Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/428edd7a-8c1d-33bb-ae0b-520400915df5.roa
File:                     428edd7a-8c1d-33bb-ae0b-520400915df5.roa (raw, json)
Hash identifier:          ZuPAsUdpZLO7bseoBBDuhHbpGdqpER+cn4Qnu6W4ST0=
Subject key identifier:   96:82:BC:71:AD:17:D1:42:68:F1:B4:61:6F:91:3B:70:61:BF:F1:C1
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F4328584F7A0421F8C340278B5BE6D480
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/428edd7a-8c1d-33bb-ae0b-520400915df5.roa
Signing time:             Mon 12 Oct 2026 10:32:24 +0000
ROA not before:           Mon 12 Oct 2026 10:32:24 +0000
ROA not after:            Sun 10 Jan 2027 11:32:24 +0000
asID:                     209604
IP address blocks:        142.249.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:04:21:f8:c3:40:27:8b:5b:e6:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Oct 12 10:32:24 2026 GMT
            Not After : Jan 10 11:32:24 2027 GMT
        Subject: CN=9e923857-5973-4759-81fe-e89ca4115baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:4a:87:c4:ec:76:e2:7d:12:27:ce:e4:05:
                    ed:81:f8:88:e3:95:37:fd:f9:94:6c:0e:27:16:95:
                    64:47:c1:d4:4f:d9:f0:8a:a4:e2:a7:f7:e4:32:8e:
                    87:cd:e9:08:ac:06:37:75:4e:c6:a6:61:cc:b0:44:
                    29:83:52:1d:f8:66:38:ab:3e:53:eb:18:7e:ee:27:
                    b8:f1:b7:95:82:cd:f2:3e:87:77:ab:e5:18:4c:f9:
                    fd:fb:cb:d0:6a:5a:a4:83:99:e9:2f:89:ea:25:9a:
                    a1:e0:28:49:6b:ef:4f:6e:ce:56:39:04:0e:83:c7:
                    5f:b4:46:42:c0:09:c5:92:3b:0d:91:06:b3:7e:ef:
                    f1:7a:a9:b7:d6:30:9e:6a:b3:f9:e1:5d:00:85:bd:
                    f4:5e:0d:3b:89:37:9c:4f:9c:78:cf:aa:ed:0c:ba:
                    43:a4:78:20:da:0a:e9:20:30:ba:ef:8a:62:ab:7e:
                    68:46:b0:d3:64:f9:1f:13:7f:3a:f5:d5:27:2a:65:
                    51:d2:c2:7f:f6:4f:6a:47:ce:a1:3e:c1:77:d7:4a:
                    85:4a:df:29:e8:20:c3:03:92:0e:31:33:df:55:80:
                    c2:cd:66:bc:1d:c8:c9:85:4d:d6:1f:0c:2b:96:7f:
                    e3:37:38:27:fa:c0:3e:7d:49:39:79:01:84:3d:8b:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:BC:71:AD:17:D1:42:68:F1:B4:61:6F:91:3B:70:61:BF:F1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/428edd7a-8c1d-33bb-ae0b-520400915df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:14:1c:7f:de:f6:9f:4d:c3:5a:c2:b3:be:6c:a9:1a:87:6e:
         af:ab:9a:3f:59:ff:1b:26:53:27:5f:49:86:29:04:9b:d9:8d:
         8b:be:a1:05:9f:e5:08:f9:40:6a:4a:2c:b1:43:9f:0a:fc:61:
         89:29:fe:bb:96:50:43:e6:6a:54:dd:ea:97:bc:3f:c5:7d:c4:
         48:d5:d7:6f:68:c9:f0:59:c7:92:22:b2:92:38:88:60:ff:f0:
         1f:ee:7d:bb:e4:6b:d8:12:51:95:cf:71:01:bd:88:b2:21:5b:
         97:34:e5:64:78:c7:10:83:c0:3c:7b:4b:26:e6:57:61:b5:04:
         99:14:0e:3e:89:8f:27:5c:5b:f4:96:80:64:96:bd:ab:98:ce:
         0a:29:3b:c4:91:2f:8c:e1:e6:e3:ae:7e:fa:63:9b:b7:56:4a:
         04:d1:f4:de:38:80:b5:84:f3:c3:a6:a4:6c:53:f2:5b:39:f7:
         28:bc:33:7b:ae:02:0d:91:f3:dd:62:cc:8f:eb:e5:5c:dd:44:
         d1:a4:83:6e:82:f5:65:20:53:39:4f:f9:f8:c3:8b:48:b9:24:
         a3:ec:19:7e:9e:44:d4:d9:e8:92:5f:ac:e5:40:72:ea:43:4d:
         bb:2e:97:e6:5e:fb:d2:62:7e:28:85:ea:5b:e0:6d:fe:90:0c:
         01:dc:6e:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96BCH4w0Ani1vm1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3
MTlmMB4XDTI2MTAxMjEwMzIyNFoXDTI3MDExMDExMzIyNFowLzEtMCsGA1UEAxMk
OWU5MjM4NTctNTk3My00NzU5LTgxZmUtZTg5Y2E0MTE1YmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEtKh8TsduJ9EifO5AXtgfiI45U3/fmUbA4n
FpVkR8HUT9nwiqTip/fkMo6HzekIrAY3dU7GpmHMsEQpg1Id+GY4qz5T6xh+7ie4
8beVgs3yPod3q+UYTPn9+8vQalqkg5npL4nqJZqh4ChJa+9Pbs5WOQQOg8dftEZC
wAnFkjsNkQazfu/xeqm31jCearP54V0Ahb30Xg07iTecT5x4z6rtDLpDpHgg2grp
IDC674piq35oRrDTZPkfE3869dUnKmVR0sJ/9k9qR86hPsF310qFSt8p6CDDA5IO
MTPfVYDCzWa8HcjJhU3WHwwrln/jNzgn+sA+fUk5eQGEPYuKywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaCvHGtF9FCaPG0YW+RO3Bhv/HBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj
ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvNDI4ZWRkN2EtOGMxZC0z
M2JiLWFlMGItNTIwNDAwOTE1ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0
NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0
NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw
MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvlOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEUHH/e9p9Nw1rCs75sqRqHbq+rmj9Z/xsmUydfSYYpBJvZjYu+oQWf
5Qj5QGpKLLFDnwr8YYkp/ruWUEPmalTd6pe8P8V9xEjV129oyfBZx5IispI4iGD/
8B/ufbvka9gSUZXPcQG9iLIhW5c05WR4xxCDwDx7SybmV2G1BJkUDj6JjydcW/SW
gGSWvauYzgopO8SRL4zh5uOufvpjm7dWSgTR9N44gLWE88OmpGxT8ls59yi8M3uu
Ag2R891izI/r5VzdRNGkg26C9WUgUzlP+fjDi0i5JKPsGX6eRNTZ6JJfrOVAcupD
Tbsul+Ze+9JifiiF6lvgbf6QDAHcbtY=
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:50:48 2026 by rpki-client