Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa
File:                     7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa (raw, json)
Hash identifier:          gmpCadNGAMEBSQl0giDuYZn4LnoEzTycjkBJ814VpZQ=
Subject key identifier:   04:74:B9:BF:38:78:38:F5:92:1A:A3:BF:39:17:8E:97:9D:0B:79:BC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F34826BF687D33E86F2C33FC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     61317
IP address blocks:        199.182.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6b:f6:87:d3:3e:86:f2:c3:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=d2c6a7dd-6faa-43dc-abc7-73b6105c4ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:d3:d1:9c:1e:2c:fd:34:1b:74:46:d1:c8:
                    dc:91:f9:ef:49:61:34:4a:ab:18:c9:b5:a3:4e:ea:
                    8b:99:72:40:2b:9e:5e:74:f1:c7:41:47:d0:94:8d:
                    7c:bd:bf:66:da:58:9c:0e:de:82:b3:26:55:65:07:
                    68:aa:a4:24:a9:1a:45:e4:67:ea:23:c3:dc:9f:1e:
                    13:00:87:6d:74:2f:c8:e2:f6:da:14:39:26:fc:df:
                    b2:f0:e4:5e:6c:cb:16:32:c1:71:78:f6:1e:9b:df:
                    dd:42:4a:76:58:0d:a1:c3:9b:cc:b3:b8:70:dc:fd:
                    6b:8c:cc:e8:56:34:a4:89:bb:58:50:95:b5:91:2d:
                    c9:bd:16:cb:42:85:ff:ce:b9:6f:a1:43:37:1f:12:
                    e6:80:b2:d8:4e:2e:da:f7:8e:4b:41:dc:5d:23:c5:
                    63:bb:cf:8b:77:0e:02:f3:c0:fe:c7:63:75:ce:e1:
                    74:10:db:e5:79:2b:e1:c0:6c:79:96:39:7c:89:ad:
                    dc:f2:50:b8:cf:02:4b:36:01:69:7f:43:d6:26:44:
                    a0:0f:48:27:1b:cd:42:ab:7e:05:c7:bb:af:61:29:
                    3f:2e:34:ad:ea:52:f8:89:e8:27:29:95:45:bf:91:
                    4d:d4:ca:1f:63:87:0c:3b:f7:d9:d1:aa:ff:73:d9:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:74:B9:BF:38:78:38:F5:92:1A:A3:BF:39:17:8E:97:9D:0B:79:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:8a:b4:36:95:f6:a4:c3:ae:48:3d:5e:a6:d3:4c:69:be:
         f0:02:cd:89:b6:d1:29:d8:87:df:92:48:6f:ba:6d:a6:d5:2f:
         48:2b:df:e5:9f:a2:46:49:d2:8f:90:30:a2:ac:fa:4d:51:cc:
         c2:74:ed:7a:e8:7a:11:6d:22:0d:ad:e8:ec:06:17:96:bf:9d:
         86:f4:d0:55:2b:27:81:09:6b:88:e5:6c:5f:54:d1:f8:df:2b:
         ad:2f:64:92:71:f0:2a:f5:bc:05:b8:5c:88:21:e2:ec:a8:e2:
         50:0b:87:38:f4:4f:80:de:bd:d0:13:ab:c9:e1:a5:fe:f6:34:
         02:58:ea:93:4d:9b:9f:5f:42:12:63:49:fa:72:ff:2e:96:04:
         7e:7d:48:cd:fe:a1:1d:d0:4c:8c:59:a5:1c:6f:41:6a:3a:71:
         e2:be:ac:82:ea:a4:aa:81:e8:94:f9:3e:ff:86:34:c7:47:5f:
         09:53:dc:35:e8:18:69:c9:e2:5d:f9:77:4a:bf:ac:41:d9:e1:
         01:2e:eb:cc:3f:62:69:a7:94:fa:57:23:65:4d:ec:68:03:d5:
         b1:2d:37:b8:ad:8d:13:b2:23:9a:e8:fb:07:86:f8:1a:b0:b3:
         18:00:f0:f0:11:29:76:1c:70:06:51:3f:e5:48:b9:3a:53:bf:
         c9:bf:2a:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gmv2h9M+hvLDP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZDJjNmE3ZGQtNmZhYS00M2RjLWFiYzctNzNiNjEwNWM0ZmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaHT0ZweLP00G3RG0cjckfnvSWE0SqsYybWj
TuqLmXJAK55edPHHQUfQlI18vb9m2licDt6CsyZVZQdoqqQkqRpF5GfqI8Pcnx4T
AIdtdC/I4vbaFDkm/N+y8ORebMsWMsFxePYem9/dQkp2WA2hw5vMs7hw3P1rjMzo
VjSkibtYUJW1kS3JvRbLQoX/zrlvoUM3HxLmgLLYTi7a945LQdxdI8Vju8+Ldw4C
88D+x2N1zuF0ENvleSvhwGx5ljl8ia3c8lC4zwJLNgFpf0PWJkSgD0gnG81Cq34F
x7uvYSk/LjSt6lL4iegnKZVFv5FN1MofY4cMO/fZ0ar/c9n/QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAR0ub84eDj1khqjvzkXjpedC3m8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvN2Y5YjA5ZDYtYmJiOS0z
YjFiLTk4NzktM2VjNjNlOTUzM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7arMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdLirQ2lfakw65IPV6m00xpvvACzYm20SnYh9+SSG+6babVL0gr3+Wf
okZJ0o+QMKKs+k1RzMJ07XroehFtIg2t6OwGF5a/nYb00FUrJ4EJa4jlbF9U0fjf
K60vZJJx8Cr1vAW4XIgh4uyo4lALhzj0T4DevdATq8nhpf72NAJY6pNNm59fQhJj
Sfpy/y6WBH59SM3+oR3QTIxZpRxvQWo6ceK+rILqpKqB6JT5Pv+GNMdHXwlT3DXo
GGnJ4l35d0q/rEHZ4QEu68w/YmmnlPpXI2VN7GgD1bEtN7itjROyI5ro+weG+Bqw
sxgA8PARKXYccAZRP+VIuTpTv8m/Kjc=
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:49:39 2026 by rpki-client