Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa
File:                     ce5e2698-134c-31f5-8760-357ab4cea306.roa (raw, json)
Hash identifier:          rniOqapMibzESD9q9cNtkOF8M/PNSl57Wfppldf8qOE=
Subject key identifier:   FF:4B:90:7F:A3:23:2D:52:A8:C5:47:4D:4F:5C:74:07:3A:35:89:DA
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584F3FAD8C36D659341920C79080
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     11808
IP address blocks:        129.101.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:8c:36:d6:59:34:19:20:c7:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=dede1870-182e-4341-9cdf-ebe504c64dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:fb:3c:69:72:7c:3b:4e:36:d9:e6:5e:bb:
                    95:7f:0a:9d:45:b8:98:b4:2d:11:b4:3b:b7:a4:e9:
                    6b:49:01:bb:39:2f:fc:58:55:bb:e2:a7:8b:02:47:
                    14:e6:17:9b:61:cf:39:63:cb:28:bf:ee:24:a6:8c:
                    ec:b1:be:96:25:d6:a8:2c:6c:69:83:48:4a:e2:7e:
                    91:3b:ff:1b:bd:9f:bb:54:fb:61:b6:e7:33:0f:b6:
                    2d:73:8a:95:18:ba:b5:ec:19:d5:a3:d6:09:66:62:
                    e8:0e:a4:0b:80:aa:cc:91:46:84:8f:68:e3:a2:8f:
                    3c:8b:91:8d:60:9f:87:47:35:74:f4:61:c3:b0:73:
                    7d:6b:62:de:e4:72:11:08:71:6d:59:e5:0e:d7:80:
                    57:62:c2:8a:bf:1e:42:99:e0:7e:a9:e2:61:9c:b7:
                    98:df:74:e8:42:44:12:74:49:98:10:be:eb:5e:71:
                    eb:23:34:f9:bd:bb:eb:4d:6c:59:52:59:56:c2:02:
                    2d:b6:58:57:8b:fe:95:e3:95:18:63:23:32:b3:13:
                    d0:93:5e:67:fd:ae:d6:9a:12:03:a9:f7:0f:36:af:
                    3d:a9:c5:4b:f6:06:a2:0b:f4:cb:6e:f8:0c:c1:a7:
                    08:77:b6:5f:9b:69:05:4b:84:fd:16:54:97:b5:02:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:90:7F:A3:23:2D:52:A8:C5:47:4D:4F:5C:74:07:3A:35:89:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:58:95:ed:a5:57:f4:70:fe:99:a3:ec:a2:61:17:11:3d:65:
         93:f2:dc:af:27:5d:47:8e:a2:a5:eb:7a:25:47:e5:19:0d:ad:
         e3:45:10:76:ac:8d:23:c9:3b:47:35:d5:08:1a:7b:18:53:6a:
         99:cc:d3:1f:bc:19:51:b2:da:62:bb:eb:ca:a5:28:48:96:a0:
         a8:e1:bb:84:8e:a2:b7:59:9b:36:4a:62:0b:30:53:42:d0:99:
         8b:04:35:d3:5f:86:a8:98:a8:a5:48:42:11:5f:8f:d1:a7:3c:
         70:f8:17:6d:b1:e7:0b:49:66:d9:b1:ee:45:f9:6c:2d:76:85:
         c5:e4:6e:57:45:61:84:01:df:82:8a:37:77:d4:b2:bb:38:a4:
         f6:72:f0:89:c7:fa:df:12:7d:0e:df:25:6c:91:11:e8:af:40:
         8a:f1:07:9c:19:d6:b4:ba:75:9c:8f:2a:48:57:9c:2a:d3:5f:
         a9:65:14:56:f1:29:24:2d:38:17:b5:b0:b6:7b:f0:28:0b:08:
         5e:cd:37:31:ac:1f:97:0a:36:db:70:39:c9:35:b1:ee:45:20:
         03:f8:96:dc:7d:0c:24:73:f4:58:f4:52:5b:1f:a7:91:8c:69:
         ce:ad:30:a4:70:6b:e9:48:53:15:54:fe:6e:35:7d:fb:87:f5:
         d8:ed:48:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYw21lk0GSDHkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk
Nzc0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZGVkZTE4NzAtMTgyZS00MzQxLTljZGYtZWJlNTA0YzY0ZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs777PGlyfDtONtnmXruVfwqdRbiYtC0RtDu3
pOlrSQG7OS/8WFW74qeLAkcU5hebYc85Y8sov+4kpozssb6WJdaoLGxpg0hK4n6R
O/8bvZ+7VPthtuczD7Ytc4qVGLq17BnVo9YJZmLoDqQLgKrMkUaEj2jjoo88i5GN
YJ+HRzV09GHDsHN9a2Le5HIRCHFtWeUO14BXYsKKvx5CmeB+qeJhnLeY33ToQkQS
dEmYEL7rXnHrIzT5vbvrTWxZUllWwgIttlhXi/6V45UYYyMysxPQk15n/a7WmhID
qfcPNq89qcVL9gaiC/TLbvgMwacId7Zfm2kFS4T9FlSXtQI7AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9LkH+jIy1SqMVHTU9cdAc6NYnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh
MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvY2U1ZTI2OTgtMTM0Yy0z
MWY1LTg3NjAtMzU3YWI0Y2VhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk
MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1
ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm
OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWXvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFYle2lV/Rw/pmj7KJhFxE9ZZPy3K8nXUeOoqXreiVH5RkNreNFEHas
jSPJO0c11QgaexhTapnM0x+8GVGy2mK768qlKEiWoKjhu4SOordZmzZKYgswU0LQ
mYsENdNfhqiYqKVIQhFfj9GnPHD4F22x5wtJZtmx7kX5bC12hcXkbldFYYQB34KK
N3fUsrs4pPZy8InH+t8SfQ7fJWyREeivQIrxB5wZ1rS6dZyPKkhXnCrTX6llFFbx
KSQtOBe1sLZ78CgLCF7NNzGsH5cKNttwOck1se5FIAP4ltx9DCRz9Fj0Ulsfp5GM
ac6tMKRwa+lIUxVU/m41ffuH9djtSL4=
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:07:49 2026 by rpki-client