Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/05ec0cbb-bf03-3082-a136-9c5bb5e8171a.roa
File:                     05ec0cbb-bf03-3082-a136-9c5bb5e8171a.roa (raw, json)
Hash identifier:          DvDGogWwDX5Tsf7sME9wqK7qJch3dOv07YuX5+mblu8=
Subject key identifier:   43:D0:50:79:A4:FE:28:AA:7A:33:C6:2C:01:4A:7A:E2:12:FF:16:07
Certificate issuer:       /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1
Certificate serial:       010D0C9F4328584F04C18A15A4D12B9339BF3300
Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/05ec0cbb-bf03-3082-a136-9c5bb5e8171a.roa
Signing time:             Mon 31 Aug 2026 10:28:38 +0000
ROA not before:           Mon 31 Aug 2026 10:28:38 +0000
ROA not after:            Sun 29 Nov 2026 11:28:38 +0000
asID:                     6939
IP address blocks:        169.128.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:c1:8a:15:a4:d1:2b:93:39:bf:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1
        Validity
            Not Before: Aug 31 10:28:38 2026 GMT
            Not After : Nov 29 11:28:38 2026 GMT
        Subject: CN=c3427ef0-4436-4177-9061-e10315990540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:f1:70:e2:82:6d:ba:95:7b:ff:fb:5b:31:
                    44:3d:84:6b:6a:1f:92:6b:6f:a7:cc:13:7c:39:d0:
                    fe:1a:64:11:9c:f8:64:68:91:08:3f:d6:ac:56:30:
                    c7:06:0a:19:53:ab:e5:3c:fe:ff:ce:28:a4:95:8a:
                    f1:42:1f:71:46:1d:c9:b8:44:6c:a9:19:b6:f7:07:
                    69:2c:89:49:56:df:18:88:16:80:e1:58:52:5f:6b:
                    19:a1:7b:09:80:c8:43:61:b6:c7:ff:e0:30:73:c8:
                    9e:f6:92:e3:52:0c:a6:26:09:ca:4f:e9:e0:fa:5e:
                    b2:51:51:16:ba:1e:d6:d0:aa:ef:a9:b7:d3:8a:89:
                    fe:2c:71:7e:b7:b6:d6:5c:13:d2:5a:8e:fa:e5:ba:
                    3b:fa:7c:25:8b:f4:91:7c:f7:4f:95:c0:36:b8:95:
                    c2:9f:97:87:fc:6f:a4:6d:22:44:c0:12:b0:b0:e4:
                    53:d1:f7:d5:d2:a5:b7:b4:68:b1:c4:e5:f7:31:15:
                    8c:b4:bf:cc:41:6a:5f:6f:f5:51:78:d0:7d:07:44:
                    49:c4:c9:0f:3d:32:ce:42:46:4a:00:ad:79:16:f8:
                    af:ca:f1:73:71:9d:64:b6:fc:b1:88:9c:cc:35:b3:
                    45:f1:ac:70:9d:b9:72:21:62:8a:24:ec:2a:e0:4a:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:50:79:A4:FE:28:AA:7A:33:C6:2C:01:4A:7A:E2:12:FF:16:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/05ec0cbb-bf03-3082-a136-9c5bb5e8171a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl

            X509v3 Authority Key Identifier:
                keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:c3:c3:86:9b:9e:ef:c8:34:d0:08:7e:e6:f9:e3:5f:e2:
         e3:3a:ee:ad:2d:4b:54:f7:76:2f:cc:40:cc:10:63:4e:d9:14:
         d8:2a:02:91:45:dd:79:f8:c7:4f:3a:8e:35:46:11:cd:d3:2e:
         ab:f4:8f:8e:e8:02:4d:c9:a9:48:58:89:6b:95:5f:b4:e5:5f:
         82:c4:58:c7:18:4d:a1:2b:dd:f7:45:53:94:fb:eb:4e:69:58:
         33:73:00:08:86:8f:8b:73:4c:27:b1:9e:23:06:5f:14:25:07:
         56:3d:7b:79:77:07:0b:e2:0a:a9:34:15:98:c3:df:2a:e0:74:
         15:ad:7e:a2:4e:44:66:9a:0d:4d:17:a5:d8:e5:d5:54:27:a7:
         e6:91:ce:ed:73:f5:b8:58:3a:59:7e:3e:68:22:60:4d:4b:57:
         2c:4a:e8:0f:b1:ff:b6:41:bd:bf:e1:44:e4:39:c1:e1:30:ff:
         ef:a9:d6:4c:41:4e:f3:85:ae:04:69:e4:25:27:6f:a5:5d:af:
         ce:7d:fe:c7:8c:d0:1a:15:be:b5:5f:f9:29:97:cc:24:5b:fb:
         54:ff:57:ad:6f:da:80:f9:43:8d:9e:39:08:b8:43:8b:70:24:
         0c:c7:fa:78:d7:24:f9:21:9e:d5:ba:45:09:78:ee:eb:29:a8:
         10:89:c6:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8EwYoVpNErkzm/MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2
ZmIxMB4XDTI2MDgzMTEwMjgzOFoXDTI2MTEyOTExMjgzOFowLzEtMCsGA1UEAxMk
YzM0MjdlZjAtNDQzNi00MTc3LTkwNjEtZTEwMzE1OTkwNTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFvxcOKCbbqVe//7WzFEPYRrah+Sa2+nzBN8
OdD+GmQRnPhkaJEIP9asVjDHBgoZU6vlPP7/ziiklYrxQh9xRh3JuERsqRm29wdp
LIlJVt8YiBaA4VhSX2sZoXsJgMhDYbbH/+Awc8ie9pLjUgymJgnKT+ng+l6yUVEW
uh7W0KrvqbfTion+LHF+t7bWXBPSWo765bo7+nwli/SRfPdPlcA2uJXCn5eH/G+k
bSJEwBKwsORT0ffV0qW3tGixxOX3MRWMtL/MQWpfb/VReNB9B0RJxMkPPTLOQkZK
AK15FvivyvFzcZ1ktvyxiJzMNbNF8axwnblyIWKKJOwq4Ep7mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPQUHmk/iiqejPGLAFKeuIS/xYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4
Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvMDVlYzBjYmItYmYwMy0z
MDgyLWExMzYtOWM1YmI1ZTgxNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0
ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0
NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx
ZTFiNDZmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYB8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1nw8OGm57vyDTQCH7m+eNf4uM67q0tS1T3di/MQMwQY07ZFNgqApFF
3Xn4x086jjVGEc3TLqv0j47oAk3JqUhYiWuVX7TlX4LEWMcYTaEr3fdFU5T7605p
WDNzAAiGj4tzTCexniMGXxQlB1Y9e3l3BwviCqk0FZjD3yrgdBWtfqJORGaaDU0X
pdjl1VQnp+aRzu1z9bhYOll+PmgiYE1LVyxK6A+x/7ZBvb/hROQ5weEw/++p1kxB
TvOFrgRp5CUnb6Vdr859/seM0BoVvrVf+SmXzCRb+1T/V61v2oD5Q42eOQi4Q4tw
JAzH+njXJPkhntW6RQl47uspqBCJxts=
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:23 2026 by rpki-client