Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
File:                     91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (raw, json)
Hash identifier:          WAX246vGVb9MQCSPSShYBVvzwY7l5g6Kxtt0AbSaBd4=
Subject key identifier:   8D:22:81:D4:4A:5F:A9:35:67:DC:05:EF:D4:C1:62:4C:55:BA:A5:DF
Certificate issuer:       /CN=f3280fa0-3649-4902-978e-e7711edc5a33
Certificate serial:       010D0C9F4328584F6292DCCA7DFF43BA3F560000
Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     20473
IP address blocks:        141.195.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:dc:ca:7d:ff:43:ba:3f:56:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=fd78c46d-55fd-4026-a376-e77eb0108a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:91:16:b0:d9:98:f3:97:cf:df:92:97:ea:
                    dc:84:2c:c4:ad:27:24:c6:eb:24:d8:a2:91:12:bd:
                    52:2f:9f:f5:ae:d3:6b:78:5b:cb:85:b8:f6:56:f0:
                    b2:d4:54:71:6c:de:8c:3e:7a:f2:2e:4b:5a:33:a4:
                    0d:1c:60:73:c4:63:46:38:64:1a:71:d8:58:be:4d:
                    03:cf:92:d6:dd:d7:06:a9:ca:2d:f6:76:83:c2:12:
                    b8:12:53:ec:95:65:95:16:cd:fa:98:9c:aa:94:f6:
                    6f:4a:00:32:f6:09:e5:19:86:11:61:82:be:cd:15:
                    ac:74:eb:d4:0e:d5:75:2b:11:a1:18:d7:0a:2b:0b:
                    ba:a5:00:ec:24:80:2f:1b:0e:03:0f:39:36:fd:2d:
                    01:b0:aa:0d:1a:78:1d:5e:ec:66:9d:11:a0:0b:c6:
                    1f:fe:fe:71:0d:d4:c8:59:0c:4e:b9:b5:79:26:0f:
                    f8:19:0c:b1:6f:27:1e:15:1c:9b:ad:76:61:70:09:
                    c8:69:2d:59:bf:6b:a6:3b:1e:04:76:4a:b5:f0:cb:
                    c1:96:ee:56:29:fb:f5:29:bf:95:9d:98:8f:ad:3c:
                    f3:12:46:84:d4:56:d4:91:de:c3:35:fa:0c:bd:77:
                    c3:d0:8c:b3:fd:2c:29:02:74:26:c9:a6:de:2e:9f:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:81:D4:4A:5F:A9:35:67:DC:05:EF:D4:C1:62:4C:55:BA:A5:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl

            X509v3 Authority Key Identifier:
                keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:82:a1:f4:ca:f9:9d:69:11:1a:13:4b:24:db:aa:ce:c1:
         76:30:96:4f:7f:c9:1a:05:0d:47:61:6f:78:1f:63:1b:18:f1:
         32:27:56:df:79:7c:27:4e:74:a2:a5:13:f5:e4:8a:b7:a0:88:
         53:81:fe:46:c2:95:86:a8:b2:97:12:59:20:7f:6e:b3:37:3a:
         5d:41:b1:f3:91:28:13:47:d9:26:d6:30:e3:2d:51:a7:51:d6:
         3d:99:1f:b4:65:65:53:05:cd:0e:c9:d0:e8:a6:c6:06:84:d6:
         0a:0d:32:b3:92:a3:1c:14:e7:53:fb:f4:78:cb:d9:f3:e6:27:
         fe:6f:3c:04:41:82:ad:4b:be:04:21:73:40:33:92:65:74:5e:
         6c:97:d5:a3:d6:b3:10:ab:b7:6b:4a:a6:27:de:13:03:a5:80:
         a1:af:a1:05:fc:8f:fe:c7:70:51:29:dd:79:44:52:b1:28:c2:
         6b:99:73:da:eb:be:eb:9d:d7:75:1c:b5:53:05:8e:b5:10:5f:
         a4:c9:74:3c:d9:b1:f1:e4:68:de:0c:53:e7:e0:22:ad:76:ec:
         e4:62:a0:76:85:6d:18:f5:00:c1:fd:8a:5e:e3:7c:15:4f:da:
         89:81:f9:51:75:1a:b7:16:73:f4:a5:f0:dc:0b:23:1f:60:aa:
         43:ae:90:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktzKff9Duj9WAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1
YTMzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZmQ3OGM0NmQtNTVmZC00MDI2LWEzNzYtZTc3ZWIwMTA4YTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm2RFrDZmPOXz9+Sl+rchCzErSckxusk2KKR
Er1SL5/1rtNreFvLhbj2VvCy1FRxbN6MPnryLktaM6QNHGBzxGNGOGQacdhYvk0D
z5LW3dcGqcot9naDwhK4ElPslWWVFs36mJyqlPZvSgAy9gnlGYYRYYK+zRWsdOvU
DtV1KxGhGNcKKwu6pQDsJIAvGw4DDzk2/S0BsKoNGngdXuxmnRGgC8Yf/v5xDdTI
WQxOubV5Jg/4GQyxbyceFRybrXZhcAnIaS1Zv2umOx4Edkq18MvBlu5WKfv1Kb+V
nZiPrTzzEkaE1FbUkd7DNfoMvXfD0Iyz/SwpAnQmyabeLp8QwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0igdRKX6k1Z9wF79TBYkxVuqXfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4
MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvOTFhN2JlMzItYmNlMi0z
OWQwLWJjZjAtNmIyMTIyNTFlZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjMyODBmYTAtMzY0OS00OTAyLTk3
OGUtZTc3MTFlZGM1YTMzL2YzMjgwZmEwLTM2NDktNDkwMi05NzhlLWU3NzExZWRj
NWEzMy5jcmwwHwYDVR0jBBgwFoAUKoBY+t2PgjtyqgMIsQtqvU/ScyYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcx
MWVkYzVhMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcNkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG61gqH0yvmdaREaE0sk26rOwXYwlk9/yRoFDUdhb3gfYxsY8TInVt95
fCdOdKKlE/XkiregiFOB/kbClYaospcSWSB/brM3Ol1BsfORKBNH2SbWMOMtUadR
1j2ZH7RlZVMFzQ7J0OimxgaE1goNMrOSoxwU51P79HjL2fPmJ/5vPARBgq1LvgQh
c0AzkmV0XmyX1aPWsxCrt2tKpifeEwOlgKGvoQX8j/7HcFEp3XlEUrEowmuZc9rr
vuud13UctVMFjrUQX6TJdDzZsfHkaN4MU+fgIq127ORioHaFbRj1AMH9il7jfBVP
2omB+VF1GrcWc/Sl8NwLIx9gqkOukB0=
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:20:35 2026 by rpki-client