Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/9799f6ab-6402-3af5-9ff4-a32baee7b968.roa
File:                     9799f6ab-6402-3af5-9ff4-a32baee7b968.roa (raw, json)
Hash identifier:          Kg4/NakgiTs/Acr6ETTLVP+jZ3TZYFK4qefH97zqDTY=
Subject key identifier:   2F:DF:7F:19:A4:97:35:0A:C5:A9:D3:3F:2B:EE:7A:C6:20:F7:2D:DE
Certificate issuer:       /CN=1e1de9e8-ffb4-4c1f-a311-e4e0c0849176
Certificate serial:       010D0C9F4328584F920E0BC3821CD4C0607073E0
Authority key identifier: 21:A2:48:86:01:21:83:0A:EA:B5:D8:81:70:BE:54:B6:A5:5C:77:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/9799f6ab-6402-3af5-9ff4-a32baee7b968.roa
Signing time:             Wed 21 Oct 2026 01:11:46 +0000
ROA not before:           Wed 21 Oct 2026 01:11:46 +0000
ROA not after:            Tue 19 Jan 2027 02:11:46 +0000
asID:                     6079
IP address blocks:        143.203.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:0e:0b:c3:82:1c:d4:c0:60:70:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1de9e8-ffb4-4c1f-a311-e4e0c0849176
        Validity
            Not Before: Oct 21 01:11:46 2026 GMT
            Not After : Jan 19 02:11:46 2027 GMT
        Subject: CN=a9ec94df-d93a-4657-bb79-a6c5cbc8ee1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:a0:d6:99:53:73:13:ad:a9:c9:d9:e3:dd:
                    63:24:ee:60:00:5a:47:13:2a:69:3e:c4:ea:24:ad:
                    91:ad:6a:d9:97:80:3b:3d:f8:ec:ed:e0:dc:a2:cc:
                    82:bf:e3:7a:e4:a6:45:71:fb:0d:bd:87:28:5a:55:
                    7e:65:17:b6:68:28:14:6f:3e:c3:70:06:a8:7d:35:
                    5e:ea:86:66:27:53:bf:92:29:fe:43:46:ca:e1:7b:
                    56:4d:3a:bc:30:b1:08:ae:3b:70:8a:da:0f:b6:f6:
                    49:61:03:80:99:dd:59:eb:7c:0f:0b:57:cd:6b:91:
                    97:71:86:73:46:6e:5e:f9:4f:26:9d:1b:10:97:5a:
                    08:ed:03:ab:60:4f:73:b2:42:37:0e:55:46:e1:80:
                    f7:30:01:14:a2:fe:7e:43:5a:94:fd:7d:e8:95:e0:
                    cf:5a:09:12:db:b6:0e:00:e8:34:b5:62:4e:74:24:
                    b2:e2:19:68:86:9d:35:19:94:c1:f2:b9:db:1e:d0:
                    80:22:b3:17:81:ba:9a:0a:fc:c7:73:38:25:cb:d7:
                    dc:ff:b1:a2:af:bf:4b:07:a9:b0:0c:63:ad:13:1d:
                    72:e1:23:21:f6:5b:e8:a4:de:83:bf:58:17:a7:34:
                    18:d1:f7:7f:10:48:1c:58:d8:8f:70:b9:ce:dc:fb:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:7F:19:A4:97:35:0A:C5:A9:D3:3F:2B:EE:7A:C6:20:F7:2D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/9799f6ab-6402-3af5-9ff4-a32baee7b968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.crl

            X509v3 Authority Key Identifier:
