Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa
File:                     9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json)
Hash identifier:          rsSw9F5rGKMBQh1JLAAvBUqLzZS96/DNbJVAy3wtuLY=
Subject key identifier:   39:3D:99:02:2A:61:42:26:1D:F1:71:21:48:9A:1C:6B:51:B5:E6:93
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584F6F230C227EBCAB4246C60200
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     397666
IP address blocks:        167.253.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0c:22:7e:bc:ab:42:46:c6:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=7304d2fa-2afd-4349-8d8a-8b83a31f519d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:84:91:bd:ab:80:0b:93:10:36:f0:c8:db:
                    cf:ee:4e:56:04:43:1f:0d:7a:a8:93:b5:69:b3:0f:
                    be:18:78:41:6e:4e:37:8c:14:3c:1a:35:a1:22:c5:
                    69:6c:73:68:9a:ba:2a:e4:5f:97:da:39:80:6f:4f:
                    bf:96:1b:4c:8f:e7:bd:35:54:c5:47:8a:81:4f:b6:
                    b0:44:29:14:36:16:82:d6:5c:0f:0d:ec:68:b9:9f:
                    50:8e:dc:4e:6e:48:53:b7:41:9f:1a:fb:e7:3b:cc:
                    8d:6f:d1:1e:3d:a5:87:6e:85:d1:8a:0a:ee:80:dd:
                    2d:59:64:c5:6f:0c:66:61:d0:a4:5f:31:9d:e5:3e:
                    a4:2d:c8:31:4f:af:62:40:1f:4e:0e:7f:60:2e:5b:
                    75:30:2c:52:9b:5f:3f:59:45:90:3c:9e:40:10:d7:
                    34:b6:c5:6d:8c:a1:5d:5c:69:74:37:07:46:f0:c1:
                    f6:65:bc:2e:8d:6f:90:2a:ce:ab:f5:bb:62:bd:18:
                    60:70:f1:4d:65:42:7c:13:d1:8e:dc:89:d4:9f:8a:
                    3a:0e:30:d1:60:cb:37:16:cb:06:5f:0d:cc:a3:2d:
                    8e:99:52:c6:7c:9b:63:be:69:14:1f:96:16:a4:e3:
                    ad:a9:60:d7:23:d0:fe:ea:10:a3:bf:55:cd:93:8a:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:99:02:2A:61:42:26:1D:F1:71:21:48:9A:1C:6B:51:B5:E6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:df:d5:8f:41:58:41:56:4c:df:50:b7:88:2a:7a:76:e7:
         0f:d9:36:62:be:f0:6a:be:60:61:c8:12:ce:9d:03:bb:96:09:
         fd:34:54:bb:84:e4:8b:e0:e1:6a:6d:cd:d8:2a:70:6c:78:13:
         b8:2c:05:00:a1:37:6b:0c:62:9a:ba:29:80:67:b2:a3:df:0a:
         7b:ff:5e:9b:fe:1a:2a:1b:8c:54:57:06:5a:5f:b7:60:9f:43:
         aa:fa:66:34:6e:55:7e:54:68:81:c4:c4:c0:a4:73:26:8c:dd:
         0d:85:cf:12:8f:6e:2e:a1:40:a3:d6:38:af:b1:4b:9e:a7:08:
         1e:e3:b8:02:b5:48:b9:d9:ba:82:70:a4:6d:82:6b:12:14:6e:
         b5:df:df:f5:7f:75:9a:27:2f:f3:78:e2:50:52:2d:b1:53:1a:
         46:46:e9:df:c7:6b:43:8c:6d:80:04:a5:4b:17:d5:38:c2:b3:
         5f:fa:0a:5f:ef:cf:bb:9f:d3:ac:d5:7e:dc:e4:cc:ca:53:18:
         06:7a:b7:1a:11:e8:47:d3:5a:2e:dc:37:85:ad:44:71:8a:0f:
         31:fc:d6:f7:16:aa:22:8c:24:b1:79:96:85:9a:2c:de:f2:4f:
         c6:3f:b6:42:cc:1b:49:b3:69:13:60:40:05:d3:da:41:3d:cc:
         2d:83:d1:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwwifryrQkbGAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4
M2RmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzMwNGQyZmEtMmFmZC00MzQ5LThkOGEtOGI4M2EzMWY1MTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6KEkb2rgAuTEDbwyNvP7k5WBEMfDXqok7Vp
sw++GHhBbk43jBQ8GjWhIsVpbHNomroq5F+X2jmAb0+/lhtMj+e9NVTFR4qBT7aw
RCkUNhaC1lwPDexouZ9QjtxObkhTt0GfGvvnO8yNb9EePaWHboXRigrugN0tWWTF
bwxmYdCkXzGd5T6kLcgxT69iQB9ODn9gLlt1MCxSm18/WUWQPJ5AENc0tsVtjKFd
XGl0NwdG8MH2ZbwujW+QKs6r9btivRhgcPFNZUJ8E9GO3InUn4o6DjDRYMs3FssG
Xw3Moy2OmVLGfJtjvmkUH5YWpOOtqWDXI9D+6hCjv1XNk4qqmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDk9mQIqYUImHfFxIUiaHGtRteaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5
OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z
OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi
NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw
ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj
YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjm39WPQVhBVkzfULeIKnp25w/ZNmK+8Gq+YGHIEs6dA7uWCf00VLuE
5Ivg4WptzdgqcGx4E7gsBQChN2sMYpq6KYBnsqPfCnv/Xpv+GiobjFRXBlpft2Cf
Q6r6ZjRuVX5UaIHExMCkcyaM3Q2FzxKPbi6hQKPWOK+xS56nCB7juAK1SLnZuoJw
pG2CaxIUbrXf3/V/dZonL/N44lBSLbFTGkZG6d/Ha0OMbYAEpUsX1TjCs1/6Cl/v
z7uf06zVftzkzMpTGAZ6txoR6EfTWi7cN4WtRHGKDzH81vcWqiKMJLF5loWaLN7y
T8Y/tkLMG0mzaRNgQAXT2kE9zC2D0ew=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:32:11 2026 by rpki-client