Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa
File:                     41e19a7e-8f36-383d-904b-62952b216c8e.roa (raw, json)
Hash identifier:          TfM8hCkszq4MxlZgLlg0+yXwaoszvbO768ZOodsNhnI=
Subject key identifier:   EA:B7:FD:70:3C:E8:34:10:34:4A:79:98:26:CB:E2:B6:D6:A5:18:25
Certificate issuer:       /CN=ae9833c8-8b19-48ba-8b98-e74734094959
Certificate serial:       010D0C9F4328584F49773EEF2F394C3E3C418A00
Authority key identifier: A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1252
IP address blocks:        137.197.0.0/16 maxlen: 24
                          192.94.102.0/24 maxlen: 24
                          192.94.103.0/24 maxlen: 24
                          192.94.104.0/24 maxlen: 24
                          192.94.105.0/24 maxlen: 24
                          192.94.106.0/24 maxlen: 24
                          192.94.107.0/24 maxlen: 24
                          192.94.108.0/24 maxlen: 24
                          192.198.32.0/20 maxlen: 24
                          192.198.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3e:ef:2f:39:4c:3e:3c:41:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9833c8-8b19-48ba-8b98-e74734094959
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9eecf5e-9451-4e01-b1b5-7e19c6b77d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:24:37:9f:6c:a7:c7:f0:88:1e:f5:ad:3d:
                    14:03:6a:84:8e:09:cb:99:ec:38:50:fb:9d:fb:ef:
                    ec:90:ee:e0:b9:5d:15:63:ae:5e:57:ec:50:00:c5:
                    33:b8:5c:30:de:6b:94:81:c2:90:30:4a:22:7d:d0:
                    0a:5d:e3:41:5b:31:e4:98:14:91:b8:85:3c:ba:70:
                    e5:32:db:45:82:c6:8b:55:17:f3:91:bd:c5:81:26:
                    61:1d:a9:7b:91:a8:2c:e7:7a:aa:8d:6f:1f:53:1b:
                    49:ad:5e:f1:e8:09:25:b8:9e:50:8a:3a:a6:28:45:
                    85:8c:a4:a9:ca:17:84:d9:f8:3a:5f:56:c2:4f:ca:
                    e1:a6:33:b6:17:cf:f7:ee:19:1e:ee:fb:9d:64:f1:
                    37:ae:16:8b:17:0d:24:67:ef:36:6a:53:23:91:84:
                    b6:56:a4:6f:9c:bf:c1:14:e5:fc:ae:4e:6f:af:63:
                    e9:07:93:a0:ac:44:5d:00:9b:1c:1b:68:2c:56:d2:
                    e8:ca:70:bf:e2:1b:4b:29:88:98:8f:61:58:d3:3e:
                    a7:3f:2a:7f:8d:d9:29:d4:7c:83:cb:0d:77:ed:ed:
                    0e:ce:2a:dc:d3:6f:c1:d4:85:7c:d5:a0:63:5c:93:
                    0a:1b:de:08:c0:41:a7:b2:79:54:5f:90:d8:07:b3:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:FD:70:3C:E8:34:10:34:4A:79:98:26:CB:E2:B6:D6:A5:18:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl

            X509v3 Authority Key Identifier:
                keyid:A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.197.0.0/16
                  192.94.102.0-192.94.108.255
                  192.198.32.0-192.198.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:87:1d:6e:83:a5:66:c7:2e:a3:89:2d:be:ba:73:56:a3:5b:
         8f:55:f4:bb:0e:54:fa:81:46:fd:fd:6b:4a:33:0c:b5:4c:8a:
         6d:7c:c3:89:f3:c1:3f:75:12:e2:51:52:c0:78:96:e9:6a:28:
         98:83:09:2f:90:a7:4c:fb:55:f8:03:fa:d0:5d:ce:8e:54:38:
         4f:33:b5:e5:27:36:de:53:f0:ce:e6:b1:6b:93:6d:cc:75:84:
         9b:af:75:d2:ff:57:5f:c2:a1:42:53:23:46:7d:cf:9a:bf:26:
         22:0d:cf:c4:52:ad:8c:3e:22:ff:e7:61:20:45:5f:5d:8e:ac:
         01:d1:16:b0:57:cd:d8:34:e1:8c:a5:46:31:fe:36:91:e0:79:
         20:4a:3f:88:c4:f8:26:00:30:d2:54:11:2d:4e:04:2c:64:a3:
         9f:1a:42:e5:20:db:78:2a:7d:87:9d:af:bd:10:63:00:30:66:
         52:b1:b7:e1:41:d1:2d:4b:e4:36:cc:68:14:f6:b6:34:d1:6e:
         d2:a0:c3:92:d7:de:05:23:cb:99:67:45:29:28:f4:cd:0e:70:
         2f:7e:ff:1d:a7:83:29:80:ff:ee:59:8a:8c:fd:b4:8d:c9:e3:
         93:ba:87:76:01:f5:3d:52:15:22:d2:0b:06:b7:0b:a9:db:b6:
         aa:e5:79:71
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE9Jdz7vLzlMPjxBigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU5ODMzYzgtOGIxOS00OGJhLThiOTgtZTc0NzM0MDk0
OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTllZWNmNWUtOTQ1MS00ZTAxLWIxYjUtN2UxOWM2Yjc3ZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbEkN59sp8fwiB71rT0UA2qEjgnLmew4UPud
++/skO7guV0VY65eV+xQAMUzuFww3muUgcKQMEoifdAKXeNBWzHkmBSRuIU8unDl
MttFgsaLVRfzkb3FgSZhHal7kags53qqjW8fUxtJrV7x6AkluJ5QijqmKEWFjKSp
yheE2fg6X1bCT8rhpjO2F8/37hke7vudZPE3rhaLFw0kZ+82alMjkYS2VqRvnL/B
FOX8rk5vr2PpB5OgrERdAJscG2gsVtLoynC/4htLKYiYj2FY0z6nPyp/jdkp1HyD
yw137e0Ozirc02/B1IV81aBjXJMKG94IwEGnsnlUX5DYB7PeNwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFOq3/XA86DQQNEp5mCbL4rbWpRglMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4
MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3MzQwOTQ5NTkvNDFlMTlhN2UtOGYzNi0z
ODNkLTkwNGItNjI5NTJiMjE2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU5ODMzYzgtOGIxOS00OGJhLThi
OTgtZTc0NzM0MDk0OTU5L2FlOTgzM2M4LThiMTktNDhiYS04Yjk4LWU3NDczNDA5
NDk1OS5jcmwwHwYDVR0jBBgwFoAUqeNiGHAp+7ec17x8Iv7DVcdDUBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3
MzQwOTQ5NTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAicUwDAME
AcBeZgMEAMBebDAMAwQFwMYgAwQDwMYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALSHHW6DpWbHLqOJLb66
c1ajW49V9LsOVPqBRv39a0ozDLVMim18w4nzwT91EuJRUsB4lulqKJiDCS+Qp0z7
VfgD+tBdzo5UOE8zteUnNt5T8M7msWuTbcx1hJuvddL/V1/CoUJTI0Z9z5q/JiIN
z8RSrYw+Iv/nYSBFX12OrAHRFrBXzdg04YylRjH+NpHgeSBKP4jE+CYAMNJUES1O
BCxko58aQuUg23gqfYedr70QYwAwZlKxt+FB0S1L5DbMaBT2tjTRbtKgw5LX3gUj
y5lnRSko9M0OcC9+/x2ngymA/+5Zioz9tI3J45O6h3YB9T1SFSLSCwa3C6nbtqrl
eXE=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:42 2026 by rpki-client