Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/524accfd-02ef-3bd9-824e-9750d2211ec6.roa
File:                     524accfd-02ef-3bd9-824e-9750d2211ec6.roa (raw, json)
Hash identifier:          oCm4SXOOJrQH7ChhT1C4aZVrQLhQz4Yx91jFf0Wesbg=
Subject key identifier:   07:04:9C:AD:14:4B:3D:81:1D:3C:60:1E:AE:3A:E0:23:62:00:03:68
Certificate issuer:       /CN=c5eb979c-b609-46c7-b532-5556b46a9b69
Certificate serial:       010D0C9F4328584F332F0F5FD6FD75F9A7AFFBF0
Authority key identifier: 71:03:D0:D7:01:31:A2:1A:DE:46:A8:12:A5:0E:E9:E4:D5:48:12:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/524accfd-02ef-3bd9-824e-9750d2211ec6.roa
Signing time:             Thu 17 Sep 2026 01:36:30 +0000
ROA not before:           Thu 17 Sep 2026 01:36:30 +0000
ROA not after:            Wed 16 Dec 2026 02:36:30 +0000
asID:                     22347
IP address blocks:        170.112.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/c5eb979c-b609-46c7-b532-5556b46a9b69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/c5eb979c-b609-46c7-b532-5556b46a9b69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:2f:0f:5f:d6:fd:75:f9:a7:af:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5eb979c-b609-46c7-b532-5556b46a9b69
        Validity
            Not Before: Sep 17 01:36:30 2026 GMT
            Not After : Dec 16 02:36:30 2026 GMT
        Subject: CN=cec04110-166b-454e-aa76-8e233dc70bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:b0:08:73:87:ce:c5:d3:7f:fe:3a:18:20:
                    e9:5c:d8:33:56:2e:44:dc:e6:77:20:84:04:d8:54:
                    41:be:21:73:30:93:42:7e:8f:30:7d:ed:64:85:da:
                    56:57:34:3b:b4:c1:43:72:1c:ef:2f:19:6d:18:ad:
                    e5:d9:2f:9c:c0:69:53:a4:a4:90:b4:73:ec:94:75:
                    26:c3:5b:89:34:1d:e5:9a:94:12:01:24:61:c3:81:
                    0d:24:12:4a:ec:e7:63:dd:15:ad:fc:a4:77:20:9d:
                    c7:11:38:89:e0:19:06:ed:d6:3c:9a:43:c6:e3:6b:
                    f6:2f:93:be:15:47:fe:6a:e8:e5:b6:61:24:06:08:
                    98:c7:a4:60:c9:f8:b3:1f:04:22:0f:88:bb:0a:4f:
                    cd:12:d6:4f:b1:f5:b3:fc:1e:77:6e:d7:9e:25:a7:
                    b2:3a:3c:38:6e:8f:ea:2e:de:e4:85:94:49:33:23:
                    50:1e:52:d6:61:6b:ef:62:2d:81:de:bd:a7:5f:02:
                    c6:79:dc:24:21:00:ec:e7:e8:78:50:ca:f0:d7:aa:
                    85:9c:25:54:b2:24:1e:fc:8a:e7:16:f2:02:40:38:
                    df:ed:89:af:40:34:89:ba:7d:59:b7:31:e5:9e:ba:
                    be:b4:81:c2:f7:90:33:57:b6:2b:c2:fd:33:6f:45:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:9C:AD:14:4B:3D:81:1D:3C:60:1E:AE:3A:E0:23:62:00:03:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/524accfd-02ef-3bd9-824e-9750d2211ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69/c5eb979c-b609-46c7-b532-5556b46a9b69.crl

            X509v3 Authority Key Identifier:
