Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4e163f44-05ee-3e3d-94a5-e80243baf52b.roa
File:                     4e163f44-05ee-3e3d-94a5-e80243baf52b.roa (raw, json)
Hash identifier:          QhUExEohgr+2nYy6wweMmmsk0y/XcM/PJKUqNcBqOns=
Subject key identifier:   7A:3E:E2:F3:7E:0B:29:65:3A:9E:44:D3:C1:90:B2:04:F0:C2:1A:F1
Certificate issuer:       /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial:       010D0C9F4328584F3B7D2724CE3E41722D302940
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4e163f44-05ee-3e3d-94a5-e80243baf52b.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     7235
IP address blocks:        66.117.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:27:24:ce:3e:41:72:2d:30:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=864691de-55bf-4724-8d9c-4fdaafd3c70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:32:b4:99:cd:b7:31:82:db:5a:57:cc:0d:
                    db:ff:a3:dc:c5:c2:9e:f8:28:f8:98:49:89:90:4e:
                    7e:65:8e:1a:4a:d2:ce:56:6c:a5:30:b5:b6:ab:b4:
                    03:23:cb:da:c7:8f:4a:3c:70:d9:ed:66:1c:22:a0:
                    12:9f:f8:ca:d5:f7:b8:37:c1:30:a6:18:82:eb:f6:
                    21:46:6a:4f:b9:95:5b:5e:79:12:69:00:e3:ea:26:
                    5e:3b:88:50:e1:e0:67:d0:91:b8:7e:8e:5d:1c:af:
                    4c:b5:45:5f:cb:30:d4:5e:00:e1:a8:1c:64:31:d5:
                    c2:06:7d:f5:a9:02:03:7d:08:fd:96:25:1f:7d:cc:
                    1d:fc:73:b9:62:3b:b2:a8:f8:3e:97:c2:b7:bf:3f:
                    cf:f0:19:1e:f3:5c:87:e5:95:92:38:ca:5a:40:9e:
                    ca:cc:c2:cd:a8:97:e3:d3:11:55:ad:98:1f:b1:46:
                    93:05:59:7b:13:71:2c:99:94:aa:8f:a1:fe:b8:97:
                    55:32:63:b6:35:b2:b5:dd:37:0a:30:76:e8:e5:a0:
                    70:95:fb:aa:1f:bf:c9:dd:72:16:88:83:71:57:78:
                    3e:07:4f:4c:b5:65:fb:50:5f:93:90:31:3c:9c:ce:
                    99:19:6e:69:67:e6:cd:83:02:be:1b:0c:74:7c:d9:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:E2:F3:7E:0B:29:65:3A:9E:44:D3:C1:90:B2:04:F0:C2:1A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4e163f44-05ee-3e3d-94a5-e80243baf52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl

            X509v3 Authority Key Identifier:
                keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:03:18:ef:a5:0a:ae:d2:32:df:cd:55:0e:53:62:44:bc:
         29:d3:39:70:12:90:d0:d0:62:e3:00:47:3b:1d:db:c8:48:82:
         1d:14:ea:0b:a2:bc:c5:cc:54:80:6f:bd:7e:60:33:51:00:91:
         b3:d7:26:31:f1:fd:10:bd:a2:e8:1d:1b:80:5e:3a:8f:e3:e7:
         34:22:54:8d:a0:86:ad:ff:f2:a7:41:40:ea:a3:95:3e:83:4f:
         4f:b7:4d:af:95:26:c6:a2:6f:ef:64:85:c1:fb:4a:c5:e5:19:
         4d:70:11:df:3d:8b:09:7c:8d:02:da:de:d9:f0:d3:2e:be:f3:
         2e:33:ff:7e:19:61:fd:ed:a0:fe:90:e8:65:9c:99:e1:fe:dc:
         27:f2:7f:8b:db:8b:3b:38:89:2f:76:06:ec:a8:03:37:e5:0b:
         1e:e9:17:2a:70:ba:69:d6:d5:31:98:66:3f:f4:e7:8b:58:ea:
         21:72:30:f1:89:83:5e:9b:bc:79:e5:6e:2f:97:0f:bc:3b:0d:
         d0:43:4b:45:a2:59:5e:cf:59:5b:5b:e0:8c:3b:01:24:45:49:
         8e:c3:8b:ac:3b:33:0e:f9:49:af:a6:1d:0c:d8:c1:6e:4e:3f:
         e6:f0:c9:0a:13:a9:46:5b:ba:c4:f2:9d:aa:da:ef:19:b7:0c:
         f6:f7:31:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSckzj5Bci0wKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk
ODQzMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk
ODY0NjkxZGUtNTViZi00NzI0LThkOWMtNGZkYWFmZDNjNzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRoytJnNtzGC21pXzA3b/6PcxcKe+Cj4mEmJ
kE5+ZY4aStLOVmylMLW2q7QDI8vax49KPHDZ7WYcIqASn/jK1fe4N8EwphiC6/Yh
RmpPuZVbXnkSaQDj6iZeO4hQ4eBn0JG4fo5dHK9MtUVfyzDUXgDhqBxkMdXCBn31
qQIDfQj9liUffcwd/HO5YjuyqPg+l8K3vz/P8Bke81yH5ZWSOMpaQJ7KzMLNqJfj
0xFVrZgfsUaTBVl7E3EsmZSqj6H+uJdVMmO2NbK13TcKMHbo5aBwlfuqH7/J3XIW
iINxV3g+B09MtWX7UF+TkDE8nM6ZGW5pZ+bNgwK+Gwx0fNmf4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHo+4vN+CyllOp5E08GQsgTwwhrxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm
MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvNGUxNjNmNDQtMDVlZS0z
ZTNkLTk0YTUtZTgwMjQzYmFmNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3
ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh
ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj
M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQnWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACanAxjvpQqu0jLfzVUOU2JEvCnTOXASkNDQYuMARzsd28hIgh0U6gui
vMXMVIBvvX5gM1EAkbPXJjHx/RC9ougdG4BeOo/j5zQiVI2ghq3/8qdBQOqjlT6D
T0+3Ta+VJsaib+9khcH7SsXlGU1wEd89iwl8jQLa3tnw0y6+8y4z/34ZYf3toP6Q
6GWcmeH+3Cfyf4vbizs4iS92BuyoAzflCx7pFypwumnW1TGYZj/054tY6iFyMPGJ
g16bvHnlbi+XD7w7DdBDS0WiWV7PWVtb4Iw7ASRFSY7Di6w7Mw75Sa+mHQzYwW5O
P+bwyQoTqUZbusTynara7xm3DPb3MTI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:20:09 2026 by rpki-client