Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa
File:                     ec596c97-4aa0-3907-9a93-ca179f8ef492.roa (raw, json)
Hash identifier:          KyScZn9Y4AOXfOq0dMYr0ab8zYnMffGw/vNCJ0JkQ2M=
Subject key identifier:   F1:21:7C:4D:09:EC:86:66:E1:A2:CB:67:A0:03:69:7F:5A:F8:97:37
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584EA79994F5AAA028032D012500
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400110
IP address blocks:        184.169.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:94:f5:aa:a0:28:03:2d:01:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=98a90ae5-3af7-4c7a-b8b9-f2b367cd63de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:26:ac:a5:32:42:8d:a8:46:da:c9:29:b2:
                    8c:9a:05:10:bf:93:6e:de:28:05:aa:c8:55:36:35:
                    1f:20:0f:bf:c6:51:11:d2:be:74:b5:7b:14:01:a9:
                    1d:eb:09:6a:4c:07:61:71:09:60:2c:d9:f2:aa:87:
                    34:9d:69:15:d3:ff:f9:75:a4:78:63:39:3f:48:50:
                    96:35:77:34:6a:74:c5:0b:62:85:42:f8:73:cf:ad:
                    f0:d3:fb:04:5d:f7:ab:97:30:11:4e:73:2e:6c:4d:
                    11:70:8a:34:37:83:b3:83:b4:ff:af:fa:37:d9:ae:
                    c9:3d:60:7b:9f:7f:0c:63:23:1f:ba:88:06:92:2e:
                    be:fd:3d:cf:f3:29:63:3a:7e:d8:3a:62:3b:a2:fb:
                    1d:88:21:45:34:e8:c0:d8:14:c2:46:94:61:15:78:
                    b2:da:14:4c:cb:de:04:5d:bf:91:f3:c8:29:68:c7:
                    22:b0:6f:99:d0:93:d0:9a:4a:37:6e:1d:81:c0:ac:
                    f0:78:d4:56:3a:d9:26:e4:69:aa:2d:2a:dd:1a:63:
                    1a:5b:20:ac:35:9b:cf:93:11:ba:7e:c9:97:85:91:
                    ba:ca:5c:4a:31:4b:77:24:90:bc:d4:4c:71:11:c4:
                    ab:ab:c3:0a:82:ef:c0:22:ad:08:b5:d4:34:93:7b:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:21:7C:4D:09:EC:86:66:E1:A2:CB:67:A0:03:69:7F:5A:F8:97:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:95:45:4b:4e:2c:0b:82:bc:80:9d:fd:6c:d5:7f:16:04:ea:
         a3:78:19:29:70:eb:03:8e:1a:ee:dd:29:af:44:94:c3:19:c9:
         47:57:72:6a:61:c0:56:e8:57:8f:33:62:f6:3c:fa:b6:9e:18:
         0a:f6:e4:7b:12:95:29:b0:07:19:f5:eb:e6:ae:a5:6c:a5:ff:
         e7:d5:cd:c9:0f:e7:b5:72:25:ad:3c:da:be:c2:12:02:0b:50:
         8f:fd:5b:ce:40:98:92:8f:ce:ae:43:b2:8c:98:c6:de:79:af:
         d2:b4:6c:ac:aa:cb:ed:bc:eb:20:74:0e:11:5f:46:31:83:c8:
         03:f5:d0:99:d0:6f:8f:06:5c:f1:8d:fb:6c:44:bc:9b:55:83:
         ec:4e:fb:ba:5b:8a:d4:ec:1d:3f:2b:bd:73:9c:15:ff:22:96:
         da:89:9e:87:fd:b2:06:e0:8f:ff:34:9f:33:db:d3:7f:a5:8e:
         36:0e:13:89:a3:18:40:21:f0:c4:11:cc:be:ef:74:a9:ef:ad:
         27:bd:2e:f1:0d:ce:7a:bc:01:f1:5b:76:ce:6c:d7:a0:ac:58:
         53:29:e0:76:88:5c:a0:15:ab:1c:4e:75:a9:ec:68:fb:03:9f:
         21:b3:56:bd:90:86:2d:86:40:89:f2:82:6c:38:e3:bb:6d:e7:
         44:21:58:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmZT1qqAoAy0BJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk
Mjk4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OThhOTBhZTUtM2FmNy00YzdhLWI4YjktZjJiMzY3Y2Q2M2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzkmrKUyQo2oRtrJKbKMmgUQv5Nu3igFqshV
NjUfIA+/xlER0r50tXsUAakd6wlqTAdhcQlgLNnyqoc0nWkV0//5daR4Yzk/SFCW
NXc0anTFC2KFQvhzz63w0/sEXferlzARTnMubE0RcIo0N4Ozg7T/r/o32a7JPWB7
n38MYyMfuogGki6+/T3P8yljOn7YOmI7ovsdiCFFNOjA2BTCRpRhFXiy2hRMy94E
Xb+R88gpaMcisG+Z0JPQmko3bh2BwKzweNRWOtkm5GmqLSrdGmMaWyCsNZvPkxG6
fsmXhZG6ylxKMUt3JJC81ExxEcSrq8MKgu/AIq0ItdQ0k3vNMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEhfE0J7IZm4aLLZ6ADaX9a+Jc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm
ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvZWM1OTZjOTctNGFhMC0z
OTA3LTlhOTMtY2ExNzlmOGVmNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz
OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi
ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj
NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuKkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiVRUtOLAuCvICd/WzVfxYE6qN4GSlw6wOOGu7dKa9ElMMZyUdXcmph
wFboV48zYvY8+raeGAr25HsSlSmwBxn16+aupWyl/+fVzckP57VyJa082r7CEgIL
UI/9W85AmJKPzq5DsoyYxt55r9K0bKyqy+286yB0DhFfRjGDyAP10JnQb48GXPGN
+2xEvJtVg+xO+7pbitTsHT8rvXOcFf8iltqJnof9sgbgj/80nzPb03+ljjYOE4mj
GEAh8MQRzL7vdKnvrSe9LvENznq8AfFbds5s16CsWFMp4HaIXKAVqxxOdansaPsD
nyGzVr2Qhi2GQInygmw447tt50QhWIk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:35 2026 by rpki-client