Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa
File:                     7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa (raw, json)
Hash identifier:          J0O90E4INkCCrzuAWZu/5EOkTEWu8f/Qdy6TOvqLo3M=
Subject key identifier:   49:E3:D9:B9:C3:2B:DE:CE:90:45:CA:A1:CB:96:F0:28:E0:86:D8:CE
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584EE7BCBD671F6B539D41D692C0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16696
IP address blocks:        167.94.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:bd:67:1f:6b:53:9d:41:d6:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=fe45a032-478e-4487-bc97-b76702598a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:79:94:53:c6:41:c5:d3:d6:5a:3d:ad:33:
                    f1:d8:de:b0:e4:f9:d7:81:68:04:4d:e3:f2:b4:34:
                    d3:e1:27:ef:25:18:0a:95:39:c7:58:79:85:ae:60:
                    82:53:fc:f1:26:4c:4f:4b:26:e9:30:21:cc:c1:fa:
                    15:54:49:e7:7a:99:85:fe:ff:96:39:8c:49:ae:b1:
                    09:68:f3:1c:3e:b0:45:8e:30:13:07:d6:7d:3e:01:
                    ed:10:97:00:df:3f:9e:d8:48:d4:db:71:d1:41:37:
                    5e:e2:3a:46:70:d4:cd:26:83:2a:36:55:3a:33:2a:
                    76:b0:9b:3b:77:b6:8b:22:7a:a6:2d:0c:66:30:55:
                    4e:a7:79:bb:dd:ae:61:ba:d4:3a:e0:91:7a:fb:0a:
                    ac:88:e4:cd:79:40:53:a0:c3:88:d0:13:dd:eb:46:
                    28:75:df:a8:a7:68:1e:00:05:db:de:a7:1c:d0:13:
                    a8:25:c4:39:26:86:9c:7c:be:5c:63:83:11:e5:64:
                    08:42:7a:16:12:51:3d:40:81:82:f9:bd:93:4e:f2:
                    1d:fa:aa:cb:63:49:28:de:c9:88:2d:ac:a2:9d:f9:
                    e9:b9:8d:5c:b6:73:b9:91:40:45:05:0b:71:8d:63:
                    74:a1:88:1c:80:73:46:ef:75:04:11:d7:36:be:1e:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E3:D9:B9:C3:2B:DE:CE:90:45:CA:A1:CB:96:F0:28:E0:86:D8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:b1:c5:ee:56:21:85:5f:6c:d0:b7:30:f7:c6:f6:3c:ba:
         ef:17:16:c6:43:64:c5:e6:72:de:12:05:d0:3f:ff:1c:bf:3c:
         ee:cf:59:cf:c6:8e:08:8e:a6:98:18:a9:d5:9e:b7:9b:25:0a:
         1a:88:4f:67:51:ff:92:d7:8d:8e:95:84:3b:9a:50:5d:28:94:
         50:54:cd:68:13:93:10:b5:26:6f:f3:d8:1a:1f:16:c1:28:43:
         df:43:df:47:22:9f:7c:ee:2c:1b:6f:ca:f7:7f:5d:78:df:cb:
         d9:4d:35:a6:f2:9c:ec:37:cc:56:ed:96:b7:34:aa:4e:07:6a:
         bb:c8:83:7d:bc:55:d8:c4:47:0b:76:6a:7c:f2:dd:5b:88:d2:
         b7:22:ee:45:4d:19:08:56:b6:c7:ce:f2:ff:57:29:cf:f5:8a:
         d9:2d:15:39:a4:35:5c:ed:8d:f0:0e:29:af:fe:41:f2:40:21:
         b3:f5:70:8c:9c:a5:79:af:a5:62:65:41:54:ea:dc:58:c2:9b:
         a4:14:f5:c8:d1:b4:46:3e:a0:04:01:93:cf:43:3f:ac:d8:e7:
         f0:2e:8d:42:76:83:59:86:98:21:ff:5b:e4:06:db:93:b9:91:
         a4:8e:8f:b6:fc:fb:cc:3a:2e:b6:aa:5c:d5:f4:27:bf:99:31:
         e6:e2:e6:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvL1nH2tTnUHWksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZmU0NWEwMzItNDc4ZS00NDg3LWJjOTctYjc2NzAyNTk4YTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6F5lFPGQcXT1lo9rTPx2N6w5PnXgWgETePy
tDTT4SfvJRgKlTnHWHmFrmCCU/zxJkxPSybpMCHMwfoVVEnnepmF/v+WOYxJrrEJ
aPMcPrBFjjATB9Z9PgHtEJcA3z+e2EjU23HRQTde4jpGcNTNJoMqNlU6Myp2sJs7
d7aLInqmLQxmMFVOp3m73a5hutQ64JF6+wqsiOTNeUBToMOI0BPd60Yodd+op2ge
AAXb3qcc0BOoJcQ5JoacfL5cY4MR5WQIQnoWElE9QIGC+b2TTvId+qrLY0ko3smI
LayinfnpuY1ctnO5kUBFBQtxjWN0oYgcgHNG73UEEdc2vh5HEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnj2bnDK97OkEXKocuW8CjghtjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvN2IzNmExNTAtODYwMi0z
ZTFmLTg3ZTktZTJjZWQ1YTQ3NmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp15oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5oscXuViGFX2zQtzD3xvY8uu8XFsZDZMXmct4SBdA//xy/PO7PWc/G
jgiOppgYqdWet5slChqIT2dR/5LXjY6VhDuaUF0olFBUzWgTkxC1Jm/z2BofFsEo
Q99D30cin3zuLBtvyvd/XXjfy9lNNabynOw3zFbtlrc0qk4HarvIg328VdjERwt2
anzy3VuI0rci7kVNGQhWtsfO8v9XKc/1itktFTmkNVztjfAOKa/+QfJAIbP1cIyc
pXmvpWJlQVTq3FjCm6QU9cjRtEY+oAQBk89DP6zY5/AujUJ2g1mGmCH/W+QG25O5
kaSOj7b8+8w6LraqXNX0J7+ZMebi5hw=
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:43:47 2026 by rpki-client