Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/deb05867-f43f-38a7-9cbf-a9c1027be80e.roa
File:                     deb05867-f43f-38a7-9cbf-a9c1027be80e.roa (raw, json)
Hash identifier:          ZQ5V5rf+02hyG7jSwgpWhybHX4DkgYtF3i16+t5iF1A=
Subject key identifier:   AD:C2:57:E5:22:4A:3D:BC:2C:E2:9C:44:76:FE:9E:6C:84:9A:F4:B5
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA7961F75F69BDC22B7C67800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/deb05867-f43f-38a7-9cbf-a9c1027be80e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        128.109.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:1f:75:f6:9b:dc:22:b7:c6:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99449531-6d08-49fc-a5c0-24f0e70d7cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:fe:d1:02:ea:08:6e:07:b2:50:b3:52:e8:
                    69:fc:aa:04:08:e3:c2:2f:a7:3d:28:82:c0:a3:43:
                    15:a8:33:15:ee:f4:89:7d:7f:19:eb:02:b5:5a:a2:
                    b3:b4:17:47:56:e9:31:29:8f:41:32:d4:5c:3b:0a:
                    a6:ff:73:de:18:6b:37:9b:f8:66:a2:15:1e:ad:b5:
                    04:2d:f1:9e:cd:79:77:95:00:80:9b:ee:1b:0a:81:
                    d0:14:1c:7d:49:6b:b5:71:91:7f:f1:b4:03:3f:b6:
                    ee:82:66:13:4d:f3:9d:d1:47:5c:f5:a6:3a:17:0b:
                    9f:ff:ab:c8:75:87:16:fb:dd:0e:a2:c0:2e:90:80:
                    ff:1d:b9:6b:1c:3a:cb:91:c3:94:f5:15:c3:27:ed:
                    a8:f0:36:75:9c:56:a4:15:a8:6f:1b:6c:66:a3:bf:
                    19:5d:a0:b6:de:03:23:15:39:4d:4c:89:f3:87:7e:
                    22:9d:ee:a8:69:15:c7:6d:c3:d1:07:64:46:3e:d0:
                    8a:dc:19:65:3c:01:6f:4d:9c:43:09:9d:76:00:20:
                    3f:c2:1f:e0:4d:e3:05:bc:19:47:71:d3:23:ff:a5:
                    a8:57:c0:be:38:c1:49:f6:bd:f2:b7:f8:ac:6d:c1:
                    60:64:c3:f8:f5:72:a2:92:17:8a:a3:06:c4:4d:0c:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:57:E5:22:4A:3D:BC:2C:E2:9C:44:76:FE:9E:6C:84:9A:F4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/deb05867-f43f-38a7-9cbf-a9c1027be80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:30:01:3f:db:f7:b3:32:49:c0:37:76:30:72:6b:db:8e:
         cc:aa:ca:48:11:0d:21:42:46:96:6a:0a:f2:4f:e6:c3:fd:c4:
         37:e6:ab:e1:10:40:ba:7e:53:f0:d7:7f:20:4d:40:82:0d:22:
         02:1f:66:be:9a:b6:0c:72:22:d0:1d:7c:45:10:25:a6:b3:db:
         67:90:46:23:63:70:86:1e:75:5c:0d:39:9e:b8:ca:37:85:53:
         28:73:ee:59:0e:a7:89:31:5d:7b:40:d0:69:2d:f7:b1:91:4d:
         df:b9:42:9c:50:f0:12:d4:a3:da:82:d0:47:40:23:76:9a:71:
         db:fd:c5:3f:aa:cf:8c:5c:f9:38:86:cd:f6:a6:32:e4:87:f8:
         79:50:8a:7a:88:b0:65:96:c8:7c:ee:27:03:16:06:da:e6:1b:
         03:bb:79:f4:44:53:f1:56:32:3e:92:fc:03:e8:8f:91:36:c8:
         d1:b4:45:1b:ba:7a:d5:6e:b8:24:3e:f5:2b:81:54:cf:e5:a5:
         36:63:6a:5d:1f:98:95:73:94:26:6f:45:16:a1:5f:12:85:de:
         16:47:60:55:6c:72:11:ac:72:24:a8:65:76:df:ee:32:99:43:
         5e:60:d1:03:45:54:4e:c0:15:17:f5:ba:ed:2b:44:1d:42:82:
         1a:20:1c:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nlh919pvcIrfGeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTk0NDk1MzEtNmQwOC00OWZjLWE1YzAtMjRmMGU3MGQ3Y2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreX+0QLqCG4HslCzUuhp/KoECOPCL6c9KILA
o0MVqDMV7vSJfX8Z6wK1WqKztBdHVukxKY9BMtRcOwqm/3PeGGs3m/hmohUerbUE
LfGezXl3lQCAm+4bCoHQFBx9SWu1cZF/8bQDP7bugmYTTfOd0Udc9aY6Fwuf/6vI
dYcW+90OosAukID/HblrHDrLkcOU9RXDJ+2o8DZ1nFakFahvG2xmo78ZXaC23gMj
FTlNTInzh34ine6oaRXHbcPRB2RGPtCK3BllPAFvTZxDCZ12ACA/wh/gTeMFvBlH
cdMj/6WoV8C+OMFJ9r3yt/isbcFgZMP49XKikheKowbETQy7+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK3CV+UiSj28LOKcRHb+nmyEmvS1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGViMDU4NjctZjQzZi0z
OGE3LTljYmYtYTljMTAyN2JlODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgG0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYzAwAT/b97MyScA3djBya9uOzKrKSBENIUJGlmoK8k/mw/3EN+ar4RBA
un5T8Nd/IE1Agg0iAh9mvpq2DHIi0B18RRAlprPbZ5BGI2Nwhh51XA05nrjKN4VT
KHPuWQ6niTFde0DQaS33sZFN37lCnFDwEtSj2oLQR0Ajdppx2/3FP6rPjFz5OIbN
9qYy5If4eVCKeoiwZZbIfO4nAxYG2uYbA7t59ERT8VYyPpL8A+iPkTbI0bRFG7p6
1W64JD71K4FUz+WlNmNqXR+YlXOUJm9FFqFfEoXeFkdgVWxyEaxyJKhldt/uMplD
XmDRA0VUTsAVF/W67StEHUKCGiAcDg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:44 2026 by rpki-client