Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
File:                     540b4125-24a3-3589-9314-18a5200c0692.roa (raw, json)
Hash identifier:          hZyKm8WUiBsybbS8CN/ObULQO3rp+9wCFa9dQBKlRo4=
Subject key identifier:   45:C8:5B:6E:A9:00:9C:2D:82:7D:4D:B3:61:E1:86:4D:5F:EA:CB:2C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EFCACC915BA562F1E183D5840
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     63147
IP address blocks:        128.177.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c9:15:ba:56:2f:1e:18:3d:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=0c8929d0-73eb-41f5-b492-2d5ae6ec57b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:bd:98:13:29:65:19:56:d3:02:2e:a3:c4:
                    e4:1a:c1:3d:de:bf:fd:01:7a:80:b1:5a:eb:ac:ac:
                    ef:da:8b:03:9a:55:c6:ec:75:ce:0d:79:7e:4d:ac:
                    d7:1f:67:3b:00:93:6e:65:ea:fd:75:cc:ff:85:b8:
                    86:0b:cb:88:fb:14:cc:1c:b5:a7:2a:a6:23:85:a9:
                    fa:be:cf:7b:8e:83:39:83:51:c7:df:dd:60:7c:f4:
                    34:ff:70:6e:d9:46:26:6f:be:a1:2d:03:2c:87:b6:
                    7b:05:65:c2:1b:3f:73:6b:28:cd:02:c4:de:21:20:
                    ec:bb:0f:22:e1:84:82:67:72:1a:3d:49:36:5b:14:
                    24:ff:ca:01:40:bd:8c:93:22:70:f8:00:8a:73:bd:
                    89:ec:28:ca:51:1b:f3:1e:65:9e:3d:9c:e5:65:50:
                    14:1d:d8:fd:4f:5d:71:fe:e8:da:38:6a:11:a8:eb:
                    43:e2:23:90:38:36:60:f4:d6:95:61:d8:b9:8c:4a:
                    13:c4:94:68:b7:56:4d:c9:67:9c:3b:90:fd:83:a0:
                    9e:a3:ea:c3:48:03:4c:20:5b:13:a8:a9:dd:93:7b:
                    30:d8:73:cd:e5:ac:34:7c:b4:ab:a5:d6:d1:a6:62:
                    1f:48:86:19:20:86:23:dc:b5:93:34:13:a8:34:20:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:5B:6E:A9:00:9C:2D:82:7D:4D:B3:61:E1:86:4D:5F:EA:CB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9a:96:cb:ba:ea:ca:51:c4:4c:17:a7:d3:ea:dc:f2:f0:cb:
         b3:d5:ff:47:3a:e3:8f:22:6b:91:70:df:f7:f1:c0:05:01:83:
         40:30:1f:8f:91:eb:05:d1:60:36:b2:91:c0:b0:5a:57:5a:ca:
         aa:24:f1:60:03:5e:7e:9e:15:9b:40:ef:34:55:5a:2a:67:4d:
         c9:a9:2c:18:f6:28:a8:6f:bd:ef:7c:2e:97:94:61:ed:e8:cd:
         14:83:72:6c:e4:62:c9:c0:47:8e:c7:fc:0f:cc:32:a2:5b:c8:
         0f:06:4c:f8:10:12:3b:01:fd:5d:20:1d:f1:ef:1a:90:fb:3f:
         ca:af:11:e0:4f:0b:a4:f9:d7:6c:c6:04:75:87:66:52:8c:3a:
         81:6a:20:20:99:ee:bb:de:7d:57:f0:4a:11:4a:f7:31:c8:5a:
         d8:56:9b:23:70:ad:4a:c1:d1:4a:fc:a8:6e:f2:25:15:40:04:
         b9:9a:db:bb:74:c4:ed:11:64:b8:12:39:cb:e0:6a:e0:24:0d:
         7f:81:5d:da:2e:9e:da:4c:31:53:a3:41:94:20:c5:d0:d8:5e:
         cd:56:9c:d4:fe:fd:99:5e:3d:83:f3:9b:85:83:d9:59:ba:5f:
         7c:f3:53:ae:0f:f4:ee:ab:d8:d2:79:6c:60:f9:1a:38:be:dd:
         3e:f9:e2:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMkVulYvHhg9WEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
MGM4OTI5ZDAtNzNlYi00MWY1LWI0OTItMmQ1YWU2ZWM1N2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqS9mBMpZRlW0wIuo8TkGsE93r/9AXqAsVrr
rKzv2osDmlXG7HXODXl+TazXH2c7AJNuZer9dcz/hbiGC8uI+xTMHLWnKqYjhan6
vs97joM5g1HH391gfPQ0/3Bu2UYmb76hLQMsh7Z7BWXCGz9zayjNAsTeISDsuw8i
4YSCZ3IaPUk2WxQk/8oBQL2MkyJw+ACKc72J7CjKURvzHmWePZzlZVAUHdj9T11x
/ujaOGoRqOtD4iOQODZg9NaVYdi5jEoTxJRot1ZNyWecO5D9g6Ceo+rDSANMIFsT
qKndk3sw2HPN5aw0fLSrpdbRpmIfSIYZIIYj3LWTNBOoNCDtPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXIW26pAJwtgn1Ns2Hhhk1f6sssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTQwYjQxMjUtMjRhMy0z
NTg5LTkzMTQtMThhNTIwMGMwNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgLGzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACialsu66spRxEwXp9Pq3PLwy7PV/0c6448ia5Fw3/fxwAUBg0AwH4+R
6wXRYDaykcCwWldayqok8WADXn6eFZtA7zRVWipnTcmpLBj2KKhvve98LpeUYe3o
zRSDcmzkYsnAR47H/A/MMqJbyA8GTPgQEjsB/V0gHfHvGpD7P8qvEeBPC6T512zG
BHWHZlKMOoFqICCZ7rvefVfwShFK9zHIWthWmyNwrUrB0Ur8qG7yJRVABLma27t0
xO0RZLgSOcvgauAkDX+BXdountpMMVOjQZQgxdDYXs1WnNT+/ZlePYPzm4WD2Vm6
X3zzU64P9O6r2NJ5bGD5Gji+3T754hM=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:33:30 2026 by rpki-client