Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd1fdd22-4b42-3484-9799-ff08eb4e6349.roa
File:                     fd1fdd22-4b42-3484-9799-ff08eb4e6349.roa (raw, json)
Hash identifier:          le0lOD4W9lqS/KyFtuMNKy91Ew65PN8siyFG/kjTBvc=
Subject key identifier:   FE:26:4F:2E:23:DB:DD:50:16:C9:F3:C4:36:B9:0A:3A:AB:C2:05:C2
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4C3D9F5A043A19E9E5B09040
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd1fdd22-4b42-3484-9799-ff08eb4e6349.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     36492
IP address blocks:        64.9.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:9f:5a:04:3a:19:e9:e5:b0:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=ceb2c9dc-4613-4022-8752-d36887c958fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:45:4d:5a:cf:82:9a:30:82:d7:22:b4:ea:
                    f4:d0:e5:8f:ba:87:20:2c:c7:b5:8b:9a:e5:70:57:
                    3f:45:b9:7d:00:c8:6d:38:7d:57:a6:d6:a4:c5:ab:
                    a9:cc:29:b9:44:f1:69:5e:e5:16:f6:8a:da:d6:7c:
                    7e:55:bb:e5:a5:bb:1b:e4:17:d6:c3:4f:c4:a5:3a:
                    79:41:5a:f5:e6:67:3b:8f:31:00:56:f4:42:c7:5f:
                    97:56:99:30:f5:92:51:eb:49:46:e6:fc:fe:e0:4b:
                    fe:f1:0c:42:fd:9b:e5:c5:60:6e:d8:1c:38:60:01:
                    fc:51:39:3b:1d:f4:9e:66:f0:7f:a9:93:65:15:f3:
                    e7:3a:be:82:c8:fd:b0:87:30:17:24:d7:57:9e:c8:
                    87:97:1d:2b:8c:e1:59:4d:62:99:c7:26:dc:98:92:
                    59:6a:31:04:f5:c4:88:ef:2f:7a:ee:2f:ac:8c:93:
                    76:18:f4:ed:56:4f:58:18:46:af:d5:98:b7:e4:2b:
                    b4:9a:b4:0b:20:2c:55:f2:bd:17:7f:e8:24:d5:77:
                    2f:db:c9:39:37:02:f4:78:c6:80:b4:d4:e9:a8:e1:
                    0a:17:dd:f7:62:e0:c3:b0:bd:90:24:6a:ab:bb:27:
                    52:a8:3a:0f:56:95:7e:c2:fe:c6:f9:16:66:90:77:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:26:4F:2E:23:DB:DD:50:16:C9:F3:C4:36:B9:0A:3A:AB:C2:05:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd1fdd22-4b42-3484-9799-ff08eb4e6349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:8c:b2:78:be:3e:34:e9:d4:17:1c:58:94:ae:98:33:38:
         d1:4e:f7:d3:a2:b6:13:9f:2c:62:4f:f1:48:ce:f0:96:9f:cd:
         1e:75:12:fc:4e:69:57:38:2d:05:24:17:7c:a6:e9:98:94:a2:
         44:9b:60:cb:19:d8:05:90:63:f5:fd:aa:72:3a:34:e8:5e:b4:
         a6:f3:f1:55:48:ad:17:0c:bd:8c:ca:67:09:de:cf:19:cf:fd:
         75:94:d9:25:d8:e1:41:a7:1d:26:aa:d9:9c:f0:bf:16:71:5a:
         92:dd:84:6b:56:17:89:3a:60:7d:84:1e:11:8d:ec:29:e5:57:
         74:b7:c4:1e:a1:f8:b4:21:bf:e2:5a:d1:fc:b2:ee:ca:42:b9:
         ed:81:d8:d3:57:5e:9e:7a:70:37:f1:83:b6:18:a9:3f:a1:5b:
         6e:2b:37:e7:85:42:4e:00:b0:d9:ca:61:35:a2:e3:66:21:da:
         2f:40:0d:cb:39:90:54:8e:b6:b5:94:a5:91:95:ba:fb:b7:fe:
         9d:aa:ae:5b:cd:97:fd:a2:d2:09:b7:49:e2:da:df:1f:5a:7a:
         93:55:f3:d8:88:1f:84:54:fe:dc:c7:9f:e0:13:a9:02:bd:78:
         7e:b7:c0:e2:18:d2:03:80:d8:1a:f7:fa:f2:48:41:8c:73:e3:
         12:75:90:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ9aBDoZ6eWwkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
Y2ViMmM5ZGMtNDYxMy00MDIyLTg3NTItZDM2ODg3Yzk1OGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp99FTVrPgpowgtcitOr00OWPuocgLMe1i5rl
cFc/Rbl9AMhtOH1XptakxaupzCm5RPFpXuUW9ora1nx+Vbvlpbsb5BfWw0/EpTp5
QVr15mc7jzEAVvRCx1+XVpkw9ZJR60lG5vz+4Ev+8QxC/ZvlxWBu2Bw4YAH8UTk7
HfSeZvB/qZNlFfPnOr6CyP2whzAXJNdXnsiHlx0rjOFZTWKZxybcmJJZajEE9cSI
7y967i+sjJN2GPTtVk9YGEav1Zi35Cu0mrQLICxV8r0Xf+gk1Xcv28k5NwL0eMaA
tNTpqOEKF933YuDDsL2QJGqruydSqDoPVpV+wv7G+RZmkHfBDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4mTy4j291QFsnzxDa5CjqrwgXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmQxZmRkMjItNGI0Mi0z
NDg0LTk3OTktZmYwOGViNGU2MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE14jLJ4vj406dQXHFiUrpgzONFO99OithOfLGJP8UjO8JafzR51EvxO
aVc4LQUkF3ym6ZiUokSbYMsZ2AWQY/X9qnI6NOhetKbz8VVIrRcMvYzKZwnezxnP
/XWU2SXY4UGnHSaq2ZzwvxZxWpLdhGtWF4k6YH2EHhGN7CnlV3S3xB6h+LQhv+Ja
0fyy7spCue2B2NNXXp56cDfxg7YYqT+hW24rN+eFQk4AsNnKYTWi42Yh2i9ADcs5
kFSOtrWUpZGVuvu3/p2qrlvNl/2i0gm3SeLa3x9aepNV89iIH4RU/tzHn+ATqQK9
eH63wOIY0gOA2Br3+vJIQYxz4xJ1kBI=
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:49:57 2026 by rpki-client