Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1d1b17d3-916d-3530-ab54-98d2f0a7d0a3.roa
File:                     1d1b17d3-916d-3530-ab54-98d2f0a7d0a3.roa (raw, json)
Hash identifier:          gstt19zmdfKnNQYbnev4Q3vf7bMHPWtTo2Y+ja6w2OM=
Subject key identifier:   1C:6B:44:FF:6E:43:2D:4D:40:F9:0E:BF:5C:BD:05:52:AB:96:14:2E
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F498B00457F39B01EE35B1180
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1d1b17d3-916d-3530-ab54-98d2f0a7d0a3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15164
IP address blocks:        104.218.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:00:45:7f:39:b0:1e:e3:5b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4283dd02-05d7-40a8-bf52-6582fe752ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:df:76:56:8f:52:a3:c5:98:55:0c:2b:28:
                    f1:d9:15:b0:02:70:4c:0f:27:d4:84:a9:3b:33:d3:
                    e8:3e:e5:e6:a2:37:45:05:52:bc:5a:b3:52:ee:e7:
                    82:db:fb:76:d1:8d:76:a1:14:25:e2:b0:6b:d6:51:
                    91:40:84:03:89:70:23:da:3c:c0:1d:3b:c8:81:ac:
                    ab:40:e6:1d:4c:01:01:2f:3c:1c:83:b1:ac:b9:98:
                    ba:1a:fe:5c:00:18:db:56:a9:bd:73:e6:85:ec:6a:
                    31:05:64:08:ff:02:d2:26:d6:41:66:f6:ea:ac:f3:
                    53:ea:ed:e9:03:7e:4e:7b:02:eb:a8:71:23:34:76:
                    8f:a8:1a:67:53:d1:31:1a:47:1e:8b:9f:4d:0c:13:
                    f2:6e:41:97:03:d9:3d:ee:37:23:5d:00:39:bc:19:
                    aa:31:90:e7:6f:12:e8:b6:e6:65:e2:68:66:0b:54:
                    78:45:ee:34:8c:e3:44:4e:19:f9:ce:50:b1:12:27:
                    62:98:44:77:39:3c:3f:d2:93:0e:11:7f:13:f8:08:
                    43:e1:b1:4b:6d:9c:3c:3d:37:b1:64:ab:1c:c2:40:
                    86:e9:15:5f:34:ef:f2:00:0b:9a:2b:42:5d:cc:b0:
                    90:8d:58:27:73:46:54:97:72:72:d5:3e:87:cb:f4:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6B:44:FF:6E:43:2D:4D:40:F9:0E:BF:5C:BD:05:52:AB:96:14:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1d1b17d3-916d-3530-ab54-98d2f0a7d0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ad:14:38:6b:8c:a2:23:df:84:38:82:b0:1a:1c:bc:71:ff:
         14:c6:c2:af:8c:81:df:e5:9a:6a:39:74:39:de:cd:6b:6a:39:
         c9:2b:0a:4e:ba:41:9c:fd:12:6c:f8:59:59:db:28:4e:cb:93:
         c1:84:bc:34:c6:6e:ae:bb:fd:06:25:6c:58:5f:73:7e:22:f3:
         a7:d6:c0:68:74:98:fb:b3:34:9e:dc:55:7e:19:15:a4:a9:a1:
         0f:a4:9b:4f:c4:17:56:22:cd:35:3e:1a:f6:af:99:72:a6:1b:
         89:81:0d:a9:ab:94:35:a8:fc:6d:0c:d9:82:22:2b:4c:89:13:
         8b:3b:69:5d:41:39:4e:04:3e:7c:81:6d:a6:e9:8a:28:36:de:
         90:cf:e6:7c:79:77:a6:b2:46:52:ae:f7:0b:6a:ac:d4:de:a9:
         f0:29:e7:f9:5e:73:0f:9f:ca:4f:46:47:94:1e:a0:62:68:f7:
         ff:47:43:83:3d:09:14:1b:9a:62:60:0e:b7:f8:aa:19:2f:09:
         4d:d8:ff:12:48:a5:04:32:d8:1c:d7:98:11:2b:be:b2:b0:74:
         b4:07:e0:b4:d4:6e:fd:6b:eb:46:f6:a0:2e:e6:a5:2a:c7:e1:
         b5:3e:45:ae:de:95:b3:c7:d4:1a:1b:69:48:65:d2:ac:cf:1e:
         18:87:24:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiwBFfzmwHuNbEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDI4M2RkMDItMDVkNy00MGE4LWJmNTItNjU4MmZlNzUyYmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLfdlaPUqPFmFUMKyjx2RWwAnBMDyfUhKk7
M9PoPuXmojdFBVK8WrNS7ueC2/t20Y12oRQl4rBr1lGRQIQDiXAj2jzAHTvIgayr
QOYdTAEBLzwcg7GsuZi6Gv5cABjbVqm9c+aF7GoxBWQI/wLSJtZBZvbqrPNT6u3p
A35OewLrqHEjNHaPqBpnU9ExGkcei59NDBPybkGXA9k97jcjXQA5vBmqMZDnbxLo
tuZl4mhmC1R4Re40jONEThn5zlCxEidimER3OTw/0pMOEX8T+AhD4bFLbZw8PTex
ZKscwkCG6RVfNO/yAAuaK0JdzLCQjVgnc0ZUl3Jy1T6Hy/RhUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxrRP9uQy1NQPkOv1y9BVKrlhQuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWQxYjE3ZDMtOTE2ZC0z
NTMwLWFiNTQtOThkMmYwYTdkMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6tFDhrjKIj34Q4grAaHLxx/xTGwq+Mgd/lmmo5dDnezWtqOckrCk66
QZz9Emz4WVnbKE7Lk8GEvDTGbq67/QYlbFhfc34i86fWwGh0mPuzNJ7cVX4ZFaSp
oQ+km0/EF1YizTU+GvavmXKmG4mBDamrlDWo/G0M2YIiK0yJE4s7aV1BOU4EPnyB
babpiig23pDP5nx5d6ayRlKu9wtqrNTeqfAp5/lecw+fyk9GR5QeoGJo9/9HQ4M9
CRQbmmJgDrf4qhkvCU3Y/xJIpQQy2BzXmBErvrKwdLQH4LTUbv1r60b2oC7mpSrH
4bU+Ra7elbPH1BobaUhl0qzPHhiHJIk=
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:33:48 2026 by rpki-client