Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa
File:                     a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa (raw, json)
Hash identifier:          YbTqeePoiwgjFc12Z0EYSlTjODzJdJgZLos8p69GzPo=
Subject key identifier:   03:D2:12:32:09:CA:A8:25:D1:2B:70:3B:8A:7E:E2:90:42:AF:4E:4B
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584E22744E2E92250D85E26D4D80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     21433
IP address blocks:        170.251.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4e:2e:92:25:0d:85:e2:6d:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=ef9ee5b8-464e-443c-ace9-50973a3ee10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:bd:f8:c8:7f:17:c8:11:60:34:a9:1a:88:
                    d7:19:47:31:14:0a:be:5a:04:4a:86:fc:3f:2b:c9:
                    0e:8f:b7:d7:bb:69:cb:93:53:49:94:3c:03:82:7e:
                    84:9b:8b:2a:eb:e3:0b:48:a4:38:24:05:29:85:58:
                    8d:37:79:c5:f9:4d:5f:58:12:fa:55:e8:e8:e6:7b:
                    9f:70:ca:60:75:ab:ea:8d:ad:27:7b:7a:18:e4:28:
                    4a:89:d3:70:95:bd:ad:3a:34:87:7f:4f:d6:57:9e:
                    d9:de:c9:19:4e:9a:58:9f:72:92:dd:a3:a0:1d:34:
                    6a:6d:c9:cf:87:fb:b2:b5:2f:b2:2b:94:1d:a7:86:
                    db:f7:a5:f6:df:69:5c:2a:aa:f5:68:10:9e:d4:68:
                    1b:58:2c:ea:0d:ad:53:a9:46:a4:93:49:16:22:76:
                    98:46:97:45:8f:48:1a:a3:45:7d:10:24:ba:ec:2a:
                    76:11:82:27:60:23:27:04:74:41:c2:a9:6f:cd:95:
                    6c:d7:32:29:e9:b7:fe:e5:35:fb:79:4e:12:fa:11:
                    fe:1c:89:68:3e:46:e2:dc:be:85:0a:fe:51:66:e0:
                    eb:fe:00:b0:08:22:23:39:d8:5c:4e:65:b5:89:66:
                    79:ae:f9:12:a0:48:d9:22:62:77:9c:5c:ac:66:67:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:12:32:09:CA:A8:25:D1:2B:70:3B:8A:7E:E2:90:42:AF:4E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:41:20:f9:70:5f:c0:f0:a8:04:a3:42:83:31:49:4d:b7:e2:
         c4:0e:6e:67:13:ee:6e:be:a8:d9:c0:ca:bf:a5:f4:13:27:f1:
         ce:45:e1:c7:80:d5:3e:71:54:8e:f1:fb:ec:a2:90:64:4c:32:
         6f:29:b4:df:4d:74:a9:00:a2:f0:28:46:b3:17:63:31:05:b7:
         90:ca:69:7c:e3:e6:b8:e8:f7:75:91:43:af:96:1b:42:6a:43:
         ff:bb:62:52:53:fa:b6:0d:45:a0:7d:7d:69:f8:cd:ce:88:7a:
         81:3a:ac:e1:80:e2:5a:e3:26:ae:61:04:f8:5d:8b:e7:74:b1:
         41:fb:43:70:bf:7a:5e:21:66:5a:69:78:18:c0:f5:90:32:3f:
         0a:2d:17:3f:c4:8a:b0:b6:ec:14:27:5d:73:3a:5b:3d:e4:49:
         72:49:70:2e:9f:a2:89:48:02:de:1f:99:fe:dd:12:40:53:24:
         8f:e4:f2:8e:5b:01:54:2f:e0:af:d0:45:9a:de:ec:3c:38:00:
         c5:b4:21:1e:80:0c:20:94:cf:99:54:be:80:b1:43:9c:29:b1:
         85:ba:8c:d8:63:4e:69:fa:86:ca:a7:a1:51:4f:0a:35:12:4e:
         e6:ca:6a:e2:d4:0f:c8:db:76:cb:c1:5b:7d:04:5d:c1:29:87:
         2e:96:b1:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idE4ukiUNheJtTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZWY5ZWU1YjgtNDY0ZS00NDNjLWFjZTktNTA5NzNhM2VlMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYW9+Mh/F8gRYDSpGojXGUcxFAq+WgRKhvw/
K8kOj7fXu2nLk1NJlDwDgn6Em4sq6+MLSKQ4JAUphViNN3nF+U1fWBL6Vejo5nuf
cMpgdavqja0ne3oY5ChKidNwlb2tOjSHf0/WV57Z3skZTppYn3KS3aOgHTRqbcnP
h/uytS+yK5Qdp4bb96X232lcKqr1aBCe1GgbWCzqDa1TqUakk0kWInaYRpdFj0ga
o0V9ECS67Cp2EYInYCMnBHRBwqlvzZVs1zIp6bf+5TX7eU4S+hH+HIloPkbi3L6F
Cv5RZuDr/gCwCCIjOdhcTmW1iWZ5rvkSoEjZImJ3nFysZmdBOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPSEjIJyqgl0StwO4p+4pBCr05LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYTEwMmRmYjAtMmQ3Mi0z
Y2Y2LThmZjEtODFjNWI3YjZmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvsmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBBIPlwX8DwqASjQoMxSU234sQObmcT7m6+qNnAyr+l9BMn8c5F4ceA
1T5xVI7x++yikGRMMm8ptN9NdKkAovAoRrMXYzEFt5DKaXzj5rjo93WRQ6+WG0Jq
Q/+7YlJT+rYNRaB9fWn4zc6IeoE6rOGA4lrjJq5hBPhdi+d0sUH7Q3C/el4hZlpp
eBjA9ZAyPwotFz/EirC27BQnXXM6Wz3kSXJJcC6foolIAt4fmf7dEkBTJI/k8o5b
AVQv4K/QRZre7Dw4AMW0IR6ADCCUz5lUvoCxQ5wpsYW6jNhjTmn6hsqnoVFPCjUS
TubKauLUD8jbdsvBW30EXcEphy6WsZs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:09 2026 by rpki-client