Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9fc777a-fa3a-3648-b068-9c6b3ee6033a.roa
File:                     d9fc777a-fa3a-3648-b068-9c6b3ee6033a.roa (raw, json)
Hash identifier:          HruvZSepCr9ViHWengZK+6gg9Kw6dkUyBJ/ztbhvaRw=
Subject key identifier:   CA:CC:3C:BB:C9:05:C4:DF:F4:00:D1:77:DE:61:D7:6C:BF:2D:F6:B3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53D62A73EB630841C7A3AC40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9fc777a-fa3a-3648-b068-9c6b3ee6033a.roa
Signing time:             Mon 28 Sep 2026 18:19:04 +0000
ROA not before:           Mon 28 Sep 2026 18:19:04 +0000
ROA not after:            Sun 27 Dec 2026 19:19:04 +0000
asID:                     62904
IP address blocks:        170.130.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:d6:2a:73:eb:63:08:41:c7:a3:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:19:04 2026 GMT
            Not After : Dec 27 19:19:04 2026 GMT
        Subject: CN=718578f2-a7be-4862-9733-99627b2bcf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:cd:b2:48:67:4a:46:85:49:29:6b:7f:1d:
                    d1:e0:c8:9b:02:db:84:28:74:e6:72:42:cc:4c:fb:
                    94:0a:57:ae:4b:95:98:39:d7:e2:52:b6:a2:5a:13:
                    54:25:92:fb:32:76:9e:f7:c1:29:45:41:f9:79:cd:
                    69:e6:eb:5c:ed:44:f7:d4:8d:04:a5:c7:c1:a9:42:
                    a1:9a:64:77:bf:aa:55:db:fd:6d:cb:ac:0a:40:53:
                    1b:70:c3:b1:56:b6:27:9e:26:08:c4:19:7f:61:46:
                    f9:58:21:6f:a7:eb:33:1f:8f:ce:e3:b6:02:33:a5:
                    a2:6f:02:4b:22:41:01:3b:c1:8f:3d:31:eb:1e:15:
                    ba:dc:84:96:06:74:b9:7e:bc:86:36:0e:e0:86:31:
                    ac:41:47:30:62:bc:01:3c:0f:30:6e:c8:61:31:45:
                    d2:e1:d9:1c:f2:b7:3e:34:88:4d:5c:38:92:72:24:
                    b4:9a:53:04:9e:74:ae:e5:9f:3e:cb:54:e9:a5:73:
                    3e:72:cb:0c:e4:26:f9:d9:e1:61:0d:9f:a4:4a:d3:
                    cb:12:2a:35:8b:59:4f:be:5f:c8:41:ee:b2:27:24:
                    ec:e5:ed:6d:00:90:e1:c9:3f:93:3d:ff:2b:54:d2:
                    22:45:f6:55:7b:f7:ff:4f:bd:19:df:0d:49:19:38:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:3C:BB:C9:05:C4:DF:F4:00:D1:77:DE:61:D7:6C:BF:2D:F6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9fc777a-fa3a-3648-b068-9c6b3ee6033a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:cc:f9:a8:ce:5c:20:8b:29:bb:78:d7:ac:3c:39:ca:14:
         d9:dd:85:4e:b1:14:e0:4a:e2:5f:6a:94:e9:30:8d:bb:ff:4a:
         1e:7e:a2:ef:b7:36:05:89:e4:cd:69:20:7a:07:09:34:51:79:
         73:e0:37:d2:c6:2a:58:36:18:43:05:45:81:cd:a7:2f:cb:cf:
         e7:dc:5b:39:f6:c3:4e:2c:df:a0:b7:67:75:c1:c5:a0:e4:79:
         25:ac:ea:84:b7:df:6d:0a:f5:27:8b:31:85:33:0b:47:6a:39:
         79:40:b9:cf:df:44:99:73:56:e2:a6:db:1c:d1:c9:26:0a:0a:
         d8:d1:5a:3f:8c:37:1d:95:93:36:5b:df:88:9b:9c:38:ee:63:
         d7:5a:1f:fd:bd:86:0e:79:f5:71:fc:a5:a9:30:c2:9e:9a:76:
         ee:df:74:d5:f6:d3:dc:91:f1:c4:12:61:8e:3f:21:2b:0f:58:
         5d:d2:c0:de:3c:f5:47:b1:d6:79:a6:22:2b:88:00:0b:84:11:
         77:ba:7f:3e:c7:34:f9:f7:4e:6f:f2:b9:c5:3f:b9:62:e3:19:
         d0:14:ac:38:85:35:c8:7b:47:79:e6:04:8f:83:24:ea:0f:56:
         ac:d8:73:33:c2:b7:b5:ac:14:56:c8:66:f1:5e:f8:3d:5f:af:
         58:ba:8d:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9T1ipz62MIQcejrEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyODE4MTkwNFoXDTI2MTIyNzE5MTkwNFowLzEtMCsGA1UEAxMk
NzE4NTc4ZjItYTdiZS00ODYyLTk3MzMtOTk2MjdiMmJjZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLNskhnSkaFSSlrfx3R4MibAtuEKHTmckLM
TPuUCleuS5WYOdfiUraiWhNUJZL7Mnae98EpRUH5ec1p5utc7UT31I0EpcfBqUKh
mmR3v6pV2/1ty6wKQFMbcMOxVrYnniYIxBl/YUb5WCFvp+szH4/O47YCM6WibwJL
IkEBO8GPPTHrHhW63ISWBnS5fryGNg7ghjGsQUcwYrwBPA8wbshhMUXS4dkc8rc+
NIhNXDiSciS0mlMEnnSu5Z8+y1TppXM+cssM5Cb52eFhDZ+kStPLEio1i1lPvl/I
Qe6yJyTs5e1tAJDhyT+TPf8rVNIiRfZVe/f/T70Z3w1JGTgbOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrMPLvJBcTf9ADRd95h12y/LfazMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDlmYzc3N2EtZmEzYS0z
NjQ4LWIwNjgtOWM2YjNlZTYwMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTnzPmozlwgiym7eNesPDnKFNndhU6xFOBK4l9qlOkwjbv/Sh5+ou+3
NgWJ5M1pIHoHCTRReXPgN9LGKlg2GEMFRYHNpy/Lz+fcWzn2w04s36C3Z3XBxaDk
eSWs6oS3320K9SeLMYUzC0dqOXlAuc/fRJlzVuKm2xzRySYKCtjRWj+MNx2VkzZb
34ibnDjuY9daH/29hg559XH8pakwwp6adu7fdNX209yR8cQSYY4/ISsPWF3SwN48
9Uex1nmmIiuIAAuEEXe6fz7HNPn3Tm/yucU/uWLjGdAUrDiFNch7R3nmBI+DJOoP
VqzYczPCt7WsFFbIZvFe+D1fr1i6jao=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:11:06 2026 by rpki-client