Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6b26f428-c834-384f-a3b7-d0b9b10336e7.roa
File:                     6b26f428-c834-384f-a3b7-d0b9b10336e7.roa (raw, json)
Hash identifier:          Vv98YwnUgbt4aLX6ZusQMRblLgYnKtByB/Ze+m8S5pQ=
Subject key identifier:   3E:4E:85:06:A1:8B:3B:25:49:94:34:68:F9:A2:00:E9:4C:C4:43:BC
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F462676D3F549A839F0B65000
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6b26f428-c834-384f-a3b7-d0b9b10336e7.roa
Signing time:             Wed 23 Sep 2026 20:39:32 +0000
ROA not before:           Wed 23 Sep 2026 20:39:32 +0000
ROA not after:            Tue 22 Dec 2026 21:39:32 +0000
asID:                     40934
IP address blocks:        189.25.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:26:76:d3:f5:49:a8:39:f0:b6:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 23 20:39:32 2026 GMT
            Not After : Dec 22 21:39:32 2026 GMT
        Subject: CN=4819e4d0-c5e6-4a09-8d6a-5e3b4028d477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:2c:8c:8f:55:4b:5d:ae:89:83:66:b1:ba:
                    8f:e6:c4:46:cd:1c:48:ad:c4:2a:ac:7d:ae:91:9b:
                    dc:36:a9:2b:af:b1:e2:6a:c0:21:97:07:80:98:fc:
                    93:82:a5:04:ac:7d:b6:63:8c:5a:11:f4:68:59:07:
                    aa:ea:92:ba:c7:f1:60:d7:44:f0:3a:f2:e2:9a:f9:
                    17:50:fd:5b:fd:39:c8:f8:f9:43:5b:62:72:be:c7:
                    8b:4c:41:1f:53:76:ae:49:9b:b6:b7:e8:d5:70:8f:
                    cb:d4:c9:6e:0b:5d:24:07:8b:8f:24:b3:80:e4:13:
                    12:ec:a0:01:ad:27:45:79:2b:34:2f:44:ae:02:e4:
                    52:36:e3:b4:67:4d:d9:d8:e7:71:40:9b:b4:b7:3f:
                    b0:f4:41:37:84:9a:fc:c8:89:66:87:17:3f:a9:32:
                    2c:34:e0:48:a1:33:9e:fc:90:6d:7f:5d:55:30:ba:
                    5a:00:3c:7b:8e:ea:30:f6:93:86:70:60:33:71:b1:
                    2c:9a:c7:1e:67:49:94:21:b3:01:4c:7f:1f:e5:71:
                    2e:5f:18:d3:f7:38:ec:8d:8e:3f:30:fe:43:24:7b:
                    66:07:ea:e1:bf:1a:2f:11:af:e4:2d:b3:c1:5b:fa:
                    f1:7c:e1:64:83:2c:15:74:86:c6:d6:35:a8:dd:2c:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4E:85:06:A1:8B:3B:25:49:94:34:68:F9:A2:00:E9:4C:C4:43:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6b26f428-c834-384f-a3b7-d0b9b10336e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.25.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:cd:20:20:9b:8a:f3:95:79:f7:98:35:76:49:e2:ca:e3:
         6a:00:c6:ec:d0:70:9d:aa:8c:32:6a:fd:eb:db:61:91:b8:b9:
         93:7b:09:bd:e5:2d:0e:53:c2:63:5e:5f:3b:10:87:e8:6c:16:
         0c:2b:3a:db:d3:41:f8:28:64:4d:c8:28:64:bc:d3:4a:c9:a1:
         b4:50:2f:4c:96:94:c5:e5:22:80:7a:18:0a:6a:ee:e6:2b:5c:
         9f:e3:d5:00:5c:80:88:bb:da:a8:98:32:7c:ec:07:7e:25:89:
         10:2d:91:86:41:1e:e8:7d:3e:49:81:6f:a6:ec:ec:f2:34:8c:
         a8:cd:5f:52:0f:8b:85:1f:be:3a:e2:a2:61:5e:c6:ba:ba:e2:
         57:96:cc:ce:3c:c7:aa:3d:cb:43:eb:ad:22:85:48:cc:89:6c:
         32:54:fe:48:6a:0a:1d:67:84:25:23:83:5e:3e:fe:76:e3:0f:
         1c:65:5e:32:d9:32:8e:74:76:5c:41:ed:c6:17:c2:93:6d:a5:
         76:a6:80:63:f2:9a:4a:38:7d:4d:6a:c8:10:76:f3:68:b4:bc:
         6e:4d:6e:53:aa:54:e1:70:71:74:59:e3:c0:49:70:61:b9:00:
         08:fe:ff:1d:7c:a0:5a:20:3c:ef:06:17:36:26:5d:2e:e6:89:
         e8:d4:41:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9GJnbT9UmoOfC2UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDkyMzIwMzkzMloXDTI2MTIyMjIxMzkzMlowLzEtMCsGA1UEAxMk
NDgxOWU0ZDAtYzVlNi00YTA5LThkNmEtNWUzYjQwMjhkNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEksjI9VS12uiYNmsbqP5sRGzRxIrcQqrH2u
kZvcNqkrr7HiasAhlweAmPyTgqUErH22Y4xaEfRoWQeq6pK6x/Fg10TwOvLimvkX
UP1b/TnI+PlDW2JyvseLTEEfU3auSZu2t+jVcI/L1MluC10kB4uPJLOA5BMS7KAB
rSdFeSs0L0SuAuRSNuO0Z03Z2OdxQJu0tz+w9EE3hJr8yIlmhxc/qTIsNOBIoTOe
/JBtf11VMLpaADx7juow9pOGcGAzcbEsmsceZ0mUIbMBTH8f5XEuXxjT9zjsjY4/
MP5DJHtmB+rhvxovEa/kLbPBW/rxfOFkgywVdIbG1jWo3SzvFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5OhQahizslSZQ0aPmiAOlMxEO8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvNmIyNmY0MjgtYzgzNC0z
ODRmLWEzYjctZDBiOWIxMDMzNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvRkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfzzSAgm4rzlXn3mDV2SeLK42oAxuzQcJ2qjDJq/evbYZG4uZN7Cb3l
LQ5TwmNeXzsQh+hsFgwrOtvTQfgoZE3IKGS800rJobRQL0yWlMXlIoB6GApq7uYr
XJ/j1QBcgIi72qiYMnzsB34liRAtkYZBHuh9PkmBb6bs7PI0jKjNX1IPi4Ufvjri
omFexrq64leWzM48x6o9y0PrrSKFSMyJbDJU/khqCh1nhCUjg14+/nbjDxxlXjLZ
Mo50dlxB7cYXwpNtpXamgGPymko4fU1qyBB282i0vG5NblOqVOFwcXRZ48BJcGG5
AAj+/x18oFogPO8GFzYmXS7miejUQVQ=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:58 2026 by rpki-client