Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97cf2d8c-7c1e-3e6b-804b-9dfc1cf2d139.roa
File:                     97cf2d8c-7c1e-3e6b-804b-9dfc1cf2d139.roa (raw, json)
Hash identifier:          7hYLHMITKS/0Xtbp4A31URIwXNZ5yf49L4kFt8NhFtk=
Subject key identifier:   7D:0A:F4:99:B3:6C:C8:E5:30:BC:64:1A:3C:D7:78:85:DC:07:70:29
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF652753D814C59A7D18EB80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97cf2d8c-7c1e-3e6b-804b-9dfc1cf2d139.roa
Signing time:             Thu 06 Aug 2026 14:11:43 +0000
ROA not before:           Thu 06 Aug 2026 14:11:43 +0000
ROA not after:            Wed 04 Nov 2026 15:11:43 +0000
asID:                     396190
IP address blocks:        142.234.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:65:27:53:d8:14:c5:9a:7d:18:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:11:43 2026 GMT
            Not After : Nov  4 15:11:43 2026 GMT
        Subject: CN=d71591c3-5d89-4bec-84aa-fe63ea4a5566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:7a:46:71:1a:d3:86:b8:7f:ea:66:6b:02:
                    17:09:2b:1c:42:2b:17:e5:52:6c:e3:9c:00:bd:91:
                    46:cc:41:21:17:e2:cb:84:aa:46:f3:79:37:44:b7:
                    8f:3d:da:2b:da:f8:32:0e:65:85:93:9c:82:a9:5a:
                    6a:d0:bd:9a:21:fa:3e:aa:d8:ae:bf:e5:c0:d3:c2:
                    6b:0e:e1:03:93:05:5f:70:e4:cc:16:41:e7:71:97:
                    85:e4:ca:48:39:6c:01:26:36:7e:c5:98:ef:9f:2e:
                    c5:b3:71:2c:00:95:bd:55:12:d0:6f:41:6e:49:e1:
                    69:a6:b8:b8:b5:af:c3:44:0e:b8:6d:6e:67:f0:81:
                    84:ef:4a:f4:84:16:43:15:fa:57:b4:4d:7c:89:99:
                    04:9f:6c:c3:60:2c:47:d1:bf:46:df:56:71:a7:a3:
                    f1:ed:c2:5f:9d:63:31:c2:97:ad:f0:be:8b:5f:d2:
                    d2:47:95:05:ff:b6:97:13:9e:db:51:30:d1:ec:4d:
                    9d:77:b9:46:df:df:4d:99:bd:e5:c9:59:f2:d2:70:
                    1a:16:12:dc:71:36:2f:24:6e:54:d7:a8:f7:bf:ef:
                    80:0a:32:e0:48:1b:b1:35:63:c1:48:48:a4:3e:af:
                    69:61:f7:6e:d4:22:0f:a4:bd:aa:c9:6b:97:9d:ae:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:F4:99:B3:6C:C8:E5:30:BC:64:1A:3C:D7:78:85:DC:07:70:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97cf2d8c-7c1e-3e6b-804b-9dfc1cf2d139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:35:fd:76:e4:d8:f4:8b:dc:67:16:e4:c2:aa:9a:d1:79:1b:
         d9:c3:9c:1e:5f:e3:b5:99:79:e2:57:cd:70:bf:43:d7:cb:5e:
         81:a1:7d:41:36:b4:de:ac:97:15:a7:0f:2b:15:be:31:4e:6c:
         80:c3:e1:1e:49:2c:e9:e5:64:62:4e:7c:43:7e:35:d2:46:f8:
         a9:c5:91:77:b0:41:8f:95:bf:4b:92:32:23:ad:67:62:12:55:
         23:4a:5a:df:de:34:0c:9a:f4:28:ff:c5:43:8c:4b:cc:c3:e8:
         0b:52:b3:92:ac:8f:7b:47:65:08:32:aa:1e:e5:e8:b0:0d:16:
         f3:2f:26:45:46:e8:71:63:61:ba:ff:ba:c1:bf:90:e6:de:a2:
         e7:a1:19:77:16:1d:47:04:0e:36:51:3c:76:3c:36:0e:35:1b:
         07:c8:4f:0e:47:cb:55:80:a2:16:0b:ec:1a:5e:58:dd:df:fd:
         27:73:e6:04:4b:70:e7:40:54:b6:ec:af:d8:cf:b2:6c:33:a3:
         43:96:ae:36:dd:20:ab:9c:97:79:e0:e7:44:07:dc:48:18:6e:
         79:e7:db:26:c6:ba:f2:3d:89:43:44:9b:64:31:6d:06:f1:76:
         7c:9d:e2:12:a1:de:48:80:96:30:74:bd:f5:64:54:5e:d7:e9:
         cf:12:a5:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ZSdT2BTFmn0Y64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNjE0MTE0M1oXDTI2MTEwNDE1MTE0M1owLzEtMCsGA1UEAxMk
ZDcxNTkxYzMtNWQ4OS00YmVjLTg0YWEtZmU2M2VhNGE1NTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVp6RnEa04a4f+pmawIXCSscQisX5VJs45wA
vZFGzEEhF+LLhKpG83k3RLePPdor2vgyDmWFk5yCqVpq0L2aIfo+qtiuv+XA08Jr
DuEDkwVfcOTMFkHncZeF5MpIOWwBJjZ+xZjvny7Fs3EsAJW9VRLQb0FuSeFppri4
ta/DRA64bW5n8IGE70r0hBZDFfpXtE18iZkEn2zDYCxH0b9G31Zxp6Px7cJfnWMx
wpet8L6LX9LSR5UF/7aXE57bUTDR7E2dd7lG399Nmb3lyVny0nAaFhLccTYvJG5U
16j3v++ACjLgSBuxNWPBSEikPq9pYfdu1CIPpL2qyWuXna4sJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0K9JmzbMjlMLxkGjzXeIXcB3ApMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTdjZjJkOGMtN2MxZS0z
ZTZiLTgwNGItOWRmYzFjZjJkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjuroMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALc1/Xbk2PSL3GcW5MKqmtF5G9nDnB5f47WZeeJXzXC/Q9fLXoGhfUE2
tN6slxWnDysVvjFObIDD4R5JLOnlZGJOfEN+NdJG+KnFkXewQY+Vv0uSMiOtZ2IS
VSNKWt/eNAya9Cj/xUOMS8zD6AtSs5Ksj3tHZQgyqh7l6LANFvMvJkVG6HFjYbr/
usG/kObeouehGXcWHUcEDjZRPHY8Ng41GwfITw5Hy1WAohYL7BpeWN3f/Sdz5gRL
cOdAVLbsr9jPsmwzo0OWrjbdIKucl3ng50QH3EgYbnnn2ybGuvI9iUNEm2QxbQbx
dnyd4hKh3kiAljB0vfVkVF7X6c8SpSk=
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:15 2026 by rpki-client