Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/97013591-a34e-3aba-a24c-b5817d130a8c.roa
File:                     97013591-a34e-3aba-a24c-b5817d130a8c.roa (raw, json)
Hash identifier:          gAq/No8sU23ujibo9gauvnpPZtEfgx+qeZuTld7uwLA=
Subject key identifier:   A7:B8:32:23:5F:E9:AA:9B:D3:3B:39:7C:1B:34:42:8E:A7:5C:81:95
Certificate issuer:       /CN=1800ff78-68d8-4b96-898c-955f1a97d2f5
Certificate serial:       010D0C9F4328584EF87CB286A5E3B0998C527000
Authority key identifier: 57:9C:3F:BA:4A:39:48:DC:1A:5C:60:43:5F:48:7A:EF:51:9C:E9:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/97013591-a34e-3aba-a24c-b5817d130a8c.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     394703
IP address blocks:        142.202.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b2:86:a5:e3:b0:99:8c:52:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1800ff78-68d8-4b96-898c-955f1a97d2f5
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=7497bf3c-7714-4550-95b6-9ce173d15893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:8a:41:d5:38:88:a0:2e:24:99:b5:53:b3:
                    7b:50:4a:3a:aa:55:e6:45:cc:ad:96:13:f3:9c:f2:
                    16:46:9f:55:e1:b4:26:d6:14:74:e0:09:db:36:a1:
                    05:a1:c7:93:b5:10:35:9e:54:d9:44:76:36:27:c5:
                    30:5e:44:52:dc:e4:23:ed:1e:94:75:80:1d:7b:4a:
                    7b:e2:03:98:01:5a:a7:2b:4b:75:a5:ec:b8:02:9e:
                    67:fe:f7:25:0c:6d:7b:49:1a:f5:7b:b9:b9:3b:cf:
                    ba:56:f5:aa:35:aa:4d:26:f7:34:c6:87:13:50:09:
                    9c:ff:5b:2f:ca:38:3d:1e:ca:b4:59:0b:c6:2d:9c:
                    24:45:7d:d1:60:41:59:29:97:4b:50:3f:4d:ea:9f:
                    70:64:3b:24:14:61:a2:ef:3a:24:1c:e2:63:79:1c:
                    e7:ff:f6:e8:1a:e2:5d:81:4e:d3:76:7c:9b:6c:c3:
                    16:d9:8c:f0:34:06:dd:ea:50:d0:79:f4:b1:7f:c8:
                    28:72:2f:87:99:71:17:c6:87:8d:df:86:e9:72:e3:
                    c3:14:7c:d6:13:e0:22:65:04:d8:b3:55:a8:c3:10:
                    ee:21:0d:e3:2b:f7:fc:73:01:52:e9:7d:d4:cb:8e:
                    e4:9c:47:e0:75:20:1f:d0:11:9f:0a:a9:17:72:1b:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B8:32:23:5F:E9:AA:9B:D3:3B:39:7C:1B:34:42:8E:A7:5C:81:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/97013591-a34e-3aba-a24c-b5817d130a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.crl

            X509v3 Authority Key Identifier:
                keyid:57:9C:3F:BA:4A:39:48:DC:1A:5C:60:43:5F:48:7A:EF:51:9C:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:11:58:00:ba:26:da:b6:5c:96:c6:21:b3:a9:3b:9d:df:f3:
         3c:b1:3f:57:c1:51:00:fc:62:0c:7a:9b:83:6a:c5:69:70:bb:
         c6:70:cd:20:52:a8:e4:25:79:fd:b7:da:00:11:41:e2:1f:43:
         80:4d:06:91:9a:62:f9:61:59:77:84:54:10:cf:ed:0d:85:02:
         5a:fe:63:58:5d:94:a8:c6:cf:8e:a5:58:05:68:14:24:bb:b6:
         fe:13:9c:78:68:49:c3:14:3f:a5:be:cd:a0:3b:58:ef:bb:11:
         f7:f0:4f:76:20:41:81:52:e7:36:5d:1c:6e:39:6a:24:4b:2f:
         f2:b8:d4:0d:f8:00:5a:ec:e2:e0:5e:27:5f:61:29:f3:14:73:
         f1:0d:43:3a:b9:fe:1a:25:67:a3:7b:35:e3:65:d5:bf:92:99:
         93:59:48:6b:e0:5c:6b:4a:2e:9e:46:f1:21:2c:2c:cb:bc:54:
         f3:33:dc:81:96:81:36:5d:37:16:dd:9f:e8:4f:c7:af:eb:e0:
         13:28:d7:80:12:2e:f1:75:70:02:e9:53:cd:9e:d0:e7:21:e0:
         76:fa:22:73:c1:d8:ec:a4:72:b8:f8:59:22:b3:0b:78:92:76:
         d7:98:60:df:2b:3c:32:08:7b:0e:f9:4c:2e:44:c1:8f:44:5e:
         00:e1:e3:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLKGpeOwmYxScAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTgwMGZmNzgtNjhkOC00Yjk2LTg5OGMtOTU1ZjFhOTdk
MmY1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
NzQ5N2JmM2MtNzcxNC00NTUwLTk1YjYtOWNlMTczZDE1ODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEmKQdU4iKAuJJm1U7N7UEo6qlXmRcytlhPz
nPIWRp9V4bQm1hR04AnbNqEFoceTtRA1nlTZRHY2J8UwXkRS3OQj7R6UdYAde0p7
4gOYAVqnK0t1pey4Ap5n/vclDG17SRr1e7m5O8+6VvWqNapNJvc0xocTUAmc/1sv
yjg9Hsq0WQvGLZwkRX3RYEFZKZdLUD9N6p9wZDskFGGi7zokHOJjeRzn//boGuJd
gU7TdnybbMMW2YzwNAbd6lDQefSxf8goci+HmXEXxoeN34bpcuPDFHzWE+AiZQTY
s1WowxDuIQ3jK/f8cwFS6X3Uy47knEfgdSAf0BGfCqkXchvnvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe4MiNf6aqb0zs5fBs0Qo6nXIGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xODAw
ZmY3OC02OGQ4LTRiOTYtODk4Yy05NTVmMWE5N2QyZjUvOTcwMTM1OTEtYTM0ZS0z
YWJhLWEyNGMtYjU4MTdkMTMwYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTgwMGZmNzgtNjhkOC00Yjk2LTg5
OGMtOTU1ZjFhOTdkMmY1LzE4MDBmZjc4LTY4ZDgtNGI5Ni04OThjLTk1NWYxYTk3
ZDJmNS5jcmwwHwYDVR0jBBgwFoAUV5w/uko5SNwaXGBDX0h671Gc6YUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xODAwZmY3OC02OGQ4LTRiOTYtODk4Yy05NTVm
MWE5N2QyZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHARWAC6Jtq2XJbGIbOpO53f8zyxP1fBUQD8Ygx6m4NqxWlwu8ZwzSBS
qOQlef232gARQeIfQ4BNBpGaYvlhWXeEVBDP7Q2FAlr+Y1hdlKjGz46lWAVoFCS7
tv4TnHhoScMUP6W+zaA7WO+7EffwT3YgQYFS5zZdHG45aiRLL/K41A34AFrs4uBe
J19hKfMUc/ENQzq5/holZ6N7NeNl1b+SmZNZSGvgXGtKLp5G8SEsLMu8VPMz3IGW
gTZdNxbdn+hPx6/r4BMo14ASLvF1cALpU82e0Och4Hb6InPB2Oykcrj4WSKzC3iS
dteYYN8rPDIIew75TC5EwY9EXgDh4wI=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:38 2026 by rpki-client