Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa
File:                     df561cb6-2c93-3a7a-8557-a364422ceb63.roa (raw, json)
Hash identifier:          qzjMbnTfnHMoMg8W8e+H3/8Z7Sqh0/9NfpMzyi/EVqY=
Subject key identifier:   DD:91:FC:B4:10:9A:96:A1:34:F3:AA:26:5E:5A:EA:12:60:31:2B:09
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4972DDBAC3892E313F58F780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        104.145.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:dd:ba:c3:89:2e:31:3f:58:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0ed0ebd0-8357-407d-8310-0fdc589a6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:e4:4b:88:bf:dc:2a:ce:47:b3:27:81:c0:
                    d6:35:81:f3:0f:2b:df:26:aa:a1:81:c6:03:3d:64:
                    c8:81:24:ad:2e:af:87:d3:98:e2:8d:dc:8d:99:c1:
                    ae:39:4b:43:05:bb:76:d7:6c:af:32:a6:fc:0d:0e:
                    f3:aa:b5:34:9a:56:86:c4:ed:2a:f1:d3:71:b9:88:
                    84:ab:78:67:d1:cb:ed:c8:68:40:3e:ab:07:ec:1e:
                    e8:8e:10:ed:40:82:20:69:3e:f1:83:5e:23:71:09:
                    d2:85:5a:2b:6e:05:5c:30:38:a2:12:44:1c:e1:19:
                    fb:2a:f7:bd:c0:ca:a3:75:17:b0:f8:9f:f1:0f:67:
                    16:a9:a1:4d:1b:25:fd:ce:ce:e4:d0:ae:b9:b7:ca:
                    1f:02:64:3b:0e:d5:db:58:74:97:45:c7:96:ae:f4:
                    00:d3:a2:81:a1:d1:c0:6b:0d:ad:0f:ec:d5:81:f2:
                    ba:4f:6a:71:35:ff:27:36:39:1c:43:45:7e:76:57:
                    89:cc:be:bf:72:64:5a:ce:a0:0c:75:d8:c1:6b:35:
                    89:69:23:84:22:bc:f6:a5:da:16:d2:73:2c:65:8c:
                    30:5e:f2:49:6d:70:e4:40:0b:2d:35:c9:75:93:ea:
                    31:ba:8d:00:2e:63:05:5f:47:6a:11:05:ef:db:cb:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:FC:B4:10:9A:96:A1:34:F3:AA:26:5E:5A:EA:12:60:31:2B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:23:ca:7a:d8:f5:a6:e1:a3:0b:1a:da:92:02:45:14:41:
         3e:89:96:05:7e:bf:01:4e:ef:b6:29:c0:c6:75:8b:6c:40:3b:
         c1:f7:5d:ed:3f:ad:20:c8:04:f7:82:c2:8a:1b:11:58:20:cb:
         9f:32:2b:78:bc:e4:db:06:79:9e:a1:96:51:bd:91:f4:f4:e3:
         96:36:95:2d:c0:33:02:cc:76:d6:dd:1b:1f:26:4f:87:98:7d:
         8b:7f:7f:a0:d8:3b:7b:64:e6:2b:cb:9f:0e:13:91:70:df:4a:
         b4:d2:7e:67:22:a2:28:40:57:39:8b:21:74:b4:74:ad:12:10:
         90:21:6b:60:4e:9c:74:8f:66:59:28:8a:f9:3c:00:9b:0f:f5:
         08:d7:42:ee:4f:1e:77:21:00:9e:22:e2:cf:fb:1c:a4:56:53:
         c8:c7:e9:cc:96:6a:fc:27:4e:b0:6c:82:ff:a7:bb:8e:fa:19:
         b3:68:24:78:2f:75:be:f2:9e:63:0b:1a:bb:79:4d:64:33:1f:
         df:eb:e3:75:e2:32:aa:e4:6e:5e:6b:db:88:7c:77:cf:13:a2:
         15:9c:82:6e:04:47:14:ba:5f:f3:0f:17:4d:ad:ef:2f:cb:0b:
         72:1a:58:1f:19:6d:f4:ee:f4:66:84:36:2c:00:9e:43:2e:9d:
         a0:5a:a4:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jct26w4kuMT9Y94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGVkMGViZDAtODM1Ny00MDdkLTgzMTAtMGZkYzU4OWE2NTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PDkS4i/3CrOR7MngcDWNYHzDyvfJqqhgcYD
PWTIgSStLq+H05jijdyNmcGuOUtDBbt212yvMqb8DQ7zqrU0mlaGxO0q8dNxuYiE
q3hn0cvtyGhAPqsH7B7ojhDtQIIgaT7xg14jcQnShVorbgVcMDiiEkQc4Rn7Kve9
wMqjdRew+J/xD2cWqaFNGyX9zs7k0K65t8ofAmQ7DtXbWHSXRceWrvQA06KBodHA
aw2tD+zVgfK6T2pxNf8nNjkcQ0V+dleJzL6/cmRazqAMddjBazWJaSOEIrz2pdoW
0nMsZYwwXvJJbXDkQAstNcl1k+oxuo0ALmMFX0dqEQXv28ua/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2R/LQQmpahNPOqJl5a6hJgMSsJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGY1NjFjYjYtMmM5My0z
YTdhLTg1NTctYTM2NDQyMmNlYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVLI8p62PWm4aMLGtqSAkUUQT6JlgV+vwFO77YpwMZ1i2xAO8H3Xe0/
rSDIBPeCwoobEVggy58yK3i85NsGeZ6hllG9kfT045Y2lS3AMwLMdtbdGx8mT4eY
fYt/f6DYO3tk5ivLnw4TkXDfSrTSfmcioihAVzmLIXS0dK0SEJAha2BOnHSPZlko
ivk8AJsP9QjXQu5PHnchAJ4i4s/7HKRWU8jH6cyWavwnTrBsgv+nu476GbNoJHgv
db7ynmMLGrt5TWQzH9/r43XiMqrkbl5r24h8d88TohWcgm4ERxS6X/MPF02t7y/L
C3IaWB8ZbfTu9GaENiwAnkMunaBapCg=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:31:54 2026 by rpki-client