Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a529c437-13a2-3e53-8179-f4e796ba99e3.roa
File:                     a529c437-13a2-3e53-8179-f4e796ba99e3.roa (raw, json)
Hash identifier:          x/D8mS97crgpfHVPcqgHzTaYTTHwQgKcO38zDh0AqtQ=
Subject key identifier:   7B:6D:96:62:97:13:6F:66:02:B4:90:F4:B6:1B:36:FB:CF:13:B7:99
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29946ECF3E29F42FD28C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a529c437-13a2-3e53-8179-f4e796ba99e3.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        128.109.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:99:46:ec:f3:e2:9f:42:fd:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=d9a51a82-5e77-446b-8ba8-40869bf46a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:e5:eb:bb:d1:44:44:cd:b8:69:92:ea:8e:
                    10:01:79:c7:85:3f:85:12:3e:8c:3d:b7:8e:9c:33:
                    cf:18:e1:c1:ad:58:37:2c:92:34:be:2f:97:26:9e:
                    6f:00:c0:88:cb:3d:80:cf:40:2e:98:c8:34:b6:70:
                    1f:b4:b8:ff:07:ec:35:1a:7e:08:24:40:bc:02:35:
                    70:9b:c1:47:8d:d6:1b:2c:e7:bb:bd:0a:e2:9a:2c:
                    16:8c:66:e6:d4:83:4e:30:4f:7b:48:8d:1c:a2:04:
                    4f:d7:7e:b1:a9:aa:dd:d4:7f:11:b0:af:2d:c6:5a:
                    8b:dc:d7:68:f5:77:fa:a2:9b:2c:52:57:34:26:66:
                    86:fb:df:bc:c0:26:51:31:e7:80:2f:47:1b:37:41:
                    74:a7:8f:dd:79:04:d9:ca:43:f2:f6:5c:58:52:55:
                    d6:f1:bf:54:03:7a:7b:8d:ca:fb:6d:1c:26:d9:f1:
                    15:bc:b4:e7:5e:38:81:8c:3d:9a:e8:74:64:dc:60:
                    9e:fc:7a:34:3f:84:50:fd:20:66:9e:9e:b8:ec:69:
                    9c:73:5b:12:f7:24:4c:8e:6f:0b:8a:0d:de:fd:76:
                    2e:23:f1:ee:de:6b:a0:c2:e7:a9:56:63:f4:92:8e:
                    0a:81:f2:ed:22:da:3a:25:9b:e2:ce:62:65:dc:6b:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6D:96:62:97:13:6F:66:02:B4:90:F4:B6:1B:36:FB:CF:13:B7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a529c437-13a2-3e53-8179-f4e796ba99e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:24:10:1c:73:33:6c:0e:96:86:e2:11:b7:c2:df:cc:2c:58:
         0b:37:d3:85:89:1f:49:f5:3d:fd:49:b4:89:67:0e:e3:90:d3:
         04:53:5a:4e:f4:2f:77:12:6e:bd:73:6d:5b:f6:9d:56:20:2d:
         5a:09:4d:83:8d:9d:ca:68:7d:62:c0:8d:f2:b4:8a:3b:e7:b5:
         30:b9:ab:0c:70:bf:d5:2e:cf:c0:26:c9:8e:46:e3:1d:3d:b7:
         90:7e:28:c8:f6:72:6f:e7:eb:5c:21:cd:d7:94:fd:b3:4e:ef:
         56:ae:bf:cd:5c:f5:1f:ab:3c:3f:98:62:b1:d2:e9:83:fc:ed:
         ff:a7:1c:58:a7:2b:82:e6:a8:ef:ad:3c:32:f9:1d:dd:5e:62:
         a4:a3:1b:ca:01:c4:31:7d:ad:9f:b7:ef:ee:9f:31:be:3e:13:
         fe:55:88:7d:ab:f4:78:88:81:cb:8d:25:b3:9e:8f:86:13:ca:
         05:ef:fe:f5:b6:64:58:94:41:04:c8:95:9b:6f:dd:bd:69:8c:
         79:87:9b:bf:16:f3:bc:cb:d0:14:4e:df:1b:05:9f:01:c6:6b:
         9d:7c:f0:17:2f:17:bc:c2:90:d6:22:08:63:0e:00:11:3a:2b:
         ee:d5:14:3e:1e:2b:a7:a1:19:6b:c5:a3:73:14:10:d9:d8:5c:
         32:4b:89:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0plG7PPin0L9KMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDlhNTFhODItNWU3Ny00NDZiLThiYTgtNDA4NjliZjQ2YTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjTl67vRRETNuGmS6o4QAXnHhT+FEj6MPbeO
nDPPGOHBrVg3LJI0vi+XJp5vAMCIyz2Az0AumMg0tnAftLj/B+w1Gn4IJEC8AjVw
m8FHjdYbLOe7vQrimiwWjGbm1INOME97SI0cogRP136xqard1H8RsK8txlqL3Ndo
9Xf6opssUlc0JmaG+9+8wCZRMeeAL0cbN0F0p4/deQTZykPy9lxYUlXW8b9UA3p7
jcr7bRwm2fEVvLTnXjiBjD2a6HRk3GCe/Ho0P4RQ/SBmnp647Gmcc1sS9yRMjm8L
ig3e/XYuI/Hu3mugwuepVmP0ko4KgfLtIto6JZvizmJl3GtdgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHttlmKXE29mArSQ9LYbNvvPE7eZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTUyOWM0MzctMTNhMi0z
ZTUzLTgxNzktZjRlNzk2YmE5OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG3BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQkEBxzM2wOlobiEbfC38wsWAs304WJH0n1Pf1JtIlnDuOQ0wRTWk70
L3cSbr1zbVv2nVYgLVoJTYONncpofWLAjfK0ijvntTC5qwxwv9Uuz8AmyY5G4x09
t5B+KMj2cm/n61whzdeU/bNO71auv81c9R+rPD+YYrHS6YP87f+nHFinK4LmqO+t
PDL5Hd1eYqSjG8oBxDF9rZ+37+6fMb4+E/5ViH2r9HiIgcuNJbOej4YTygXv/vW2
ZFiUQQTIlZtv3b1pjHmHm78W87zL0BRO3xsFnwHGa5188BcvF7zCkNYiCGMOABE6
K+7VFD4eK6ehGWvFo3MUENnYXDJLicw=
-----END CERTIFICATE-----
Generated at Sat Oct 3 05:45:05 2026 by rpki-client