Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa
File:                     0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa (raw, json)
Hash identifier:          z6tEFSBRNpypLghJeGa16yGd+84pbOQ5UrOzMgf/xbM=
Subject key identifier:   62:3F:81:0F:D2:9E:69:50:5B:FF:C4:D5:CC:92:C6:1C:B2:6B:6F:E4
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584F49734F04974B524E6C1982A0
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13506
IP address blocks:        164.95.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:4f:04:97:4b:52:4e:6c:19:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6b5b8eb9-bcc1-4aac-851b-b96c6f58b136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:b9:15:7e:82:52:1e:f6:0d:fe:23:34:9d:
                    09:ed:cc:0b:b7:4d:33:cd:ab:54:dd:16:f5:09:36:
                    01:2d:f3:aa:55:88:1e:23:1d:2f:e1:b3:07:54:1d:
                    f9:1e:35:53:b5:7c:5c:74:10:61:50:01:29:db:4f:
                    07:29:5a:77:5f:af:e5:6e:82:5f:d1:b7:a0:21:53:
                    f4:20:e5:38:90:31:b5:82:f3:9b:89:17:3e:b6:96:
                    3a:80:e0:f3:f6:af:0b:6d:c9:7b:8d:f5:da:06:47:
                    11:4d:cc:60:03:e7:b6:e3:ee:1d:57:71:67:b1:84:
                    45:ed:fe:22:bd:3e:5d:f5:a7:df:5b:fc:68:81:9e:
                    70:c3:11:d3:0a:db:a1:47:79:6d:59:af:64:23:71:
                    02:9a:de:b5:b1:5b:d1:69:a1:79:46:4a:90:89:cc:
                    cb:cd:20:96:80:eb:06:54:33:e2:17:54:16:d6:6f:
                    e8:23:42:60:95:56:70:ba:05:83:b7:f8:e2:e7:1b:
                    2a:fc:75:54:44:2b:c6:8f:41:a3:4e:06:88:3a:b6:
                    cd:d7:49:d0:95:6e:66:9e:4e:e1:52:dc:fb:29:3d:
                    c8:c6:91:8e:f9:fc:24:ff:fb:da:2f:bd:db:97:47:
                    9f:28:29:12:60:98:ac:8b:ba:96:15:53:e6:94:0b:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:81:0F:D2:9E:69:50:5B:FF:C4:D5:CC:92:C6:1C:B2:6B:6F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.95.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:4c:e6:77:c7:45:fc:a8:23:c6:f2:45:67:85:dd:83:b9:
         61:36:7d:ae:ec:0d:1d:c5:4d:7b:b0:8f:79:16:d2:67:98:d3:
         3e:e7:29:3b:53:ad:36:c3:18:86:66:bf:2b:18:59:96:d1:b3:
         03:87:d1:c7:f4:69:f6:21:9a:b6:c8:e4:71:1e:6e:ca:d1:0b:
         9a:80:36:36:09:5f:94:e9:7e:12:5c:71:91:91:e6:de:7a:e7:
         0c:1e:ac:55:30:c9:9e:30:72:3d:a2:5b:6e:9f:82:59:9a:d5:
         76:6f:10:a1:f0:c5:da:e9:bb:d8:42:b7:18:1b:5c:0e:48:0a:
         0a:d5:a0:b1:e6:3a:a8:62:df:8f:52:a9:80:b6:9c:eb:06:10:
         2b:bb:d7:0b:50:fc:7b:a1:ca:a0:17:6b:ac:95:63:6f:75:3a:
         5d:6a:bf:c1:b5:ea:b6:c9:cc:84:06:05:1f:57:76:3c:45:a7:
         39:84:f5:b3:c3:d2:e0:cf:27:0b:d8:2c:ed:e7:64:95:b6:fc:
         3a:4b:16:a1:5a:da:1d:7e:bd:fd:67:bb:98:6a:59:bc:d2:2e:
         f6:4d:02:31:88:99:c9:3f:4a:50:d1:7b:27:87:b0:36:b9:99:
         8b:f6:b1:db:cf:00:f8:b6:9e:fc:c5:7f:a0:99:7c:76:11:b3:
         ff:4c:ce:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc08El0tSTmwZgqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz
ZTNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmI1YjhlYjktYmNjMS00YWFjLTg1MWItYjk2YzZmNThiMTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+u5FX6CUh72Df4jNJ0J7cwLt00zzatU3Rb1
CTYBLfOqVYgeIx0v4bMHVB35HjVTtXxcdBBhUAEp208HKVp3X6/lboJf0begIVP0
IOU4kDG1gvObiRc+tpY6gODz9q8Lbcl7jfXaBkcRTcxgA+e24+4dV3FnsYRF7f4i
vT5d9affW/xogZ5wwxHTCtuhR3ltWa9kI3ECmt61sVvRaaF5RkqQiczLzSCWgOsG
VDPiF1QW1m/oI0JglVZwugWDt/ji5xsq/HVURCvGj0GjTgaIOrbN10nQlW5mnk7h
Utz7KT3IxpGO+fwk//vaL73bl0efKCkSYJisi7qWFVPmlAs/+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGI/gQ/SnmlQW//E1cySxhyya2/kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh
ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvMGE3ZjhjNjgtZGU2Yy0z
NDg4LWI5OGUtMWZkNWVhMGVlYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1
ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj
M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx
MWQ0YzNlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApF9fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqqTOZ3x0X8qCPG8kVnhd2DuWE2fa7sDR3FTXuwj3kW0meY0z7nKTtT
rTbDGIZmvysYWZbRswOH0cf0afYhmrbI5HEebsrRC5qANjYJX5TpfhJccZGR5t56
5wwerFUwyZ4wcj2iW26fglma1XZvEKHwxdrpu9hCtxgbXA5ICgrVoLHmOqhi349S
qYC2nOsGECu71wtQ/HuhyqAXa6yVY291Ol1qv8G16rbJzIQGBR9XdjxFpzmE9bPD
0uDPJwvYLO3nZJW2/DpLFqFa2h1+vf1nu5hqWbzSLvZNAjGImck/SlDReyeHsDa5
mYv2sdvPAPi2nvzFf6CZfHYRs/9Mzj0=
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:39:04 2026 by rpki-client