Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa
File:                     c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa (raw, json)
Hash identifier:          PT3+otDXIydpqJRFmR7fFeqApMQDgxUZEsYuorAXn6M=
Subject key identifier:   79:52:DE:5B:C9:1A:4C:C5:6E:1F:74:BB:8D:33:E9:79:A5:46:0F:3E
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584F3482662C7382825B57A97280
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     2496
IP address blocks:        129.237.106.112/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:66:2c:73:82:82:5b:57:a9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=494cbff4-5425-455c-bdee-16458c79e938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:e7:b9:dd:78:39:33:7c:40:d3:1f:ba:70:
                    aa:ce:e7:bf:52:45:a1:3d:37:55:c5:1c:b2:87:e6:
                    e8:5a:fc:2a:ee:2d:be:b7:bf:18:f9:1f:26:af:af:
                    ea:23:bb:69:fd:3c:5d:33:3b:48:1a:15:ab:f4:ba:
                    39:c4:7a:3a:71:1b:cd:0d:02:f8:4b:f6:77:90:c3:
                    31:1a:21:80:95:91:83:2e:6a:72:70:13:ac:58:5b:
                    70:af:c8:31:ae:25:3c:63:d7:79:07:84:6c:e9:ab:
                    10:82:0b:38:6f:94:09:35:77:3e:3e:6e:11:7c:41:
                    5a:01:ab:55:25:8c:8c:63:4b:93:08:12:64:81:f9:
                    d6:7e:be:b2:8b:3f:40:41:8b:ec:a2:80:6c:31:30:
                    8b:98:77:69:da:7b:19:9e:8f:aa:90:59:8b:90:23:
                    3a:84:ba:4c:26:a3:11:73:e2:e0:d2:3f:eb:6a:80:
                    d6:45:f2:df:4f:60:19:f9:0f:18:ea:6a:e3:19:7b:
                    a8:8d:3b:f4:54:9c:94:dc:fd:b3:b8:bb:7d:b6:29:
                    e7:0b:5f:3b:68:c3:bd:18:15:99:21:6d:ce:d6:fa:
                    13:69:54:f3:88:08:31:0f:dd:e7:99:07:77:87:f6:
                    3b:73:16:23:3e:0c:74:5b:8b:79:2c:16:6b:68:c8:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:DE:5B:C9:1A:4C:C5:6E:1F:74:BB:8D:33:E9:79:A5:46:0F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/c4c338c3-e26d-37bb-8fcc-7a72f91b0fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.106.112/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:39:09:c6:2b:0b:29:94:33:cb:f4:75:6c:c5:b4:5c:b4:a2:
         f2:07:c3:37:d5:ca:00:52:15:10:1f:14:00:07:ff:32:24:bc:
         f8:e5:2c:2d:d2:9d:33:e2:0a:cf:67:71:b0:96:7d:ea:65:77:
         20:37:2b:4c:cd:c6:14:82:f7:43:b0:b0:22:09:34:8e:6b:6f:
         ac:08:76:d1:74:cd:57:1b:36:eb:74:72:e9:c1:2a:ad:28:24:
         2c:67:30:01:ad:b2:53:d6:6a:13:de:e0:5d:62:29:da:6b:7c:
         08:4c:af:c6:a4:40:8d:e3:e7:d4:b6:81:12:c7:4b:7d:cf:06:
         e0:04:c1:a6:a5:73:4c:e9:1e:6e:45:3a:b1:48:2a:3d:e7:d3:
         bc:fe:5b:aa:5c:44:50:28:ed:72:af:41:85:3c:ba:a6:40:b4:
         21:45:b9:8a:7b:3f:d2:e8:6d:e6:c3:ef:3d:d7:be:e3:ad:9f:
         c5:65:58:64:ae:e9:75:a1:d3:5a:e7:6e:73:85:09:fc:2c:05:
         37:88:58:39:a7:81:d5:8b:8a:4a:be:bc:5b:8a:13:30:26:8a:
         db:bf:36:11:cc:cb:5d:75:65:0d:b8:10:e3:d3:8e:f1:6c:e3:
         3a:8e:ea:03:0a:29:8e:db:59:88:e7:d7:79:0b:c2:cc:8a:a6:
         2b:6f:73:f6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE80gmYsc4KCW1epcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy
MDIxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
NDk0Y2JmZjQtNTQyNS00NTVjLWJkZWUtMTY0NThjNzllOTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJPnud14OTN8QNMfunCqzue/UkWhPTdVxRyy
h+boWvwq7i2+t78Y+R8mr6/qI7tp/TxdMztIGhWr9Lo5xHo6cRvNDQL4S/Z3kMMx
GiGAlZGDLmpycBOsWFtwr8gxriU8Y9d5B4Rs6asQggs4b5QJNXc+Pm4RfEFaAatV
JYyMY0uTCBJkgfnWfr6yiz9AQYvsooBsMTCLmHdp2nsZno+qkFmLkCM6hLpMJqMR
c+Lg0j/raoDWRfLfT2AZ+Q8Y6mrjGXuojTv0VJyU3P2zuLt9tinnC187aMO9GBWZ
IW3O1voTaVTziAgxD93nmQd3h/Y7cxYjPgx0W4t5LBZraMgoiQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHlS3lvJGkzFbh90u40z6XmlRg8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl
M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvYzRjMzM4YzMtZTI2ZC0z
N2JiLThmY2MtN2E3MmY5MWIwZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm
NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj
MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh
NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDge1qcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyOQnGKwsplDPL9HVsxbRctKLyB8M31coAUhUQHxQAB/8yJLz45Swt
0p0z4grPZ3Gwln3qZXcgNytMzcYUgvdDsLAiCTSOa2+sCHbRdM1XGzbrdHLpwSqt
KCQsZzABrbJT1moT3uBdYinaa3wITK/GpECN4+fUtoESx0t9zwbgBMGmpXNM6R5u
RTqxSCo959O8/luqXERQKO1yr0GFPLqmQLQhRbmKez/S6G3mw+89177jrZ/FZVhk
rul1odNa525zhQn8LAU3iFg5p4HVi4pKvrxbihMwJorbvzYRzMtddWUNuBDj047x
bOM6juoDCimO21mI59d5C8LMiqYrb3P2
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:55:09 2026 by rpki-client