Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/1d9c8ae7-0068-33f3-91f8-5d23ced9cdcd.roa
File:                     1d9c8ae7-0068-33f3-91f8-5d23ced9cdcd.roa (raw, json)
Hash identifier:          UrJubSqaE/ltRdpGPe3zlDCePcjAr+lJ3XCRKElK8RM=
Subject key identifier:   35:A6:8F:2C:0A:18:55:19:00:97:0B:74:6A:98:8C:ED:DA:05:9F:81
Certificate issuer:       /CN=e18de155-e4c1-48c7-b76b-417155a529e7
Certificate serial:       010D0C9F4328584F3052687DF0A3B1DE936FE5A0
Authority key identifier: 4C:57:CA:A1:FE:2A:41:EE:86:1A:9E:D2:BF:A3:09:AB:EC:2D:4E:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/1d9c8ae7-0068-33f3-91f8-5d23ced9cdcd.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     7381
IP address blocks:        65.38.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/e18de155-e4c1-48c7-b76b-417155a529e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/e18de155-e4c1-48c7-b76b-417155a529e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:68:7d:f0:a3:b1:de:93:6f:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18de155-e4c1-48c7-b76b-417155a529e7
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=f5f66780-f150-4b89-a109-98abca5e270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:44:42:de:68:5c:0f:f8:22:c7:04:67:65:
                    9a:78:67:ae:f1:dd:be:64:62:17:8a:27:2f:a2:d4:
                    bd:83:30:0e:78:71:e0:18:3c:17:4d:53:06:b1:3b:
                    45:b1:29:57:91:e9:4d:23:18:25:21:d2:b3:ab:e4:
                    b4:b5:b8:5a:49:f8:42:74:fd:c6:97:44:0e:c8:fc:
                    15:18:c9:19:d0:d0:bd:d0:c7:8b:08:98:4b:96:f6:
                    23:f9:e3:78:5a:61:e9:55:a6:73:d1:3d:af:cb:3c:
                    65:32:b3:27:e1:19:f7:18:a2:27:e9:95:1c:26:55:
                    f5:10:a9:71:a4:80:33:a9:d1:78:24:74:21:f3:df:
                    b2:b2:dc:91:dd:09:63:2a:f0:03:3c:ab:c2:ef:f1:
                    35:19:0d:22:a0:b5:34:85:3d:9c:5b:e0:8b:ab:34:
                    74:e0:dd:f0:c0:a5:22:82:fb:8c:8d:8c:e8:17:cb:
                    33:cb:ac:fb:72:98:c3:11:1a:5d:ac:91:f3:51:e5:
                    39:4a:ad:b8:39:4c:a6:2f:1b:78:7d:88:4f:09:9c:
                    17:5f:4d:a2:57:cb:2b:97:a6:77:59:2a:32:6c:72:
                    94:8f:11:ba:a7:4e:39:19:33:a2:e6:07:64:06:8b:
                    38:52:eb:71:2e:78:b0:dd:d6:97:70:a2:bf:c4:39:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:8F:2C:0A:18:55:19:00:97:0B:74:6A:98:8C:ED:DA:05:9F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/1d9c8ae7-0068-33f3-91f8-5d23ced9cdcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7/e18de155-e4c1-48c7-b76b-417155a529e7.crl

            X509v3 Authority Key Identifier:
