Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa
File:                     93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa (raw, json)
Hash identifier:          jW6mQby+r8Zi7Oxc1rsV3MwC9ywyUZtYZWsA5m2QOgY=
Subject key identifier:   3A:97:13:78:39:2B:C9:9B:44:66:84:19:BE:87:7F:93:89:EB:5C:68
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E9A7FBEC4DBE20C98659E3B80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     62651
IP address blocks:        216.131.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:be:c4:db:e2:0c:98:65:9e:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=88a2f903-392c-429f-88f9-2ea5cb6b8f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:1a:c4:52:28:ff:bd:f7:7b:e7:42:78:ac:
                    68:0e:be:5d:6d:87:a8:ac:e5:de:bb:18:36:5b:5e:
                    a1:d4:0f:e7:bf:1d:3b:ef:95:4c:a9:9b:ad:98:13:
                    f1:de:34:92:07:6f:4a:f7:28:27:09:db:33:a7:50:
                    07:ed:31:6c:53:c7:e4:0b:f5:91:35:07:9b:c8:9b:
                    ee:78:db:bb:71:19:be:16:3d:46:b2:09:d6:43:bf:
                    e0:99:ee:bd:84:e9:a8:ae:d3:3c:fa:7f:c5:08:62:
                    30:45:ed:7a:48:26:e0:60:2b:b4:1d:bd:31:35:4c:
                    78:00:71:85:5c:dd:ac:18:45:90:59:73:ca:2e:0e:
                    07:f4:3f:7b:30:7c:b2:c1:64:8a:3a:61:ac:07:ac:
                    12:f0:fe:be:b2:db:b3:86:00:19:2f:6e:8d:90:d8:
                    3e:82:dd:a4:19:b2:1d:b3:32:c4:6e:92:55:e5:28:
                    60:91:aa:aa:dd:14:82:0f:4f:d7:ef:83:92:1a:ff:
                    49:49:3c:0e:93:dc:8f:60:f8:16:ee:56:dd:06:32:
                    2e:96:bd:05:0c:2d:ce:fc:0d:ef:9d:ff:08:0f:d3:
                    a8:e9:b2:b7:4f:a4:5a:d0:d5:e1:8b:4d:8f:6e:91:
                    3f:a7:cc:38:ae:3f:bb:88:af:f5:b5:ea:9e:33:63:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:13:78:39:2B:C9:9B:44:66:84:19:BE:87:7F:93:89:EB:5C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5a:9e:67:7e:ab:33:31:f8:f6:b5:df:bc:11:f2:a1:d3:09:
         f1:fb:c2:8b:ff:af:c8:37:dc:ea:2d:5d:a1:39:70:50:8c:b1:
         ec:b7:3a:45:96:b8:19:9a:70:fb:db:b9:af:df:f3:21:ee:33:
         58:40:3a:32:4b:99:42:39:70:bb:65:b5:a8:51:b7:ea:f7:95:
         1b:b9:57:8c:7c:f0:d1:ee:a0:3a:6c:40:cd:df:cb:4f:58:00:
         2a:86:cf:53:0c:39:55:30:b1:40:fa:74:a2:c8:d2:fd:f7:e5:
         55:bc:b8:65:6d:69:c1:0c:b1:b7:27:6d:9d:73:dd:6e:ec:07:
         a3:2d:44:41:ce:0d:bd:eb:54:c2:59:ca:66:20:be:81:7e:cd:
         53:d2:c1:0d:a6:52:ce:e9:7e:97:44:9b:d6:cb:71:aa:98:ae:
         66:81:93:4c:f9:5c:05:d5:d5:4f:b0:7d:66:be:36:6f:60:17:
         4f:87:c0:db:b3:66:87:83:48:9a:a2:82:06:6d:08:fe:5f:b3:
         dd:4d:8c:4d:43:0b:a3:69:8f:a0:fb:4d:a8:13:8a:c0:02:2a:
         18:89:a2:ab:f2:ba:40:7c:29:6d:d8:28:ef:c1:56:ce:37:e4:
         6e:40:d8:7d:5e:23:ae:e7:3a:52:16:eb:8e:fb:77:35:29:cd:
         e5:53:62:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af77E2+IMmGWeO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
ODhhMmY5MDMtMzkyYy00MjlmLTg4ZjktMmVhNWNiNmI4ZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC8axFIo/733e+dCeKxoDr5dbYeorOXeuxg2
W16h1A/nvx0775VMqZutmBPx3jSSB29K9ygnCdszp1AH7TFsU8fkC/WRNQebyJvu
eNu7cRm+Fj1GsgnWQ7/gme69hOmortM8+n/FCGIwRe16SCbgYCu0Hb0xNUx4AHGF
XN2sGEWQWXPKLg4H9D97MHyywWSKOmGsB6wS8P6+stuzhgAZL26NkNg+gt2kGbId
szLEbpJV5Shgkaqq3RSCD0/X74OSGv9JSTwOk9yPYPgW7lbdBjIulr0FDC3O/A3v
nf8ID9Oo6bK3T6Ra0NXhi02PbpE/p8w4rj+7iK/1teqeM2OleQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqXE3g5K8mbRGaEGb6Hf5OJ61xoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOTNkOTRhMDItMmZkNi0z
NTVhLWJmOWQtZDRmZDJmNGI4ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpanmd+qzMx+Pa137wR8qHTCfH7wov/r8g33OotXaE5cFCMsey3OkWW
uBmacPvbua/f8yHuM1hAOjJLmUI5cLtltahRt+r3lRu5V4x88NHuoDpsQM3fy09Y
ACqGz1MMOVUwsUD6dKLI0v335VW8uGVtacEMsbcnbZ1z3W7sB6MtREHODb3rVMJZ
ymYgvoF+zVPSwQ2mUs7pfpdEm9bLcaqYrmaBk0z5XAXV1U+wfWa+Nm9gF0+HwNuz
ZoeDSJqiggZtCP5fs91NjE1DC6Npj6D7TagTisACKhiJoqvyukB8KW3YKO/BVs43
5G5A2H1eI67nOlIW6477dzUpzeVTYoc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:34 2026 by rpki-client