Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/37563f8d-cb1e-355d-97ec-3fbf43e350ef.roa
File:                     37563f8d-cb1e-355d-97ec-3fbf43e350ef.roa (raw, json)
Hash identifier:          2628ffiUqBhaKDjaVfIlvYO0NTBXmaKBPUEcopVnIAs=
Subject key identifier:   D4:9C:D3:BA:60:17:51:D3:E8:48:14:9E:1B:CB:D2:8D:56:A9:DC:16
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F14DCA1752170E6BA8D7A4600
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/37563f8d-cb1e-355d-97ec-3fbf43e350ef.roa
Signing time:             Sun 06 Sep 2026 04:56:10 +0000
ROA not before:           Sun 06 Sep 2026 04:56:10 +0000
ROA not after:            Sat 05 Dec 2026 05:56:10 +0000
asID:                     11179
IP address blocks:        146.12.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:dc:a1:75:21:70:e6:ba:8d:7a:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep  6 04:56:10 2026 GMT
            Not After : Dec  5 05:56:10 2026 GMT
        Subject: CN=783dc34b-57e0-4a54-91c4-f2bc8206b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:0a:b4:5b:9c:5d:ce:84:94:c8:97:14:85:
                    7d:fc:2c:37:dd:17:45:db:50:85:0b:dc:60:b3:42:
                    3f:d4:a1:70:97:c7:86:d5:82:03:9f:71:36:ee:29:
                    94:01:98:bd:7b:dd:c6:26:55:7e:39:77:28:4f:98:
                    c2:4f:04:63:ba:28:c0:90:36:53:9b:73:c9:56:e0:
                    3f:55:cb:04:ab:f0:63:95:96:50:7f:5f:a5:7c:6f:
                    27:21:73:91:4b:4f:1e:01:90:b9:c5:d7:05:45:45:
                    56:31:a2:97:4f:fa:ab:59:69:db:fe:a6:e5:56:63:
                    ff:7c:b9:0b:21:19:3a:19:dd:15:ec:bd:61:d2:b3:
                    cd:cf:a3:28:85:e7:1f:21:8f:98:02:9f:da:b1:11:
                    a2:c7:0d:78:50:be:17:89:3f:5b:d8:f3:61:54:bb:
                    af:f1:37:8c:db:bd:c3:bf:28:38:33:ba:df:42:c3:
                    a7:8a:34:a3:46:80:36:19:f4:0e:a5:04:73:92:63:
                    3f:46:f5:66:a5:e7:d4:86:0e:38:77:7e:d1:88:7f:
                    b7:c4:0c:14:21:cf:ad:8a:88:4e:ef:e3:7a:69:ad:
                    8c:70:19:fa:18:8c:a8:4e:1e:21:00:30:9a:42:69:
                    54:de:0f:14:b6:4f:a5:db:cb:b3:2c:d3:9a:1d:a4:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:D3:BA:60:17:51:D3:E8:48:14:9E:1B:CB:D2:8D:56:A9:DC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/37563f8d-cb1e-355d-97ec-3fbf43e350ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:54:63:0d:8e:4e:d0:68:7a:73:8a:4b:99:b7:7c:71:18:
         35:08:41:2b:4f:74:c1:8b:24:02:48:c2:05:07:d1:24:8d:d4:
         ac:10:35:76:04:c7:8c:cd:5c:d8:fb:1a:5d:e8:bf:dd:95:87:
         d7:99:8b:b6:32:46:0e:a3:7b:ca:df:fc:97:b1:da:96:29:46:
         fd:a4:ae:48:05:3c:08:cd:c1:b3:9a:e9:9a:6d:2d:50:e2:a9:
         db:16:01:47:df:4b:a1:e9:73:3e:0b:26:cb:54:45:f2:12:da:
         d9:34:4e:c1:c3:12:75:0c:db:5c:0b:22:bb:8f:d7:00:82:27:
         0b:20:55:c9:43:5b:31:f8:49:d7:d1:2b:99:45:a3:19:cf:1e:
         e4:6b:a0:7c:2d:19:a4:1d:77:a3:f1:d7:4c:3e:60:e2:7e:ea:
         23:ae:35:df:b4:18:e9:e4:1b:63:fe:94:2f:f2:17:87:60:d6:
         cb:4e:f2:59:e5:78:27:f0:0f:58:24:88:36:67:3d:de:0e:83:
         08:4a:d2:cf:a5:e6:c6:e6:1f:28:d8:3f:9c:d5:fa:00:95:9d:
         3f:c5:bd:2b:9b:82:87:e9:7b:a1:3e:9e:3b:00:94:b2:5c:d1:
         17:70:48:25:57:88:5a:a1:4d:bb:d2:3c:ce:d7:d0:30:22:3b:
         4f:6c:88:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8U3KF1IXDmuo16RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm
N2VjMB4XDTI2MDkwNjA0NTYxMFoXDTI2MTIwNTA1NTYxMFowLzEtMCsGA1UEAxMk
NzgzZGMzNGItNTdlMC00YTU0LTkxYzQtZjJiYzgyMDZiNWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nYKtFucXc6ElMiXFIV9/Cw33RdF21CFC9xg
s0I/1KFwl8eG1YIDn3E27imUAZi9e93GJlV+OXcoT5jCTwRjuijAkDZTm3PJVuA/
VcsEq/BjlZZQf1+lfG8nIXORS08eAZC5xdcFRUVWMaKXT/qrWWnb/qblVmP/fLkL
IRk6Gd0V7L1h0rPNz6MohecfIY+YAp/asRGixw14UL4XiT9b2PNhVLuv8TeM273D
vyg4M7rfQsOnijSjRoA2GfQOpQRzkmM/RvVmpefUhg44d37RiH+3xAwUIc+tiohO
7+N6aa2McBn6GIyoTh4hADCaQmlU3g8Utk+l28uzLNOaHaR4GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSc07pgF1HT6EgUnhvL0o1WqdwWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz
M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvMzc1NjNmOGQtY2IxZS0z
NTVkLTk3ZWMtM2ZiZjQzZTM1MGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw
ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm
ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4
ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkgzaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7yVGMNjk7QaHpzikuZt3xxGDUIQStPdMGLJAJIwgUH0SSN1KwQNXYE
x4zNXNj7Gl3ov92Vh9eZi7YyRg6je8rf/Jex2pYpRv2krkgFPAjNwbOa6ZptLVDi
qdsWAUffS6Hpcz4LJstURfIS2tk0TsHDEnUM21wLIruP1wCCJwsgVclDWzH4SdfR
K5lFoxnPHuRroHwtGaQdd6Px10w+YOJ+6iOuNd+0GOnkG2P+lC/yF4dg1stO8lnl
eCfwD1gkiDZnPd4OgwhK0s+l5sbmHyjYP5zV+gCVnT/FvSubgofpe6E+njsAlLJc
0RdwSCVXiFqhTbvSPM7X0DAiO09siD4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:33 2026 by rpki-client