Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa
File:                     e1b26021-ae16-3ae8-a738-804e93838156.roa (raw, json)
Hash identifier:          sSZOjkLrqJe4QrnecOAMAAI8xJbuFvA+BIbm8RM6RNA=
Subject key identifier:   CA:9C:1E:48:69:E7:31:AA:5C:2A:52:7E:85:E8:45:97:C2:73:0E:AB
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584F9E9883A3D5B53274F495E000
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     394080
IP address blocks:        172.110.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:83:a3:d5:b5:32:74:f4:95:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=d861c55f-47b7-43d8-bed4-73ad499676a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:b6:c7:5a:8e:6a:c0:e4:a0:a2:35:06:4a:
                    37:4d:01:b1:29:81:5f:d1:0a:0b:e2:c7:63:cd:c6:
                    80:13:f4:26:ca:07:a4:3d:ae:b6:44:cd:ff:db:05:
                    f4:f5:a2:ce:8a:a0:84:d0:58:bf:c9:c1:dc:4b:ef:
                    59:3e:ba:ab:7b:74:7f:5f:ed:5d:76:a2:76:00:8e:
                    86:0a:a9:ef:07:07:ef:cc:62:26:12:8c:ef:b6:13:
                    f9:b9:46:ae:98:61:79:62:fc:90:89:ff:b3:55:0f:
                    48:b6:51:e2:e8:27:38:a3:6e:49:fa:58:71:f8:45:
                    58:75:4c:ab:e1:c7:76:b2:0c:ce:28:84:26:a0:fe:
                    8a:20:bd:2f:03:89:36:ab:00:a8:a9:dc:f3:12:a3:
                    20:25:6b:e6:3f:26:c6:b0:95:00:b5:24:12:41:ab:
                    75:9b:0e:79:6b:ba:bc:0b:ef:cb:b7:d2:9f:02:e9:
                    06:91:96:98:ef:bb:8f:cb:51:ae:96:ee:20:fc:c6:
                    7e:1f:f3:74:99:2c:ea:36:4e:1c:0b:28:44:ad:8f:
                    7c:28:74:4e:60:e9:e4:18:d6:a2:16:d3:5c:da:f8:
                    8a:fa:28:6d:25:24:b6:e2:f5:0b:d9:1a:8e:a9:8e:
                    13:f7:7e:f8:3e:e2:ee:25:32:33:01:19:73:2e:96:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9C:1E:48:69:E7:31:AA:5C:2A:52:7E:85:E8:45:97:C2:73:0E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:60:a6:46:c9:b9:e5:89:b7:0c:50:60:9c:78:58:33:24:
         0a:f3:ba:12:e6:8b:b7:61:ca:46:48:5b:d2:65:90:e3:f8:83:
         73:cd:3f:ea:9d:08:23:4b:dd:a7:20:d8:93:47:ce:2e:a6:0a:
         03:7e:72:cd:6a:16:7a:2c:6d:c5:59:e9:f5:b8:64:07:b1:1f:
         7a:40:af:a8:04:12:53:27:62:ad:47:61:0f:33:a0:88:5c:35:
         2e:cc:b1:05:24:ec:c9:25:0c:1a:f8:ca:5f:6a:59:87:a0:5b:
         0e:22:87:d6:75:5b:24:d6:dc:b4:8a:7b:db:f0:78:fd:02:7a:
         65:91:3c:49:00:c3:c5:22:ce:d9:d4:fb:08:55:01:32:a3:47:
         6d:07:b4:de:7a:02:08:a4:d0:b5:0b:97:d9:da:49:32:b3:c0:
         18:6c:29:07:03:6f:ee:47:ea:cb:1c:e8:09:12:1c:3c:25:40:
         c3:5e:d8:47:2a:16:20:48:55:22:5a:74:02:4a:40:90:79:25:
         40:af:51:61:59:e2:7b:a4:bb:3e:a4:1e:58:bc:ac:15:cb:03:
         90:e1:68:98:5e:da:cb:29:d5:6f:de:3b:d3:46:f1:7f:b8:8b:
         e7:cf:b5:5d:d4:c7:85:df:09:ba:85:2f:7a:3f:bb:6b:4e:4e:
         c2:b6:25:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emIOj1bUydPSV4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdmNDI2YmMtZTAxNi00ZTMxLTg0MjQtYmM3Y2I4NmE4
MDhlMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk
ZDg2MWM1NWYtNDdiNy00M2Q4LWJlZDQtNzNhZDQ5OTY3NmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2W2x1qOasDkoKI1Bko3TQGxKYFf0QoL4sdj
zcaAE/QmygekPa62RM3/2wX09aLOiqCE0Fi/ycHcS+9ZPrqre3R/X+1ddqJ2AI6G
CqnvBwfvzGImEozvthP5uUaumGF5YvyQif+zVQ9ItlHi6Cc4o25J+lhx+EVYdUyr
4cd2sgzOKIQmoP6KIL0vA4k2qwCoqdzzEqMgJWvmPybGsJUAtSQSQat1mw55a7q8
C+/Lt9KfAukGkZaY77uPy1Gulu4g/MZ+H/N0mSzqNk4cCyhErY98KHROYOnkGNai
FtNc2viK+ihtJSS24vUL2RqOqY4T9374PuLuJTIzARlzLpbbZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqcHkhp5zGqXCpSfoXoRZfCcw6rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0
MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdjYjg2YTgwOGUvZTFiMjYwMjEtYWUxNi0z
YWU4LWE3MzgtODA0ZTkzODM4MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmNDI2YmMtZTAxNi00ZTMxLTg0
MjQtYmM3Y2I4NmE4MDhlL2E3ZjQyNmJjLWUwMTYtNGUzMS04NDI0LWJjN2NiODZh
ODA4ZS5jcmwwHwYDVR0jBBgwFoAUGw6WAE4CF+OdBPmjHZ7ZA+pr0HEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdj
Yjg2YTgwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG4qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHObYKZGybnlibcMUGCceFgzJArzuhLmi7dhykZIW9JlkOP4g3PNP+qd
CCNL3acg2JNHzi6mCgN+cs1qFnosbcVZ6fW4ZAexH3pAr6gEElMnYq1HYQ8zoIhc
NS7MsQUk7MklDBr4yl9qWYegWw4ih9Z1WyTW3LSKe9vweP0CemWRPEkAw8UiztnU
+whVATKjR20HtN56Agik0LULl9naSTKzwBhsKQcDb+5H6ssc6AkSHDwlQMNe2Ecq
FiBIVSJadAJKQJB5JUCvUWFZ4nukuz6kHli8rBXLA5DhaJhe2ssp1W/eO9NG8X+4
i+fPtV3Ux4XfCbqFL3o/u2tOTsK2JUQ=
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:59:06 2026 by rpki-client