Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
File:                     a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa (raw, json)
Hash identifier:          nPELrP3ZLISsmOCkrD9FOAAyybR8NK1JEOvXeL7gw0o=
Subject key identifier:   3E:21:58:6B:B4:53:98:44:B9:6F:4F:10:86:B5:98:4F:FF:4A:AB:E5
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584F1467A50DABD186F112922D00
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     1742
IP address blocks:        128.103.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a5:0d:ab:d1:86:f1:12:92:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=495afd78-fc6f-40d6-97a5-020097a613f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:83:80:d8:a3:52:cf:2a:14:9e:0e:04:07:
                    e5:e8:d8:fc:ad:e4:01:67:10:e8:36:4e:51:2e:8f:
                    65:54:d0:2e:8d:fa:76:3d:44:ff:47:b6:30:85:51:
                    0c:92:5c:4d:cb:12:ad:cc:d0:14:a9:cb:90:64:8c:
                    6c:69:b2:e1:18:26:82:ae:e2:23:69:b5:a7:ab:96:
                    b5:d0:43:1c:29:a9:3e:e5:e3:ef:e2:0c:f6:d2:e4:
                    be:83:14:01:be:6f:84:cd:34:a4:2c:db:e3:0e:98:
                    a5:9c:cc:75:d9:3a:93:e8:c8:3c:bf:3f:37:ab:c2:
                    4f:dd:f4:15:9d:c7:69:c0:5f:fa:a8:1d:85:a8:09:
                    4d:d5:bb:a4:6f:d2:2c:8f:23:22:e4:dc:c3:2d:a9:
                    8f:76:ea:a1:74:92:46:c0:8a:65:69:eb:32:42:df:
                    f6:65:1b:75:c4:44:19:71:69:23:a6:e9:c2:5a:73:
                    5b:a4:ba:82:99:96:52:2e:ee:e9:a6:5e:c4:2f:2a:
                    72:66:72:2b:92:67:17:28:92:0c:4f:cf:d3:a2:eb:
                    5d:31:fe:02:b5:88:97:e1:fc:a1:d9:22:58:a4:52:
                    c6:9b:71:ea:86:46:81:72:6d:38:f8:38:86:91:43:
                    02:51:a6:26:f3:8d:45:9f:74:a3:3a:12:f2:53:0c:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:21:58:6B:B4:53:98:44:B9:6F:4F:10:86:B5:98:4F:FF:4A:AB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:c2:5c:5c:8c:5c:7e:59:c5:66:82:52:4e:7e:4f:d2:7d:
         d7:fa:62:4f:91:b6:56:b3:ab:96:cf:ce:ff:28:2a:e1:f5:f8:
         16:b5:ab:05:b8:a4:7a:ea:64:7b:7f:00:19:7e:e2:6f:0b:b9:
         2e:6b:29:3d:4a:7f:6c:e5:f9:4e:a7:0d:be:f5:22:70:cf:83:
         b9:96:d2:0d:21:31:53:4d:48:29:37:cf:94:3d:89:e9:87:f1:
         ee:8e:b5:8a:c8:25:6a:94:12:57:7c:a4:88:0a:96:e5:2e:95:
         be:be:8f:b5:2c:4c:e2:6c:1c:1a:06:ef:cf:b7:4f:29:11:68:
         d6:ff:ea:57:ee:63:d0:1b:16:c7:67:c3:79:1a:47:8f:0f:2a:
         dd:a2:89:59:a5:bb:b9:30:ff:3b:1a:3e:a9:fc:89:3b:8e:5d:
         b1:f0:1d:31:9c:de:d3:57:c8:37:e3:35:eb:77:42:14:f3:f8:
         6f:52:8a:de:fb:81:e2:26:d7:7f:6e:af:f9:65:59:44:36:2b:
         99:0b:05:4e:8f:9d:f0:e9:4a:30:33:a1:07:77:5e:8d:8b:93:
         ba:fd:65:e6:2d:6b:fb:b0:70:22:f7:62:f4:2a:ac:9b:7a:a5:
         b6:f0:12:e0:e3:7f:9b:80:7c:70:0f:2b:a8:e0:52:35:17:2b:
         f5:0d:e5:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8UZ6UNq9GG8RKSLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
NDk1YWZkNzgtZmM2Zi00MGQ2LTk3YTUtMDIwMDk3YTYxM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0eDgNijUs8qFJ4OBAfl6Nj8reQBZxDoNk5R
Lo9lVNAujfp2PUT/R7YwhVEMklxNyxKtzNAUqcuQZIxsabLhGCaCruIjabWnq5a1
0EMcKak+5ePv4gz20uS+gxQBvm+EzTSkLNvjDpilnMx12TqT6Mg8vz83q8JP3fQV
ncdpwF/6qB2FqAlN1bukb9IsjyMi5NzDLamPduqhdJJGwIplaesyQt/2ZRt1xEQZ
cWkjpunCWnNbpLqCmZZSLu7ppl7ELypyZnIrkmcXKJIMT8/ToutdMf4CtYiX4fyh
2SJYpFLGm3HqhkaBcm04+DiGkUMCUaYm841Fn3SjOhLyUwy9awIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD4hWGu0U5hEuW9PEIa1mE//SqvlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvYTY5NWQxYTgtNTdhMi0z
ZjVkLWFiYWMtZWE0NzUyNWQ4OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHQ7CXFyMXH5ZxWaCUk5+T9J91/piT5G2VrOrls/O/ygq4fX4FrWrBbik
eupke38AGX7ibwu5LmspPUp/bOX5TqcNvvUicM+DuZbSDSExU01IKTfPlD2J6Yfx
7o61isglapQSV3ykiAqW5S6Vvr6PtSxM4mwcGgbvz7dPKRFo1v/qV+5j0BsWx2fD
eRpHjw8q3aKJWaW7uTD/Oxo+qfyJO45dsfAdMZze01fIN+M163dCFPP4b1KK3vuB
4ibXf26v+WVZRDYrmQsFTo+d8OlKMDOhB3dejYuTuv1l5i1r+7BwIvdi9Cqsm3ql
tvAS4ON/m4B8cA8rqOBSNRcr9Q3lPA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:49:44 2026 by rpki-client