Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42d7b3e6-c038-3198-8854-5b282bf094a5.roa
File:                     42d7b3e6-c038-3198-8854-5b282bf094a5.roa (raw, json)
Hash identifier:          1fcSLlkB6ad0+XEtXuSw0sdqpqutneJ5wqapGLZh2TM=
Subject key identifier:   A1:3A:15:6D:F1:3A:26:14:25:4A:D2:A2:F8:35:4B:16:CA:AF:7D:76
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4974D4E4FC54D67D98A95938
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42d7b3e6-c038-3198-8854-5b282bf094a5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.121.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d4:e4:fc:54:d6:7d:98:a9:59:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ec1de8a1-fe35-45fe-830a-70356f73d867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:ea:fb:1b:e0:2b:99:92:94:32:43:00:06:
                    33:5d:73:25:6c:5a:cf:50:86:ae:f4:08:b3:3c:4a:
                    b8:d4:03:e0:ff:a9:c2:52:7d:5e:de:90:b9:6f:e9:
                    02:7e:f7:5c:a7:6b:84:e1:14:9f:7e:75:96:58:c6:
                    f4:7a:89:64:99:e9:d3:dd:13:d0:63:30:07:09:17:
                    70:db:82:58:00:19:37:8a:66:1e:e1:08:ff:ef:1e:
                    56:78:93:40:d6:85:7b:5f:78:7f:40:1c:f3:1c:6d:
                    0f:f3:f8:89:35:d2:50:9a:2a:89:a5:73:db:85:42:
                    98:30:13:84:de:5e:e2:08:a4:cc:8f:ec:37:14:cd:
                    4e:17:e6:5f:41:8a:5d:5d:63:f0:a4:0f:f3:89:da:
                    59:d4:8d:e7:6e:01:92:27:84:f9:6f:e5:0a:74:f3:
                    39:1a:f5:ec:9f:a6:e2:43:61:3f:aa:1e:5c:bb:f1:
                    b9:49:c2:dc:fb:e7:95:b1:ed:fa:db:99:3b:69:16:
                    c6:70:4d:cc:b4:89:dc:b1:66:18:88:a3:53:9b:50:
                    a0:68:f3:f0:64:01:37:a9:62:f4:b3:03:2b:c4:25:
                    21:6f:c2:86:6f:b8:e5:c9:55:67:5a:b6:0d:90:8f:
                    19:e1:27:1e:aa:99:e6:a8:9e:a0:a7:8e:eb:59:3e:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3A:15:6D:F1:3A:26:14:25:4A:D2:A2:F8:35:4B:16:CA:AF:7D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42d7b3e6-c038-3198-8854-5b282bf094a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:59:64:5a:4c:55:64:8a:20:a7:c7:a8:05:76:f2:1e:71:f7:
         7d:74:91:c2:ca:ba:a3:b3:0f:e8:33:28:6d:28:d0:43:57:c9:
         2c:fe:3f:3a:ad:eb:d1:3f:f6:61:d7:7b:88:0e:c9:3a:c3:8f:
         d9:38:21:57:06:ee:fe:b3:cb:c9:15:70:51:10:a4:17:2f:0b:
         df:72:4c:d3:3d:e7:53:e2:1f:cf:56:9a:c8:ed:57:7a:46:c1:
         9a:3d:1b:70:77:df:e4:b2:aa:3e:97:ce:3d:86:4f:7f:71:00:
         7f:94:5c:e7:db:9b:19:7e:0e:46:4d:05:39:37:5a:1a:b1:9d:
         b7:19:79:f6:53:eb:3a:13:2f:a4:76:83:c0:e9:a2:db:f3:01:
         69:93:7a:8c:e6:14:53:12:2a:0e:6b:56:e7:80:c9:0f:d2:2c:
         8b:af:72:4a:bc:60:c0:02:26:45:43:50:56:3e:23:e0:51:af:
         42:85:24:cd:b5:1a:78:74:86:26:0b:fc:44:ce:f4:f5:c5:8d:
         62:57:93:fb:29:33:51:f8:f4:a7:25:3b:6d:69:8b:4b:06:3c:
         ed:81:ee:71:f6:46:d6:01:21:34:1f:e2:f0:3d:05:2f:0c:90:
         14:d4:ce:86:67:fd:ec:72:b6:cc:f5:cb:7c:52:1f:b1:17:9d:
         c5:bf:f6:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNTk/FTWfZipWTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWMxZGU4YTEtZmUzNS00NWZlLTgzMGEtNzAzNTZmNzNkODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2nq+xvgK5mSlDJDAAYzXXMlbFrPUIau9Aiz
PEq41APg/6nCUn1e3pC5b+kCfvdcp2uE4RSffnWWWMb0eolkmenT3RPQYzAHCRdw
24JYABk3imYe4Qj/7x5WeJNA1oV7X3h/QBzzHG0P8/iJNdJQmiqJpXPbhUKYMBOE
3l7iCKTMj+w3FM1OF+ZfQYpdXWPwpA/zidpZ1I3nbgGSJ4T5b+UKdPM5GvXsn6bi
Q2E/qh5cu/G5ScLc++eVse3625k7aRbGcE3MtIncsWYYiKNTm1CgaPPwZAE3qWL0
swMrxCUhb8KGb7jlyVVnWrYNkI8Z4SceqpnmqJ6gp47rWT5k+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKE6FW3xOiYUJUrSovg1SxbKr312MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJkN2IzZTYtYzAzOC0z
MTk4LTg4NTQtNWIyODJiZjA5NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHleMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNZZFpMVWSKIKfHqAV28h5x9310kcLKuqOzD+gzKG0o0ENXySz+Pzqt
69E/9mHXe4gOyTrDj9k4IVcG7v6zy8kVcFEQpBcvC99yTNM951PiH89WmsjtV3pG
wZo9G3B33+Syqj6Xzj2GT39xAH+UXOfbmxl+DkZNBTk3WhqxnbcZefZT6zoTL6R2
g8DpotvzAWmTeozmFFMSKg5rVueAyQ/SLIuvckq8YMACJkVDUFY+I+BRr0KFJM21
Gnh0hiYL/ETO9PXFjWJXk/spM1H49KclO21pi0sGPO2B7nH2RtYBITQf4vA9BS8M
kBTUzoZn/exytsz1y3xSH7EXncW/9nw=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:38:00 2026 by rpki-client