Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
File:                     e070577b-23d5-30b5-bedf-c5093059263c.roa (raw, json)
Hash identifier:          5NgE1HlQ9AkPCuoniWRPN0XotBpSSh3TBlmMaFeIzWY=
Subject key identifier:   50:DF:7E:86:BD:A0:5A:6F:21:9D:53:35:5A:FC:19:79:8B:6C:36:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F20F7C8F0596E8BA0EDD5A580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7342
IP address blocks:        209.131.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:c8:f0:59:6e:8b:a0:ed:d5:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=fc591136-113a-4bf3-b3dc-7041b5ad175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:31:be:d6:24:25:bc:59:d1:cd:b4:1b:da:
                    5c:30:7e:f0:0a:6f:24:9a:96:2b:e7:71:16:41:85:
                    d0:b0:b5:08:8d:d6:39:5e:56:e3:8d:b3:e1:e5:0d:
                    2c:7f:a6:54:97:30:bd:bc:38:a6:ac:25:76:7a:2e:
                    ff:d2:96:dc:cc:dd:4f:44:b2:f4:10:ed:69:e4:71:
                    44:53:1e:c8:a0:da:17:4c:21:59:36:38:69:24:48:
                    25:f7:07:9d:79:ae:a5:7b:e9:32:47:dc:d6:c5:d2:
                    f7:77:9e:de:5c:5f:b7:56:98:c5:97:f7:f6:b0:01:
                    ca:67:b9:83:2d:03:d8:53:6c:be:b0:71:47:af:69:
                    dc:8b:8a:8c:68:52:4c:1e:51:3a:78:2b:e5:4b:81:
                    ab:a7:80:c1:3f:25:22:a3:20:88:92:64:87:fe:5f:
                    6f:43:08:20:46:2e:a9:e5:10:43:b1:74:6e:f9:40:
                    0f:ce:b5:4c:d7:7d:a6:35:0a:bb:c8:f6:90:4d:e3:
                    9f:61:50:77:f7:1d:f1:9e:92:5f:39:b1:1e:1d:55:
                    09:7a:c1:41:04:b3:ce:fa:7b:85:89:dc:fb:7b:7a:
                    8c:fb:e9:72:9b:a8:c1:9d:8e:70:c3:83:12:6e:b8:
                    9f:e3:8a:41:0d:52:af:36:5c:f5:3b:1e:57:f6:d3:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DF:7E:86:BD:A0:5A:6F:21:9D:53:35:5A:FC:19:79:8B:6C:36:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:88:97:ff:23:68:4b:e0:29:c5:94:94:9d:5b:a5:81:88:8f:
         74:42:d0:c7:5d:14:36:e9:34:2c:55:85:cc:43:cc:1e:27:93:
         81:bc:d1:93:40:d7:0f:32:3e:f1:fc:bf:92:67:17:83:dc:d6:
         1b:fd:e5:a6:b9:e0:9f:f1:7c:4b:b7:41:50:c4:82:95:9f:39:
         68:3e:f7:e9:58:4e:20:83:b6:8a:e3:16:c9:80:24:4a:9e:dd:
         7b:96:39:50:fe:1c:c3:65:80:21:71:15:1d:f6:7a:7f:34:5b:
         86:f2:a5:80:d5:5e:68:67:87:74:9b:2b:76:68:fa:5a:55:44:
         0e:4d:20:84:74:fd:fa:7b:1c:22:7c:6d:18:ec:b3:5a:0a:2e:
         df:72:63:33:ee:69:88:2c:a0:d5:9c:69:b8:28:7d:f0:dd:5d:
         a3:c8:82:53:24:f6:b5:d8:5b:16:5f:bb:f6:56:6d:16:36:5f:
         df:8c:74:d3:1f:3a:f3:52:a5:2d:1e:dd:96:be:12:fb:23:03:
         68:a8:56:30:40:b6:45:b9:21:33:26:ae:e1:7f:95:7e:81:b2:
         ee:08:7b:b0:56:49:96:4c:2f:7c:3b:47:ab:4d:ea:50:2d:d3:
         be:aa:98:3b:87:c7:65:df:bc:a1:62:5f:ba:98:5c:b1:98:ef:
         b3:75:50:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98jwWW6LoO3VpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZmM1OTExMzYtMTEzYS00YmYzLWIzZGMtNzA0MWI1YWQxNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzIxvtYkJbxZ0c20G9pcMH7wCm8kmpYr53EW
QYXQsLUIjdY5XlbjjbPh5Q0sf6ZUlzC9vDimrCV2ei7/0pbczN1PRLL0EO1p5HFE
Ux7IoNoXTCFZNjhpJEgl9wedea6le+kyR9zWxdL3d57eXF+3VpjFl/f2sAHKZ7mD
LQPYU2y+sHFHr2nci4qMaFJMHlE6eCvlS4Grp4DBPyUioyCIkmSH/l9vQwggRi6p
5RBDsXRu+UAPzrVM132mNQq7yPaQTeOfYVB39x3xnpJfObEeHVUJesFBBLPO+nuF
idz7e3qM++lym6jBnY5ww4MSbrif44pBDVKvNlz1Ox5X9tPbmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDffoa9oFpvIZ1TNVr8GXmLbDZ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTA3MDU3N2ItMjNkNS0z
MGI1LWJlZGYtYzUwOTMwNTkyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWIl/8jaEvgKcWUlJ1bpYGIj3RC0MddFDbpNCxVhcxDzB4nk4G80ZNA
1w8yPvH8v5JnF4Pc1hv95aa54J/xfEu3QVDEgpWfOWg+9+lYTiCDtorjFsmAJEqe
3XuWOVD+HMNlgCFxFR32en80W4bypYDVXmhnh3SbK3Zo+lpVRA5NIIR0/fp7HCJ8
bRjss1oKLt9yYzPuaYgsoNWcabgoffDdXaPIglMk9rXYWxZfu/ZWbRY2X9+MdNMf
OvNSpS0e3Za+EvsjA2ioVjBAtkW5ITMmruF/lX6Bsu4Ie7BWSZZML3w7R6tN6lAt
076qmDuHx2XfvKFiX7qYXLGY77N1UNE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:44:02 2026 by rpki-client