Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa
File:                     5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa (raw, json)
Hash identifier:          p/zqf+mDw2Td1nmICzok158Govy1SBCZq2vbv5kk0F4=
Subject key identifier:   63:4D:CC:1F:04:61:B4:17:8C:9F:59:57:DE:F3:92:49:6A:85:AD:42
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584EE4233BEE7EE6B2AE58DD1E00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa
Signing time:             Wed 19 Aug 2026 18:03:49 +0000
ROA not before:           Wed 19 Aug 2026 18:03:49 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     397513
IP address blocks:        97.74.96.0/20 maxlen: 23
                          173.201.64.0/20 maxlen: 23
                          2603:5:2100::/40 maxlen: 44
                          2603:5:2200::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3b:ee:7e:e6:b2:ae:58:dd:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 19 18:03:49 2026 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=8c76bab8-f9cf-41de-9417-e9646e23992f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:83:c3:ff:77:96:fc:38:f0:8c:db:7d:e1:
                    77:aa:6b:78:06:cd:8a:f6:a1:d2:df:fc:1b:12:4d:
                    5b:b3:82:65:18:8f:c4:f8:ad:e8:a1:f9:2b:ad:29:
                    42:68:46:0d:47:94:a6:c1:82:9c:ba:ea:42:49:3b:
                    54:45:14:cc:08:04:4e:d6:24:e9:ba:4d:0e:0e:7f:
                    84:3b:f3:7d:93:68:e6:72:89:44:71:3c:63:56:65:
                    2e:37:dc:88:ec:0f:b7:80:f2:2c:12:92:3a:6c:4f:
                    ee:b1:7a:da:d1:54:d8:48:79:a0:34:48:07:e4:f2:
                    c3:22:f4:f3:44:51:34:65:c0:11:00:01:13:d2:08:
                    d7:2b:b4:30:f3:bf:8c:34:67:e7:e5:f7:6e:70:70:
                    2b:7f:7b:94:85:16:af:f5:55:f0:c6:7a:6f:b3:9f:
                    c9:ba:50:fe:6f:9f:bc:d6:8c:fd:9f:c6:d5:58:a5:
                    8b:c0:83:34:e6:8d:84:bd:28:88:71:4b:59:c2:29:
                    a2:d7:85:e3:2a:e3:1b:d0:07:f5:31:ab:fa:fb:a3:
                    c5:ce:05:26:1d:ff:28:7e:23:c6:46:d2:c7:df:2b:
                    2b:df:6a:5c:a8:10:1e:6f:fd:6b:b2:e5:d8:cb:29:
                    3d:19:d8:8d:da:9b:54:80:83:17:b4:3f:fc:85:90:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4D:CC:1F:04:61:B4:17:8C:9F:59:57:DE:F3:92:49:6A:85:AD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.74.96.0/20
                  173.201.64.0/20
                IPv6:
                  2603:5:2100::-2603:5:22ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:61:f8:62:9d:33:b4:c5:d8:2f:b0:23:63:76:21:cc:d9:a0:
         88:e1:dd:f1:47:02:2d:a7:de:63:90:2e:f6:8e:7a:7e:9d:16:
         f1:34:71:68:13:48:ba:99:47:05:ea:b7:0f:13:e1:69:4e:7e:
         87:e6:4c:50:e0:51:00:56:ca:df:da:05:ca:ed:6b:6f:51:fc:
         e3:29:db:54:cf:84:4d:ef:1c:32:2f:0d:7f:b1:3d:e9:a7:dd:
         c1:19:cf:f5:40:b8:b4:4b:42:00:04:76:18:c0:13:33:24:bc:
         07:90:b1:4a:d4:cb:16:9c:26:4b:75:f5:8c:f9:d3:50:d3:4d:
         71:be:04:3a:96:a7:f1:4a:33:96:a3:20:d1:5d:61:cd:44:02:
         82:37:44:b3:82:66:28:7e:de:f6:22:b5:8f:3e:bc:fa:74:4b:
         e9:a0:d7:80:48:0a:bf:3e:5d:55:8c:d9:8f:6a:b2:c3:cb:98:
         b3:43:6b:06:25:86:86:6d:05:33:cc:ed:aa:cc:50:89:48:a1:
         44:e6:6c:56:d2:c1:59:ca:fb:d2:66:39:3b:6e:07:5d:c9:85:
         70:00:f8:ef:6b:27:05:41:13:be:f1:09:95:0a:34:a2:a5:0d:
         65:94:96:27:6c:bb:76:3f:ee:35:41:76:52:36:50:df:3d:95:
         67:ca:47:45
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE7kIzvufuayrljdHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDgxOTE4MDM0OVoXDTI5MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGM3NmJhYjgtZjljZi00MWRlLTk0MTctZTk2NDZlMjM5OTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPuDw/93lvw48IzbfeF3qmt4Bs2K9qHS3/wb
Ek1bs4JlGI/E+K3oofkrrSlCaEYNR5SmwYKcuupCSTtURRTMCARO1iTpuk0ODn+E
O/N9k2jmcolEcTxjVmUuN9yI7A+3gPIsEpI6bE/usXra0VTYSHmgNEgH5PLDIvTz
RFE0ZcARAAET0gjXK7Qw87+MNGfn5fducHArf3uUhRav9VXwxnpvs5/JulD+b5+8
1oz9n8bVWKWLwIM05o2EvSiIcUtZwimi14XjKuMb0Af1Mav6+6PFzgUmHf8ofiPG
RtLH3ysr32pcqBAeb/1rsuXYyyk9GdiN2ptUgIMXtD/8hZCUiwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFGNNzB8EYbQXjJ9ZV97zkklqha1CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvNWYwYTk3ZWEtZTIwNy0z
OGM1LWI3NDUtZmE0OWEzNzM5Y2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQEYUpgAwQE
rclAMBgEAgACMBIwEAMGACYDAAUhAwYAJgMABSIwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ2H4Yp0ztMXY
L7AjY3YhzNmgiOHd8UcCLafeY5Au9o56fp0W8TRxaBNIuplHBeq3DxPhaU5+h+ZM
UOBRAFbK39oFyu1rb1H84ynbVM+ETe8cMi8Nf7E96afdwRnP9UC4tEtCAAR2GMAT
MyS8B5CxStTLFpwmS3X1jPnTUNNNcb4EOpan8UozlqMg0V1hzUQCgjdEs4JmKH7e
9iK1jz68+nRL6aDXgEgKvz5dVYzZj2qyw8uYs0NrBiWGhm0FM8ztqsxQiUihROZs
VtLBWcr70mY5O24HXcmFcAD472snBUETvvEJlQo0oqUNZZSWJ2y7dj/uNUF2UjZQ
3z2VZ8pHRQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:22:59 2026 by rpki-client