Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa
File:                     1d420aba-3ce9-3377-be34-e47d162a1845.roa (raw, json)
Hash identifier:          l0/5K9BfmsfpaAnFdc3YYxWxkxCzYT4DcgLCGccmcMA=
Subject key identifier:   64:95:25:D4:EF:CC:6F:FF:5E:A6:2E:7F:4E:C6:CC:C9:E2:7C:6B:3B
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584F3E47ECFC7E73599DFFACA9C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     9084
IP address blocks:        154.1.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ec:fc:7e:73:59:9d:ff:ac:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=e48ec6f2-e35b-4743-a498-2599728fddba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:25:d4:3a:8b:a9:bc:7c:d1:59:e5:47:2c:
                    32:b6:d6:51:8f:eb:69:a5:8f:fa:ae:43:7b:06:38:
                    a1:87:76:75:94:fa:c0:5f:3f:1e:92:07:f7:5b:1d:
                    ce:98:9f:45:d7:ff:e6:a3:7f:33:d2:be:2e:af:bf:
                    af:e1:18:05:85:87:bb:23:2d:e5:63:3c:14:d5:7a:
                    c4:39:cc:67:85:2a:c3:9f:c2:78:55:fe:98:5a:cb:
                    d1:b7:b3:9d:49:4d:1e:15:de:16:6b:29:e0:08:d8:
                    4a:e0:53:3f:26:d0:2e:20:74:a1:af:f3:2b:bd:ac:
                    c0:62:40:ec:00:90:4b:e3:fa:42:ec:ee:e2:be:d5:
                    0d:2d:35:9c:a0:f1:d3:bc:40:03:15:66:4d:cc:e0:
                    54:d4:08:90:4c:3c:7f:48:b5:9d:13:5f:62:87:a5:
                    6c:19:76:8a:ba:c2:3a:03:5f:e6:5b:1a:5e:9a:ba:
                    c7:9e:3e:47:b0:7c:6f:cd:be:0e:51:95:1a:9a:2a:
                    77:6d:0c:d4:b6:27:78:75:70:e3:a6:23:e4:d5:2d:
                    00:bc:fd:70:61:d5:6a:ab:7b:7d:7b:c0:74:50:34:
                    76:8f:49:52:45:d3:bb:fd:c2:7e:fb:a2:28:8a:fb:
                    2b:fb:24:d8:22:db:e9:a0:09:ff:cc:0f:f1:35:90:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:25:D4:EF:CC:6F:FF:5E:A6:2E:7F:4E:C6:CC:C9:E2:7C:6B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:56:f1:22:92:88:2c:55:fc:f9:66:7c:fc:ce:51:4e:40:23:
         dd:45:58:87:a7:bc:9e:0f:9d:19:32:01:3e:ac:18:d3:1b:4c:
         0a:7c:b8:98:0c:5e:76:a7:32:ee:95:ef:d9:dc:4a:ec:3c:23:
         9b:6c:6f:6e:07:2b:49:99:18:bc:36:b1:54:88:63:87:c4:4f:
         a1:b3:d5:24:19:b7:38:f0:20:42:ea:a9:a2:f6:ac:7b:3a:cf:
         86:63:ee:5c:ab:9a:55:a4:d8:96:f9:8b:df:0d:1c:29:f2:e6:
         41:b9:bd:ee:d0:b5:8c:d5:31:41:57:ba:bd:73:16:20:21:36:
         a9:77:43:de:44:6d:13:97:04:e4:02:7a:c7:16:43:ec:8a:17:
         11:7b:7d:f7:46:70:09:d2:9f:1c:de:ad:cc:2d:d6:52:9e:84:
         6d:c1:c2:99:9e:e7:57:50:36:7e:5a:a7:da:d2:9e:e7:25:9f:
         b1:76:2b:50:14:9f:18:26:5b:ac:39:9b:b9:30:7d:bb:8e:7e:
         f2:93:84:10:c8:e8:c7:0c:34:2c:be:60:1b:f2:d4:0d:21:81:
         2f:65:ff:e7:f5:19:42:ef:81:eb:5e:57:c5:d8:9e:c6:7c:fe:
         9f:77:6f:4c:02:91:4f:0f:f4:45:5c:8b:38:a2:7f:b0:b8:1e:
         a0:b7:88:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+z8fnNZnf+sqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
ZTQ4ZWM2ZjItZTM1Yi00NzQzLWE0OTgtMjU5OTcyOGZkZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTol1DqLqbx80VnlRywyttZRj+tppY/6rkN7
Bjihh3Z1lPrAXz8ekgf3Wx3OmJ9F1//mo38z0r4ur7+v4RgFhYe7Iy3lYzwU1XrE
OcxnhSrDn8J4Vf6YWsvRt7OdSU0eFd4WayngCNhK4FM/JtAuIHShr/MrvazAYkDs
AJBL4/pC7O7ivtUNLTWcoPHTvEADFWZNzOBU1AiQTDx/SLWdE19ih6VsGXaKusI6
A1/mWxpemrrHnj5HsHxvzb4OUZUamip3bQzUtid4dXDjpiPk1S0AvP1wYdVqq3t9
e8B0UDR2j0lSRdO7/cJ++6Ioivsr+yTYItvpoAn/zA/xNZDJuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSVJdTvzG//XqYuf07GzMnifGs7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWQ0MjBhYmEtM2NlOS0z
Mzc3LWJlMzQtZTQ3ZDE2MmExODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNW8SKSiCxV/PlmfPzOUU5AI91FWIenvJ4PnRkyAT6sGNMbTAp8uJgM
XnanMu6V79ncSuw8I5tsb24HK0mZGLw2sVSIY4fET6Gz1SQZtzjwIELqqaL2rHs6
z4Zj7lyrmlWk2Jb5i98NHCny5kG5ve7QtYzVMUFXur1zFiAhNql3Q95EbROXBOQC
escWQ+yKFxF7ffdGcAnSnxzercwt1lKehG3Bwpme51dQNn5ap9rSnucln7F2K1AU
nxgmW6w5m7kwfbuOfvKThBDI6McMNCy+YBvy1A0hgS9l/+f1GULvgeteV8XYnsZ8
/p93b0wCkU8P9EVciziif7C4HqC3iPE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:14:27 2026 by rpki-client