Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa
File:                     9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa (raw, json)
Hash identifier:          7nRohQ09MM/5GVd8jwp4rLRW5zwsX/vsF08y1rwsv6o=
Subject key identifier:   FE:74:81:F1:63:70:DD:2B:0E:8B:4D:AB:5F:EE:40:59:10:A7:5A:A9
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D143D4B512E352752B02C9860
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19886
IP address blocks:        171.162.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:4b:51:2e:35:27:52:b0:2c:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=b2cf43c4-bf95-4a14-8e4b-d22fc00e9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:11:25:a7:eb:09:62:7d:68:a1:b3:42:4d:
                    75:81:9b:0c:b5:68:ac:d0:6a:31:86:36:5b:e7:bc:
                    c1:c9:d2:cd:71:e2:e1:af:7d:1f:76:fa:04:2c:c8:
                    92:68:7a:54:58:82:27:cf:b4:97:43:8f:ba:de:ef:
                    5f:d2:cb:9d:bc:3a:92:df:cb:8f:2d:61:1b:1a:66:
                    ab:b3:5b:75:35:1d:d9:87:99:e4:7b:1a:e6:90:ff:
                    c8:4d:e7:2f:69:db:bc:47:42:f3:b5:6c:b6:c1:a6:
                    41:2b:e0:9a:e2:52:45:9a:a0:30:d0:67:03:2c:6d:
                    b1:13:61:72:70:76:64:4c:9e:17:42:6b:e7:d5:d4:
                    13:77:eb:36:3c:32:b9:7e:7f:49:15:b7:40:e6:c9:
                    cc:d0:74:74:d2:cf:dd:f6:73:70:e9:11:6f:e1:3c:
                    2b:b2:0f:27:18:c0:db:bb:b7:23:76:b2:79:d0:35:
                    26:9a:67:16:36:29:78:41:aa:f6:2e:22:f9:6d:bf:
                    56:00:db:44:4d:6d:b1:6a:58:ba:81:ca:57:38:72:
                    2a:ae:94:46:3b:ad:b6:59:a2:9f:f0:72:36:fb:f0:
                    77:6f:68:13:6e:2e:c8:02:f1:6f:df:e9:8f:e6:05:
                    d5:b0:fa:6e:46:2a:05:1e:72:fb:d1:26:cc:9b:2f:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:81:F1:63:70:DD:2B:0E:8B:4D:AB:5F:EE:40:59:10:A7:5A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:84:a3:ad:dd:c2:ab:d8:9a:34:5d:ed:08:c5:5d:41:cc:ba:
         50:66:c7:43:93:d3:cf:8f:31:27:37:1b:2a:e4:c4:3b:99:8b:
         e1:09:9f:1c:8c:1d:a3:2e:6d:4f:bb:d5:d0:28:e0:cf:e2:39:
         28:40:2e:f6:5b:4c:d0:36:75:ea:d6:ec:fa:c8:96:24:7f:26:
         e9:53:45:8e:f6:a7:45:69:8a:14:de:92:37:ed:e3:2a:1a:8e:
         37:0f:fa:3d:e9:10:27:35:83:3a:37:74:29:d2:79:88:8c:05:
         73:49:e7:ea:31:b7:99:76:e2:11:1d:19:bf:72:1f:a1:b2:d2:
         9b:a4:8c:85:88:aa:61:b5:1d:f4:53:ef:f3:80:9c:cd:a7:47:
         8e:28:53:06:48:3f:6f:9f:b1:32:4d:d0:08:42:c7:2f:6b:21:
         0d:51:22:b9:ac:d6:8e:da:fc:51:aa:eb:5a:f7:fe:aa:62:40:
         ee:27:8c:44:dc:7b:7e:7b:22:94:42:55:b6:ae:5b:17:05:16:
         b1:eb:29:4c:53:c9:9a:cf:6e:64:5a:77:a3:30:0f:2a:10:8f:
         f4:d7:b3:81:70:42:f4:94:e6:c9:79:6c:a4:2d:e6:af:93:ed:
         39:2f:70:8b:ef:6c:df:41:89:b5:3d:02:03:5c:7e:bd:55:b9:
         d2:83:8d:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUtRLjUnUrAsmGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
YjJjZjQzYzQtYmY5NS00YTE0LThlNGItZDIyZmMwMGU5YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi90RJafrCWJ9aKGzQk11gZsMtWis0GoxhjZb
57zBydLNceLhr30fdvoELMiSaHpUWIInz7SXQ4+63u9f0sudvDqS38uPLWEbGmar
s1t1NR3Zh5nkexrmkP/ITecvadu8R0LztWy2waZBK+Ca4lJFmqAw0GcDLG2xE2Fy
cHZkTJ4XQmvn1dQTd+s2PDK5fn9JFbdA5snM0HR00s/d9nNw6RFv4Twrsg8nGMDb
u7cjdrJ50DUmmmcWNil4Qar2LiL5bb9WANtETW2xali6gcpXOHIqrpRGO622WaKf
8HI2+/B3b2gTbi7IAvFv3+mP5gXVsPpuRioFHnL70SbMmy/gSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP50gfFjcN0rDotNq1/uQFkQp1qpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOWVhMDhkODEtYWY4ZS0z
Mjg3LWI5ZmMtYjFkYzY5NzMxMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWEo63dwqvYmjRd7QjFXUHMulBmx0OT08+PMSc3GyrkxDuZi+EJnxyM
HaMubU+71dAo4M/iOShALvZbTNA2derW7PrIliR/JulTRY72p0VpihTekjft4yoa
jjcP+j3pECc1gzo3dCnSeYiMBXNJ5+oxt5l24hEdGb9yH6Gy0pukjIWIqmG1HfRT
7/OAnM2nR44oUwZIP2+fsTJN0AhCxy9rIQ1RIrms1o7a/FGq61r3/qpiQO4njETc
e357IpRCVbauWxcFFrHrKUxTyZrPbmRad6MwDyoQj/TXs4FwQvSU5sl5bKQt5q+T
7TkvcIvvbN9BibU9AgNcfr1VudKDjcc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:24 2026 by rpki-client