Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28a186f3-50fc-3f9f-887d-b0382146f37b.roa
File:                     28a186f3-50fc-3f9f-887d-b0382146f37b.roa (raw, json)
Hash identifier:          qcKzY1hr5hh5JsHm6ML3ItM3e+sBWxGDEz//3t06wuE=
Subject key identifier:   01:8F:96:4A:74:1A:75:2E:D7:22:5C:79:DE:1D:05:88:56:90:1C:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F5E62B8A2923F7475EFBC82E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28a186f3-50fc-3f9f-887d-b0382146f37b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     577
IP address blocks:        142.172.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b8:a2:92:3f:74:75:ef:bc:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=7ffd580e-a4e4-423f-91d4-736257b402bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:35:62:06:2d:7f:30:e4:9e:65:2a:17:ee:
                    58:c4:d0:85:52:c8:5e:e6:bf:b8:de:c7:0f:f8:3a:
                    5a:dd:6b:7f:47:ab:ad:d0:f4:4f:f1:47:da:97:4a:
                    83:e9:3c:d4:dd:b2:8e:81:ef:74:5c:43:ca:6c:2e:
                    93:53:f1:ba:6e:e5:32:46:a5:69:ca:c2:6e:ad:8b:
                    e8:86:10:c1:c1:25:2e:4e:d8:38:f0:99:de:57:4c:
                    a3:63:98:1f:75:3c:67:d7:28:ac:65:75:ec:b9:e3:
                    31:e1:8a:6f:51:8e:4c:29:77:ec:3d:71:c5:d9:6c:
                    be:01:b4:ae:28:2c:0a:ac:1d:2e:66:96:97:3f:c0:
                    1c:d3:bb:3e:5c:02:c0:44:6c:b9:32:68:b1:8d:d8:
                    03:20:b6:d2:8c:de:64:f7:e0:e0:10:84:1c:f4:96:
                    d2:0c:23:28:fe:58:83:b7:98:2d:af:fd:e9:3f:ae:
                    05:39:80:20:74:dc:bf:df:b8:d6:2e:e1:0f:c3:29:
                    78:4e:97:18:6b:6e:14:01:1e:9b:38:eb:c8:03:34:
                    3c:31:67:22:61:c5:85:aa:0b:96:c2:df:5c:a0:7e:
                    27:12:6f:1d:1d:7b:11:ac:40:bb:9c:ee:e1:d4:cb:
                    96:08:4d:43:c7:9c:b2:62:b9:54:8a:97:ca:c0:b1:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8F:96:4A:74:1A:75:2E:D7:22:5C:79:DE:1D:05:88:56:90:1C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/28a186f3-50fc-3f9f-887d-b0382146f37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:54:88:1d:a2:fc:c0:8d:ff:ce:93:e3:05:19:6f:a6:8a:4e:
         ca:48:c6:f7:2d:c4:7c:35:16:c1:f8:9e:5e:ab:f8:98:4d:25:
         48:c8:38:a9:38:19:d9:9b:d4:20:9e:6a:27:b5:44:c8:a2:34:
         aa:96:b5:21:f6:eb:b6:88:2e:f1:f6:1a:12:23:57:89:a2:3b:
         32:14:8b:ad:a5:3f:82:29:ae:fc:e2:d2:46:19:e5:a4:fe:33:
         c6:77:ae:62:b0:50:17:1a:e7:94:99:c1:50:b2:94:da:b8:4b:
         20:14:7b:69:bd:86:36:b5:7c:1f:77:d7:f6:69:6b:07:7f:16:
         28:ba:ec:8c:e7:e3:23:6b:16:c6:66:b9:c0:8f:63:78:c1:7b:
         5f:56:2f:05:ab:ea:a4:b9:18:33:1d:17:45:48:8c:9b:0a:bf:
         67:76:9f:0b:6d:b6:37:77:4f:d6:ab:83:2f:cf:1c:5f:2d:6b:
         c3:c3:54:b6:0e:6e:55:cc:12:8f:af:be:bd:57:fb:f9:93:46:
         84:35:fa:72:3c:06:c9:7a:f5:13:53:6d:af:87:2f:f0:5f:dc:
         7e:9e:47:6a:95:81:96:22:2a:d4:df:33:89:04:33:79:f4:4a:
         a9:5b:45:2e:35:3a:97:31:86:e1:f7:e8:6a:0f:31:23:e4:f1:
         2a:f5:a1:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9eYriikj90de+8guAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
N2ZmZDU4MGUtYTRlNC00MjNmLTkxZDQtNzM2MjU3YjQwMmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQ1YgYtfzDknmUqF+5YxNCFUshe5r+43scP
+Dpa3Wt/R6ut0PRP8Ufal0qD6TzU3bKOge90XEPKbC6TU/G6buUyRqVpysJurYvo
hhDBwSUuTtg48JneV0yjY5gfdTxn1yisZXXsueMx4YpvUY5MKXfsPXHF2Wy+AbSu
KCwKrB0uZpaXP8Ac07s+XALARGy5MmixjdgDILbSjN5k9+DgEIQc9JbSDCMo/liD
t5gtr/3pP64FOYAgdNy/37jWLuEPwyl4TpcYa24UAR6bOOvIAzQ8MWciYcWFqguW
wt9coH4nEm8dHXsRrEC7nO7h1MuWCE1Dx5yyYrlUipfKwLFbWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAGPlkp0GnUu1yJced4dBYhWkBxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjhhMTg2ZjMtNTBmYy0z
ZjlmLTg4N2QtYjAzODIxNDZmMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUlSIHaL8wI3/zpPjBRlvpopOykjG9y3EfDUWwfieXqv4mE0lSMg4qTgZ
2ZvUIJ5qJ7VEyKI0qpa1Ifbrtogu8fYaEiNXiaI7MhSLraU/gimu/OLSRhnlpP4z
xneuYrBQFxrnlJnBULKU2rhLIBR7ab2GNrV8H3fX9mlrB38WKLrsjOfjI2sWxma5
wI9jeMF7X1YvBavqpLkYMx0XRUiMmwq/Z3afC222N3dP1quDL88cXy1rw8NUtg5u
VcwSj6++vVf7+ZNGhDX6cjwGyXr1E1Ntr4cv8F/cfp5HapWBliIq1N8ziQQzefRK
qVtFLjU6lzGG4ffoag8xI+TxKvWhow==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:38:27 2026 by rpki-client