Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
File:                     85beb1b8-b364-349e-8940-19989e438bc7.roa (raw, json)
Hash identifier:          dPCA/8tKJuePvBlJQ8D7LJr9ya/hlMLinJIE+EZItiY=
Subject key identifier:   EC:C0:56:30:5C:68:CD:7E:2C:0F:48:B6:54:83:80:13:CB:51:F2:62
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F2ABD23E3D7A0BCD643B7BD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.94.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:23:e3:d7:a0:bc:d6:43:b7:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=08ad73de-45bc-4450-938d-db46c47fea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:94:77:d2:1a:e5:45:2d:21:16:eb:53:76:
                    a4:3b:e9:c7:d4:54:8a:73:d8:29:47:c4:54:23:25:
                    75:0e:b3:10:5a:1b:7f:07:bd:1f:27:1a:52:f3:d4:
                    60:2d:20:40:5f:e3:35:eb:39:9d:48:da:c5:48:c6:
                    d7:bb:99:8f:92:ef:8c:19:d5:2e:69:89:c5:34:fe:
                    66:97:85:13:63:3d:39:fc:32:eb:80:76:e6:f2:f1:
                    b9:55:2a:77:09:be:bd:88:ed:4e:6e:64:7c:17:e2:
                    5c:de:01:62:6e:a5:24:f9:16:4b:96:cd:bf:03:01:
                    10:93:59:f1:74:0f:3c:03:96:7b:c4:71:4e:76:aa:
                    a8:92:c1:e1:40:8c:a0:f8:cb:9e:69:dd:25:44:da:
                    02:cb:98:10:72:6e:cc:32:26:ad:4a:b2:9d:6e:22:
                    f7:17:db:5e:a6:68:d7:a8:e8:6b:0a:74:94:84:79:
                    d7:b6:d9:34:50:61:79:86:1b:ae:fc:ba:ba:55:ef:
                    82:20:df:b0:70:2c:10:96:0a:c3:42:7f:79:62:a1:
                    e8:3b:cf:21:cb:c4:cf:c9:51:90:bc:74:0b:93:61:
                    c7:f9:87:b2:b6:5f:3b:5a:d2:75:72:8b:03:21:ba:
                    ec:99:ff:64:60:a7:8c:65:50:37:8a:01:fd:de:66:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C0:56:30:5C:68:CD:7E:2C:0F:48:B6:54:83:80:13:CB:51:F2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:15:0e:ee:3e:eb:01:7a:f9:ff:5d:f4:b0:ad:37:d2:72:90:
         29:1b:f1:46:ae:60:e8:8f:cf:58:db:82:01:56:60:5f:d2:23:
         4a:52:25:03:ff:2d:5d:7f:52:0b:7a:9c:ac:c9:36:79:ac:b7:
         bf:21:d5:10:83:64:fd:dc:f5:c8:27:b9:42:0a:43:85:bc:c2:
         cb:66:e2:b9:2f:8b:00:61:1d:bb:ef:ab:47:a5:7d:00:e4:54:
         d0:66:78:38:fb:cb:f3:32:58:69:de:5e:cc:74:4f:14:58:83:
         b3:e5:08:f5:fe:7a:bf:ca:12:d3:13:18:61:0c:ab:7a:ac:b4:
         df:4b:26:da:0c:f4:8c:1f:59:75:b1:62:3c:9f:e8:f9:14:7e:
         42:89:d2:45:c8:b5:c3:bf:c7:85:47:6e:8a:d9:cc:af:ff:8f:
         3b:f1:0a:fe:aa:1b:aa:9b:bb:0a:f9:a9:4b:65:91:98:c8:56:
         83:f7:41:bc:94:5f:5e:37:ea:59:88:06:5a:3e:1b:99:0b:13:
         2f:bf:e6:47:2c:7c:9b:4a:8d:f5:55:49:61:e6:41:f1:6f:0f:
         68:3f:3d:f6:c2:e5:f3:9f:54:b8:79:8f:99:b8:f1:78:f7:28:
         13:52:0a:67:8c:5c:68:b8:39:bf:b9:36:f9:29:d9:0d:7c:4f:
         8f:18:d9:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSPj16C81kO3vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
MDhhZDczZGUtNDViYy00NDUwLTkzOGQtZGI0NmM0N2ZlYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPSUd9Ia5UUtIRbrU3akO+nH1FSKc9gpR8RU
IyV1DrMQWht/B70fJxpS89RgLSBAX+M16zmdSNrFSMbXu5mPku+MGdUuaYnFNP5m
l4UTYz05/DLrgHbm8vG5VSp3Cb69iO1ObmR8F+Jc3gFibqUk+RZLls2/AwEQk1nx
dA88A5Z7xHFOdqqoksHhQIyg+Muead0lRNoCy5gQcm7MMiatSrKdbiL3F9tepmjX
qOhrCnSUhHnXttk0UGF5hhuu/Lq6Ve+CIN+wcCwQlgrDQn95YqHoO88hy8TPyVGQ
vHQLk2HH+Yeytl87WtJ1cosDIbrsmf9kYKeMZVA3igH93mbT+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzAVjBcaM1+LA9ItlSDgBPLUfJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODViZWIxYjgtYjM2NC0z
NDllLTg5NDAtMTk5ODllNDM4YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkVDu4+6wF6+f9d9LCtN9JykCkb8UauYOiPz1jbggFWYF/SI0pSJQP/
LV1/Ugt6nKzJNnmst78h1RCDZP3c9cgnuUIKQ4W8wstm4rkviwBhHbvvq0elfQDk
VNBmeDj7y/MyWGneXsx0TxRYg7PlCPX+er/KEtMTGGEMq3qstN9LJtoM9IwfWXWx
Yjyf6PkUfkKJ0kXItcO/x4VHborZzK//jzvxCv6qG6qbuwr5qUtlkZjIVoP3QbyU
X1436lmIBlo+G5kLEy+/5kcsfJtKjfVVSWHmQfFvD2g/PfbC5fOfVLh5j5m48Xj3
KBNSCmeMXGi4Ob+5Nvkp2Q18T48Y2Yo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:19:15 2026 by rpki-client