:41:bc:9d:f2:e7:c8:eb:86:ab:
                    21:1e:57:7d:3a:8a:94:1a:ff:93:d3:48:5d:3e:85:
                    5e:b0:21:97:bd:5b:af:3e:17:e1:55:44:6e:f9:c5:
                    a3:57:a9:8b:78:3c:f8:e6:c0:42:ee:5b:3f:95:4c:
                    60:05:50:10:2a:e7:17:cb:49:ea:83:77:f2:00:74:
                    b8:7d:2f:13:15:fe:b3:7d:e8:6e:62:00:de:df:b0:
                    ed:8a:03:73:39:d7:21:e0:e4:95:a8:50:68:fc:70:
                    fa:93:83:7c:f4:cd:e0:f2:45:64:70:36:86:83:bc:
                    14:a1:35:85:75:53:1b:e1:98:ff:08:77:99:68:e0:
                    48:dc:9d:f5:0d:15:88:d2:26:1a:b9:49:62:81:e0:
                    e4:9e:80:a5:1b:59:ea:a4:1b:c7:21:6c:54:ee:42:
                    12:0a:35:1a:7f:c6:fa:ab:d3:b7:ec:03:3a:ed:46:
                    dc:b7:fe:a4:9d:e8:a4:c2:5e:72:52:9b:c6:e9:08:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:96:DE:96:5A:5E:25:D9:DB:9A:6D:18:DC:9B:71:78:C3:DE:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:14:a3:25:f9:7d:77:81:16:a8:f8:93:78:7d:6e:79:d8:74:
         16:61:3b:28:9f:2c:84:f2:cc:21:ad:ce:1f:84:ac:09:1a:60:
         69:a0:ea:40:8a:46:75:86:e7:b3:ef:46:60:ab:87:bb:1d:95:
         e3:e4:18:97:6f:d0:3d:f2:99:6b:f6:07:35:de:c4:a1:19:6b:
         ff:56:50:d4:0e:e8:a7:be:78:ee:53:7c:7d:91:ad:28:40:ac:
         61:83:f3:14:ec:db:0f:f9:2f:b4:cc:0a:d2:49:94:fc:0b:9a:
         67:7e:57:c9:47:1b:db:5b:6c:cc:1d:d7:3b:88:ee:76:62:8b:
         38:25:2e:9d:51:bf:d9:a9:96:90:74:11:d4:d3:00:5c:bc:9c:
         72:93:4e:3c:bc:77:ad:4f:60:b9:34:a8:b5:0e:c2:28:ae:97:
         55:6f:ed:b3:7d:3d:14:88:5d:ab:91:de:ca:fc:f0:a1:6c:7b:
         c9:80:82:e0:02:f5:a8:9d:2e:e4:6a:20:fa:b1:04:b3:bb:09:
         85:cb:0a:3e:c2:11:b5:6a:91:4f:2b:2d:91:56:6e:8d:27:3a:
         8b:76:75:5d:8f:2f:2f:94:78:b3:59:8c:06:26:bc:56:d4:65:
         f3:4b:ca:fa:f2:7f:99:23:3d:9f:a6:ff:9c:7d:65:28:98:3e:
         c7:1b:eb:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwyW6BhNg8c1z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzE3NTExMWEtYjc2YS00MDVmLWI2YTYtNzZlYTM4ZDE0ODQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hCGN/Q80zIjhTroZvVrgvmui3KpfSaMBDiD
hjkSD+pLuiAnMfxqH74XJO9NGeFUj+QKwyLK4mgkrgpEufJx6fFBvJ3y58jrhqsh
Hld9OoqUGv+T00hdPoVesCGXvVuvPhfhVURu+cWjV6mLeDz45sBC7ls/lUxgBVAQ
KucXy0nqg3fyAHS4fS8TFf6zfehuYgDe37DtigNzOdch4OSVqFBo/HD6k4N89M3g
8kVkcDaGg7wUoTWFdVMb4Zj/CHeZaOBI3J31DRWI0iYauUligeDknoClG1nqpBvH
IWxU7kISCjUaf8b6q9O37AM67Ubct/6kneikwl5yUpvG6QghxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOD8lt6WWl4l2duabRjcm3F4w955MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvYWZjMmY4ZTAtNmQxYy0z
N2U4LWJkYzctYzRlZDJiZjNlMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcdjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0UoyX5fXeBFqj4k3h9bnnYdBZhOyifLITyzCGtzh+ErAkaYGmg6kCK
RnWG57PvRmCrh7sdlePkGJdv0D3ymWv2BzXexKEZa/9WUNQO6Ke+eO5TfH2RrShA
rGGD8xTs2w/5L7TMCtJJlPwLmmd+V8lHG9tbbMwd1zuI7nZiizglLp1Rv9mplpB0
EdTTAFy8nHKTTjy8d61PYLk0qLUOwiiul1Vv7bN9PRSIXauR3sr88KFse8mAguAC
9aidLuRqIPqxBLO7CYXLCj7CEbVqkU8rLZFWbo0nOot2dV2PLy+UeLNZjAYmvFbU
ZfNLyvryf5kjPZ+m/5x9ZSiYPscb68A=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:52:25 2026 by rpki-client