Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa
File:                     84de89dc-15a9-3fcd-a3e0-3759e44040de.roa (raw, json)
Hash identifier:          ZUpAXpD5WmZk0cHJIGe2PbuTS8C1elm804lYNJ89V7A=
Subject key identifier:   34:DC:1F:0E:9F:7C:41:1A:CF:4E:D1:24:4C:E1:20:95:34:18:55:3B
Certificate issuer:       /CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
Certificate serial:       010D0C9F4328584F4973A37343C806B9CED92840
Authority key identifier: B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8030
IP address blocks:        142.79.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a3:73:43:c8:06:b9:ce:d9:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6595446a-2d7c-414d-8cca-7795f0fbdd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:9d:83:c6:70:cd:4f:36:9e:86:a1:bf:45:
                    8d:af:96:56:f9:7c:ca:93:89:31:6d:65:84:64:5d:
                    72:be:80:db:53:c0:32:3e:1c:c5:ec:c2:da:fd:a9:
                    5a:72:5f:85:b1:6d:9e:e8:53:55:15:7e:b3:3b:d2:
                    33:4d:86:f6:82:26:e0:f1:53:87:da:0d:a8:04:95:
                    22:37:e8:0c:a0:55:c7:ef:85:2e:12:50:de:a1:00:
                    7a:d8:68:2a:8f:4a:56:20:c5:54:19:95:44:17:91:
                    38:ae:c5:61:a1:42:7d:51:82:b9:73:ac:63:a9:28:
                    21:82:a9:8c:18:87:29:f1:17:d1:f8:11:8f:c8:43:
                    a8:5c:f4:d4:4e:63:ce:02:70:df:2e:bd:43:96:8d:
                    ec:15:5c:29:81:21:4e:d0:76:ee:bb:0e:a5:17:bd:
                    82:53:30:4f:f0:3f:8b:e9:52:dd:3c:96:68:12:5a:
                    39:cb:11:7f:8f:57:f2:b2:b1:1b:fc:a8:8a:4e:57:
                    b4:d3:2a:ec:fa:4d:4e:71:b0:57:8e:3e:7f:42:1c:
                    1b:cb:1b:eb:4a:d9:bb:c6:5e:fa:24:75:a1:09:b5:
                    85:07:f1:3a:42:ac:02:7c:a0:78:8e:bf:c0:b9:2d:
                    38:af:29:d3:b7:37:c5:9d:d0:b0:31:30:49:85:ed:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:1F:0E:9F:7C:41:1A:CF:4E:D1:24:4C:E1:20:95:34:18:55:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl

            X509v3 Authority Key Identifier:
                keyid:B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:08:c5:db:ac:35:9f:6c:89:af:60:0b:21:68:4c:a0:47:
         5f:2c:f4:2d:cc:59:67:12:50:cc:7b:8f:0a:f9:5c:0e:b7:fc:
         c8:fb:ff:8b:3a:ab:c8:7f:b5:42:65:c6:ac:4a:92:1c:88:12:
         04:99:b2:c3:cb:f5:e7:04:66:30:2f:0c:4e:aa:77:d7:81:20:
         2b:45:45:e3:c6:d4:d4:99:47:5c:3c:6d:e4:6f:a9:13:11:4b:
         75:48:8c:1c:0f:1e:3f:9b:02:ff:7b:25:07:03:c9:04:9f:f7:
         f1:12:97:d7:c8:ff:56:e4:ed:b5:0d:f1:43:a2:d9:c8:80:24:
         86:c6:72:a3:0e:52:b3:27:8b:80:79:2b:c8:59:05:e5:85:1b:
         b7:e6:b0:c5:27:11:c9:18:07:04:b4:eb:18:ed:c1:86:b6:e0:
         ec:37:7a:ae:0f:70:a6:6b:ad:19:30:26:78:7f:9b:36:67:74:
         3b:02:8e:79:e3:ae:6c:96:81:d4:81:f5:7c:d9:19:bb:73:2c:
         06:64:19:4c:45:9d:80:1e:69:d4:6b:ac:53:d4:b5:df:fa:23:
         9e:3a:60:6f:22:af:f0:74:9a:26:a4:63:37:6e:59:83:ce:71:
         b5:61:41:8a:b9:12:e4:84:10:45:a2:25:6a:00:b2:92:6c:58:
         7a:84:55:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6NzQ8gGuc7ZKEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwYzQxZDMtYmExYi00ZDEyLWFkY2ItNWYxYTdlZTRh
YzBhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjU5NTQ0NmEtMmQ3Yy00MTRkLThjY2EtNzc5NWYwZmJkZDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrudg8ZwzU82noahv0WNr5ZW+XzKk4kxbWWE
ZF1yvoDbU8AyPhzF7MLa/alacl+FsW2e6FNVFX6zO9IzTYb2gibg8VOH2g2oBJUi
N+gMoFXH74UuElDeoQB62Ggqj0pWIMVUGZVEF5E4rsVhoUJ9UYK5c6xjqSghgqmM
GIcp8RfR+BGPyEOoXPTUTmPOAnDfLr1Dlo3sFVwpgSFO0Hbuuw6lF72CUzBP8D+L
6VLdPJZoElo5yxF/j1fysrEb/KiKTle00yrs+k1OcbBXjj5/QhwbyxvrStm7xl76
JHWhCbWFB/E6QqwCfKB4jr/AuS04rynTtzfFndCwMTBJhe3ASwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTcHw6ffEEaz07RJEzhIJU0GFU7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDBj
NDFkMy1iYTFiLTRkMTItYWRjYi01ZjFhN2VlNGFjMGEvODRkZTg5ZGMtMTVhOS0z
ZmNkLWEzZTAtMzc1OWU0NDA0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwYzQxZDMtYmExYi00ZDEyLWFk
Y2ItNWYxYTdlZTRhYzBhLzcwMGM0MWQzLWJhMWItNGQxMi1hZGNiLTVmMWE3ZWU0
YWMwYS5jcmwwHwYDVR0jBBgwFoAUsVCYUX9ckirpXsxMm+SnTFmprOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDBjNDFkMy1iYTFiLTRkMTItYWRjYi01ZjFh
N2VlNGFjMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjk+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzyCMXbrDWfbImvYAshaEygR18s9C3MWWcSUMx7jwr5XA63/Mj7/4s6
q8h/tUJlxqxKkhyIEgSZssPL9ecEZjAvDE6qd9eBICtFRePG1NSZR1w8beRvqRMR
S3VIjBwPHj+bAv97JQcDyQSf9/ESl9fI/1bk7bUN8UOi2ciAJIbGcqMOUrMni4B5
K8hZBeWFG7fmsMUnEckYBwS06xjtwYa24Ow3eq4PcKZrrRkwJnh/mzZndDsCjnnj
rmyWgdSB9XzZGbtzLAZkGUxFnYAeadRrrFPUtd/6I546YG8ir/B0miakYzduWYPO
cbVhQYq5EuSEEEWiJWoAspJsWHqEVQc=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:32:07 2026 by rpki-client