Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8de78c35-adf3-368b-abb3-88135d024add.roa
File:                     8de78c35-adf3-368b-abb3-88135d024add.roa (raw, json)
Hash identifier:          fWUHCSGGqQKFmDWjL3qZQjbX6YRepxDEentrnzleNik=
Subject key identifier:   75:46:48:C6:84:C7:C9:91:BC:DB:91:F1:7B:65:55:CB:D8:9F:5B:EE
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584F6F22C50A001BA0AC7909E780
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8de78c35-adf3-368b-abb3-88135d024add.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     14555
IP address blocks:        162.210.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:c5:0a:00:1b:a0:ac:79:09:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=2c0a66ad-f1b7-4613-90b9-5fe94f510569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:65:3c:ca:b9:9f:86:d7:87:e9:0a:b7:18:
                    03:70:7d:e2:19:e5:ae:37:c4:1f:a6:84:af:a9:5f:
                    c9:ac:34:3a:e1:52:47:ac:44:1d:88:6b:fc:4c:2b:
                    34:c4:f3:23:9f:93:4c:f6:38:af:50:18:9b:57:76:
                    eb:04:6e:b4:0a:97:cf:5f:d2:46:9a:65:19:79:4e:
                    58:f4:28:c1:1b:e7:b6:2a:02:de:78:a7:09:3f:4d:
                    da:f0:c2:b1:87:7e:9a:d0:a6:16:24:cc:f8:77:47:
                    0e:99:3b:84:0a:d9:ec:d4:c3:d2:d4:5b:27:af:dd:
                    9a:e0:1e:01:a5:0d:4d:4e:db:98:68:95:dc:01:35:
                    b9:53:21:3f:a8:7f:a0:57:f4:40:6d:b2:49:56:bc:
                    fc:88:c8:55:9f:16:6c:5d:6f:06:28:da:5b:78:f2:
                    f1:0c:80:91:3f:8f:fc:86:cb:f5:db:1d:28:de:cc:
                    2e:8b:b0:f4:95:ee:28:10:2b:98:d2:6d:4d:1b:69:
                    e7:b7:9c:0c:b9:59:ff:90:4f:5c:e1:5a:6a:dc:d7:
                    eb:00:d5:ce:59:ae:05:f6:db:80:d1:40:78:47:fa:
                    41:72:f5:cf:b1:d3:bd:48:f1:63:56:5d:63:a0:30:
                    67:fc:27:f6:55:0d:40:a6:03:f1:a6:fd:d0:0a:4a:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:48:C6:84:C7:C9:91:BC:DB:91:F1:7B:65:55:CB:D8:9F:5B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8de78c35-adf3-368b-abb3-88135d024add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:b9:fd:55:05:bb:0d:e4:d2:31:b6:f5:50:18:cc:65:65:
         ee:03:25:fb:e2:22:00:0d:30:18:ad:f4:36:2b:b4:47:6e:f1:
         af:f9:4e:26:41:ce:ab:e9:f8:8d:e4:c9:88:18:e2:c1:44:6a:
         16:e1:c2:90:26:88:b4:d9:2d:aa:56:65:8d:ab:b4:bc:f1:66:
         2f:40:9c:00:52:93:6b:99:0f:bb:1c:e6:28:f2:32:87:65:ff:
         4d:b3:09:4b:56:27:33:14:b9:61:ff:7d:0c:91:fa:bf:59:65:
         af:5e:b0:a5:8d:96:cf:28:ae:3b:ec:40:02:06:dc:4f:48:d4:
         2c:0b:5c:66:fc:32:96:32:2a:7d:bf:f0:b4:5d:85:20:58:1a:
         63:3b:b5:4d:5c:4b:46:91:bc:59:f4:35:1c:10:bd:69:22:1b:
         f8:8f:a8:63:ae:c9:e5:b8:b9:ed:de:06:3b:56:a7:25:bc:46:
         7a:6b:75:b2:8b:59:2d:fe:5e:96:e2:2c:52:d8:ea:81:70:a0:
         5a:8e:c6:1f:6e:59:9e:df:78:ed:35:aa:b1:33:ed:2a:3c:a3:
         6e:f5:1e:f6:7a:1b:0f:f8:e3:b8:60:01:a1:99:03:aa:64:0e:
         f1:5a:a0:28:af:d7:73:2e:e3:14:07:38:3a:2d:1b:c6:67:3a:
         ca:a3:33:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIsUKABugrHkJ54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
MmMwYTY2YWQtZjFiNy00NjEzLTkwYjktNWZlOTRmNTEwNTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ZlPMq5n4bXh+kKtxgDcH3iGeWuN8QfpoSv
qV/JrDQ64VJHrEQdiGv8TCs0xPMjn5NM9jivUBibV3brBG60CpfPX9JGmmUZeU5Y
9CjBG+e2KgLeeKcJP03a8MKxh36a0KYWJMz4d0cOmTuECtns1MPS1Fsnr92a4B4B
pQ1NTtuYaJXcATW5UyE/qH+gV/RAbbJJVrz8iMhVnxZsXW8GKNpbePLxDICRP4/8
hsv12x0o3swui7D0le4oECuY0m1NG2nnt5wMuVn/kE9c4Vpq3NfrANXOWa4F9tuA
0UB4R/pBcvXPsdO9SPFjVl1joDBn/Cf2VQ1ApgPxpv3QCkqLZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVGSMaEx8mRvNuR8XtlVcvYn1vuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvOGRlNzhjMzUtYWRmMy0z
NjhiLWFiYjMtODgxMzVkMDI0YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotJjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABH+uf1VBbsN5NIxtvVQGMxlZe4DJfviIgANMBit9DYrtEdu8a/5TiZB
zqvp+I3kyYgY4sFEahbhwpAmiLTZLapWZY2rtLzxZi9AnABSk2uZD7sc5ijyModl
/02zCUtWJzMUuWH/fQyR+r9ZZa9esKWNls8orjvsQAIG3E9I1CwLXGb8MpYyKn2/
8LRdhSBYGmM7tU1cS0aRvFn0NRwQvWkiG/iPqGOuyeW4ue3eBjtWpyW8RnprdbKL
WS3+XpbiLFLY6oFwoFqOxh9uWZ7feO01qrEz7So8o271HvZ6Gw/447hgAaGZA6pk
DvFaoCiv13Mu4xQHODotG8ZnOsqjM6k=
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:54:16 2026 by rpki-client