Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9836c8bf-1789-3464-999d-050f8a7700c4.roa
File:                     9836c8bf-1789-3464-999d-050f8a7700c4.roa (raw, json)
Hash identifier:          ze9/K0AJVsko0Yw5ebCk3aSFyAXH84+KxxrXEj33bok=
Subject key identifier:   A5:36:CB:A0:E1:38:6E:3E:6D:8C:EA:C5:39:CD:0D:1A:BE:94:9F:3F
Certificate issuer:       /CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3
Certificate serial:       010D0C9F4328584F57682B73CF1B50AA89A8B6D4
Authority key identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9836c8bf-1789-3464-999d-050f8a7700c4.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     402212
IP address blocks:        23.158.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2b:73:cf:1b:50:aa:89:a8:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=400b766c-3901-4bce-9437-9cca6f4b24bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:cf:fe:7e:ac:01:a5:f4:7f:6a:a1:79:29:
                    b4:de:9c:91:98:82:cb:1b:50:0a:07:c8:0c:53:ed:
                    8e:1b:b6:0c:1f:ca:2a:da:3a:71:43:42:45:f4:fa:
                    f1:dc:1e:97:a6:df:34:44:2d:5f:8f:03:e7:57:40:
                    37:bd:e8:b5:07:d4:fb:ea:fc:cb:1d:7e:5b:00:98:
                    7c:11:ec:8f:28:c8:7f:eb:88:1d:cf:08:e4:ee:3d:
                    96:5b:0e:e7:11:fb:c0:1b:07:76:c9:5e:02:2a:78:
                    16:c7:7e:5b:a0:eb:39:f3:07:e5:ab:18:2c:bd:1e:
                    47:33:e8:3c:81:f0:87:cc:68:05:8c:2e:67:cc:45:
                    c4:b3:33:49:49:2a:32:da:89:83:27:45:42:39:5c:
                    77:98:c0:65:f4:87:1e:ba:f9:e0:6a:fb:24:21:8c:
                    5b:fe:89:68:da:7c:21:2f:c7:79:b8:a0:ef:5f:2d:
                    e6:79:04:90:81:11:66:d8:28:3e:cf:c4:ff:c7:be:
                    0c:f3:86:52:44:61:7f:7e:74:45:aa:bb:17:74:5f:
                    21:6d:8a:de:9d:fd:ee:ec:41:d1:a4:fc:a5:c2:a5:
                    27:e2:76:34:4a:bd:3f:f5:f5:86:19:7e:41:4e:be:
                    bb:ea:47:d2:94:3b:34:e7:ec:46:60:b3:90:ca:f8:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:CB:A0:E1:38:6E:3E:6D:8C:EA:C5:39:CD:0D:1A:BE:94:9F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9836c8bf-1789-3464-999d-050f8a7700c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:5a:d0:fd:c3:ad:55:8c:f9:2b:96:a9:32:bb:71:4b:06:
         4a:4f:b6:f6:cf:00:f5:0b:57:08:48:05:de:02:63:f5:e4:c7:
         c9:02:01:51:17:30:c3:70:f4:1b:35:4b:28:5c:97:15:ab:65:
         9b:27:54:5a:af:49:05:0e:70:fe:dd:a7:21:07:fa:0a:7b:82:
         22:2a:6c:6a:48:59:96:1b:04:21:6a:fe:e3:93:a9:22:ac:e0:
         44:c7:5d:56:0a:0d:d6:18:9f:24:36:d2:d5:f3:b8:1c:48:01:
         7f:b3:0a:9e:10:6d:c9:2b:20:45:53:78:1d:43:b2:25:a7:e9:
         49:a0:03:1c:cf:83:25:26:9c:19:50:ca:0a:bb:3c:88:c2:f0:
         9d:6d:bf:56:56:91:1c:74:f1:e5:bc:47:26:ce:2c:84:20:bd:
         f5:13:ff:32:f8:16:94:a5:75:51:02:c9:e2:43:22:1c:46:8e:
         08:a8:a9:89:0f:f5:30:2e:ed:cb:8b:65:13:a9:19:11:85:ac:
         60:21:2c:c8:a5:bd:76:00:8b:c8:a6:bb:6b:5c:cc:11:29:39:
         f9:3d:81:c6:ce:09:f2:4f:1b:30:d2:e5:75:2a:06:21:15:82:
         bf:6e:87:d1:77:5b:ad:e8:84:bf:d7:7f:b8:96:5d:4f:b2:6b:
         7e:d7:d0:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCtzzxtQqomottQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUwMmQ3MzctZjg1Ny00Zjg2LWIwY2QtYTc5NjZjNmUy
YWMzMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDAwYjc2NmMtMzkwMS00YmNlLTk0MzctOWNjYTZmNGIyNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C3P/n6sAaX0f2qheSm03pyRmILLG1AKB8gM
U+2OG7YMH8oq2jpxQ0JF9Prx3B6Xpt80RC1fjwPnV0A3vei1B9T76vzLHX5bAJh8
EeyPKMh/64gdzwjk7j2WWw7nEfvAGwd2yV4CKngWx35boOs58wflqxgsvR5HM+g8
gfCHzGgFjC5nzEXEszNJSSoy2omDJ0VCOVx3mMBl9IceuvngavskIYxb/olo2nwh
L8d5uKDvXy3meQSQgRFm2Cg+z8T/x74M84ZSRGF/fnRFqrsXdF8hbYrenf3u7EHR
pPylwqUn4nY0Sr0/9fWGGX5BTr676kfSlDs05+xGYLOQyviomQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKU2y6DhOG4+bYzqxTnNDRq+lJ8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAy
ZDczNy1mODU3LTRmODYtYjBjZC1hNzk2NmM2ZTJhYzMvOTgzNmM4YmYtMTc4OS0z
NDY0LTk5OWQtMDUwZjhhNzcwMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOWUwMmQ3MzctZjg1Ny00Zjg2LWIw
Y2QtYTc5NjZjNmUyYWMzLzllMDJkNzM3LWY4NTctNGY4Ni1iMGNkLWE3OTY2YzZl
MmFjMy5jcmwwHwYDVR0jBBgwFoAUuamYSpkXkULsaFE+svQ1rePBQNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAyZDczNy1mODU3LTRmODYtYjBjZC1hNzk2
NmM2ZTJhYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF57UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKyWtD9w61VjPkrlqkyu3FLBkpPtvbPAPULVwhIBd4CY/Xkx8kCAVEX
MMNw9Bs1SyhclxWrZZsnVFqvSQUOcP7dpyEH+gp7giIqbGpIWZYbBCFq/uOTqSKs
4ETHXVYKDdYYnyQ20tXzuBxIAX+zCp4QbckrIEVTeB1DsiWn6UmgAxzPgyUmnBlQ
ygq7PIjC8J1tv1ZWkRx08eW8RybOLIQgvfUT/zL4FpSldVECyeJDIhxGjgioqYkP
9TAu7cuLZROpGRGFrGAhLMilvXYAi8imu2tczBEpOfk9gcbOCfJPGzDS5XUqBiEV
gr9uh9F3W63ohL/Xf7iWXU+ya37X0Bo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:51 2026 by rpki-client