Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa
File:                     2cca03e9-39e8-3895-9aa1-920d570a3317.roa (raw, json)
Hash identifier:          imMUVYoVyiGJn4iME+RuooE3zsfj67G2tqo2F9gHHAc=
Subject key identifier:   15:69:F9:80:25:02:81:16:6C:8E:47:36:58:5E:4A:99:3F:53:01:E3
Certificate issuer:       /CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
Certificate serial:       010D0C9F4328584F4973B88A933D845B591911E0
Authority key identifier: 5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        205.135.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b8:8a:93:3d:84:5b:59:19:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=87e31f93-5e2b-4328-8e3b-8d8473ce417b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:bb:0e:dd:78:71:14:0d:f8:ac:da:50:3e:
                    55:2c:19:b9:73:11:67:6a:74:36:73:4b:72:0f:f0:
                    23:4d:a5:de:88:a8:3e:a2:4e:8d:0a:ea:74:a2:47:
                    64:43:98:1b:33:e9:5a:6a:e7:88:6c:73:15:84:99:
                    ae:5e:3d:1b:d4:52:ca:5e:f7:71:0c:4c:95:b2:42:
                    ea:37:81:3d:4e:6f:ba:02:74:65:c3:1d:3e:41:58:
                    f9:0b:32:6d:73:c3:ec:06:a9:a9:45:83:be:b4:5a:
                    4f:e9:5f:12:2d:44:19:c0:2f:fb:ec:e5:3e:39:8e:
                    67:fd:2d:5a:e1:d9:15:85:ef:44:b5:ae:f0:df:d4:
                    d2:90:82:84:10:0d:1e:91:f2:14:17:5b:6d:6f:9d:
                    0c:99:38:d3:e7:0b:f1:51:df:79:b0:2d:61:54:ba:
                    27:2c:ca:ea:71:cd:10:23:ef:3c:e3:fe:06:b1:22:
                    fa:a3:e9:68:c2:db:be:5d:de:9f:1b:c0:24:f5:c2:
                    a5:49:d2:ce:4e:d6:bc:b1:c2:b4:ff:3f:a4:23:4b:
                    18:0b:67:97:75:08:45:66:62:69:2e:16:09:46:bc:
                    53:86:db:c2:eb:b5:7d:0f:10:10:c2:1d:66:dd:b2:
                    01:b8:6b:88:3b:df:c1:d5:ca:f7:36:0b:48:38:8a:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:F9:80:25:02:81:16:6C:8E:47:36:58:5E:4A:99:3F:53:01:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl

            X509v3 Authority Key Identifier:
                keyid:5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.135.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:ea:a8:22:7e:7c:f7:d8:bb:80:5b:7f:ca:11:af:ad:a9:
         a0:1d:84:f8:3a:6a:02:4e:d1:e2:84:01:13:c4:20:7f:91:c2:
         05:c5:07:69:67:a7:f3:de:8f:0a:3a:d3:86:3f:bd:f1:53:86:
         90:f2:66:d9:6c:9a:7f:6a:0c:18:f9:a9:4a:18:46:6c:d7:5b:
         63:82:ae:aa:e7:32:86:b3:86:bc:ee:ac:d2:f2:02:53:f6:02:
         74:39:37:32:9c:ad:4d:4e:56:b3:65:1a:1f:93:0c:c3:ed:cf:
         cc:2f:2c:b9:71:89:ff:c6:12:de:59:b5:b1:89:56:1e:db:d5:
         e8:21:14:32:0e:3b:e5:44:41:01:67:14:eb:bd:99:23:e0:7c:
         bc:ba:79:ad:29:27:a7:6f:75:f3:06:ec:db:32:44:b2:00:8e:
         73:97:9d:cf:66:ec:0c:c7:24:26:53:f8:e4:ac:b8:f4:c3:ac:
         a3:18:8a:e1:22:59:b7:83:2c:df:5e:bf:ce:e4:02:64:94:6d:
         76:10:0d:29:ff:45:6c:6f:83:91:a2:26:67:1c:7b:fd:13:6b:
         38:3f:64:84:37:8b:96:16:66:27:61:e7:36:5a:b9:56:2b:85:
         74:ee:4f:9e:30:e9:e2:03:14:f2:e8:e3:f1:47:4e:b0:d3:03:
         f4:00:51:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7iKkz2EW1kZEeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzk4ZDVhZDktMTQ1ZC00YTVkLWJkNGMtNjA0MmRjNzJi
NjNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODdlMzFmOTMtNWUyYi00MzI4LThlM2ItOGQ4NDczY2U0MTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGm7Dt14cRQN+KzaUD5VLBm5cxFnanQ2c0ty
D/AjTaXeiKg+ok6NCup0okdkQ5gbM+laaueIbHMVhJmuXj0b1FLKXvdxDEyVskLq
N4E9Tm+6AnRlwx0+QVj5CzJtc8PsBqmpRYO+tFpP6V8SLUQZwC/77OU+OY5n/S1a
4dkVhe9Eta7w39TSkIKEEA0ekfIUF1ttb50MmTjT5wvxUd95sC1hVLonLMrqcc0Q
I+884/4GsSL6o+lowtu+Xd6fG8Ak9cKlSdLOTta8scK0/z+kI0sYC2eXdQhFZmJp
LhYJRrxThtvC67V9DxAQwh1m3bIBuGuIO9/B1cr3NgtIOIoqlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVp+YAlAoEWbI5HNlheSpk/UwHjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83OThk
NWFkOS0xNDVkLTRhNWQtYmQ0Yy02MDQyZGM3MmI2M2IvMmNjYTAzZTktMzllOC0z
ODk1LTlhYTEtOTIwZDU3MGEzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzk4ZDVhZDktMTQ1ZC00YTVkLWJk
NGMtNjA0MmRjNzJiNjNiLzc5OGQ1YWQ5LTE0NWQtNGE1ZC1iZDRjLTYwNDJkYzcy
YjYzYi5jcmwwHwYDVR0jBBgwFoAUXjCSIDXAts8g2QuYksNznxreLfQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83OThkNWFkOS0xNDVkLTRhNWQtYmQ0Yy02MDQy
ZGM3MmI2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYfUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbM6qgifnz32LuAW3/KEa+tqaAdhPg6agJO0eKEARPEIH+RwgXFB2ln
p/Pejwo604Y/vfFThpDyZtlsmn9qDBj5qUoYRmzXW2OCrqrnMoazhrzurNLyAlP2
AnQ5NzKcrU1OVrNlGh+TDMPtz8wvLLlxif/GEt5ZtbGJVh7b1eghFDIOO+VEQQFn
FOu9mSPgfLy6ea0pJ6dvdfMG7NsyRLIAjnOXnc9m7AzHJCZT+OSsuPTDrKMYiuEi
WbeDLN9ev87kAmSUbXYQDSn/RWxvg5GiJmcce/0Tazg/ZIQ3i5YWZidh5zZauVYr
hXTuT54w6eIDFPLo4/FHTrDTA/QAUac=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:56:17 2026 by rpki-client