                keyid:21:A2:48:86:01:21:83:0A:EA:B5:D8:81:70:BE:54:B6:A5:5C:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:50:95:f7:07:ea:97:fc:d3:26:47:81:b6:0f:88:66:2b:
         e5:08:9d:77:5a:ee:1a:67:02:77:fd:50:88:91:73:d7:af:2c:
         4c:27:aa:68:9e:15:c0:52:42:7d:be:0b:4f:28:52:68:8e:5d:
         da:64:47:57:f1:94:ed:0d:8f:cf:a1:07:98:91:dc:49:85:c3:
         ed:c2:20:88:e7:11:4f:14:74:d0:45:3b:91:a0:54:5d:95:9d:
         de:50:e8:b2:7a:92:40:eb:d9:3f:6e:26:60:50:84:2b:88:0e:
         5b:5a:09:88:01:eb:e1:ff:1e:32:2a:30:a2:5c:b2:1d:c1:c2:
         b5:8d:26:14:bb:16:3f:9e:6e:38:0c:42:86:c2:f0:70:e2:2f:
         ef:2f:d6:07:d6:04:63:73:e7:ca:0d:79:48:09:06:ad:88:c6:
         1d:6a:a7:02:d8:69:82:2a:bd:a8:b9:1d:41:78:63:91:4e:09:
         14:34:64:05:3d:f1:f0:62:45:37:49:48:0a:b8:f6:4c:1d:fa:
         37:d5:ce:e6:cf:d9:d6:a6:8f:de:5b:75:af:00:66:d9:a7:9e:
         e3:3f:bb:0e:78:41:ef:06:8d:46:c1:5f:ea:df:19:fa:dc:cd:
         28:fa:c2:3c:37:aa:da:ff:ee:2c:b1:09:dc:4c:ac:75:3f:8b:
         ec:b4:d9:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SDgvDghzUwGBwc+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUxZGU5ZTgtZmZiNC00YzFmLWEzMTEtZTRlMGMwODQ5
MTc2MB4XDTI2MTAyMTAxMTE0NloXDTI3MDExOTAyMTE0NlowLzEtMCsGA1UEAxMk
YTllYzk0ZGYtZDkzYS00NjU3LWJiNzktYTZjNWNiYzhlZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAqg1plTcxOtqcnZ491jJO5gAFpHEyppPsTq
JK2RrWrZl4A7Pfjs7eDcosyCv+N65KZFcfsNvYcoWlV+ZRe2aCgUbz7DcAaofTVe
6oZmJ1O/kin+Q0bK4XtWTTq8MLEIrjtwitoPtvZJYQOAmd1Z63wPC1fNa5GXcYZz
Rm5e+U8mnRsQl1oI7QOrYE9zskI3DlVG4YD3MAEUov5+Q1qU/X3oleDPWgkS27YO
AOg0tWJOdCSy4hlohp01GZTB8rnbHtCAIrMXgbqaCvzHczgly9fc/7Gir79LB6mw
DGOtEx1y4SMh9lvopN6Dv1gXpzQY0fd/EEgcWNiPcLnO3PtV1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/ffxmklzUKxanTPyvuesYg9y3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xZTFk
ZTllOC1mZmI0LTRjMWYtYTMxMS1lNGUwYzA4NDkxNzYvOTc5OWY2YWItNjQwMi0z
YWY1LTlmZjQtYTMyYmFlZTdiOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWUxZGU5ZTgtZmZiNC00YzFmLWEz
MTEtZTRlMGMwODQ5MTc2LzFlMWRlOWU4LWZmYjQtNGMxZi1hMzExLWU0ZTBjMDg0
OTE3Ni5jcmwwHwYDVR0jBBgwFoAUIaJIhgEhgwrqtdiBcL5UtqVcd8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8xZTFkZTllOC1mZmI0LTRjMWYtYTMxMS1lNGUw
YzA4NDkxNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8sgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+KUJX3B+qX/NMmR4G2D4hmK+UInXda7hpnAnf9UIiRc9evLEwnqmie
FcBSQn2+C08oUmiOXdpkR1fxlO0Nj8+hB5iR3EmFw+3CIIjnEU8UdNBFO5GgVF2V
nd5Q6LJ6kkDr2T9uJmBQhCuIDltaCYgB6+H/HjIqMKJcsh3BwrWNJhS7Fj+ebjgM
QobC8HDiL+8v1gfWBGNz58oNeUgJBq2Ixh1qpwLYaYIqvai5HUF4Y5FOCRQ0ZAU9
8fBiRTdJSAq49kwd+jfVzubP2damj95bda8AZtmnnuM/uw54Qe8GjUbBX+rfGfrc
zSj6wjw3qtr/7iyxCdxMrHU/i+y02do=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:38 2026 by rpki-client