Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa
File:                     0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa (raw, json)
Hash identifier:          7/Fbf4hlmATzjpZc/ThMjzQAL8+rtduv+JMNcmdfzbk=
Subject key identifier:   DE:CE:C7:46:EF:F1:A8:35:9A:1D:F3:73:DD:10:C9:0C:BE:00:1A:25
Certificate issuer:       /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
Certificate serial:       010D0C9F4328584F30526E396B55CB6B024BFE80
Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     393669
IP address blocks:        192.234.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6e:39:6b:55:cb:6b:02:4b:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=f4253469-5428-4384-9b16-c7b2e77807f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:4e:42:9a:ed:4a:b6:54:ba:8b:1f:1f:96:
                    13:37:84:aa:62:a7:9c:b8:c6:ec:af:65:1a:4a:b1:
                    94:e6:45:6c:12:ad:6e:2b:1b:3c:9c:fa:a1:09:09:
                    e1:81:a6:90:d2:71:b4:09:2c:4d:f8:af:46:d8:60:
                    14:c2:be:e6:aa:8c:64:a7:d7:d2:7c:91:3d:31:27:
                    f9:99:35:0e:80:0a:39:f9:96:8e:c6:66:4e:ed:c1:
                    4e:5c:71:fa:51:fc:96:93:d6:7a:b4:8a:e9:63:f2:
                    65:e0:6d:1f:52:23:d4:64:bf:55:60:1e:7c:a6:f1:
                    27:6d:d0:c6:ed:06:ef:0e:15:e2:49:d4:71:a6:54:
                    7a:3b:1a:63:ce:f0:6c:15:99:5a:5b:ba:96:6a:e5:
                    d3:9c:0f:f8:80:10:83:37:d6:48:2d:5c:ca:09:34:
                    8a:e4:7e:d7:a7:ec:cb:86:70:7f:b4:93:6b:96:d7:
                    20:e3:d0:46:f7:9a:48:e2:c0:c9:72:d8:2e:b1:56:
                    bb:33:20:f2:4b:e7:cf:81:09:9f:46:8e:ed:3e:ed:
                    a6:07:d7:7b:dc:61:8b:7e:95:8e:a9:32:a4:1c:df:
                    3d:82:dc:e9:51:37:64:7d:03:df:5c:f1:f6:12:ad:
                    9f:88:14:a2:33:f9:96:ce:79:88:04:09:fc:7a:c3:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CE:C7:46:EF:F1:A8:35:9A:1D:F3:73:DD:10:C9:0C:BE:00:1A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl

            X509v3 Authority Key Identifier:
                keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:6f:64:29:7b:8b:5f:e3:83:82:f1:4e:1b:bd:fe:e2:9b:
         45:86:f1:aa:ae:44:63:29:6b:13:d4:53:ce:91:f3:15:20:eb:
         85:25:6c:a1:77:df:fb:fd:1f:88:d9:5c:6e:6c:58:f5:6f:ed:
         fe:bf:17:e0:9a:2f:95:c0:a6:8a:82:ab:f1:e7:97:69:10:88:
         4f:01:6c:e2:3d:a3:b6:cb:1c:dd:52:8c:a7:f2:f3:d6:cc:07:
         ce:fa:dd:16:ec:85:2f:57:77:9b:fe:93:ff:1c:38:f5:11:12:
         24:91:5d:78:77:22:b8:ab:15:1d:42:4f:fc:b2:10:80:2b:0f:
         c7:ce:b7:02:c3:c3:3a:d3:11:e7:da:e4:12:36:d9:c4:3d:6e:
         a6:05:b2:c2:d7:ae:83:63:09:76:48:68:2c:66:9b:a7:71:22:
         1b:82:be:62:01:d0:9f:25:57:79:d4:79:77:0b:b0:8b:74:09:
         81:e4:ee:2a:d9:9b:9a:ba:95:e0:2a:06:c1:98:15:dd:a2:a1:
         6a:18:16:e8:bc:db:61:a6:c7:ec:df:ec:48:eb:e7:5e:4c:a3:
         c5:e2:6b:49:45:dc:01:83:a5:0d:d3:71:17:e0:f3:7a:72:dd:
         af:80:8e:3d:46:71:6c:e4:9e:7f:41:40:9f:65:ff:23:ef:53:
         1e:a8:9b:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUm45a1XLawJL/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU4YWI0YzktNjkzMy00OWJmLWI2YjQtZTRkMzkzNWVk
YTIyMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjQyNTM0NjktNTQyOC00Mzg0LTliMTYtYzdiMmU3NzgwN2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEZOQprtSrZUuosfH5YTN4SqYqecuMbsr2Ua
SrGU5kVsEq1uKxs8nPqhCQnhgaaQ0nG0CSxN+K9G2GAUwr7mqoxkp9fSfJE9MSf5
mTUOgAo5+ZaOxmZO7cFOXHH6UfyWk9Z6tIrpY/Jl4G0fUiPUZL9VYB58pvEnbdDG
7QbvDhXiSdRxplR6OxpjzvBsFZlaW7qWauXTnA/4gBCDN9ZILVzKCTSK5H7Xp+zL
hnB/tJNrltcg49BG95pI4sDJctgusVa7MyDyS+fPgQmfRo7tPu2mB9d73GGLfpWO
qTKkHN89gtzpUTdkfQPfXPH2Eq2fiBSiM/mWznmIBAn8esP5qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7Ox0bv8ag1mh3zc90QyQy+ABolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThh
YjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQzOTM1ZWRhMjIvMGFlOGQzMzItM2ZiMC0z
Y2Q3LWE5ODgtZmExNmJlZjVjODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDU4YWI0YzktNjkzMy00OWJmLWI2
YjQtZTRkMzkzNWVkYTIyL2Q1OGFiNGM5LTY5MzMtNDliZi1iNmI0LWU0ZDM5MzVl
ZGEyMi5jcmwwHwYDVR0jBBgwFoAULXN/U+hZd50EmPQizfsac2SEbJ8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThhYjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQz
OTM1ZWRhMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnEb2Qpe4tf44OC8U4bvf7im0WG8aquRGMpaxPUU86R8xUg64UlbKF3
3/v9H4jZXG5sWPVv7f6/F+CaL5XApoqCq/Hnl2kQiE8BbOI9o7bLHN1SjKfy89bM
B8763RbshS9Xd5v+k/8cOPUREiSRXXh3IrirFR1CT/yyEIArD8fOtwLDwzrTEefa
5BI22cQ9bqYFssLXroNjCXZIaCxmm6dxIhuCvmIB0J8lV3nUeXcLsIt0CYHk7irZ
m5q6leAqBsGYFd2ioWoYFui822Gmx+zf7Ejr515Mo8Xia0lF3AGDpQ3TcRfg83py
3a+Ajj1GcWzknn9BQJ9l/yPvUx6omxs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:35:01 2026 by rpki-client