Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/9dea3857-cdfe-3a54-9f0f-4a1ea4025d88.roa
File:                     9dea3857-cdfe-3a54-9f0f-4a1ea4025d88.roa (raw, json)
Hash identifier:          6upgE+eST5QNRimf3bzLQcBqiXO7UWkV4z/f5mKszGU=
Subject key identifier:   5E:11:20:00:FA:9F:66:9B:88:C3:EF:B9:E7:10:9D:01:02:DE:11:1B
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584F480D6452DF314C03BA4B6A40
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/9dea3857-cdfe-3a54-9f0f-4a1ea4025d88.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16524
IP address blocks:        72.11.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:64:52:df:31:4c:03:ba:4b:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=e7ead257-0375-4cfc-99fd-6928871325eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:43:0a:da:3f:4f:b2:e0:48:07:e8:af:5c:
                    1b:d1:93:28:01:83:32:6d:47:b2:c8:1f:b2:fc:22:
                    c0:30:7b:16:51:b9:97:e4:3d:7e:a7:85:b7:7d:f0:
                    64:be:32:89:b5:50:ca:d0:28:a5:85:18:c3:df:a6:
                    e2:22:7f:3e:73:79:bd:5c:c5:2d:2e:b2:35:78:6d:
                    68:98:7f:e6:83:4b:19:3d:8f:ef:c7:18:9f:c0:8f:
                    3e:8b:b7:ca:31:32:ca:94:7c:f0:00:63:71:62:55:
                    95:2b:07:e8:97:61:02:cd:c9:99:ab:be:1f:77:3b:
                    9d:05:07:2f:6f:d6:f1:7d:93:df:bd:ee:40:4d:94:
                    9d:30:52:de:ab:c3:95:51:2f:32:e2:d5:6f:b5:a2:
                    11:c3:fa:df:dd:e3:db:26:1d:18:2c:e0:7b:6b:57:
                    85:ca:c0:11:ed:d9:78:0b:aa:75:b4:df:55:12:00:
                    ea:9a:0a:38:5e:b1:76:96:6e:be:17:37:44:1d:45:
                    19:f9:7f:f8:18:18:ff:62:86:09:06:01:f2:4c:1e:
                    78:7c:fe:d7:e8:39:03:8b:29:06:18:2d:64:15:ec:
                    25:d5:f1:33:0c:0f:9e:d3:6a:b8:69:c4:09:e5:55:
                    e9:ba:f0:3c:7b:58:a0:6c:0c:22:55:d2:88:aa:f3:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:11:20:00:FA:9F:66:9B:88:C3:EF:B9:E7:10:9D:01:02:DE:11:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/9dea3857-cdfe-3a54-9f0f-4a1ea4025d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:8a:75:c9:7a:a6:0a:f4:8b:6f:ef:19:07:5a:2e:98:79:
         45:c5:77:e7:a4:84:ef:42:12:99:a9:4d:18:89:72:81:b3:9a:
         74:58:3b:ab:63:17:bb:6a:41:35:3b:8f:df:fd:d9:60:4a:c0:
         8d:88:0c:31:7b:08:93:60:90:fc:86:12:ff:63:84:76:f2:fa:
         36:46:b8:8f:52:cd:cd:53:fb:70:7d:20:4a:06:58:0f:5c:be:
         e5:be:7b:db:24:61:57:d3:e5:9a:c1:73:68:4b:57:fe:40:c4:
         ac:67:e0:aa:74:6e:de:dc:1a:6b:31:b0:ba:6c:29:fe:40:f5:
         3e:34:da:90:19:c9:31:b0:9d:19:d0:0e:4a:22:a7:52:e3:e2:
         6d:5c:02:02:92:6e:ff:34:92:cc:0d:e5:ca:60:2a:6f:a7:f5:
         d5:cc:4e:45:fc:be:a3:ab:ac:87:12:9a:ad:cd:10:28:42:fb:
         93:43:37:7e:4e:e5:66:bc:1a:37:18:52:aa:b1:bd:f2:3a:84:
         84:32:d6:93:1c:bb:bb:36:ba:c5:8b:62:74:c4:60:90:10:09:
         d8:d8:b4:dd:be:8a:af:bc:cf:7a:6f:57:75:97:27:36:1d:56:
         fa:53:a8:36:4c:6a:45:a3:a4:7d:35:34:36:4d:0f:d1:01:1d:
         90:23:b7:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWRS3zFMA7pLakAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2
ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZTdlYWQyNTctMDM3NS00Y2ZjLTk5ZmQtNjkyODg3MTMyNWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn71DCto/T7LgSAfor1wb0ZMoAYMybUeyyB+y
/CLAMHsWUbmX5D1+p4W3ffBkvjKJtVDK0CilhRjD36biIn8+c3m9XMUtLrI1eG1o
mH/mg0sZPY/vxxifwI8+i7fKMTLKlHzwAGNxYlWVKwfol2ECzcmZq74fdzudBQcv
b9bxfZPfve5ATZSdMFLeq8OVUS8y4tVvtaIRw/rf3ePbJh0YLOB7a1eFysAR7dl4
C6p1tN9VEgDqmgo4XrF2lm6+FzdEHUUZ+X/4GBj/YoYJBgHyTB54fP7X6DkDiykG
GC1kFewl1fEzDA+e02q4acQJ5VXpuvA8e1igbAwiVdKIqvMaqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4RIAD6n2abiMPvuecQnQEC3hEbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1
ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvOWRlYTM4NTctY2RmZS0z
YTU0LTlmMGYtNGExZWE0MDI1ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm
NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl
NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2
MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+UinXJeqYK9Itv7xkHWi6YeUXFd+ekhO9CEpmpTRiJcoGzmnRYO6tj
F7tqQTU7j9/92WBKwI2IDDF7CJNgkPyGEv9jhHby+jZGuI9Szc1T+3B9IEoGWA9c
vuW+e9skYVfT5ZrBc2hLV/5AxKxn4Kp0bt7cGmsxsLpsKf5A9T402pAZyTGwnRnQ
Dkoip1Lj4m1cAgKSbv80kswN5cpgKm+n9dXMTkX8vqOrrIcSmq3NEChC+5NDN35O
5Wa8GjcYUqqxvfI6hIQy1pMcu7s2usWLYnTEYJAQCdjYtN2+iq+8z3pvV3WXJzYd
VvpTqDZMakWjpH01NDZND9EBHZAjt+w=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:15:06 2026 by rpki-client