Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa
File:                     9add7b7f-c7fd-3099-989a-51e432449408.roa (raw, json)
Hash identifier:          A4ybyYDtFkagutDiJ9awRjwpb7lFXN8GiqNtp0YQ5bI=
Subject key identifier:   77:07:B1:93:3A:56:B2:13:47:49:30:CA:4C:2F:9B:64:59:74:1E:7D
Certificate issuer:       /CN=78ce7226-3ed1-455d-aa4a-f6f2b74f0448
Certificate serial:       010D0C9F4328584E4989D7489F6EDDBD04E38900
Authority key identifier: 86:05:95:B4:50:44:F5:38:FB:32:75:6E:8B:9A:73:08:47:61:A0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     19793
IP address blocks:        155.103.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d7:48:9f:6e:dd:bd:04:e3:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ce7226-3ed1-455d-aa4a-f6f2b74f0448
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=d7164528-28b8-472e-8dd0-f6ece675b8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:5c:67:a8:89:9b:2a:c2:07:ef:13:d7:71:
                    4a:2a:b8:45:41:f1:60:4f:0d:ff:f7:9f:d9:df:42:
                    30:87:81:f4:bd:84:bf:50:5f:bc:dc:11:cf:05:62:
                    2e:3c:3a:3e:ad:74:05:cd:5e:2f:ad:85:63:d4:67:
                    81:21:b4:9c:1d:53:20:84:e7:d4:e2:a8:82:16:c5:
                    62:7a:69:a6:8e:b1:a9:8d:04:e2:0c:ea:9f:16:60:
                    67:b2:c6:d3:77:c9:52:7b:84:60:21:ae:88:2e:de:
                    0a:a9:a2:91:c6:87:5a:ac:e5:b4:d0:70:47:ec:03:
                    16:e5:b3:ae:0b:f0:58:93:52:af:8d:98:06:16:0a:
                    f6:72:9d:52:91:ea:2b:23:b4:07:8a:5f:a7:ae:1e:
                    57:cd:45:16:71:f7:f5:74:77:e1:73:be:66:88:e2:
                    25:1c:47:63:f7:54:61:b6:e7:17:2c:e2:20:bf:3c:
                    68:fb:c4:bd:b8:96:ea:a5:11:a0:23:13:ad:a8:73:
                    9b:6c:80:50:16:f8:cb:cb:e7:54:0e:ae:0d:54:ac:
                    2e:35:12:d2:13:21:9c:dc:43:bd:53:d7:bc:9c:47:
                    f1:cd:5a:ff:f0:b0:2f:cb:a2:d2:c6:92:ac:26:6a:
                    0e:27:26:74:7f:3a:af:e7:cb:b9:c0:2b:17:1a:d7:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:B1:93:3A:56:B2:13:47:49:30:CA:4C:2F:9B:64:59:74:1E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.crl

            X509v3 Authority Key Identifier:
                keyid:86:05:95:B4:50:44:F5:38:FB:32:75:6E:8B:9A:73:08:47:61:A0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:16:ad:84:ee:33:00:23:f3:8b:4e:5d:c0:75:e8:66:d4:
         e7:1b:9a:e7:b2:09:8e:f7:a8:80:d4:93:cd:2a:99:58:4e:27:
         58:db:bf:dd:26:c9:3e:38:71:5f:39:9a:3a:3c:17:3f:3b:bc:
         22:53:aa:de:ce:1b:b4:ed:3f:32:29:86:a9:cb:cb:7f:55:5b:
         72:df:11:ef:3d:85:71:1b:91:d2:64:e9:06:01:b3:63:4b:25:
         c3:7a:c9:fc:6c:a3:87:17:9c:a7:24:c5:d2:18:6b:10:dc:cc:
         f5:bb:fe:b2:38:5f:f4:3d:25:b7:59:3a:33:95:e8:37:ed:f4:
         89:21:ba:41:22:24:63:3e:05:1f:53:aa:93:3b:ce:e4:03:8d:
         37:b9:4a:e2:33:4c:fc:3e:08:a3:05:d7:90:02:64:89:6b:9f:
         55:95:ad:8a:51:76:5f:1d:36:66:1a:ce:14:0e:47:ec:2b:1d:
         d6:f9:69:f7:ce:6e:1f:0d:92:b6:8d:44:7e:a7:78:1d:9d:f5:
         a9:3a:91:f6:b6:b0:2d:42:73:5e:11:3c:29:d0:04:91:5b:3b:
         dd:83:4c:78:98:af:dc:6d:94:6e:8b:d9:d6:b2:35:b4:e5:27:
         79:93:ae:d1:12:74:3f:6f:40:c6:14:10:f1:65:1e:f9:d5:ad:
         56:9f:b3:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JiddIn27dvQTjiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhjZTcyMjYtM2VkMS00NTVkLWFhNGEtZjZmMmI3NGYw
NDQ4MB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk
ZDcxNjQ1MjgtMjhiOC00NzJlLThkZDAtZjZlY2U2NzViOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVhcZ6iJmyrCB+8T13FKKrhFQfFgTw3/95/Z
30Iwh4H0vYS/UF+83BHPBWIuPDo+rXQFzV4vrYVj1GeBIbScHVMghOfU4qiCFsVi
emmmjrGpjQTiDOqfFmBnssbTd8lSe4RgIa6ILt4KqaKRxodarOW00HBH7AMW5bOu
C/BYk1KvjZgGFgr2cp1SkeorI7QHil+nrh5XzUUWcff1dHfhc75miOIlHEdj91Rh
tucXLOIgvzxo+8S9uJbqpRGgIxOtqHObbIBQFvjLy+dUDq4NVKwuNRLSEyGc3EO9
U9e8nEfxzVr/8LAvy6LSxpKsJmoOJyZ0fzqv58u5wCsXGtemRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcHsZM6VrITR0kwykwvm2RZdB59MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83OGNl
NzIyNi0zZWQxLTQ1NWQtYWE0YS1mNmYyYjc0ZjA0NDgvOWFkZDdiN2YtYzdmZC0z
MDk5LTk4OWEtNTFlNDMyNDQ5NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzhjZTcyMjYtM2VkMS00NTVkLWFh
NGEtZjZmMmI3NGYwNDQ4Lzc4Y2U3MjI2LTNlZDEtNDU1ZC1hYTRhLWY2ZjJiNzRm
MDQ0OC5jcmwwHwYDVR0jBBgwFoAUhgWVtFBE9Tj7MnVui5pzCEdhoNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83OGNlNzIyNi0zZWQxLTQ1NWQtYWE0YS1mNmYy
Yjc0ZjA0NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm2eMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpoFq2E7jMAI/OLTl3Adehm1OcbmueyCY73qIDUk80qmVhOJ1jbv90m
yT44cV85mjo8Fz87vCJTqt7OG7TtPzIphqnLy39VW3LfEe89hXEbkdJk6QYBs2NL
JcN6yfxso4cXnKckxdIYaxDczPW7/rI4X/Q9JbdZOjOV6Dft9IkhukEiJGM+BR9T
qpM7zuQDjTe5SuIzTPw+CKMF15ACZIlrn1WVrYpRdl8dNmYazhQOR+wrHdb5affO
bh8NkraNRH6neB2d9ak6kfa2sC1Cc14RPCnQBJFbO92DTHiYr9xtlG6L2dayNbTl
J3mTrtESdD9vQMYUEPFlHvnVrVafs4s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:08 2026 by rpki-client