Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa
File:                     1c748749-7b5d-34a5-a272-9a4ce8021b45.roa (raw, json)
Hash identifier:          ma42ZX3YCkZv20SV65y/D6MwqqZvcM3PLtBiZRdLJhQ=
Subject key identifier:   EF:C1:6F:5F:E0:19:D5:4D:B9:6F:B1:F9:6A:C6:76:79:E8:F2:A9:A9
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584F49876D19EAEBAD74BE8E6C80
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23471
IP address blocks:        67.219.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:6d:19:ea:eb:ad:74:be:8e:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5c5e4312-ab0a-4257-8053-dd966f7020f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:04:df:ec:7f:d7:e1:11:26:be:5a:5f:89:
                    f7:7b:09:1f:8e:6c:73:0a:ec:6b:ab:18:94:d7:e7:
                    20:02:8d:00:93:24:cd:7a:57:f5:1a:7c:29:05:ab:
                    64:a2:66:5b:1a:33:12:51:64:df:0d:77:0d:22:a9:
                    3d:35:a4:10:87:85:37:8b:4f:38:ee:9e:64:fb:65:
                    06:2f:e6:11:89:5c:90:e4:3c:03:10:18:9c:5c:7f:
                    bd:ca:ef:85:a2:85:dd:89:9d:51:8d:84:a4:7b:37:
                    2a:93:46:2f:c7:61:99:d5:73:d0:b0:8f:7a:a1:75:
                    53:ef:92:3f:02:49:a5:be:3a:16:2e:70:c6:f0:bd:
                    27:61:f2:48:9f:72:c9:cf:94:f5:a3:0e:6a:d9:a4:
                    19:b7:fe:63:6b:e7:96:c6:84:b0:35:5c:75:57:9b:
                    70:a4:23:c4:6d:5d:8c:5c:eb:d9:dc:ee:2f:8f:e1:
                    3c:d0:44:87:de:f5:47:c8:7e:7f:cc:f0:83:89:ff:
                    5e:82:df:4a:ab:40:ed:74:86:b8:c5:9b:71:93:22:
                    76:ec:bb:e2:b4:34:f0:8b:98:57:54:9e:39:49:3c:
                    4c:df:d3:d3:9f:d9:61:ff:93:e6:03:f4:d5:c5:d8:
                    87:fa:4d:b0:ac:da:61:b2:9e:16:dd:fc:de:ee:08:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:6F:5F:E0:19:D5:4D:B9:6F:B1:F9:6A:C6:76:79:E8:F2:A9:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:a6:70:5f:ce:9a:ba:99:80:73:41:6c:7b:2e:7c:a6:7c:
         d6:66:fc:c7:33:22:4c:36:62:41:87:4c:cf:45:6a:12:74:40:
         39:92:f0:9a:1a:fc:e6:9d:57:b7:6b:7a:0c:43:4f:38:90:4b:
         02:94:bd:58:ab:45:57:04:70:64:4c:6f:34:bb:46:cb:83:5e:
         96:ca:71:71:a4:b1:51:41:ab:e2:6d:37:02:78:ed:30:30:71:
         4c:a9:4f:12:81:1c:b2:ff:59:11:24:55:2d:e1:75:e5:a4:99:
         85:df:d9:e3:24:88:99:f4:96:55:02:63:c0:69:b8:dd:00:40:
         48:b6:43:5c:16:54:ee:8a:79:51:dd:e4:a2:07:21:db:d5:ed:
         fe:e8:11:32:56:e0:c4:cd:e4:d1:d5:6e:1a:5c:7e:c4:6f:5f:
         56:72:76:4d:14:de:43:58:78:2d:0c:e2:ae:75:99:ba:ce:ec:
         47:10:22:19:ee:95:10:7b:c4:41:5a:48:27:bb:7a:b9:b4:16:
         61:8b:1e:f2:c8:90:d9:ad:84:aa:cb:f2:c9:c2:27:80:5e:b2:
         fd:da:b7:71:25:22:cf:1b:60:9c:b0:7e:11:25:f6:ed:2f:f6:
         87:5b:bb:b6:b7:0d:4f:80:fa:d6:e3:1c:29:3c:eb:d9:55:17:
         72:b3:45:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh20Z6uutdL6ObIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4MTA2MTctZmEwZS00OGNjLWJhZGYtMWIwMTdhZGQx
ZjNlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWM1ZTQzMTItYWIwYS00MjU3LTgwNTMtZGQ5NjZmNzAyMGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqysE3+x/1+ERJr5aX4n3ewkfjmxzCuxrqxiU
1+cgAo0AkyTNelf1GnwpBatkomZbGjMSUWTfDXcNIqk9NaQQh4U3i0847p5k+2UG
L+YRiVyQ5DwDEBicXH+9yu+FooXdiZ1RjYSkezcqk0Yvx2GZ1XPQsI96oXVT75I/
AkmlvjoWLnDG8L0nYfJIn3LJz5T1ow5q2aQZt/5ja+eWxoSwNVx1V5twpCPEbV2M
XOvZ3O4vj+E80ESH3vVHyH5/zPCDif9egt9Kq0DtdIa4xZtxkyJ27LvitDTwi5hX
VJ45STxM39PTn9lh/5PmA/TVxdiH+k2wrNphsp4W3fze7gh7/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/Bb1/gGdVNuW+x+WrGdnno8qmpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTgx
MDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAxN2FkZDFmM2UvMWM3NDg3NDktN2I1ZC0z
NGE1LWEyNzItOWE0Y2U4MDIxYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDE4MTA2MTctZmEwZS00OGNjLWJh
ZGYtMWIwMTdhZGQxZjNlLzQxODEwNjE3LWZhMGUtNDhjYy1iYWRmLTFiMDE3YWRk
MWYzZS5jcmwwHwYDVR0jBBgwFoAUeiaByQnxzDi33/6h0CBtTQq8+HowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTgxMDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAx
N2FkZDFmM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9uJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdgpnBfzpq6mYBzQWx7LnymfNZm/MczIkw2YkGHTM9FahJ0QDmS8Joa
/OadV7dregxDTziQSwKUvVirRVcEcGRMbzS7RsuDXpbKcXGksVFBq+JtNwJ47TAw
cUypTxKBHLL/WREkVS3hdeWkmYXf2eMkiJn0llUCY8BpuN0AQEi2Q1wWVO6KeVHd
5KIHIdvV7f7oETJW4MTN5NHVbhpcfsRvX1Zydk0U3kNYeC0M4q51mbrO7EcQIhnu
lRB7xEFaSCe7erm0FmGLHvLIkNmthKrL8snCJ4Besv3at3ElIs8bYJywfhEl9u0v
9odbu7a3DU+A+tbjHCk869lVF3KzRS0=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:17:48 2026 by rpki-client