                keyid:71:03:D0:D7:01:31:A2:1A:DE:46:A8:12:A5:0E:E9:E4:D5:48:12:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c5eb979c-b609-46c7-b532-5556b46a9b69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.112.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:24:54:6d:f3:cf:5c:b4:24:0c:4b:4c:75:20:9a:fd:96:87:
         16:05:3a:bd:b8:97:fd:35:4f:4d:82:ca:b0:51:d5:c8:62:20:
         9b:cf:06:c2:da:f7:0f:9d:4e:e2:c1:81:a9:87:6a:dd:02:0f:
         02:9b:a4:ab:fd:0e:46:ee:cb:c9:8d:84:19:e1:9a:6d:b5:91:
         62:62:85:45:cd:68:8c:7b:be:30:b1:37:84:7a:ea:1f:61:c5:
         af:f1:64:54:85:31:1d:7e:08:7b:b8:b9:9e:ef:a5:d8:11:ac:
         0f:51:0e:eb:a8:e9:6b:e8:dc:d1:26:39:73:63:1f:9a:b2:32:
         b8:93:33:26:fb:50:38:e4:5d:46:3d:b7:1c:64:7c:33:a3:e0:
         c7:16:ae:8e:b9:e1:80:7e:b4:29:53:95:07:7b:8e:cd:50:dd:
         89:59:c6:f8:55:ed:6f:e4:1d:1e:05:a6:f8:7b:29:f4:d8:8b:
         90:63:05:8f:e3:3c:7c:d8:7b:9a:f8:8e:94:2d:7f:0c:10:18:
         c8:fe:f1:40:3c:21:40:b0:eb:6c:07:a3:8b:09:e2:20:32:5c:
         53:ed:48:88:56:ef:95:87:21:1f:24:e3:08:ef:10:5e:a1:38:
         e0:e2:fe:cd:58:de:28:ca:be:33:47:8c:3a:2f:bf:84:f7:2c:
         62:79:57:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zLw9f1v11+aev+/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzVlYjk3OWMtYjYwOS00NmM3LWI1MzItNTU1NmI0NmE5
YjY5MB4XDTI2MDkxNzAxMzYzMFoXDTI2MTIxNjAyMzYzMFowLzEtMCsGA1UEAxMk
Y2VjMDQxMTAtMTY2Yi00NTRlLWFhNzYtOGUyMzNkYzcwYmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+KwCHOHzsXTf/46GCDpXNgzVi5E3OZ3IIQE
2FRBviFzMJNCfo8wfe1khdpWVzQ7tMFDchzvLxltGK3l2S+cwGlTpKSQtHPslHUm
w1uJNB3lmpQSASRhw4ENJBJK7Odj3RWt/KR3IJ3HETiJ4BkG7dY8mkPG42v2L5O+
FUf+aujltmEkBgiYx6RgyfizHwQiD4i7Ck/NEtZPsfWz/B53bteeJaeyOjw4bo/q
Lt7khZRJMyNQHlLWYWvvYi2B3r2nXwLGedwkIQDs5+h4UMrw16qFnCVUsiQe/Irn
FvICQDjf7YmvQDSJun1ZtzHlnrq+tIHC95AzV7Yrwv0zb0VDRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcEnK0USz2BHTxgHq464CNiAANoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNWVi
OTc5Yy1iNjA5LTQ2YzctYjUzMi01NTU2YjQ2YTliNjkvNTI0YWNjZmQtMDJlZi0z
YmQ5LTgyNGUtOTc1MGQyMjExZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzVlYjk3OWMtYjYwOS00NmM3LWI1
MzItNTU1NmI0NmE5YjY5L2M1ZWI5NzljLWI2MDktNDZjNy1iNTMyLTU1NTZiNDZh
OWI2OS5jcmwwHwYDVR0jBBgwFoAUcQPQ1wExohreRqgSpQ7p5NVIEuAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNWViOTc5Yy1iNjA5LTQ2YzctYjUzMi01NTU2
YjQ2YTliNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqnAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMkVG3zz1y0JAxLTHUgmv2WhxYFOr24l/01T02CyrBR1chiIJvPBsLa
9w+dTuLBgamHat0CDwKbpKv9Dkbuy8mNhBnhmm21kWJihUXNaIx7vjCxN4R66h9h
xa/xZFSFMR1+CHu4uZ7vpdgRrA9RDuuo6Wvo3NEmOXNjH5qyMriTMyb7UDjkXUY9
txxkfDOj4McWro654YB+tClTlQd7js1Q3YlZxvhV7W/kHR4Fpvh7KfTYi5BjBY/j
PHzYe5r4jpQtfwwQGMj+8UA8IUCw62wHo4sJ4iAyXFPtSIhW75WHIR8k4wjvEF6h
OODi/s1Y3ijKvjNHjDovv4T3LGJ5V4o=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:19:05 2026 by rpki-client