Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1efe4a4b-a572-37b3-81c6-38ed337664d1.roa
File:                     1efe4a4b-a572-37b3-81c6-38ed337664d1.roa (raw, json)
Hash identifier:          OsPWlhgevqN/bRHRqrNbed5fGAqqx83DZi92Ic2Eszs=
Subject key identifier:   95:42:D7:51:20:12:34:5F:39:E7:9B:57:54:B1:08:73:95:53:56:55
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584F119CEBE045530B054F3AB520
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1efe4a4b-a572-37b3-81c6-38ed337664d1.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     22612
IP address blocks:        162.254.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:eb:e0:45:53:0b:05:4f:3a:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9bc461a8-35b7-45ad-bf6f-26f18d956831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:31:24:62:e0:0a:2b:b0:e0:ac:8a:49:19:
                    18:cf:3d:9d:37:72:3e:80:bc:f7:61:de:eb:01:d0:
                    de:e6:cd:64:0e:0f:05:8f:f7:c1:05:af:47:da:41:
                    c3:c0:c4:9d:a0:2e:db:53:ca:06:5b:2c:46:65:59:
                    b2:21:0b:3d:05:26:41:35:f5:85:b8:c8:3c:10:cf:
                    85:93:c8:18:c8:49:4e:5a:53:12:f6:bf:6d:69:0b:
                    d4:29:c1:2b:8f:89:18:f1:38:af:85:0a:2d:e8:e0:
                    43:de:f9:0a:21:c0:c2:1c:b9:5a:93:66:86:f9:0d:
                    2a:54:1f:dd:5b:94:f6:bd:8e:22:cf:1e:f2:c7:56:
                    88:fa:c8:ad:77:29:ff:17:75:bc:57:4a:c0:d5:32:
                    92:f7:54:21:5d:19:46:a6:cd:1e:51:12:e5:0d:26:
                    ce:5c:4a:86:2c:be:91:cf:1b:a0:86:d6:5c:5b:45:
                    b6:82:93:71:5f:c5:a6:ab:03:e8:67:e6:04:ae:cd:
                    a5:93:c5:73:aa:a3:44:8d:e7:ef:63:02:15:c7:b4:
                    9c:69:9c:10:81:04:bf:8e:da:16:41:05:ca:46:01:
                    81:0a:2f:e9:c9:5d:4a:51:13:e6:1b:60:ed:ad:8d:
                    b7:1c:05:e5:7b:83:70:5c:95:1a:c2:9e:86:a7:8c:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:42:D7:51:20:12:34:5F:39:E7:9B:57:54:B1:08:73:95:53:56:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/1efe4a4b-a572-37b3-81c6-38ed337664d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:86:54:a8:c6:a1:74:89:cf:4f:08:e5:18:7d:6b:f7:46:
         8c:9c:be:35:52:48:87:5e:68:65:e8:b2:19:ee:bc:3c:c5:62:
         b8:d6:34:c5:e7:dc:e9:05:c0:a5:61:93:3c:ae:46:aa:0f:e6:
         46:f4:df:fa:c2:fa:04:94:3c:c9:d6:1b:63:0d:ca:49:6f:37:
         95:8b:e1:27:e6:31:ae:d7:4f:bd:67:20:23:12:6a:20:84:6b:
         ba:0d:5b:26:25:cd:02:42:65:c3:18:3f:7e:01:55:fd:aa:57:
         6d:c5:68:42:7a:c1:03:be:4e:19:0b:be:af:f9:a4:79:56:d8:
         dc:2c:76:3c:a0:7a:84:ad:77:bf:89:a8:e4:cd:d7:51:9e:7a:
         cd:db:68:55:07:75:b9:96:48:a2:34:aa:16:25:68:49:30:c8:
         4d:e3:4f:b2:89:73:35:4d:0b:8f:52:66:4b:7d:4d:bc:fa:a8:
         0a:2b:d1:02:10:1f:85:07:f6:76:6f:6d:c3:b0:4a:ab:0b:76:
         11:83:d1:3a:0f:d6:80:ba:fe:69:43:05:28:f7:a2:c4:04:9e:
         d2:98:a7:92:ba:c0:24:dd:4f:92:43:5a:a4:53:66:89:d2:53:
         f8:09:68:51:bd:ca:e0:e8:fe:19:c7:a9:e5:c6:28:d5:65:49:
         23:2f:27:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOvgRVMLBU86tSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWJjNDYxYTgtMzViNy00NWFkLWJmNmYtMjZmMThkOTU2ODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGYxJGLgCiuw4KyKSRkYzz2dN3I+gLz3Yd7r
AdDe5s1kDg8Fj/fBBa9H2kHDwMSdoC7bU8oGWyxGZVmyIQs9BSZBNfWFuMg8EM+F
k8gYyElOWlMS9r9taQvUKcErj4kY8TivhQot6OBD3vkKIcDCHLlak2aG+Q0qVB/d
W5T2vY4izx7yx1aI+sitdyn/F3W8V0rA1TKS91QhXRlGps0eURLlDSbOXEqGLL6R
zxughtZcW0W2gpNxX8WmqwPoZ+YErs2lk8VzqqNEjefvYwIVx7ScaZwQgQS/jtoW
QQXKRgGBCi/pyV1KURPmG2DtrY23HAXle4NwXJUawp6Gp4wmNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVC11EgEjRfOeebV1SxCHOVU1ZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMWVmZTRhNGItYTU3Mi0z
N2IzLTgxYzYtMzhlZDMzNzY2NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1qhlSoxqF0ic9PCOUYfWv3RoycvjVSSIdeaGXoshnuvDzFYrjWNMXn
3OkFwKVhkzyuRqoP5kb03/rC+gSUPMnWG2MNyklvN5WL4SfmMa7XT71nICMSaiCE
a7oNWyYlzQJCZcMYP34BVf2qV23FaEJ6wQO+ThkLvq/5pHlW2NwsdjygeoStd7+J
qOTN11Gees3baFUHdbmWSKI0qhYlaEkwyE3jT7KJczVNC49SZkt9Tbz6qAor0QIQ
H4UH9nZvbcOwSqsLdhGD0ToP1oC6/mlDBSj3osQEntKYp5K6wCTdT5JDWqRTZonS
U/gJaFG9yuDo/hnHqeXGKNVlSSMvJ5E=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:57:28 2026 by rpki-client