Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99c64f2f-dee7-3322-ba37-962b55aae461.roa
File:                     99c64f2f-dee7-3322-ba37-962b55aae461.roa (raw, json)
Hash identifier:          wv6AjPaQ6vPAg5LgN/WM9f+JUTTgL4H1iLIhdE+oRFM=
Subject key identifier:   54:DA:72:E6:C2:8B:2D:2F:F8:1F:C2:26:77:6D:4D:A6:6C:0D:32:05
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F374D17EECC9E3B5776763AD0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99c64f2f-dee7-3322-ba37-962b55aae461.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     196628
IP address blocks:        154.51.129.0/24 maxlen: 24
                          154.51.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:17:ee:cc:9e:3b:57:76:76:3a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=d44a3ddc-7a53-4c06-b705-c1fcac7f3af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:76:ee:0d:51:ba:cd:6f:f4:bc:1a:08:2c:
                    81:c8:08:3b:7a:b6:fa:bb:2d:6c:a2:15:52:63:3a:
                    5d:51:bd:e2:3e:66:10:ac:e8:b6:08:ea:cd:13:6a:
                    37:ee:ea:d6:86:35:8e:ea:19:14:58:be:f3:af:d2:
                    fb:79:5a:6e:46:23:e4:49:46:00:85:5d:be:00:ef:
                    f0:6f:3f:68:8c:85:5e:98:4d:d9:03:f7:00:bf:43:
                    8c:30:e5:ae:15:6b:34:37:c3:dc:67:dd:00:8c:c2:
                    33:73:d3:ee:be:07:ae:91:eb:6f:41:e3:50:6b:18:
                    a6:69:d0:20:1d:41:cd:ef:aa:7e:29:a4:a1:26:2d:
                    7a:01:02:45:d1:2f:9c:c7:8b:31:d8:0f:d6:53:6b:
                    4a:d7:ed:37:22:33:81:ae:be:b2:85:b1:aa:26:0d:
                    9b:62:1c:12:d7:10:93:d6:07:f2:61:14:c6:00:49:
                    c4:d8:46:80:ec:e8:82:58:2c:b9:26:76:45:77:2d:
                    19:4e:8e:77:7d:4a:c9:ed:cb:23:5d:95:84:8f:c1:
                    5b:3a:68:b6:74:3f:80:d2:ff:0d:49:6c:74:a1:ee:
                    ad:24:ee:9b:df:37:e7:9c:38:92:db:f6:09:5e:13:
                    8c:7f:4d:c7:f0:59:b2:62:93:e8:1e:65:0f:8b:a7:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DA:72:E6:C2:8B:2D:2F:F8:1F:C2:26:77:6D:4D:A6:6C:0D:32:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/99c64f2f-dee7-3322-ba37-962b55aae461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.51.129.0/24
                  154.51.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:4d:7b:eb:2e:54:55:10:a3:fd:12:b0:be:b1:a3:b4:5d:
         a8:8c:5d:cc:90:54:99:1f:1b:a1:c3:e6:ba:50:90:4a:a1:ab:
         b5:66:e8:60:d3:a2:2c:e6:5d:79:61:fd:ea:3e:18:12:51:0f:
         6d:09:49:24:47:b8:f8:1d:8e:25:ef:75:a6:48:e7:ca:d2:9d:
         85:5d:02:98:ed:12:f2:d2:6f:dc:c4:cc:a2:59:56:73:d2:69:
         85:3e:ec:53:55:2e:e6:1f:bb:f4:30:03:ab:cf:f6:1d:dd:6b:
         3e:7e:a9:2b:7a:5d:98:b0:f3:f7:e3:35:96:89:25:17:cd:c0:
         02:5f:80:42:22:df:8f:20:5b:f9:a4:86:c4:21:67:08:9b:3e:
         21:fe:35:e1:61:1a:a2:39:06:17:09:eb:6d:49:bd:86:bf:9c:
         86:f3:4c:71:d2:b4:8f:65:42:ae:b2:d5:3b:ea:f3:15:20:0c:
         c4:61:86:1e:20:a1:28:21:f7:6f:f2:3b:42:3b:eb:06:84:fc:
         b4:32:0e:0d:96:c3:d6:cd:76:05:bb:04:8d:36:c7:77:a1:49:
         e6:03:48:ae:1a:9f:4e:6b:9b:e4:4f:0a:b0:a2:f1:35:1d:ed:
         14:f7:a3:89:ea:41:27:a5:33:7d:28:70:f4:5f:4a:71:2d:f6:
         6f:f4:b3:bd
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE83TRfuzJ47V3Z2OtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDQ0YTNkZGMtN2E1My00YzA2LWI3MDUtYzFmY2FjN2YzYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniV27g1Rus1v9LwaCCyByAg7erb6uy1sohVS
YzpdUb3iPmYQrOi2COrNE2o37urWhjWO6hkUWL7zr9L7eVpuRiPkSUYAhV2+AO/w
bz9ojIVemE3ZA/cAv0OMMOWuFWs0N8PcZ90AjMIzc9PuvgeuketvQeNQaximadAg
HUHN76p+KaShJi16AQJF0S+cx4sx2A/WU2tK1+03IjOBrr6yhbGqJg2bYhwS1xCT
1gfyYRTGAEnE2EaA7OiCWCy5JnZFdy0ZTo53fUrJ7csjXZWEj8FbOmi2dD+A0v8N
SWx0oe6tJO6b3zfnnDiS2/YJXhOMf03H8FmyYpPoHmUPi6fFcwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFTacubCiy0v+B/CJndtTaZsDTIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTljNjRmMmYtZGVlNy0z
MzIyLWJhMzctOTYyYjU1YWFlNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmjOBAwQA
mjOgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACIfTXvrLlRVEKP9ErC+saO0XaiMXcyQVJkfG6HD5rpQkEqh
q7Vm6GDToizmXXlh/eo+GBJRD20JSSRHuPgdjiXvdaZI58rSnYVdApjtEvLSb9zE
zKJZVnPSaYU+7FNVLuYfu/QwA6vP9h3daz5+qSt6XZiw8/fjNZaJJRfNwAJfgEIi
348gW/mkhsQhZwibPiH+NeFhGqI5BhcJ621JvYa/nIbzTHHStI9lQq6y1Tvq8xUg
DMRhhh4goSgh92/yO0I76waE/LQyDg2Ww9bNdgW7BI02x3ehSeYDSK4an05rm+RP
CrCi8TUd7RT3o4nqQSelM30ocPRfSnEt9m/0s70=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:13:05 2026 by rpki-client