Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
File:                     c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa (raw, json)
Hash identifier:          9vELctoFHLrT2n7Q0tlxnfT3J7TIfUppy0dVukGLoRs=
Subject key identifier:   CD:15:98:05:2A:25:E9:A7:6F:CD:A9:C2:9D:51:CA:24:B3:39:4B:A1
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584F4976F2F7D52373E9DFDA3280
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19886
IP address blocks:        171.162.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:f2:f7:d5:23:73:e9:df:da:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc8c8f6f-e4f4-4996-befa-b624e0143b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:1a:1d:35:bc:fc:1d:44:db:5d:6c:92:2b:
                    32:09:ab:d7:97:a7:d9:59:67:6c:5d:44:9b:f7:9f:
                    49:49:ad:2c:98:2f:d3:a6:17:66:3b:2a:14:7c:bc:
                    58:c5:01:ab:6e:8c:6b:ae:5a:24:85:3b:97:b2:69:
                    5b:7e:16:27:7c:4f:d0:6a:61:da:f0:87:21:05:54:
                    f8:a7:70:4a:31:70:e5:84:50:46:1b:ec:b6:79:d6:
                    b1:d5:8b:83:9d:af:cf:d4:b3:31:00:8b:b6:38:88:
                    de:d9:99:89:05:2f:40:f6:d3:44:36:05:d5:58:37:
                    fc:ca:4f:ab:5e:4a:3d:c5:2b:d4:f4:ab:e5:c2:6a:
                    fe:83:3f:37:29:9b:72:65:41:cb:c2:19:67:45:e5:
                    a1:2c:a3:f9:89:45:26:2b:ae:43:2f:b8:d2:01:54:
                    ce:11:66:64:88:6b:ea:6b:a6:d0:a0:94:6d:29:43:
                    93:7d:c9:03:f4:4a:41:44:b5:77:47:43:c3:21:7b:
                    8a:72:68:5a:f3:c5:20:31:fa:d3:2c:11:5a:d2:ad:
                    b7:ff:a3:67:a4:fd:db:b1:e2:e7:7b:4e:40:4b:56:
                    04:1f:64:81:69:a2:8a:1a:0b:b8:9a:00:ad:c1:59:
                    a5:3a:66:f6:55:8e:53:5b:3d:89:13:b5:89:fc:86:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:98:05:2A:25:E9:A7:6F:CD:A9:C2:9D:51:CA:24:B3:39:4B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:91:7d:58:d3:76:a0:26:13:71:00:45:bf:90:75:60:3d:f0:
         2c:c0:32:1e:57:b8:6b:73:49:38:94:53:db:00:32:4a:78:43:
         e8:9a:90:73:55:11:e4:4f:f7:25:76:3e:23:2f:23:e6:2c:69:
         b9:3f:c6:6b:4d:5a:b7:4f:a6:77:63:c8:1f:03:af:b4:d5:85:
         17:24:ed:fd:8e:41:aa:d1:0c:bf:c9:af:3b:e0:d6:82:ce:0b:
         b2:a2:79:19:9b:12:1b:25:bf:e4:27:3e:c9:31:37:df:23:c5:
         eb:3f:72:fc:48:f1:21:c8:ef:7a:70:14:49:03:aa:ea:ec:b1:
         6e:9a:f2:5c:45:90:a4:c5:cf:07:5f:fd:d6:5e:56:55:7c:76:
         85:d5:05:12:91:39:42:f5:ba:2e:5d:c7:bd:a1:88:6b:61:11:
         01:93:c5:33:e7:97:c9:e7:99:19:ad:e4:09:95:2b:4a:7c:d2:
         c1:f6:50:bf:cb:82:95:f5:5f:99:45:ae:5f:ab:73:6e:7a:50:
         5e:7a:b3:e1:4a:d9:42:19:dd:17:86:fe:ce:ec:0a:7c:5c:6d:
         c0:9c:01:69:d6:ef:0c:e6:d9:bc:22:2b:c4:59:1d:a6:28:c6:
         cc:ab:6e:c0:58:ae:c8:e9:91:81:68:f8:d9:82:b4:5e:2f:f0:
         78:83:88:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvL31SNz6d/aMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmM4YzhmNmYtZTRmNC00OTk2LWJlZmEtYjYyNGUwMTQzYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+QaHTW8/B1E211skisyCavXl6fZWWdsXUSb
959JSa0smC/TphdmOyoUfLxYxQGrboxrrlokhTuXsmlbfhYnfE/QamHa8IchBVT4
p3BKMXDlhFBGG+y2edax1YuDna/P1LMxAIu2OIje2ZmJBS9A9tNENgXVWDf8yk+r
Xko9xSvU9Kvlwmr+gz83KZtyZUHLwhlnReWhLKP5iUUmK65DL7jSAVTOEWZkiGvq
a6bQoJRtKUOTfckD9EpBRLV3R0PDIXuKcmha88UgMfrTLBFa0q23/6NnpP3bseLn
e05AS1YEH2SBaaKKGgu4mgCtwVmlOmb2VY5TWz2JE7WJ/IZTjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0VmAUqJemnb82pwp1RyiSzOUuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYzFlOGMyZDItMTYwZi0z
OTkwLWE5YzctZDg5Zjc0NDUwNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq6LgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeRfVjTdqAmE3EARb+QdWA98CzAMh5XuGtzSTiUU9sAMkp4Q+iakHNV
EeRP9yV2PiMvI+Ysabk/xmtNWrdPpndjyB8Dr7TVhRck7f2OQarRDL/Jrzvg1oLO
C7KieRmbEhslv+QnPskxN98jxes/cvxI8SHI73pwFEkDqurssW6a8lxFkKTFzwdf
/dZeVlV8doXVBRKROUL1ui5dx72hiGthEQGTxTPnl8nnmRmt5AmVK0p80sH2UL/L
gpX1X5lFrl+rc256UF56s+FK2UIZ3ReG/s7sCnxcbcCcAWnW7wzm2bwiK8RZHaYo
xsyrbsBYrsjpkYFo+NmCtF4v8HiDiPo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:22:55 2026 by rpki-client