Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0fe506bf-32a2-3b12-8943-cd04ca7dc918.roa
File:                     0fe506bf-32a2-3b12-8943-cd04ca7dc918.roa (raw, json)
Hash identifier:          T9ZVRKyapeQ8ZKlckjL/KllpKw3hRSzcj2EiHRjA/Is=
Subject key identifier:   B8:41:8D:8A:DD:0B:A4:C5:29:05:40:EB:00:B5:26:B7:DD:33:CB:99
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7BE2A0B8241EA1FE3B880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0fe506bf-32a2-3b12-8943-cd04ca7dc918.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        170.130.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:be:2a:0b:82:41:ea:1f:e3:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=9aadb073-ae2a-4bff-9033-559e1787a5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:b2:70:13:10:c5:ca:bd:53:3d:70:61:a1:
                    98:00:99:60:63:61:32:d4:96:2f:3e:1c:59:55:b9:
                    63:14:de:70:78:67:10:46:81:72:fd:31:f8:3f:a7:
                    99:6c:eb:d6:92:94:93:77:f7:8c:25:16:b7:67:38:
                    96:3b:d2:56:19:6d:90:ef:fb:f7:49:1a:17:0d:e7:
                    02:58:b1:ab:15:8f:49:db:17:86:c6:5e:ab:4d:35:
                    42:e7:4a:37:11:8d:61:8f:64:6a:b3:ca:ba:46:5d:
                    53:f8:a3:04:5e:08:5a:7c:cb:8f:1e:78:6c:d2:ee:
                    84:85:1f:3d:e2:9e:7c:2f:40:a2:76:7f:56:4e:22:
                    25:39:f1:02:e8:e9:17:32:c9:e2:d7:15:2c:0f:39:
                    49:37:81:e4:97:bb:d4:78:eb:e7:5d:fb:4e:26:f1:
                    6c:3e:83:70:e1:28:47:59:30:11:29:c7:54:b3:df:
                    10:a0:fa:0a:30:a3:91:d3:c2:90:c3:22:9e:8e:ec:
                    e9:fb:78:ad:7f:06:bc:76:a1:9e:95:3e:33:12:13:
                    4e:67:eb:71:39:8b:a7:2b:9a:32:09:c7:cf:fd:8b:
                    c6:64:dc:cd:54:9e:aa:62:65:b3:04:b8:16:69:7d:
                    77:bd:d8:a7:ec:19:4c:20:4a:35:19:e8:02:d0:8a:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:8D:8A:DD:0B:A4:C5:29:05:40:EB:00:B5:26:B7:DD:33:CB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0fe506bf-32a2-3b12-8943-cd04ca7dc918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:87:4a:b1:a2:36:4f:45:23:4a:63:79:af:c2:2f:c6:cc:
         9b:2b:fb:ba:24:e9:36:09:fc:9c:93:42:2c:43:fd:3b:2b:16:
         26:be:53:90:97:4b:00:ef:65:4a:75:38:49:e0:54:4d:d8:c0:
         a1:c6:4a:19:65:dc:49:a5:8a:0e:5e:87:41:7a:7e:89:e7:2b:
         f0:3e:3a:ea:42:b1:f2:be:96:93:dd:68:03:af:0d:67:c5:58:
         3c:ea:e6:51:cc:d2:11:ba:18:dc:0a:4d:67:96:95:39:03:8a:
         95:d9:c8:be:0e:0d:eb:83:34:3e:89:63:2e:61:02:79:4a:be:
         42:01:10:08:d1:c1:35:57:f5:30:a9:7a:82:b1:b5:03:9c:31:
         80:f7:06:7d:74:f3:04:26:fd:5e:de:db:a0:62:2f:17:a5:53:
         2f:38:48:3d:1c:67:a1:bc:ba:0b:55:e7:06:22:4e:04:09:cd:
         3d:a4:ca:cd:f5:bb:80:2e:60:b6:cc:b7:7a:55:4f:a6:88:8b:
         4f:b3:d5:65:26:90:d9:d9:e9:5c:0b:0d:ab:55:0e:6a:68:96:
         df:f4:a1:e4:27:3f:8a:90:d9:1d:b3:e6:dd:97:5a:6b:06:c7:
         50:b8:20:70:8c:9e:19:b4:18:f7:0a:af:4b:4b:4b:f6:08:5d:
         ad:74:80:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx74qC4JB6h/juIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
OWFhZGIwNzMtYWUyYS00YmZmLTkwMzMtNTU5ZTE3ODdhNWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6WycBMQxcq9Uz1wYaGYAJlgY2Ey1JYvPhxZ
VbljFN5weGcQRoFy/TH4P6eZbOvWkpSTd/eMJRa3ZziWO9JWGW2Q7/v3SRoXDecC
WLGrFY9J2xeGxl6rTTVC50o3EY1hj2Rqs8q6Rl1T+KMEXghafMuPHnhs0u6EhR89
4p58L0Cidn9WTiIlOfEC6OkXMsni1xUsDzlJN4Hkl7vUeOvnXftOJvFsPoNw4ShH
WTARKcdUs98QoPoKMKOR08KQwyKejuzp+3itfwa8dqGelT4zEhNOZ+txOYunK5oy
CcfP/YvGZNzNVJ6qYmWzBLgWaX13vdin7BlMIEo1GegC0IqSiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLhBjYrdC6TFKQVA6wC1JrfdM8uZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGZlNTA2YmYtMzJhMi0z
YjEyLTg5NDMtY2QwNGNhN2RjOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoLsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrah0qxojZPRSNKY3mvwi/GzJsr+7ok6TYJ/JyTQixD/TsrFia+U5CX
SwDvZUp1OEngVE3YwKHGShll3Emlig5eh0F6fonnK/A+OupCsfK+lpPdaAOvDWfF
WDzq5lHM0hG6GNwKTWeWlTkDipXZyL4ODeuDND6JYy5hAnlKvkIBEAjRwTVX9TCp
eoKxtQOcMYD3Bn108wQm/V7e26BiLxelUy84SD0cZ6G8ugtV5wYiTgQJzT2kys31
u4AuYLbMt3pVT6aIi0+z1WUmkNnZ6VwLDatVDmpolt/0oeQnP4qQ2R2z5t2XWmsG
x1C4IHCMnhm0GPcKr0tLS/YIXa10gIw=
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:15:57 2026 by rpki-client