Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa
File:                     fa992bc0-4266-3263-bc3c-296661220bcb.roa (raw, json)
Hash identifier:          AImP6nKJVgp0o5LhsHLjhBkBfgV/n15JK1Px1sFhxSM=
Subject key identifier:   FC:77:68:26:18:4A:97:D3:4D:EF:F4:55:32:0F:91:90:EF:9C:AD:2B
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584F3CE29D2E3297E25BFCA66CC0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7992
IP address blocks:        24.141.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9d:2e:32:97:e2:5b:fc:a6:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=fd70614c-50f7-4e9c-809a-07f146dd4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:25:55:36:74:4d:ae:8e:56:41:67:5c:c8:
                    59:7e:7d:cd:a9:58:6f:c8:65:a8:2f:09:a9:da:db:
                    07:3e:b3:57:2a:84:23:c4:69:a8:2f:11:1e:1e:4e:
                    4e:14:d4:44:37:a7:d6:2b:d6:dc:fe:77:62:1c:90:
                    64:98:b7:04:50:48:cc:8c:68:99:09:43:78:72:61:
                    2d:3a:28:94:64:8c:28:74:95:ab:a0:63:64:11:26:
                    ed:e0:c7:36:79:e5:fc:c6:1f:7b:81:d3:ef:42:57:
                    37:7f:59:e6:96:de:74:bb:96:20:89:34:c7:c0:a7:
                    0c:15:d4:67:1f:cf:5e:09:8e:c0:7b:b3:c9:cd:47:
                    c1:02:8f:e1:b5:47:af:78:4d:61:db:e6:a1:86:2b:
                    4a:0d:c1:94:7e:e7:ee:de:d4:d7:a9:78:59:ea:ee:
                    bf:d9:e4:b5:e9:d1:10:69:28:51:3d:d8:03:1d:d2:
                    b1:e6:4a:d5:6d:79:b3:57:e2:b5:e1:e3:c7:ee:31:
                    04:4b:cb:89:5a:be:7c:cd:51:ac:da:77:f9:3d:ec:
                    5d:37:20:4a:9f:16:7f:3e:d5:7b:98:75:79:9a:87:
                    66:9a:2f:f7:cc:a9:6b:d7:4f:01:62:06:5b:e2:ed:
                    ea:ef:a4:22:04:34:09:f6:3b:a4:c3:93:36:76:cd:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:68:26:18:4A:97:D3:4D:EF:F4:55:32:0F:91:90:EF:9C:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.141.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:41:c4:02:8a:8b:a9:d6:10:36:0e:19:62:c2:a4:49:69:50:
         a7:ff:24:b5:3d:4b:b2:2d:ad:47:3b:84:4d:b7:1b:b0:13:f7:
         16:06:25:e0:bf:07:af:5e:a4:10:b2:57:c5:a5:24:54:64:50:
         0e:63:13:ad:08:aa:b5:91:c4:3a:ce:85:1f:28:ad:b8:b9:21:
         80:e2:a9:d6:a1:7a:3e:2d:ef:be:78:de:ad:d7:64:60:01:77:
         7f:ac:fe:e2:c2:83:38:f2:71:09:57:80:b0:29:4c:1c:7e:52:
         90:c2:d2:db:d7:91:0c:82:38:ba:cd:73:b6:c3:f5:48:af:14:
         ba:08:4a:66:0f:e8:32:9d:ee:da:10:08:ba:ba:04:29:ba:f9:
         63:ab:92:0b:cb:4c:b8:0c:5b:9a:62:3a:a0:d2:63:2a:51:44:
         e0:63:37:11:64:f1:84:68:a8:df:d6:b0:6c:ab:5e:40:74:ee:
         f4:54:34:e9:bc:cc:61:07:8a:75:1d:b0:32:8e:b7:b4:7a:7f:
         66:cd:a2:e7:82:04:cb:7b:a9:9d:56:ba:21:35:fb:2c:67:f2:
         59:e2:b2:e7:bc:30:d0:a6:5a:bc:c8:43:7c:da:ea:0c:17:6e:
         0a:1b:3d:12:88:72:3f:08:a7:d8:f9:49:76:08:e1:df:a7:a0:
         c6:dd:ed:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE884p0uMpfiW/ymbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZmQ3MDYxNGMtNTBmNy00ZTljLTgwOWEtMDdmMTQ2ZGQ0ODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog8lVTZ0Ta6OVkFnXMhZfn3NqVhvyGWoLwmp
2tsHPrNXKoQjxGmoLxEeHk5OFNREN6fWK9bc/ndiHJBkmLcEUEjMjGiZCUN4cmEt
OiiUZIwodJWroGNkESbt4Mc2eeX8xh97gdPvQlc3f1nmlt50u5YgiTTHwKcMFdRn
H89eCY7Ae7PJzUfBAo/htUeveE1h2+ahhitKDcGUfufu3tTXqXhZ6u6/2eS16dEQ
aShRPdgDHdKx5krVbXmzV+K14ePH7jEES8uJWr58zVGs2nf5PexdNyBKnxZ/PtV7
mHV5modmmi/3zKlr108BYgZb4u3q76QiBDQJ9jukw5M2ds0UGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPx3aCYYSpfTTe/0VTIPkZDvnK0rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvZmE5OTJiYzAtNDI2Ni0z
MjYzLWJjM2MtMjk2NjYxMjIwYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGI0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmUHEAoqLqdYQNg4ZYsKkSWlQp/8ktT1Lsi2tRzuETbcbsBP3FgYl4L8H
r16kELJXxaUkVGRQDmMTrQiqtZHEOs6FHyituLkhgOKp1qF6Pi3vvnjerddkYAF3
f6z+4sKDOPJxCVeAsClMHH5SkMLS29eRDII4us1ztsP1SK8UughKZg/oMp3u2hAI
uroEKbr5Y6uSC8tMuAxbmmI6oNJjKlFE4GM3EWTxhGio39awbKteQHTu9FQ06bzM
YQeKdR2wMo63tHp/Zs2i54IEy3upnVa6ITX7LGfyWeKy57ww0KZavMhDfNrqDBdu
Chs9EohyPwin2PlJdgjh36egxt3taw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:36 2026 by rpki-client