Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/2f9ac1c9-aac4-3af8-8cc8-ad4dcef7a5f4.roa
File:                     2f9ac1c9-aac4-3af8-8cc8-ad4dcef7a5f4.roa (raw, json)
Hash identifier:          Eb2+5Z3QPhbdVFICvES0P9SgIfIGut8Z30UVhMSyUXg=
Subject key identifier:   AC:D3:3B:52:1E:2D:6D:7C:3C:C1:78:0E:8E:07:0A:FA:56:A0:27:FC
Certificate issuer:       /CN=913248d6-1045-4518-812d-49c235626c01
Certificate serial:       010D0C9F4328584F103794540E160EB0F52CE760
Authority key identifier: C6:05:56:61:25:DF:20:F7:D0:C0:DE:90:EF:BC:AF:46:66:85:25:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/2f9ac1c9-aac4-3af8-8cc8-ad4dcef7a5f4.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     394188
IP address blocks:        151.123.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/913248d6-1045-4518-812d-49c235626c01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/913248d6-1045-4518-812d-49c235626c01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:94:54:0e:16:0e:b0:f5:2c:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913248d6-1045-4518-812d-49c235626c01
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=5c368f3c-133d-4bea-b45c-cf31648776fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:44:e5:78:24:3a:04:20:b9:00:9b:83:c9:
                    87:dc:58:06:3e:6a:d1:4a:50:f9:04:9e:35:e1:2b:
                    54:a2:b2:7c:8d:b7:c0:b8:40:62:49:1a:71:4f:6e:
                    28:db:35:3e:29:a2:fc:e1:dc:bd:78:17:cd:15:92:
                    e5:c5:f8:97:96:b8:4e:e4:49:71:eb:26:c3:87:22:
                    b5:8b:e1:7e:70:86:d0:e5:9f:71:c9:e6:5c:fd:21:
                    a5:20:20:67:19:92:b7:c9:d3:db:89:92:b6:bb:67:
                    b6:f5:b4:59:67:c5:83:c6:cb:a7:6f:ac:ce:58:d9:
                    d8:84:a2:12:7b:04:db:f5:e6:57:be:92:56:d3:62:
                    b2:b7:89:29:5c:0f:00:dd:aa:3e:95:49:aa:26:a6:
                    14:d9:b3:df:9a:a7:aa:45:45:1d:46:29:28:ce:08:
                    70:9f:4c:53:09:b9:97:d9:cc:3c:d7:3c:38:6e:c1:
                    c7:2a:49:72:90:7f:4f:18:fa:27:85:68:50:af:64:
                    55:e5:8d:42:a3:a5:57:97:c2:c5:44:18:42:45:fe:
                    15:43:9f:30:ec:47:2e:7c:c9:06:88:1d:e8:f2:af:
                    ff:73:e6:fe:d9:67:9d:ab:ab:c9:64:9b:94:e9:db:
                    c1:3d:64:4e:52:2c:c1:c7:33:42:dd:37:d8:ce:01:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D3:3B:52:1E:2D:6D:7C:3C:C1:78:0E:8E:07:0A:FA:56:A0:27:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/2f9ac1c9-aac4-3af8-8cc8-ad4dcef7a5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01/913248d6-1045-4518-812d-49c235626c01.crl

            X509v3 Authority Key Identifier:
                keyid:C6:05:56:61:25:DF:20:F7:D0:C0:DE:90:EF:BC:AF:46:66:85:25:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/913248d6-1045-4518-812d-49c235626c01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:f7:a6:b9:5b:3b:14:47:be:8a:53:80:b7:97:67:d1:20:
         8c:bc:f8:1f:8d:5f:d0:5d:80:75:b0:97:94:cc:ee:94:2d:20:
         49:ce:5c:b6:42:b0:9c:3c:f6:b0:3e:87:80:8e:8a:d9:40:14:
         3c:ca:86:d4:bf:ad:79:d5:60:2c:50:7b:7e:5a:ee:7e:09:8d:
         f6:dc:7f:9f:70:0b:d3:e0:8c:f2:90:54:01:31:0f:13:db:b7:
         62:53:fa:4c:31:d7:64:09:30:35:52:36:71:ef:96:f1:50:ba:
         61:3c:f6:29:9b:e0:79:03:62:de:5d:7b:00:0f:90:5a:d0:ec:
         ec:0f:97:7a:e8:bf:b6:b4:c1:29:9e:7e:41:04:cb:29:a0:f7:
         f1:82:e2:fb:12:84:8c:82:0e:ba:33:2d:9e:ef:63:86:56:94:
         f3:e1:8c:8e:0e:13:14:bc:a4:9a:0c:c3:66:db:22:e0:70:fd:
         01:87:8e:a6:ab:45:57:4a:e8:cd:9d:15:67:60:d4:64:12:c6:
         b5:4b:96:a9:cc:ad:dc:fa:dc:ba:8d:a8:03:12:bb:19:73:ca:
         5f:45:d6:2b:3d:ed:c5:86:a6:8a:1e:fd:e6:c4:12:54:de:17:
         ba:b1:b2:13:74:74:cb:54:37:8c:ff:e5:e6:71:10:a7:d6:60:
         61:c3:47:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5RUDhYOsPUs52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjQ4ZDYtMTA0NS00NTE4LTgxMmQtNDljMjM1NjI2
YzAxMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NWMzNjhmM2MtMTMzZC00YmVhLWI0NWMtY2YzMTY0ODc3NmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTpE5XgkOgQguQCbg8mH3FgGPmrRSlD5BJ41
4StUorJ8jbfAuEBiSRpxT24o2zU+KaL84dy9eBfNFZLlxfiXlrhO5Elx6ybDhyK1
i+F+cIbQ5Z9xyeZc/SGlICBnGZK3ydPbiZK2u2e29bRZZ8WDxsunb6zOWNnYhKIS
ewTb9eZXvpJW02Kyt4kpXA8A3ao+lUmqJqYU2bPfmqeqRUUdRikozghwn0xTCbmX
2cw81zw4bsHHKklykH9PGPonhWhQr2RV5Y1Co6VXl8LFRBhCRf4VQ58w7EcufMkG
iB3o8q//c+b+2Wedq6vJZJuU6dvBPWROUizBxzNC3TfYzgEvZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzTO1IeLW18PMF4Do4HCvpWoCf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85MTMy
NDhkNi0xMDQ1LTQ1MTgtODEyZC00OWMyMzU2MjZjMDEvMmY5YWMxYzktYWFjNC0z
YWY4LThjYzgtYWQ0ZGNlZjdhNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTEzMjQ4ZDYtMTA0NS00NTE4LTgx
MmQtNDljMjM1NjI2YzAxLzkxMzI0OGQ2LTEwNDUtNDUxOC04MTJkLTQ5YzIzNTYy
NmMwMS5jcmwwHwYDVR0jBBgwFoAUxgVWYSXfIPfQwN6Q77yvRmaFJW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85MTMyNDhkNi0xMDQ1LTQ1MTgtODEyZC00OWMy
MzU2MjZjMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl3ugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiu96a5WzsUR76KU4C3l2fRIIy8+B+NX9BdgHWwl5TM7pQtIEnOXLZC
sJw89rA+h4COitlAFDzKhtS/rXnVYCxQe35a7n4Jjfbcf59wC9PgjPKQVAExDxPb
t2JT+kwx12QJMDVSNnHvlvFQumE89imb4HkDYt5dewAPkFrQ7OwPl3rov7a0wSme
fkEEyymg9/GC4vsShIyCDrozLZ7vY4ZWlPPhjI4OExS8pJoMw2bbIuBw/QGHjqar
RVdK6M2dFWdg1GQSxrVLlqnMrdz63LqNqAMSuxlzyl9F1is97cWGpooe/ebEElTe
F7qxshN0dMtUN4z/5eZxEKfWYGHDR6w=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:03:38 2026 by rpki-client