                keyid:4C:57:CA:A1:FE:2A:41:EE:86:1A:9E:D2:BF:A3:09:AB:EC:2D:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e18de155-e4c1-48c7-b76b-417155a529e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:bd:64:76:57:a8:6a:ae:9f:0a:c9:82:84:db:ec:32:55:
         10:50:a4:d3:e6:0b:ad:23:24:02:be:76:0a:d4:2c:bf:dc:83:
         ce:4e:18:74:18:19:9c:f9:b9:a3:84:5d:e6:70:c0:09:25:76:
         18:9b:85:76:7e:87:f6:9a:94:d6:01:8e:ec:f8:01:03:ed:89:
         ab:b7:5c:a7:72:03:1f:cb:f5:5d:6e:ea:39:a3:32:0a:23:56:
         64:f8:87:87:28:cb:e9:88:d8:ca:fc:c6:5e:61:89:d7:c0:70:
         7a:76:47:e5:47:9f:a8:de:f8:d7:b6:51:a5:d9:5d:a9:52:6c:
         c3:5a:e5:ad:ec:f6:5e:0b:77:96:b1:2b:1b:d5:c6:8a:2c:c0:
         66:29:cb:9b:2e:0b:bb:6e:8e:76:b5:4c:b7:96:a6:51:f6:ec:
         f4:dc:4c:43:0a:d8:70:8e:c3:91:68:5c:ee:f2:92:86:36:13:
         ef:11:7b:58:b8:91:7d:95:c9:02:b8:4e:b0:8b:23:1d:c4:6c:
         75:70:f2:e0:66:6f:4e:c2:5d:3b:44:47:c3:24:bb:b7:7c:73:
         31:84:6b:d3:d1:b4:5b:54:01:4a:f7:31:68:ba:2c:8d:d5:75:
         df:98:7f:bd:4b:92:49:26:80:d0:c1:7d:7d:89:47:88:b3:48:
         fd:a6:d6:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmh98KOx3pNv5aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4ZGUxNTUtZTRjMS00OGM3LWI3NmItNDE3MTU1YTUy
OWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjVmNjY3ODAtZjE1MC00Yjg5LWExMDktOThhYmNhNWUyNzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwtEQt5oXA/4IscEZ2WaeGeu8d2+ZGIXiicv
otS9gzAOeHHgGDwXTVMGsTtFsSlXkelNIxglIdKzq+S0tbhaSfhCdP3Gl0QOyPwV
GMkZ0NC90MeLCJhLlvYj+eN4WmHpVaZz0T2vyzxlMrMn4Rn3GKIn6ZUcJlX1EKlx
pIAzqdF4JHQh89+ystyR3QljKvADPKvC7/E1GQ0ioLU0hT2cW+CLqzR04N3wwKUi
gvuMjYzoF8szy6z7cpjDERpdrJHzUeU5Sq24OUymLxt4fYhPCZwXX02iV8srl6Z3
WSoybHKUjxG6p045GTOi5gdkBos4UutxLniw3daXcKK/xDnrPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWmjywKGFUZAJcLdGqYjO3aBZ+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lMThk
ZTE1NS1lNGMxLTQ4YzctYjc2Yi00MTcxNTVhNTI5ZTcvMWQ5YzhhZTctMDA2OC0z
M2YzLTkxZjgtNWQyM2NlZDljZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTE4ZGUxNTUtZTRjMS00OGM3LWI3
NmItNDE3MTU1YTUyOWU3L2UxOGRlMTU1LWU0YzEtNDhjNy1iNzZiLTQxNzE1NWE1
MjllNy5jcmwwHwYDVR0jBBgwFoAUTFfKof4qQe6GGp7Sv6MJq+wtTqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lMThkZTE1NS1lNGMxLTQ4YzctYjc2Yi00MTcx
NTVhNTI5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxSvWR2V6hqrp8KyYKE2+wyVRBQpNPmC60jJAK+dgrULL/cg85OGHQY
GZz5uaOEXeZwwAkldhibhXZ+h/aalNYBjuz4AQPtiau3XKdyAx/L9V1u6jmjMgoj
VmT4h4coy+mI2Mr8xl5hidfAcHp2R+VHn6je+Ne2UaXZXalSbMNa5a3s9l4Ld5ax
KxvVxooswGYpy5suC7tujna1TLeWplH27PTcTEMK2HCOw5FoXO7ykoY2E+8Re1i4
kX2VyQK4TrCLIx3EbHVw8uBmb07CXTtER8Mku7d8czGEa9PRtFtUAUr3MWi6LI3V
dd+Yf71LkkkmgNDBfX2JR4izSP2m1p8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:01 2026 by rpki-client