Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa
File:                     21b758c9-e698-35f4-b007-715f1166d50d.roa (raw, json)
Hash identifier:          +pH66Pyj/bhG3MyO48dMnDF/uUd+zD3NPDOXKqrTiYA=
Subject key identifier:   53:23:40:F1:A0:25:DA:DD:A6:A6:82:DC:B1:64:83:60:59:19:FE:FE
Certificate issuer:       /CN=d3510324-7081-47df-ae57-12a0470696dd
Certificate serial:       010D0C9F4328584F778361769673E7B26D2B6C00
Authority key identifier: 22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     23089
IP address blocks:        9.128.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:61:76:96:73:e7:b2:6d:2b:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3510324-7081-47df-ae57-12a0470696dd
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=a15c5afb-16d2-4aa7-a573-476145dd0051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:fb:a7:c6:f5:59:ca:66:f3:d8:01:f3:b2:
                    89:8b:2e:9a:91:82:7c:2b:e2:78:51:4b:1b:76:0d:
                    89:da:d4:dc:38:f6:26:00:40:a6:e4:a0:1a:f1:cd:
                    7b:af:f9:da:8f:55:eb:eb:ec:99:f0:f1:e5:8d:f2:
                    3f:10:33:e9:7f:cd:89:b3:27:29:21:df:b2:e9:a6:
                    eb:19:cf:b3:d9:64:2e:9f:84:3a:f1:87:fe:72:ef:
                    21:d2:91:c8:df:7d:70:49:08:fe:49:f3:ed:93:bc:
                    69:3e:86:02:1b:6c:72:e6:16:d3:df:b2:e5:5e:b1:
                    9d:54:fb:5d:c4:df:62:8d:2e:91:41:56:4b:da:f8:
                    70:99:a6:66:fd:86:a7:9f:09:33:7c:1f:c8:30:82:
                    20:0f:5b:24:d3:01:83:26:5a:f0:37:4c:3a:68:f8:
                    d3:08:57:18:df:fd:7a:ae:bd:2e:e5:27:c1:f0:81:
                    27:95:b6:b0:70:fe:c6:8d:e4:25:98:d5:12:7c:9a:
                    8b:cb:be:0d:e7:b1:38:f3:07:12:27:0c:d0:6d:6e:
                    48:87:5f:02:da:3a:76:a9:78:44:0d:31:9f:60:9f:
                    2c:f9:89:5a:81:3d:bd:ab:6a:96:0a:6c:93:06:7f:
                    25:f8:d7:0c:f1:ed:c4:59:b8:72:84:d6:7b:27:4e:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:23:40:F1:A0:25:DA:DD:A6:A6:82:DC:B1:64:83:60:59:19:FE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl

            X509v3 Authority Key Identifier:
                keyid:22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.128.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:24:9b:8e:34:41:92:d5:67:32:38:1d:ca:6a:db:f0:c9:
         bf:df:86:d9:42:ac:30:28:47:ea:8f:0a:ae:96:a7:d5:e9:53:
         c6:2c:e1:e8:f2:4e:ff:ce:92:8c:6c:45:4b:a8:16:34:d1:6c:
         c1:12:fa:28:ab:52:73:e4:16:26:6f:6c:7d:26:22:fa:81:e7:
         23:61:49:d0:0c:36:e0:81:36:7b:b0:67:f0:41:70:a3:fe:f8:
         c8:85:2c:e3:b5:a0:ed:ff:a7:7e:19:f4:b4:cf:65:0c:e6:d4:
         99:a5:57:0f:64:79:85:46:85:38:4f:35:d8:e8:89:0f:3d:d1:
         92:30:a3:3a:c1:b5:3e:4e:78:5d:ad:60:ce:6f:be:53:0c:86:
         a5:79:68:a6:8f:ac:09:f4:59:70:44:2d:0a:9d:c0:46:e9:01:
         fc:77:d4:78:88:5e:fe:a0:56:7e:56:e4:cf:74:b3:81:6c:f1:
         07:2f:dd:f3:77:0f:c5:5e:84:b4:d6:6b:98:1f:6b:85:99:4c:
         c3:23:bb:40:b9:94:46:2e:ba:de:fd:b7:de:89:52:78:fe:87:
         cf:ab:fe:4a:7e:6c:98:67:24:ce:89:d9:7e:fa:6d:68:7e:e1:
         40:46:d9:26:de:d5:d1:d0:bb:66:22:85:97:31:d7:ec:b3:f2:
         d2:c1:03:74
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE93g2F2lnPnsm0rbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM1MTAzMjQtNzA4MS00N2RmLWFlNTctMTJhMDQ3MDY5
NmRkMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
YTE1YzVhZmItMTZkMi00YWE3LWE1NzMtNDc2MTQ1ZGQwMDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAD7p8b1Wcpm89gB87KJiy6akYJ8K+J4UUsb
dg2J2tTcOPYmAECm5KAa8c17r/naj1Xr6+yZ8PHljfI/EDPpf82JsycpId+y6abr
Gc+z2WQun4Q68Yf+cu8h0pHI331wSQj+SfPtk7xpPoYCG2xy5hbT37LlXrGdVPtd
xN9ijS6RQVZL2vhwmaZm/YannwkzfB/IMIIgD1sk0wGDJlrwN0w6aPjTCFcY3/16
rr0u5SfB8IEnlbawcP7GjeQlmNUSfJqLy74N57E48wcSJwzQbW5Ih18C2jp2qXhE
DTGfYJ8s+YlagT29q2qWCmyTBn8l+NcM8e3EWbhyhNZ7J05h7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFMjQPGgJdrdpqaC3LFkg2BZGf7+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMzUx
MDMyNC03MDgxLTQ3ZGYtYWU1Ny0xMmEwNDcwNjk2ZGQvMjFiNzU4YzktZTY5OC0z
NWY0LWIwMDctNzE1ZjExNjZkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDM1MTAzMjQtNzA4MS00N2RmLWFl
NTctMTJhMDQ3MDY5NmRkL2QzNTEwMzI0LTcwODEtNDdkZi1hZTU3LTEyYTA0NzA2
OTZkZC5jcmwwHwYDVR0jBBgwFoAUIhGCSEoT4K6cXSqjGpKgWnXLtXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMzUxMDMyNC03MDgxLTQ3ZGYtYWU1Ny0xMmEw
NDcwNjk2ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMACYAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJcskm440QZLVZzI4Hcpq2/DJv9+G2UKsMChH6o8Krpan1elTxizh6PJO
/86SjGxFS6gWNNFswRL6KKtSc+QWJm9sfSYi+oHnI2FJ0Aw24IE2e7Bn8EFwo/74
yIUs47Wg7f+nfhn0tM9lDObUmaVXD2R5hUaFOE812OiJDz3RkjCjOsG1Pk54Xa1g
zm++UwyGpXlopo+sCfRZcEQtCp3ARukB/HfUeIhe/qBWflbkz3SzgWzxBy/d83cP
xV6EtNZrmB9rhZlMwyO7QLmURi663v233olSeP6Hz6v+Sn5smGckzonZfvptaH7h
QEbZJt7V0dC7ZiKFlzHX7LPy0sEDdA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:49:24 2026 by rpki-client