Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7e83df-2091-3bda-a89e-b6a871f61117.roa
File:                     ff7e83df-2091-3bda-a89e-b6a871f61117.roa (raw, json)
Hash identifier:          OJmGfYvROwGPvnc2yFUEsyoSRke8dI++/UMJNscCROM=
Subject key identifier:   AF:B2:B7:9B:54:35:BD:98:8B:AF:99:45:E4:3D:62:3A:17:2F:2C:92
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1C15212EC1E57B5DE560ECE0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7e83df-2091-3bda-a89e-b6a871f61117.roa
Signing time:             Tue 08 Sep 2026 19:00:39 +0000
ROA not before:           Tue 08 Sep 2026 19:00:39 +0000
ROA not after:            Mon 07 Dec 2026 20:00:39 +0000
asID:                     31898
IP address blocks:        155.181.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:15:21:2e:c1:e5:7b:5d:e5:60:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  8 19:00:39 2026 GMT
            Not After : Dec  7 20:00:39 2026 GMT
        Subject: CN=bc276ead-8711-4570-a33f-6a8eaeaf356c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:4f:10:71:33:6e:3e:a4:19:ef:00:49:e8:
                    df:cd:d9:61:0a:c5:37:30:bb:09:6f:7b:6a:cb:53:
                    cf:a5:83:84:b0:3e:07:14:21:a4:0d:76:52:7d:01:
                    07:aa:51:97:61:7e:d3:90:98:0a:74:7f:46:60:b3:
                    ab:8f:6d:a9:7b:0a:b9:24:ab:ff:16:30:71:20:d4:
                    0b:2a:a7:88:d0:b2:2f:6c:e8:c4:d5:8b:63:9a:dc:
                    94:d3:c8:dc:33:d3:d5:37:69:b5:41:80:a8:63:8a:
                    12:51:95:6d:bb:16:08:24:fa:b4:13:b7:0f:d0:01:
                    2f:34:b0:ed:5c:10:08:d8:d8:da:9b:7f:b8:41:53:
                    2b:d3:65:19:79:b0:7c:63:10:36:10:46:07:3c:db:
                    7b:f6:2c:d7:1c:11:1e:ab:ff:67:83:5d:ee:d5:07:
                    ee:10:fe:e4:0c:df:c8:6b:9d:8e:7b:f2:e1:4f:1f:
                    a0:9a:4d:4f:6b:e3:a1:04:52:c5:46:cc:16:61:4a:
                    49:4f:98:57:cb:16:09:ee:49:88:a8:62:1e:66:6b:
                    ed:58:ed:7a:68:01:be:25:ac:10:a3:0b:68:69:3a:
                    fe:96:2f:fc:2c:9d:1b:44:0b:da:9e:16:3f:d9:6d:
                    d7:95:b9:b3:29:03:01:ad:39:84:bc:33:a0:a4:5e:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:B7:9B:54:35:BD:98:8B:AF:99:45:E4:3D:62:3A:17:2F:2C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7e83df-2091-3bda-a89e-b6a871f61117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.181.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:2e:a7:58:70:ba:44:18:b0:81:e4:67:25:f8:5e:58:85:
         20:74:67:fc:d5:4b:b8:0a:29:69:22:a0:9c:8a:95:cb:a4:fc:
         e6:a5:7d:69:d5:87:6f:2f:3d:d9:bf:fd:96:d9:81:f3:18:9a:
         b7:53:06:3e:55:c3:d4:6d:a4:53:1c:b5:b8:ed:1b:b2:ee:eb:
         8c:71:e5:84:07:4d:49:89:91:7c:c7:55:d0:e0:0d:b8:57:0b:
         93:41:01:57:4f:5a:43:0e:c8:27:90:47:60:1d:27:03:34:0c:
         92:09:66:07:45:e7:f4:64:6a:34:0a:79:48:e1:a5:ff:f1:72:
         53:ee:ae:c9:01:ef:5a:78:fe:4c:57:d3:0e:88:65:f4:38:42:
         e2:dd:2c:08:c2:29:24:ab:86:08:c2:bd:ac:0a:af:03:fd:55:
         01:be:a6:e4:d4:f3:5d:98:40:05:bb:e0:26:ad:fe:f8:66:67:
         fb:86:14:0a:d5:3b:49:3f:fc:94:fb:a9:d6:bc:8b:52:00:46:
         ae:60:33:62:cf:12:9b:ad:0b:42:63:5a:44:26:bb:5f:74:0c:
         20:f8:64:43:1e:58:e9:85:78:ea:79:8b:d1:06:d4:4a:d1:7e:
         8c:c5:75:af:4a:7b:66:b1:36:a7:06:cc:31:15:eb:2f:73:72:
         3c:d8:b0:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cFSEuweV7XeVg7OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwODE5MDAzOVoXDTI2MTIwNzIwMDAzOVowLzEtMCsGA1UEAxMk
YmMyNzZlYWQtODcxMS00NTcwLWEzM2YtNmE4ZWFlYWYzNTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZPEHEzbj6kGe8ASejfzdlhCsU3MLsJb3tq
y1PPpYOEsD4HFCGkDXZSfQEHqlGXYX7TkJgKdH9GYLOrj22pewq5JKv/FjBxINQL
KqeI0LIvbOjE1YtjmtyU08jcM9PVN2m1QYCoY4oSUZVtuxYIJPq0E7cP0AEvNLDt
XBAI2Njam3+4QVMr02UZebB8YxA2EEYHPNt79izXHBEeq/9ng13u1QfuEP7kDN/I
a52Oe/LhTx+gmk1Pa+OhBFLFRswWYUpJT5hXyxYJ7kmIqGIeZmvtWO16aAG+JawQ
owtoaTr+li/8LJ0bRAvanhY/2W3XlbmzKQMBrTmEvDOgpF7O7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+yt5tUNb2Yi6+ZReQ9YjoXLyySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmY3ZTgzZGYtMjA5MS0z
YmRhLWE4OWUtYjZhODcxZjYxMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm7VJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFILqdYcLpEGLCB5Gcl+F5YhSB0Z/zVS7gKKWkioJyKlcuk/OalfWnV
h28vPdm//ZbZgfMYmrdTBj5Vw9RtpFMctbjtG7Lu64xx5YQHTUmJkXzHVdDgDbhX
C5NBAVdPWkMOyCeQR2AdJwM0DJIJZgdF5/RkajQKeUjhpf/xclPurskB71p4/kxX
0w6IZfQ4QuLdLAjCKSSrhgjCvawKrwP9VQG+puTU812YQAW74Cat/vhmZ/uGFArV
O0k//JT7qda8i1IARq5gM2LPEputC0JjWkQmu190DCD4ZEMeWOmFeOp5i9EG1ErR
fozFda9Ke2axNqcGzDEV6y9zcjzYsMg=
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:50 2026 by rpki-client