Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa
File:                     2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa (raw, json)
Hash identifier:          60KkhOJQNu2M35hxwvyTFZij3rlXQNpPMFUiP6+R5rA=
Subject key identifier:   D1:7B:09:CC:CD:A8:C6:75:BF:3D:CB:9C:FC:13:42:D2:91:8B:D3:D7
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F4328584F497411D557803CA3933B292A
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14464
IP address blocks:        131.109.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:11:d5:57:80:3c:a3:93:3b:29:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cd02cf97-ea42-45cb-9276-f4cedd088c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:b7:06:d7:08:bf:21:0b:22:57:c8:53:37:
                    0a:04:bd:79:f9:1c:89:e6:e2:18:bd:5d:ba:47:bc:
                    49:c0:3a:c5:e3:0d:4b:30:97:eb:2d:3c:c6:25:e5:
                    b4:23:2e:14:ef:ac:87:b0:de:da:69:ff:29:5b:46:
                    e2:9f:a9:04:ab:fc:ff:61:60:5a:0e:c0:04:73:0e:
                    21:88:83:d4:ad:a7:01:ce:48:ca:75:bd:60:17:6b:
                    f9:9a:60:9d:08:b5:b5:74:d8:26:90:74:ab:4e:3c:
                    8f:88:33:ce:ca:46:32:89:57:0e:68:ac:8b:de:c3:
                    6e:7c:43:ff:10:a4:32:92:46:ff:ce:1e:60:3d:f2:
                    82:05:2f:bc:8f:84:96:ca:38:c3:82:a4:a0:ac:e5:
                    cc:9b:57:ba:37:41:03:59:5a:67:7f:96:37:5b:c6:
                    a2:4f:4e:b1:05:05:08:c4:62:34:2c:87:56:e9:b2:
                    75:c2:95:73:32:82:5c:f8:65:9b:02:77:ac:85:43:
                    83:15:31:64:56:d9:87:3a:79:20:84:21:e6:a7:22:
                    59:38:7f:53:d1:d5:7f:1d:56:64:68:c7:04:3a:8d:
                    97:0d:8d:84:fe:29:e8:24:cb:66:6a:67:f9:e1:96:
                    09:f7:6d:ec:a4:b0:94:36:2e:4c:90:0c:99:37:85:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:09:CC:CD:A8:C6:75:BF:3D:CB:9C:FC:13:42:D2:91:8B:D3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:a3:36:cf:45:0e:9e:4d:9a:f1:dc:a1:32:2a:95:63:99:
         e9:ff:95:76:6a:66:bd:c3:9b:0d:74:fa:31:80:80:9f:df:fa:
         f6:2d:f6:26:ba:ef:fa:d5:ef:ca:2a:9d:bf:53:7f:f4:db:60:
         fa:28:0e:a2:78:4f:5d:5a:84:9d:af:98:67:d1:f7:17:92:61:
         92:30:80:f9:53:84:3e:41:34:1f:2c:52:8d:44:00:65:fa:9f:
         73:19:49:3c:68:d7:51:2a:ae:34:4b:7e:33:fb:1a:e6:51:01:
         0a:bb:d4:e9:35:92:ef:13:1c:51:a3:11:27:3a:2c:74:61:27:
         72:4c:23:05:37:23:be:09:9d:6f:36:4c:81:55:57:ea:66:b3:
         8a:d1:fd:26:88:a8:14:37:be:b3:86:02:72:43:97:b7:38:60:
         ce:60:b0:f9:78:cf:0e:45:a1:8a:c0:c3:16:14:a4:bf:63:d8:
         d7:b1:e7:70:2c:8f:ae:3e:15:e1:94:29:0f:49:b9:b9:4b:a5:
         a0:11:50:6f:53:a1:ce:7e:7a:cc:c4:b3:62:61:b4:a3:57:4c:
         26:79:32:27:00:2d:92:8d:dd:87:e8:b0:b0:ac:57:6e:d1:8e:
         7c:72:88:ba:79:31:93:45:c2:28:f6:ab:ed:14:9d:d7:c4:72:
         94:ca:ec:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdBHVV4A8o5M7KSowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj
Nzc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2QwMmNmOTctZWE0Mi00NWNiLTkyNzYtZjRjZWRkMDg4YzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubu3BtcIvyELIlfIUzcKBL15+RyJ5uIYvV26
R7xJwDrF4w1LMJfrLTzGJeW0Iy4U76yHsN7aaf8pW0bin6kEq/z/YWBaDsAEcw4h
iIPUracBzkjKdb1gF2v5mmCdCLW1dNgmkHSrTjyPiDPOykYyiVcOaKyL3sNufEP/
EKQykkb/zh5gPfKCBS+8j4SWyjjDgqSgrOXMm1e6N0EDWVpnf5Y3W8aiT06xBQUI
xGI0LIdW6bJ1wpVzMoJc+GWbAneshUODFTFkVtmHOnkghCHmpyJZOH9T0dV/HVZk
aMcEOo2XDY2E/inoJMtmamf54ZYJ923spLCUNi5MkAyZN4Uv0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNF7CczNqMZ1vz3LnPwTQtKRi9PXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw
OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmMzMmUzYmQtMTIwMC0z
OTg4LTlhNTQtZWU0YTZkMjc1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk
MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4
Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4
ZGZiOGM3NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg20wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOcSjNs9FDp5NmvHcoTIqlWOZ6f+VdmpmvcObDXT6MYCAn9/69i32Jrrv
+tXvyiqdv1N/9Ntg+igOonhPXVqEna+YZ9H3F5JhkjCA+VOEPkE0HyxSjUQAZfqf
cxlJPGjXUSquNEt+M/sa5lEBCrvU6TWS7xMcUaMRJzosdGEnckwjBTcjvgmdbzZM
gVVX6mazitH9JoioFDe+s4YCckOXtzhgzmCw+XjPDkWhisDDFhSkv2PY17HncCyP
rj4V4ZQpD0m5uUuloBFQb1Ohzn56zMSzYmG0o1dMJnkyJwAtko3dh+iwsKxXbtGO
fHKIunkxk0XCKPar7RSd18RylMrsyQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:12:59 2026 by rpki-client