Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/94f85300-115e-367f-9845-b62459163898.roa
File:                     94f85300-115e-367f-9845-b62459163898.roa (raw, json)
Hash identifier:          bw4s0cc6rFIphh9mcfYf8n1Yq/NjItIuqGkNykS28bg=
Subject key identifier:   D0:2D:1C:B1:53:A9:33:75:C8:73:DB:66:BD:78:C7:B0:59:F9:64:10
Certificate issuer:       /CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Certificate serial:       010D0C9F4328584F4DA2904210652075C94F8F00
Authority key identifier: A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/94f85300-115e-367f-9845-b62459163898.roa
Signing time:             Sat 26 Sep 2026 13:00:12 +0000
ROA not before:           Sat 26 Sep 2026 13:00:12 +0000
ROA not after:            Fri 25 Dec 2026 14:00:12 +0000
asID:                     53596
IP address blocks:        170.137.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:a2:90:42:10:65:20:75:c9:4f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
        Validity
            Not Before: Sep 26 13:00:12 2026 GMT
            Not After : Dec 25 14:00:12 2026 GMT
        Subject: CN=6f9ca514-2722-4671-9db5-c1306b2d0351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:a2:97:c3:17:ed:93:21:12:66:b3:0c:78:
                    f7:4c:30:8a:00:8f:b2:62:84:f2:df:1e:20:73:d8:
                    14:8c:3c:ad:88:af:3b:a3:fa:de:61:0f:27:a8:02:
                    7e:81:e7:f8:71:c8:63:00:85:b7:62:4a:45:06:fa:
                    8c:b1:7a:45:f9:56:a0:3c:27:71:17:36:9b:ad:60:
                    f5:0a:5e:44:d3:86:3f:fc:ad:28:4c:3e:9f:1b:9e:
                    05:5b:70:8c:3c:a4:67:28:c1:d6:53:d2:1c:92:a7:
                    03:ff:40:0e:8a:a1:2c:81:ea:a1:1d:53:5d:05:8d:
                    7e:a9:ba:3d:51:76:50:ac:f7:96:eb:01:91:e8:ba:
                    47:a8:6d:b8:3c:15:8c:0b:62:de:2b:06:d5:a3:1a:
                    a7:6f:48:79:95:fe:1a:96:e1:ff:66:16:cd:9c:91:
                    e1:23:17:e3:0d:ed:b9:61:ba:8a:ec:7d:b7:be:ee:
                    b4:d7:c8:eb:54:97:2b:01:31:1b:03:86:44:84:d4:
                    ae:0c:e2:88:19:6f:1c:11:e5:9a:b9:30:da:9f:5a:
                    1d:8a:c3:a2:c1:e0:c2:7e:0f:c6:e1:ca:73:3c:c3:
                    a4:bf:57:bb:15:56:6e:44:ad:31:c6:51:10:02:5d:
                    43:fa:88:97:56:8a:07:65:a6:b0:2f:1b:5a:85:86:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:1C:B1:53:A9:33:75:C8:73:DB:66:BD:78:C7:B0:59:F9:64:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/94f85300-115e-367f-9845-b62459163898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.137.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:36:2c:52:0f:29:31:61:ed:0f:98:5a:40:b9:9e:a9:d8:
         0c:84:c2:b5:44:b0:b0:5d:30:47:ad:3a:ad:42:31:2c:94:21:
         63:9e:8b:f1:01:54:df:0c:27:49:d6:c5:d4:93:b7:6e:c5:73:
         e1:93:88:c8:e4:a3:24:99:10:48:eb:e2:e8:96:97:0e:af:90:
         aa:db:4c:4e:24:44:c7:31:2d:57:0a:2e:f7:c9:71:c0:d1:d8:
         28:0e:0a:1b:b8:66:6a:0c:92:1a:9b:73:b5:1f:1a:38:1d:37:
         12:44:d3:83:c4:06:30:59:8e:75:77:b5:cf:82:3d:08:ac:8a:
         b5:06:e0:b3:85:6d:46:a8:ae:58:a5:b2:fe:20:ff:ba:99:76:
         14:72:2e:31:d4:0b:b1:45:a9:a0:8c:c9:1a:01:be:87:69:6d:
         0c:b6:5a:7d:84:d7:14:5e:62:10:b3:3f:2a:10:df:ce:96:09:
         16:ed:fd:f9:2f:76:05:42:eb:e4:57:77:ef:40:ed:a5:62:73:
         3b:98:6c:b0:73:2f:ff:94:71:b0:83:60:36:a7:14:b0:44:8a:
         bd:27:65:1b:39:7d:d9:24:e2:bf:ff:f3:6d:02:ec:29:5f:67:
         5d:8a:c6:52:3c:de:26:90:b7:6c:19:31:90:e7:5b:bd:0d:b9:
         1a:ed:4e:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9NopBCEGUgdclPjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdiOWNkNzMtNDc1My00MmIyLWExM2YtMjIxM2YwYmZl
NGY4MB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk
NmY5Y2E1MTQtMjcyMi00NjcxLTlkYjUtYzEzMDZiMmQwMzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJeil8MX7ZMhEmazDHj3TDCKAI+yYoTy3x4g
c9gUjDytiK87o/reYQ8nqAJ+gef4cchjAIW3YkpFBvqMsXpF+VagPCdxFzabrWD1
Cl5E04Y//K0oTD6fG54FW3CMPKRnKMHWU9IckqcD/0AOiqEsgeqhHVNdBY1+qbo9
UXZQrPeW6wGR6LpHqG24PBWMC2LeKwbVoxqnb0h5lf4aluH/ZhbNnJHhIxfjDe25
YbqK7H23vu6018jrVJcrATEbA4ZEhNSuDOKIGW8cEeWauTDan1odisOiweDCfg/G
4cpzPMOkv1e7FVZuRK0xxlEQAl1D+oiXVooHZaawLxtahYaccwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAtHLFTqTN1yHPbZr14x7BZ+WQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jN2I5
Y2Q3My00NzUzLTQyYjItYTEzZi0yMjEzZjBiZmU0ZjgvOTRmODUzMDAtMTE1ZS0z
NjdmLTk4NDUtYjYyNDU5MTYzODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYzdiOWNkNzMtNDc1My00MmIyLWEx
M2YtMjIxM2YwYmZlNGY4L2M3YjljZDczLTQ3NTMtNDJiMi1hMTNmLTIyMTNmMGJm
ZTRmOC5jcmwwHwYDVR0jBBgwFoAUqBXWmy1yPriDFZqWNCz/kSoLP84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9jN2I5Y2Q3My00NzUzLTQyYjItYTEzZi0yMjEz
ZjBiZmU0ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqonbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKYSNixSDykxYe0PmFpAuZ6p2AyEwrVEsLBdMEetOq1CMSyUIWOei/EB
VN8MJ0nWxdSTt27Fc+GTiMjkoySZEEjr4uiWlw6vkKrbTE4kRMcxLVcKLvfJccDR
2CgOChu4ZmoMkhqbc7UfGjgdNxJE04PEBjBZjnV3tc+CPQisirUG4LOFbUaorlil
sv4g/7qZdhRyLjHUC7FFqaCMyRoBvodpbQy2Wn2E1xReYhCzPyoQ386WCRbt/fkv
dgVC6+RXd+9A7aViczuYbLBzL/+UcbCDYDanFLBEir0nZRs5fdkk4r//820C7Clf
Z12KxlI83iaQt2wZMZDnW70NuRrtTsc=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:21 2026 by rpki-client