Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/bae345d0-115e-3a26-a23d-b03682af697a.roa
File:                     bae345d0-115e-3a26-a23d-b03682af697a.roa (raw, json)
Hash identifier:          31qVkr3RARKiUTqcLJrvWMTr4VG1h5sFZZU5/9/3tK8=
Subject key identifier:   3B:E7:64:4F:35:5C:F1:A7:AC:78:3C:2F:DD:D7:AF:26:11:C5:16:36
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584F49731427430419242932DFF0
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/bae345d0-115e-3a26-a23d-b03682af697a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14291
IP address blocks:        24.89.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:14:27:43:04:19:24:29:32:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=24174fda-772d-42e0-bfe1-8743aa48ad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:08:a3:99:0e:cf:f7:cc:d0:01:42:d2:73:
                    ab:15:1e:cb:0c:72:67:86:f7:55:47:9b:e0:23:cd:
                    90:7e:30:85:9a:dd:e6:63:04:c2:cd:ef:05:f2:c7:
                    ad:c4:05:bb:41:3d:02:56:b0:58:af:4a:4a:f6:05:
                    b6:43:65:30:b2:84:bd:cb:f4:2a:1a:95:27:8b:b6:
                    ed:d8:e7:6d:cf:a2:12:22:0e:26:4a:55:6b:9e:d6:
                    53:7a:28:6d:ff:84:21:49:9f:e2:2d:97:3a:81:40:
                    c8:93:d8:c4:ac:4d:e6:6c:bf:8a:1e:b7:d4:28:1d:
                    ab:ac:f0:47:0c:bb:f0:46:c6:27:ce:f7:7c:0f:d5:
                    75:43:40:01:08:3f:67:ee:5c:9d:f6:9f:d6:4e:e1:
                    aa:24:31:d5:cc:b9:6e:63:e7:b0:be:fc:74:e6:e1:
                    5e:44:f5:ba:4b:7e:39:cc:d0:7e:42:39:e6:75:5c:
                    56:a8:0e:ba:e6:fd:4f:4e:46:bb:cc:4e:19:55:33:
                    03:91:3d:25:a0:35:54:68:ad:d4:a4:1f:88:99:85:
                    af:b3:9d:6e:f0:aa:ca:6b:66:48:10:eb:82:45:35:
                    57:3f:a6:f1:6d:1b:7f:78:40:e0:ec:9a:e3:d9:42:
                    98:46:ba:7e:c3:32:5b:0f:a1:f8:35:9c:9a:12:52:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:64:4F:35:5C:F1:A7:AC:78:3C:2F:DD:D7:AF:26:11:C5:16:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/bae345d0-115e-3a26-a23d-b03682af697a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:48:9b:53:11:58:e3:3d:97:f3:06:db:0f:04:73:e2:08:48:
         3d:72:98:b2:12:e4:c7:bd:14:55:ee:cd:fe:71:d0:78:54:17:
         65:0a:b6:23:90:74:b6:55:50:e1:fd:04:55:d0:0a:c7:58:5c:
         f2:7d:70:cf:20:ec:80:26:b9:a6:cf:77:14:88:e9:8a:a1:c6:
         8a:ec:55:f8:b7:70:75:be:c2:36:58:7e:8c:be:78:c8:8a:77:
         51:42:54:43:07:ad:a5:d9:0d:d5:71:d6:79:71:79:5c:85:8c:
         23:7c:78:47:68:da:64:fe:4d:10:2a:35:9c:a9:05:66:71:99:
         b7:ff:3e:ef:7e:09:eb:0e:08:0d:f7:9b:ed:dd:c1:44:2e:71:
         5b:76:86:0f:5f:46:7f:0e:75:01:04:9d:41:43:2f:bf:46:fb:
         dd:6c:35:f2:ee:b0:62:e9:f5:cc:8b:19:b6:63:21:a8:e3:e4:
         80:8a:4c:fd:b6:3e:fd:6c:88:65:af:f7:f2:6c:02:be:01:2d:
         5c:b7:fd:3e:e0:c7:9a:53:34:8b:c9:6f:ff:eb:70:62:f4:f3:
         52:c8:3d:18:59:f5:61:b8:d8:71:8b:69:bd:3c:0a:5b:db:e3:
         ad:6a:2f:38:81:00:42:cf:78:ea:8a:f1:21:bd:50:48:c3:07:
         5c:99:b9:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxQnQwQZJCky3/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1
MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjQxNzRmZGEtNzcyZC00MmUwLWJmZTEtODc0M2FhNDhhZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu14Io5kOz/fM0AFC0nOrFR7LDHJnhvdVR5vg
I82QfjCFmt3mYwTCze8F8setxAW7QT0CVrBYr0pK9gW2Q2UwsoS9y/QqGpUni7bt
2Odtz6ISIg4mSlVrntZTeiht/4QhSZ/iLZc6gUDIk9jErE3mbL+KHrfUKB2rrPBH
DLvwRsYnzvd8D9V1Q0ABCD9n7lyd9p/WTuGqJDHVzLluY+ewvvx05uFeRPW6S345
zNB+QjnmdVxWqA665v1PTka7zE4ZVTMDkT0loDVUaK3UpB+ImYWvs51u8KrKa2ZI
EOuCRTVXP6bxbRt/eEDg7Jrj2UKYRrp+wzJbD6H4NZyaElJJcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvnZE81XPGnrHg8L93XryYRxRY2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm
OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvYmFlMzQ1ZDAtMTE1ZS0z
YTI2LWEyM2QtYjAzNjgyYWY2OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1
NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw
NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk
YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGFkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFIm1MRWOM9l/MG2w8Ec+IISD1ymLIS5Me9FFXuzf5x0HhUF2UKtiOQ
dLZVUOH9BFXQCsdYXPJ9cM8g7IAmuabPdxSI6YqhxorsVfi3cHW+wjZYfoy+eMiK
d1FCVEMHraXZDdVx1nlxeVyFjCN8eEdo2mT+TRAqNZypBWZxmbf/Pu9+CesOCA33
m+3dwUQucVt2hg9fRn8OdQEEnUFDL79G+91sNfLusGLp9cyLGbZjIajj5ICKTP22
Pv1siGWv9/JsAr4BLVy3/T7gx5pTNIvJb//rcGL081LIPRhZ9WG42HGLab08Clvb
461qLziBAELPeOqK8SG9UEjDB1yZuRA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:25 2026 by rpki-client