Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f74c387-0933-32c9-8491-695010903c07.roa
File:                     1f74c387-0933-32c9-8491-695010903c07.roa (raw, json)
Hash identifier:          Btw6zgEJzmVNeWPIS6bqomrQPJUS4ef6Q4nzwHBp8uA=
Subject key identifier:   83:E8:DB:73:76:18:9C:B8:43:15:5C:23:F4:B2:E4:40:A7:37:3B:73
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D609EBC1E2431B77D0D00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f74c387-0933-32c9-8491-695010903c07.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        172.241.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:60:9e:bc:1e:24:31:b7:7d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=a2d50148-f5fd-4634-9f06-0062937a39e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:93:f4:60:29:69:6b:a5:a4:2d:e7:b8:ba:
                    d2:1a:5c:58:c7:65:0d:27:5c:9d:9c:4c:ca:07:60:
                    c3:8f:71:7d:7b:ff:a8:44:96:30:eb:1c:d1:2b:98:
                    3e:07:84:d4:bc:f5:ed:1b:2e:f6:8a:c1:03:d3:91:
                    3a:7b:33:77:b3:97:8c:08:a5:c2:90:7a:da:dd:4f:
                    32:ac:27:c5:b4:4b:03:6d:af:94:d3:28:0b:2d:fb:
                    b1:0b:6c:8d:d2:d2:f0:d5:3c:37:48:e6:e7:e0:c3:
                    a7:36:77:9f:5e:60:0e:db:c6:b8:7a:ea:6a:0d:1a:
                    94:2c:6b:8c:96:21:6c:1c:ca:81:57:d1:d3:9b:35:
                    5a:04:cb:f0:cd:bf:08:c0:a6:46:c0:13:fb:aa:c9:
                    ad:e9:1b:ab:bb:25:a5:f3:79:46:64:55:f0:60:e9:
                    f6:03:00:a2:ac:ee:bb:c8:84:55:e0:ae:e6:06:b5:
                    d9:ea:83:a1:68:d5:3a:ae:ad:33:54:fd:ca:7a:8d:
                    aa:c5:02:1d:bf:e8:9d:48:10:6d:3c:d8:31:52:67:
                    aa:9c:5d:82:fe:fd:f7:bb:12:a6:19:72:23:30:bb:
                    7b:56:56:96:81:94:30:eb:82:da:3b:c7:ec:1c:cb:
                    2a:39:d7:10:96:75:ce:c5:e0:cd:f3:d1:9e:2c:5a:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:DB:73:76:18:9C:B8:43:15:5C:23:F4:B2:E4:40:A7:37:3B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f74c387-0933-32c9-8491-695010903c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.241.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:77:4d:75:05:be:70:eb:fd:cd:2b:bc:54:f8:3e:5c:93:
         4a:0a:0d:2c:e3:44:12:8a:95:25:0b:31:41:e5:c4:82:e0:c0:
         46:48:1e:82:e1:40:c4:c4:65:d0:ae:8a:a2:75:b6:b2:47:a2:
         de:2c:27:a8:08:fe:aa:95:5b:af:55:c4:da:5d:bd:8a:7f:65:
         2f:df:1e:93:01:cc:ad:c2:dc:e2:20:c3:13:b6:80:43:66:59:
         84:44:e2:f0:c2:3a:b5:e4:df:32:79:07:a5:ea:49:00:6d:20:
         65:d9:83:21:46:66:88:d2:d8:a0:5a:58:98:51:d7:f8:13:fa:
         84:3f:1d:01:a0:e9:de:2d:8e:cb:7c:3c:08:fc:55:8a:dc:7c:
         2f:29:c9:95:5f:b4:8c:5c:33:ef:78:39:76:8e:c8:27:d4:2c:
         02:4e:6b:fd:5e:30:ef:17:e2:3b:fc:1d:39:17:01:79:c1:79:
         4a:ed:79:4b:f2:63:f0:db:5d:f2:8f:92:3f:94:78:09:c1:de:
         09:19:c9:e4:0c:c1:7c:0c:a5:de:ed:4a:57:5a:22:58:15:e3:
         d0:ab:49:ec:a6:02:be:4b:2f:00:0c:fd:6d:ef:54:17:01:35:
         38:df:01:90:6f:2e:77:22:39:ff:da:84:32:58:52:08:d9:57:
         90:de:61:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWCevB4kMbd9DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
YTJkNTAxNDgtZjVmZC00NjM0LTlmMDYtMDA2MjkzN2EzOWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgCT9GApaWulpC3nuLrSGlxYx2UNJ1ydnEzK
B2DDj3F9e/+oRJYw6xzRK5g+B4TUvPXtGy72isED05E6ezN3s5eMCKXCkHra3U8y
rCfFtEsDba+U0ygLLfuxC2yN0tLw1Tw3SObn4MOnNnefXmAO28a4eupqDRqULGuM
liFsHMqBV9HTmzVaBMvwzb8IwKZGwBP7qsmt6RuruyWl83lGZFXwYOn2AwCirO67
yIRV4K7mBrXZ6oOhaNU6rq0zVP3Keo2qxQIdv+idSBBtPNgxUmeqnF2C/v33uxKm
GXIjMLt7VlaWgZQw64LaO8fsHMsqOdcQlnXOxeDN89GeLFoBywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPo23N2GJy4QxVcI/Sy5ECnNztzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWY3NGMzODctMDkzMy0z
MmM5LTg0OTEtNjk1MDEwOTAzYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPHUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzld011Bb5w6/3NK7xU+D5ck0oKDSzjRBKKlSULMUHlxILgwEZIHoLh
QMTEZdCuiqJ1trJHot4sJ6gI/qqVW69VxNpdvYp/ZS/fHpMBzK3C3OIgwxO2gENm
WYRE4vDCOrXk3zJ5B6XqSQBtIGXZgyFGZojS2KBaWJhR1/gT+oQ/HQGg6d4tjst8
PAj8VYrcfC8pyZVftIxcM+94OXaOyCfULAJOa/1eMO8X4jv8HTkXAXnBeUrteUvy
Y/DbXfKPkj+UeAnB3gkZyeQMwXwMpd7tSldaIlgV49CrSeymAr5LLwAM/W3vVBcB
NTjfAZBvLnciOf/ahDJYUgjZV5DeYRM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:33:56 2026 by rpki-client