Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/d30155e7-9dcd-3000-a727-724d8a5b774a.roa
File:                     d30155e7-9dcd-3000-a727-724d8a5b774a.roa (raw, json)
Hash identifier:          ovVwPtQYbEQcsopnBg4dDnqLvdAcrhWiLcZzB1Snd+s=
Subject key identifier:   39:F1:AF:D4:5D:54:D0:09:7D:B7:09:14:EC:93:E7:4D:20:0C:6F:7C
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F14F408D0DF23A4276911BB00
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/d30155e7-9dcd-3000-a727-724d8a5b774a.roa
Signing time:             Sun 06 Sep 2026 05:43:19 +0000
ROA not before:           Sun 06 Sep 2026 05:43:19 +0000
ROA not after:            Sat 05 Dec 2026 06:43:19 +0000
asID:                     11179
IP address blocks:        146.12.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:f4:08:d0:df:23:a4:27:69:11:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep  6 05:43:19 2026 GMT
            Not After : Dec  5 06:43:19 2026 GMT
        Subject: CN=873e02dd-2ae6-4cd5-891b-5ce1f3588497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:64:57:bf:84:44:71:2d:d4:8e:6f:ea:e4:
                    df:82:1f:1b:7c:d8:5b:3b:5a:e0:b5:c8:09:c6:0c:
                    90:93:38:a5:87:fe:ab:f4:84:c6:b2:91:d9:cd:f6:
                    18:7d:4a:a7:98:2f:b5:1c:78:33:5a:e3:15:01:b1:
                    47:8c:89:a5:6c:c9:a9:c3:13:b1:a3:eb:47:b6:31:
                    75:81:f1:43:e6:40:82:74:2e:8e:85:bc:ad:bb:ba:
                    55:31:01:ba:05:09:71:f0:a1:67:0d:20:73:ae:b4:
                    aa:e6:f1:cb:96:50:83:af:88:06:fb:58:3c:d2:a8:
                    ce:e0:35:87:4c:54:39:cc:44:b5:59:16:3c:5d:6c:
                    42:28:61:46:fd:77:4c:4c:44:94:8d:bc:2e:23:be:
                    04:04:d1:f7:a0:72:c9:84:20:b4:6e:79:ff:a0:c0:
                    90:43:83:a8:50:4f:a8:d9:06:cf:6c:a5:c3:be:57:
                    ec:85:f3:f1:38:e9:56:aa:e3:dc:06:09:9f:2c:f0:
                    ca:ef:7f:79:93:24:b7:2d:d9:7a:f3:ee:e1:33:22:
                    51:c6:ac:e0:96:fe:fb:ea:94:f0:66:d7:ff:de:8e:
                    25:c1:f8:a9:ac:40:38:18:f3:20:c9:fb:8a:f5:ed:
                    01:12:f8:52:73:a9:17:5d:c1:4e:18:bf:df:c0:03:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F1:AF:D4:5D:54:D0:09:7D:B7:09:14:EC:93:E7:4D:20:0C:6F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/d30155e7-9dcd-3000-a727-724d8a5b774a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:83:bc:7d:94:89:bb:d8:a7:77:dc:8d:a4:b6:9b:2d:97:
         00:ec:ad:2d:e3:af:14:b2:9d:ac:99:d3:99:3f:e4:a9:c9:ac:
         58:f9:64:99:f9:cf:6c:d2:61:43:69:6a:96:52:63:17:17:c9:
         19:32:31:8f:e4:03:f0:84:aa:2e:66:f2:09:ca:e6:1e:76:eb:
         07:f0:9d:af:8e:b8:fc:a6:1d:06:c2:7f:31:2c:e9:f8:73:3a:
         87:b1:ab:77:c1:df:40:2a:ea:b9:b9:2c:fa:e5:13:7c:0d:d5:
         f8:b0:d0:f5:25:07:d0:8a:bd:0e:d9:bd:5b:0b:4d:81:be:b6:
         3b:04:7b:71:19:c7:06:0a:7c:ff:ea:5c:45:73:01:d9:e1:4d:
         c8:6d:00:ec:f4:02:50:b3:77:e7:16:43:c4:b2:37:ea:d1:04:
         01:93:c4:f8:50:c7:63:b7:8f:0b:c6:51:b4:29:0d:41:4e:cf:
         9b:63:64:5a:47:6d:02:31:a2:cb:de:60:8f:d2:25:b6:69:06:
         84:56:ba:83:c1:82:6a:0d:80:03:fe:94:cf:a3:82:28:3f:0e:
         a4:81:44:01:82:45:7b:c3:bf:07:d5:90:36:ce:50:1f:78:99:
         11:a7:da:65:3a:0c:23:7f:8d:d2:9b:d8:17:10:1b:6a:bb:9d:
         74:98:4e:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8U9AjQ3yOkJ2kRuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm
N2VjMB4XDTI2MDkwNjA1NDMxOVoXDTI2MTIwNTA2NDMxOVowLzEtMCsGA1UEAxMk
ODczZTAyZGQtMmFlNi00Y2Q1LTg5MWItNWNlMWYzNTg4NDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRpkV7+ERHEt1I5v6uTfgh8bfNhbO1rgtcgJ
xgyQkzilh/6r9ITGspHZzfYYfUqnmC+1HHgzWuMVAbFHjImlbMmpwxOxo+tHtjF1
gfFD5kCCdC6Ohbytu7pVMQG6BQlx8KFnDSBzrrSq5vHLllCDr4gG+1g80qjO4DWH
TFQ5zES1WRY8XWxCKGFG/XdMTESUjbwuI74EBNH3oHLJhCC0bnn/oMCQQ4OoUE+o
2QbPbKXDvlfshfPxOOlWquPcBgmfLPDK7395kyS3Ldl68+7hMyJRxqzglv776pTw
Ztf/3o4lwfiprEA4GPMgyfuK9e0BEvhSc6kXXcFOGL/fwAO85QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnxr9RdVNAJfbcJFOyT500gDG98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz
M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvZDMwMTU1ZTctOWRjZC0z
MDAwLWE3MjctNzI0ZDhhNWI3NzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw
ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm
ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4
ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkgzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHimg7x9lIm72Kd33I2ktpstlwDsrS3jrxSynayZ05k/5KnJrFj5ZJn5
z2zSYUNpapZSYxcXyRkyMY/kA/CEqi5m8gnK5h526wfwna+OuPymHQbCfzEs6fhz
Ooexq3fB30Aq6rm5LPrlE3wN1fiw0PUlB9CKvQ7ZvVsLTYG+tjsEe3EZxwYKfP/q
XEVzAdnhTchtAOz0AlCzd+cWQ8SyN+rRBAGTxPhQx2O3jwvGUbQpDUFOz5tjZFpH
bQIxosveYI/SJbZpBoRWuoPBgmoNgAP+lM+jgig/DqSBRAGCRXvDvwfVkDbOUB94
mRGn2mU6DCN/jdKb2BcQG2q7nXSYTt0=
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:38:23 2026 by rpki-client