Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa
File:                     5073304d-b7dd-3e55-a332-e1e2f3a67372.roa (raw, json)
Hash identifier:          D+yNkFly8/iUwJbt6UZCES57Pf9nCm8+r06JmNnI/o8=
Subject key identifier:   8D:A0:53:93:70:CE:F6:3B:88:F5:52:90:A7:A3:B0:1A:63:07:E8:FA
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584FD5269B19F42706740D3EC980
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa
Signing time:             Sat 14 Nov 2026 02:00:13 +0000
ROA not before:           Sat 14 Nov 2026 02:00:13 +0000
ROA not after:            Fri 12 Feb 2027 02:00:13 +0000
asID:                     19905
IP address blocks:        170.10.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d5:26:9b:19:f4:27:06:74:0d:3e:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Nov 14 02:00:13 2026 GMT
            Not After : Feb 12 02:00:13 2027 GMT
        Subject: CN=cd05737b-39e5-4aa2-8329-cf84baedf9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:dc:69:80:54:ef:80:a5:2d:f7:58:cc:32:
                    28:1a:b8:2b:d8:7f:1b:7a:ae:09:b7:74:91:7d:b4:
                    17:5f:b2:7f:5c:a6:48:10:c0:c0:80:71:dd:8d:44:
                    dd:6a:5a:70:78:55:cb:c8:ac:de:6d:97:be:96:4a:
                    10:32:8c:d6:50:2d:21:63:b1:ee:2a:cd:ef:0b:c6:
                    92:d9:e5:02:95:96:41:a7:2e:95:97:e3:0d:74:67:
                    77:90:1b:68:4d:5c:3c:e8:bd:d2:f0:cd:52:65:83:
                    c6:ff:84:5e:6f:fe:2c:07:af:ae:d4:39:2c:e4:f1:
                    9c:5b:3d:fa:36:fd:3c:28:ba:a6:1c:f5:68:f7:00:
                    43:9a:b5:20:e4:f1:d9:80:63:9e:61:cb:66:1b:fb:
                    55:51:4e:1d:a5:77:e9:e5:5c:52:c9:c9:2c:6e:0e:
                    59:44:36:53:11:68:7a:97:77:ad:24:06:32:53:90:
                    91:47:c7:22:cc:07:6e:65:6e:c1:1e:b1:72:9a:b2:
                    11:2f:37:f4:ee:48:a0:86:66:1b:23:e1:1a:42:6a:
                    95:bf:78:f9:b2:5b:68:ee:f0:d9:53:31:24:a9:b3:
                    7a:44:bc:cd:92:93:33:c2:4f:9b:5f:a9:43:02:40:
                    99:44:60:47:65:f0:dc:69:45:5c:0b:61:10:b7:79:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:53:93:70:CE:F6:3B:88:F5:52:90:A7:A3:B0:1A:63:07:E8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:d9:97:ad:4a:8c:ce:7b:ef:64:44:fd:20:f3:a4:b3:ea:
         b0:a0:44:b3:5e:21:88:ea:82:a5:75:a7:0d:d2:e5:7b:0a:22:
         87:72:3a:fa:7a:d0:70:1e:98:f1:83:bf:fb:fb:75:3f:57:34:
         9e:e6:42:8d:4a:5d:34:0f:06:08:36:74:a3:da:6d:72:cc:2c:
         ed:46:56:d4:88:aa:f4:10:13:12:51:37:2f:3a:a3:c6:3c:60:
         2e:2d:7a:28:f0:1d:b8:33:7e:c7:d6:1f:6e:82:7d:71:64:94:
         9e:da:e1:a9:a1:c2:59:e7:da:b7:e2:16:ab:11:17:97:3d:96:
         ce:8f:b4:64:9c:03:7d:a8:16:ca:6e:95:75:2f:72:07:fa:d0:
         a1:02:8a:50:0b:c3:0b:a2:49:1c:62:6c:3e:92:02:fb:aa:6a:
         6f:42:dc:1a:4f:fc:32:8d:1d:d6:2a:87:0e:57:6c:15:86:de:
         7a:cc:91:22:8a:dd:f0:d8:3b:da:04:1b:d7:0d:1d:4e:18:d8:
         62:d8:a1:16:09:da:8f:b4:4a:c0:9e:11:74:ac:fe:d0:ca:86:
         46:fd:19:6c:eb:16:7f:d5:32:92:de:b6:26:55:db:f1:f3:d3:
         64:c6:82:41:b7:7b:97:ee:3e:75:e4:86:4b:51:4b:d6:85:34:
         58:6c:70:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/VJpsZ9CcGdA0+yYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MTExNDAyMDAxM1oXDTI3MDIxMjAyMDAxM1owLzEtMCsGA1UEAxMk
Y2QwNTczN2ItMzllNS00YWEyLTgzMjktY2Y4NGJhZWRmOWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA523caYBU74ClLfdYzDIoGrgr2H8beq4Jt3SR
fbQXX7J/XKZIEMDAgHHdjUTdalpweFXLyKzebZe+lkoQMozWUC0hY7HuKs3vC8aS
2eUClZZBpy6Vl+MNdGd3kBtoTVw86L3S8M1SZYPG/4Reb/4sB6+u1Dks5PGcWz36
Nv08KLqmHPVo9wBDmrUg5PHZgGOeYctmG/tVUU4dpXfp5VxSycksbg5ZRDZTEWh6
l3etJAYyU5CRR8cizAduZW7BHrFymrIRLzf07kighmYbI+EaQmqVv3j5slto7vDZ
UzEkqbN6RLzNkpMzwk+bX6lDAkCZRGBHZfDcaUVcC2EQt3nDxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2gU5NwzvY7iPVSkKejsBpjB+j6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvNTA3MzMwNGQtYjdkZC0z
ZTU1LWEzMzItZTFlMmYzYTY3MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOr2ZetSozOe+9kRP0g86Sz6rCgRLNeIYjqgqV1pw3S5XsKIodyOvp6
0HAemPGDv/v7dT9XNJ7mQo1KXTQPBgg2dKPabXLMLO1GVtSIqvQQExJRNy86o8Y8
YC4teijwHbgzfsfWH26CfXFklJ7a4amhwlnn2rfiFqsRF5c9ls6PtGScA32oFspu
lXUvcgf60KECilALwwuiSRxibD6SAvuqam9C3BpP/DKNHdYqhw5XbBWG3nrMkSKK
3fDYO9oEG9cNHU4Y2GLYoRYJ2o+0SsCeEXSs/tDKhkb9GWzrFn/VMpLetiZV2/Hz
02TGgkG3e5fuPnXkhktRS9aFNFhscIc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:35:32 2026 by rpki-client