Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97d19b02-d06c-3ec2-b31a-b68e6fc8b74e.roa
File:                     97d19b02-d06c-3ec2-b31a-b68e6fc8b74e.roa (raw, json)
Hash identifier:          T5/FoWMCfmwZiuHL6u6ImTcv8zF+xrQqDtLMsQ2ottA=
Subject key identifier:   99:B6:54:2D:25:36:22:30:B1:2B:31:31:66:0E:83:67:C0:D4:2A:55
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D64A76F906812E3EC8C80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97d19b02-d06c-3ec2-b31a-b68e6fc8b74e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        142.91.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:64:a7:6f:90:68:12:e3:ec:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0f7a1e36-e0e4-43c8-9ee8-40b7cbc52765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:15:ad:ee:7c:45:aa:49:07:a6:5b:f8:9c:
                    f6:e1:c2:08:a2:87:79:98:c2:62:c4:04:9b:71:8b:
                    0b:83:1a:ef:3c:29:6c:1d:bb:88:4a:97:cd:2e:eb:
                    3c:25:b9:41:79:25:bb:a1:ec:e7:62:a5:d3:f2:6e:
                    a4:66:3f:7a:f7:5c:e2:73:94:5a:69:a8:fd:f6:7f:
                    c3:ba:7e:a6:2d:98:a6:1b:65:83:1a:03:43:27:79:
                    07:67:58:5f:e9:98:60:33:7b:c3:3b:89:bc:3d:29:
                    25:0e:30:8b:dd:c3:a8:14:c1:2d:04:d0:c2:b1:d3:
                    a4:ff:cf:fb:5d:ff:da:7e:93:de:6c:6c:72:2d:04:
                    f1:58:81:e4:99:c7:25:cf:a8:ca:ba:fe:ce:46:f6:
                    22:da:5c:97:a2:be:cb:10:08:35:17:2d:65:78:d5:
                    79:05:76:0d:7e:f0:5b:97:80:b8:9c:f6:71:1a:b2:
                    31:50:0a:58:b9:5b:fd:51:d1:f7:ff:45:34:0a:12:
                    17:24:5c:34:7a:1e:13:c2:4d:86:f7:73:b6:88:a7:
                    77:29:07:56:a2:2e:3e:a7:bc:61:c4:6c:a5:e0:7b:
                    3f:4f:0e:74:b0:c2:52:80:81:fc:4a:1d:0f:84:42:
                    af:d8:23:02:89:22:bc:a1:5d:0c:46:c8:b5:2d:d2:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B6:54:2D:25:36:22:30:B1:2B:31:31:66:0E:83:67:C0:D4:2A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/97d19b02-d06c-3ec2-b31a-b68e6fc8b74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:00:21:57:9b:6d:75:f2:88:75:98:ec:f1:6a:06:1e:0c:68:
         cf:cb:d5:3e:fd:bc:fc:e4:6b:82:58:88:d5:03:dd:42:dd:4d:
         46:26:83:b3:0d:e1:a0:e7:3b:66:d7:b6:45:bd:87:9e:49:df:
         57:35:7d:72:8e:87:63:f0:29:2c:33:09:48:bf:fb:43:30:be:
         b9:47:d8:49:43:43:6d:5d:80:60:7a:d8:e8:61:03:6d:64:1f:
         4f:fe:02:b7:33:b0:67:46:04:3f:0e:51:0e:b2:fd:f2:10:81:
         aa:9e:ec:3d:4d:11:80:95:c7:0c:70:a1:b3:0e:9f:2e:95:50:
         c0:5d:a9:51:52:a6:e6:bc:53:d0:b9:40:0b:e5:d4:ba:20:b9:
         6e:fd:94:d3:48:02:5f:67:6a:4b:53:ec:af:f1:36:4e:13:93:
         43:1b:ba:d4:04:11:7e:15:d6:63:8c:45:b0:41:f7:bf:4a:79:
         f6:ba:07:03:1c:5c:67:0d:9f:8b:5c:b3:b3:ec:41:78:3c:bc:
         77:ea:5f:cb:07:aa:50:58:00:8f:72:26:30:f5:c6:f7:d6:4b:
         32:34:ee:8a:bd:50:42:61:0b:4e:b8:23:09:30:9d:65:e8:88:
         da:9c:9d:a1:0d:e8:36:85:ad:39:bb:20:6b:a2:c0:1c:b9:8c:
         bf:21:8e:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWSnb5BoEuPsjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MGY3YTFlMzYtZTBlNC00M2M4LTllZTgtNDBiN2NiYzUyNzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEsVre58RapJB6Zb+Jz24cIIood5mMJixASb
cYsLgxrvPClsHbuISpfNLus8JblBeSW7oeznYqXT8m6kZj9691zic5Raaaj99n/D
un6mLZimG2WDGgNDJ3kHZ1hf6ZhgM3vDO4m8PSklDjCL3cOoFMEtBNDCsdOk/8/7
Xf/afpPebGxyLQTxWIHkmcclz6jKuv7ORvYi2lyXor7LEAg1Fy1leNV5BXYNfvBb
l4C4nPZxGrIxUApYuVv9UdH3/0U0ChIXJFw0eh4Twk2G93O2iKd3KQdWoi4+p7xh
xGyl4Hs/Tw50sMJSgIH8Sh0PhEKv2CMCiSK8oV0MRsi1LdImtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJm2VC0lNiIwsSsxMWYOg2fA1CpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTdkMTliMDItZDA2Yy0z
ZWMyLWIzMWEtYjY4ZTZmYzhiNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjltIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYAIVebbXXyiHWY7PFqBh4MaM/L1T79vPzka4JYiNUD3ULdTUYmg7MN
4aDnO2bXtkW9h55J31c1fXKOh2PwKSwzCUi/+0MwvrlH2ElDQ21dgGB62OhhA21k
H0/+ArczsGdGBD8OUQ6y/fIQgaqe7D1NEYCVxwxwobMOny6VUMBdqVFSpua8U9C5
QAvl1LoguW79lNNIAl9naktT7K/xNk4Tk0MbutQEEX4V1mOMRbBB979Kefa6BwMc
XGcNn4tcs7PsQXg8vHfqX8sHqlBYAI9yJjD1xvfWSzI07oq9UEJhC064IwkwnWXo
iNqcnaEN6DaFrTm7IGuiwBy5jL8hjvI=
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:37 2026 by rpki-client