Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/9d13a46e-fc6a-362b-bb31-2ff44f5fd167.roa
File:                     9d13a46e-fc6a-362b-bb31-2ff44f5fd167.roa (raw, json)
Hash identifier:          WckmYIHZ5C+ARlY4ugxMgHndsyCLrIw3jTvyje8n1DE=
Subject key identifier:   E1:23:8B:D4:55:23:75:A6:0B:9B:0E:63:EC:6C:11:AA:93:30:44:EB
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584F3B7D1F23A8EA11820B7C8780
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/9d13a46e-fc6a-362b-bb31-2ff44f5fd167.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        64.120.232.0/24 maxlen: 24
                          64.120.233.0/24 maxlen: 24
                          64.120.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:1f:23:a8:ea:11:82:0b:7c:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=48873db0-cbd4-4f65-8859-bdd01f7907c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:5f:8f:55:e3:3b:cb:d9:07:fa:24:cc:e2:
                    60:9c:ea:25:8d:b9:a6:3d:5f:69:25:1c:c6:98:4c:
                    e1:84:4d:a3:9a:df:f0:37:1d:b6:4b:1c:93:be:8d:
                    a7:a4:ec:2b:2a:f3:f5:9f:32:3c:f1:6c:ae:f8:3a:
                    70:74:57:70:2d:57:af:c5:d6:ab:5c:24:ce:a2:7c:
                    c7:19:4a:60:38:d9:64:29:ff:99:70:98:44:19:b9:
                    1d:f2:4e:b6:9a:a6:9b:66:5b:7f:08:51:9d:d2:15:
                    dc:18:72:d3:26:d7:79:bf:f0:e5:3d:35:c5:e2:e6:
                    04:f7:1a:80:ae:f7:07:5d:46:0b:c7:a0:e3:67:45:
                    e3:09:48:fa:88:04:47:d4:66:66:f2:60:6b:b3:d2:
                    68:97:59:e0:1e:05:a9:03:79:57:c1:f5:2d:ec:71:
                    5d:3e:ed:7d:04:bb:9e:c2:e6:88:de:bb:80:bc:d6:
                    d9:cf:29:3f:ae:cd:89:3c:b2:6b:50:f7:ea:0c:0e:
                    2b:ba:e9:55:04:0a:48:de:d7:e3:55:c3:84:b5:d8:
                    fe:55:ed:35:2d:54:28:eb:62:a2:f5:3b:8a:5d:6d:
                    bd:6e:21:02:25:3b:be:8d:e7:c9:1d:17:03:bc:a5:
                    09:f8:21:06:39:3d:31:f1:30:3a:48:b2:f4:89:c7:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:8B:D4:55:23:75:A6:0B:9B:0E:63:EC:6C:11:AA:93:30:44:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/9d13a46e-fc6a-362b-bb31-2ff44f5fd167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.232.0-64.120.234.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:33:08:87:b0:c9:bf:c5:c3:b0:9e:99:5a:bf:e0:ab:43:
         8e:cb:15:54:02:6f:94:70:d8:57:5e:75:eb:5f:57:cf:ba:ae:
         6d:c5:7b:f4:a1:1b:1f:10:ff:7a:f3:07:42:19:fa:9e:81:fa:
         0c:d4:9e:aa:7c:6e:0a:ca:fd:75:14:04:5f:34:65:71:b3:a3:
         7b:77:7a:4f:54:c4:c1:2e:26:a8:e4:18:60:3a:22:c1:d8:a9:
         36:c6:5d:c7:bc:1b:1e:ce:48:8d:62:60:90:28:aa:56:88:8d:
         aa:29:30:2b:7e:91:81:e0:15:3e:b3:52:c2:02:71:43:42:70:
         86:b5:b5:ab:14:d8:91:6d:5e:15:59:6f:34:66:52:3e:90:11:
         c9:7c:d8:45:ee:77:ed:91:43:ae:c0:86:2d:00:e5:cd:9b:98:
         04:17:ba:e1:7d:bc:99:92:39:46:73:f5:60:6f:6f:44:ae:61:
         1c:3b:c3:53:3d:1b:eb:49:95:03:dd:e6:6c:c6:47:5c:68:0c:
         39:d1:34:b4:ee:f0:29:8c:66:a3:aa:21:29:d8:75:a7:4d:8b:
         d9:f6:51:8f:33:19:d3:c5:73:b0:95:70:98:ab:ef:cd:ea:12:
         15:3e:70:dc:d6:b1:c0:59:f4:63:77:cf:17:96:8e:24:c3:cf:
         82:e4:b2:a1
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE87fR8jqOoRggt8h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk
NDg4NzNkYjAtY2JkNC00ZjY1LTg4NTktYmRkMDFmNzkwN2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXFfj1XjO8vZB/okzOJgnOoljbmmPV9pJRzG
mEzhhE2jmt/wNx22SxyTvo2npOwrKvP1nzI88Wyu+DpwdFdwLVevxdarXCTOonzH
GUpgONlkKf+ZcJhEGbkd8k62mqabZlt/CFGd0hXcGHLTJtd5v/DlPTXF4uYE9xqA
rvcHXUYLx6DjZ0XjCUj6iARH1GZm8mBrs9Jol1ngHgWpA3lXwfUt7HFdPu19BLue
wuaI3ruAvNbZzyk/rs2JPLJrUPfqDA4ruulVBApI3tfjVcOEtdj+Ve01LVQo62Ki
9TuKXW29biECJTu+jefJHRcDvKUJ+CEGOT0x8TA6SLL0iccqlwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOEji9RVI3WmC5sOY+xsEaqTMETrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvOWQxM2E0NmUtZmM2YS0z
NjJiLWJiMzEtMmZmNDRmNWZkMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANAeOgD
BABAeOowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAjIszCIewyb/Fw7CemVq/4KtDjssVVAJvlHDYV151619X
z7qubcV79KEbHxD/evMHQhn6noH6DNSeqnxuCsr9dRQEXzRlcbOje3d6T1TEwS4m
qOQYYDoiwdipNsZdx7wbHs5IjWJgkCiqVoiNqikwK36RgeAVPrNSwgJxQ0JwhrW1
qxTYkW1eFVlvNGZSPpARyXzYRe537ZFDrsCGLQDlzZuYBBe64X28mZI5RnP1YG9v
RK5hHDvDUz0b60mVA93mbMZHXGgMOdE0tO7wKYxmo6ohKdh1p02L2fZRjzMZ08Vz
sJVwmKvvzeoSFT5w3NaxwFn0Y3fPF5aOJMPPguSyoQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:31:40 2026 by rpki-client