Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa
File:                     dfd3b2f0-8122-3427-8b32-036a02298282.roa (raw, json)
Hash identifier:          iUm+Oq2g9k7Q7uho9GiLCyxR9vM6Sgq1w+Ti/DT2cUM=
Subject key identifier:   F3:64:B5:AC:00:88:CC:5F:B3:19:81:54:93:FF:C3:88:BD:AB:F8:36
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F38B270CE6AB5B6FF749CCD00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     17252
IP address blocks:        67.203.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:70:ce:6a:b5:b6:ff:74:9c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=99bf72c9-6d4a-4894-9b6d-bfd25506d43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:34:da:6e:ce:d5:37:e0:ac:b9:6a:f3:3c:
                    71:20:94:d6:62:97:53:ca:10:92:c1:14:26:b3:35:
                    10:4b:b8:10:92:28:a0:4c:a8:81:05:aa:95:52:8d:
                    ac:64:7b:2c:d3:46:79:3a:7e:87:8f:8d:a0:a1:28:
                    cd:c4:da:69:3b:b6:04:bc:2e:62:f9:a9:75:dd:9d:
                    11:1a:be:73:76:9a:35:0b:a1:ef:67:b4:3d:76:59:
                    6c:aa:ee:0f:08:c6:36:f9:f0:14:93:24:3c:d4:67:
                    cf:d4:d2:90:85:17:a6:e4:7f:4b:50:b7:fc:c2:2e:
                    ed:c9:5e:ab:cb:3b:68:79:27:74:55:c1:8b:7d:2b:
                    f3:b1:0d:3a:58:e6:35:0c:12:2d:4d:17:5e:e0:e6:
                    be:3a:65:a3:e4:ab:40:ba:e0:46:02:52:37:39:af:
                    21:ed:60:92:a2:d2:32:de:db:4a:9b:ee:26:0b:5f:
                    86:3e:dd:cc:17:18:1c:2a:b7:7e:70:70:85:85:cc:
                    14:a3:be:14:01:e3:cd:ae:d9:d9:e4:41:50:0c:c3:
                    90:21:a3:c1:92:6b:04:66:17:77:17:87:ef:23:02:
                    b2:69:ce:42:e0:bf:c1:39:40:04:7b:2f:25:28:b8:
                    97:0d:ab:7b:d8:d2:5b:dc:73:2e:2f:91:52:12:8b:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:B5:AC:00:88:CC:5F:B3:19:81:54:93:FF:C3:88:BD:AB:F8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:df:06:a3:5b:47:e6:50:83:d1:1c:77:f3:6a:11:28:5d:
         fe:6e:96:83:fc:5a:69:22:68:4a:dc:ef:2d:42:8b:70:9d:ea:
         fa:5e:70:36:37:c7:93:d1:2e:1f:b1:49:a4:8c:70:19:82:92:
         91:87:62:a0:e9:c7:80:c7:7b:8c:32:21:5c:27:2e:a6:f0:4e:
         98:b4:35:e1:9f:d0:ba:dc:e6:a3:6b:32:03:51:e8:fa:79:50:
         4b:07:ee:36:b7:4d:7f:85:b4:e9:e2:72:f4:96:7f:af:da:30:
         5c:1f:4d:4b:e4:b2:ae:e5:9f:1b:3f:ae:d4:d3:53:fd:e2:cb:
         01:3c:8f:1a:14:18:6e:1a:3e:8f:87:b6:eb:f6:96:a6:5f:80:
         eb:ba:78:39:c8:ef:76:35:fd:ae:4b:9f:00:04:09:a6:bf:75:
         97:7d:ae:f1:c8:10:f9:97:20:0a:55:ae:7a:64:81:9e:8f:14:
         04:99:31:e6:9b:76:80:2c:4e:2d:9a:12:36:bb:3a:5f:c1:6b:
         6c:fc:c6:26:dc:e0:54:58:5f:0b:b4:fd:16:18:e9:06:db:5a:
         ec:86:9f:37:ed:2f:5c:12:98:0c:6c:8c:9c:66:d8:e5:ab:57:
         63:59:15:fc:b1:08:2d:66:72:b3:9d:0c:a1:5e:93:63:77:c3:
         6d:d1:a9:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84snDOarW2/3SczQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk
OTliZjcyYzktNmQ0YS00ODk0LTliNmQtYmZkMjU1MDZkNDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycU02m7O1TfgrLlq8zxxIJTWYpdTyhCSwRQm
szUQS7gQkiigTKiBBaqVUo2sZHss00Z5On6Hj42goSjNxNppO7YEvC5i+al13Z0R
Gr5zdpo1C6HvZ7Q9dllsqu4PCMY2+fAUkyQ81GfP1NKQhRem5H9LULf8wi7tyV6r
yztoeSd0VcGLfSvzsQ06WOY1DBItTRde4Oa+OmWj5KtAuuBGAlI3Oa8h7WCSotIy
3ttKm+4mC1+GPt3MFxgcKrd+cHCFhcwUo74UAePNrtnZ5EFQDMOQIaPBkmsEZhd3
F4fvIwKyac5C4L/BOUAEey8lKLiXDat72NJb3HMuL5FSEov2SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNktawAiMxfsxmBVJP/w4i9q/g2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGZkM2IyZjAtODEyMi0z
NDI3LThiMzItMDM2YTAyMjk4MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ8sQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0k3wajW0fmUIPRHHfzahEoXf5uloP8WmkiaErc7y1Ci3Cd6vpecDY3
x5PRLh+xSaSMcBmCkpGHYqDpx4DHe4wyIVwnLqbwTpi0NeGf0Lrc5qNrMgNR6Pp5
UEsH7ja3TX+FtOnicvSWf6/aMFwfTUvksq7lnxs/rtTTU/3iywE8jxoUGG4aPo+H
tuv2lqZfgOu6eDnI73Y1/a5LnwAECaa/dZd9rvHIEPmXIApVrnpkgZ6PFASZMeab
doAsTi2aEja7Ol/Ba2z8xibc4FRYXwu0/RYY6QbbWuyGnzftL1wSmAxsjJxm2OWr
V2NZFfyxCC1mcrOdDKFek2N3w23RqeQ=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:59:03 2026 by rpki-client