Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/63f69685-2312-3ae0-85c1-63a2c9d0ba64.roa
File:                     63f69685-2312-3ae0-85c1-63a2c9d0ba64.roa (raw, json)
Hash identifier:          uHArZbpILEDZu0MzN+KtXzKZYFdwk87GrN8shnrbiAU=
Subject key identifier:   71:FE:F3:E2:19:48:58:94:CB:1F:D4:44:61:40:78:9A:FB:1F:18:9C
Certificate issuer:       /CN=781d7bd5-5a41-4dfd-a4b9-0b12af4cae70
Certificate serial:       010D0C9F4328584F3052771B036B60B1B2FACB80
Authority key identifier: E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/63f69685-2312-3ae0-85c1-63a2c9d0ba64.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     13876
IP address blocks:        170.76.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:77:1b:03:6b:60:b1:b2:fa:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781d7bd5-5a41-4dfd-a4b9-0b12af4cae70
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=839b4259-be8f-498f-b9fb-5509454c93be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:fa:6d:78:f6:d3:19:71:f9:86:1d:6b:4d:
                    51:31:42:41:92:fc:7e:d5:d7:cb:53:f5:a2:dd:7d:
                    80:09:22:00:f1:ac:8d:23:9e:63:98:c5:3a:89:28:
                    f4:a2:f0:33:65:16:5b:b5:84:c0:7d:24:ee:b3:c4:
                    ad:ca:ec:ad:5f:ae:fa:5d:14:7c:61:c7:6b:c0:80:
                    eb:94:ff:ae:6f:5a:88:a3:2f:b5:1a:f6:4e:0a:b7:
                    ff:a9:8a:be:36:d7:4c:c8:42:5e:d5:50:dd:c0:09:
                    1f:99:38:bc:a0:30:d7:0e:02:d7:73:1c:af:ef:e8:
                    0e:0d:c7:98:5a:17:15:30:be:c2:bd:30:52:1e:1b:
                    56:da:a6:76:dd:ff:5d:1e:23:7a:36:e8:83:a6:29:
                    70:35:39:17:fc:35:b2:9d:54:23:61:a7:db:fd:28:
                    77:2b:4f:79:dd:71:91:11:a2:e2:9b:57:0d:99:c6:
                    36:3c:0c:bb:9d:49:04:9b:03:cc:ab:4e:62:cd:ca:
                    58:6d:a0:fe:eb:c2:e4:75:3d:b8:60:62:5e:dd:29:
                    08:a0:8d:40:45:4f:5c:a8:9d:32:41:ba:f4:58:5f:
                    71:b1:c5:73:75:7c:7f:e7:95:7e:7f:d4:b1:ad:c4:
                    78:2c:7c:67:9e:0b:77:98:d6:c4:ac:90:2d:9b:ca:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:F3:E2:19:48:58:94:CB:1F:D4:44:61:40:78:9A:FB:1F:18:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/63f69685-2312-3ae0-85c1-63a2c9d0ba64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.crl

            X509v3 Authority Key Identifier:
                keyid:E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:56:bf:6f:2a:07:af:f6:93:84:e3:0b:91:ec:ca:a4:95:07:
         4b:2d:27:16:0d:41:bb:f9:a0:0d:ae:6a:ec:f5:bd:d9:bf:5f:
         40:9e:64:b7:f9:f4:fd:8a:6a:e4:d6:11:f2:d0:2e:8c:52:ec:
         31:e3:19:40:23:cf:49:27:24:4d:78:d8:91:e0:2f:e0:c0:0a:
         ba:e4:db:17:1d:cd:05:c9:c2:11:c7:5d:bb:34:94:35:5a:e2:
         85:45:cf:67:ee:e0:c3:11:17:35:54:86:ce:59:55:2a:2a:cf:
         fb:2b:0f:83:21:71:2d:72:ed:07:21:07:19:0c:0f:fb:fe:77:
         25:78:30:1c:51:01:72:b0:e2:79:c0:ef:54:8c:8e:2e:ec:b2:
         1e:5e:72:15:47:14:13:7b:87:ca:aa:67:fa:cc:ee:e4:b5:ef:
         2d:61:47:8a:f3:d8:38:1b:4b:e8:7e:1b:e0:76:88:7b:a7:1d:
         69:29:8c:8d:bd:2d:b2:be:b6:62:7b:f0:bf:8c:85:71:fa:02:
         fd:e9:c4:eb:b0:52:35:ae:9a:59:5d:d8:db:3f:6c:9a:d8:3c:
         c3:a0:04:43:21:51:b7:68:15:19:35:31:10:3a:e8:29:e9:7a:
         cf:c9:7f:0a:b1:42:3e:dd:1f:5d:08:3d:2e:08:49:d6:05:97:
         7f:69:c3:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUncbA2tgsbL6y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgxZDdiZDUtNWE0MS00ZGZkLWE0YjktMGIxMmFmNGNh
ZTcwMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ODM5YjQyNTktYmU4Zi00OThmLWI5ZmItNTUwOTQ1NGM5M2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheX6bXj20xlx+YYda01RMUJBkvx+1dfLU/Wi
3X2ACSIA8ayNI55jmMU6iSj0ovAzZRZbtYTAfSTus8StyuytX676XRR8YcdrwIDr
lP+ub1qIoy+1GvZOCrf/qYq+NtdMyEJe1VDdwAkfmTi8oDDXDgLXcxyv7+gODceY
WhcVML7CvTBSHhtW2qZ23f9dHiN6NuiDpilwNTkX/DWynVQjYafb/Sh3K0953XGR
EaLim1cNmcY2PAy7nUkEmwPMq05izcpYbaD+68LkdT24YGJe3SkIoI1ARU9cqJ0y
Qbr0WF9xscVzdXx/55V+f9SxrcR4LHxnngt3mNbErJAtm8o+vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHH+8+IZSFiUyx/URGFAeJr7HxicMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83ODFk
N2JkNS01YTQxLTRkZmQtYTRiOS0wYjEyYWY0Y2FlNzAvNjNmNjk2ODUtMjMxMi0z
YWUwLTg1YzEtNjNhMmM5ZDBiYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzgxZDdiZDUtNWE0MS00ZGZkLWE0
YjktMGIxMmFmNGNhZTcwLzc4MWQ3YmQ1LTVhNDEtNGRmZC1hNGI5LTBiMTJhZjRj
YWU3MC5jcmwwHwYDVR0jBBgwFoAU5Y9XzhTws8mF5DJ0XV2i7IxYzS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83ODFkN2JkNS01YTQxLTRkZmQtYTRiOS0wYjEy
YWY0Y2FlNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkzzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNWv28qB6/2k4TjC5HsyqSVB0stJxYNQbv5oA2uauz1vdm/X0CeZLf5
9P2KauTWEfLQLoxS7DHjGUAjz0knJE142JHgL+DACrrk2xcdzQXJwhHHXbs0lDVa
4oVFz2fu4MMRFzVUhs5ZVSoqz/srD4MhcS1y7QchBxkMD/v+dyV4MBxRAXKw4nnA
71SMji7ssh5echVHFBN7h8qqZ/rM7uS17y1hR4rz2DgbS+h+G+B2iHunHWkpjI29
LbK+tmJ78L+MhXH6Av3pxOuwUjWumlld2Ns/bJrYPMOgBEMhUbdoFRk1MRA66Cnp
es/JfwqxQj7dH10IPS4ISdYFl39pw/w=
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:22:56 2026 by rpki-client