Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2aa58984-d1f4-315b-8448-60a0a98d7c1e.roa
File:                     2aa58984-d1f4-315b-8448-60a0a98d7c1e.roa (raw, json)
Hash identifier:          4NcVsHwuto1I1rkHchNhsfjEBYNXGldBAvowoNR/mP4=
Subject key identifier:   74:90:03:CA:39:95:49:77:90:BE:A7:24:B8:51:6D:6C:5F:51:9A:9C
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F210D656DFF0F9CD613B2F820
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2aa58984-d1f4-315b-8448-60a0a98d7c1e.roa
Signing time:             Thu 10 Sep 2026 13:44:07 +0000
ROA not before:           Thu 10 Sep 2026 13:44:07 +0000
ROA not after:            Sun 08 Nov 2026 16:27:31 +0000
asID:                     402221
IP address blocks:        134.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:0d:65:6d:ff:0f:9c:d6:13:b2:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Sep 10 13:44:07 2026 GMT
            Not After : Nov  8 16:27:31 2026 GMT
        Subject: CN=f10d48d3-ae94-46f5-b1c8-c52cfedac99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:ed:26:9c:e3:be:3a:6d:9b:d8:87:e8:bd:
                    99:13:02:70:22:72:3f:e1:5e:1d:1f:08:33:bf:83:
                    bd:09:b9:a5:3d:65:4a:89:28:71:05:c0:49:62:f3:
                    50:bd:d3:f6:4b:33:76:2c:f7:18:29:f7:d4:65:7d:
                    5b:2b:15:1b:6f:cc:52:33:b9:8f:07:08:53:c1:e3:
                    b2:8e:2f:22:eb:0a:9c:a1:d0:c5:ae:57:ce:66:ee:
                    3d:bd:e5:9c:ff:43:08:79:86:aa:3f:47:5d:a4:bc:
                    4f:61:7b:29:97:a8:6c:b3:ff:d2:85:48:f8:cc:b1:
                    66:e3:4a:97:3e:b2:50:bd:86:f2:07:d1:4f:c9:04:
                    f6:0b:a0:d8:c0:67:d5:bb:09:25:7d:a1:1e:89:a0:
                    39:25:9a:91:3f:23:2c:9a:26:a5:0e:c4:b6:88:7e:
                    cc:07:79:ac:d9:72:ba:dc:9f:fd:6f:a5:91:bf:6f:
                    49:0d:e8:fa:5f:1a:d1:cd:c6:b2:95:43:5c:65:76:
                    84:e8:37:f2:2f:67:16:75:e7:8e:20:70:35:aa:a8:
                    c8:87:c2:c5:de:1b:7d:ec:ed:c8:c6:d2:14:92:33:
                    fc:0d:5f:6a:69:4b:9c:5d:97:99:7c:b4:23:a0:6a:
                    26:ce:05:ab:50:3d:e8:7e:1c:96:7c:40:9b:97:a1:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:90:03:CA:39:95:49:77:90:BE:A7:24:B8:51:6D:6C:5F:51:9A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/2aa58984-d1f4-315b-8448-60a0a98d7c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:e8:9f:6e:b1:4c:73:50:71:3b:94:63:d6:7a:78:18:10:
         88:20:f3:af:89:a1:b2:c8:d0:18:3d:f5:c0:9d:7f:20:e7:b9:
         3c:e5:20:eb:6e:a2:81:61:50:2f:5c:3c:66:23:b1:7f:f9:6f:
         8a:34:8f:a8:fb:b3:ce:ab:ca:10:e0:b6:0f:e2:9a:81:f5:fb:
         2d:70:d9:4d:c9:76:01:e6:ad:82:16:b8:ba:18:b0:d6:b1:c4:
         ef:06:f0:5b:c7:4f:f0:12:25:f5:4f:b6:9b:0f:73:21:ed:b1:
         9f:a4:82:d8:cc:48:8c:ff:4c:67:cd:f6:9b:8d:22:d7:ec:55:
         74:a1:1e:41:90:6b:b0:a3:29:3e:ce:c3:f3:5e:13:e5:32:a6:
         51:57:e1:47:60:db:42:66:9e:36:67:2a:ec:7e:3c:f2:7e:6e:
         bf:63:47:22:90:60:69:33:61:8a:76:ff:43:5f:86:8b:ff:71:
         e1:26:2f:93:b8:a5:b7:91:a5:1a:09:cd:a4:af:20:08:ba:85:
         a2:6e:1e:ee:87:dd:fe:a4:33:7d:b7:d2:4d:84:d3:12:0f:d0:
         ee:5b:ac:7c:0b:6d:aa:df:2a:35:ac:3a:06:c9:ed:c1:1b:c2:
         74:b5:46:8d:42:80:ff:62:3d:e9:c8:9c:b7:f4:f0:b3:e1:39:
         e2:6f:85:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8hDWVt/w+c1hOy+CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI2MDkxMDEzNDQwN1oXDTI2MTEwODE2MjczMVowLzEtMCsGA1UEAxMk
ZjEwZDQ4ZDMtYWU5NC00NmY1LWIxYzgtYzUyY2ZlZGFjOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI/tJpzjvjptm9iH6L2ZEwJwInI/4V4dHwgz
v4O9CbmlPWVKiShxBcBJYvNQvdP2SzN2LPcYKffUZX1bKxUbb8xSM7mPBwhTweOy
ji8i6wqcodDFrlfOZu49veWc/0MIeYaqP0ddpLxPYXspl6hss//ShUj4zLFm40qX
PrJQvYbyB9FPyQT2C6DYwGfVuwklfaEeiaA5JZqRPyMsmialDsS2iH7MB3ms2XK6
3J/9b6WRv29JDej6XxrRzcaylUNcZXaE6DfyL2cWdeeOIHA1qqjIh8LF3ht97O3I
xtIUkjP8DV9qaUucXZeZfLQjoGomzgWrUD3ofhyWfECbl6ENDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSQA8o5lUl3kL6nJLhRbWxfUZqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvMmFhNTg5ODQtZDFmNC0z
MTViLTg0NDgtNjBhMGE5OGQ3YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsoRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbt6J9usUxzUHE7lGPWengYEIgg86+JobLI0Bg99cCdfyDnuTzlIOtu
ooFhUC9cPGYjsX/5b4o0j6j7s86ryhDgtg/imoH1+y1w2U3JdgHmrYIWuLoYsNax
xO8G8FvHT/ASJfVPtpsPcyHtsZ+kgtjMSIz/TGfN9puNItfsVXShHkGQa7CjKT7O
w/NeE+UyplFX4Udg20JmnjZnKux+PPJ+br9jRyKQYGkzYYp2/0Nfhov/ceEmL5O4
pbeRpRoJzaSvIAi6haJuHu6H3f6kM3230k2E0xIP0O5brHwLbarfKjWsOgbJ7cEb
wnS1Ro1CgP9iPenInLf08LPhOeJvhQQ=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:52:50 2026 by rpki-client