Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa
File:                     9add7b7f-c7fd-3099-989a-51e432449408.roa (raw, json)
Hash identifier:          JJF33O0c4gFNkVyuveA3hB102xwsq71C5nomcdAvSbE=
Subject key identifier:   0B:18:32:A4:EF:A8:F7:DF:C0:FF:B1:5F:43:99:FF:C5:6A:11:D3:43
Certificate issuer:       /CN=78ce7226-3ed1-455d-aa4a-f6f2b74f0448
Certificate serial:       010D0C9F4328584EEBECA0AE25A7D384D65E52C0
Authority key identifier: 86:05:95:B4:50:44:F5:38:FB:32:75:6E:8B:9A:73:08:47:61:A0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     19793
IP address blocks:        155.103.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a0:ae:25:a7:d3:84:d6:5e:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ce7226-3ed1-455d-aa4a-f6f2b74f0448
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=9de08c32-c732-422c-a0d7-0c8548c182eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:01:07:44:46:4a:1d:cf:4b:3d:03:db:fd:
                    6a:ed:26:15:2a:00:cd:8d:c4:3e:8d:1b:ab:e7:98:
                    3b:39:b9:f3:16:91:63:d7:66:55:a3:80:1a:ac:aa:
                    26:f0:62:c7:7c:5e:0a:1b:9a:b2:47:b9:4f:56:bd:
                    e6:f4:7a:eb:ee:bc:22:71:c2:86:5b:95:ba:8a:ae:
                    be:3e:49:3e:90:20:b3:82:38:52:7d:22:ed:16:f1:
                    24:0b:04:c1:77:80:00:f2:c8:6a:db:51:17:a6:dd:
                    da:95:0d:70:93:bb:cc:2c:03:b7:fd:54:1d:ed:ed:
                    d1:f7:be:76:2c:33:66:47:78:bf:c0:9f:0b:56:b2:
                    86:6d:60:8e:28:5e:57:a2:07:d7:31:d0:e1:c2:e7:
                    7a:65:9a:2e:b1:b1:1f:de:b9:3f:3f:9d:a0:31:94:
                    a1:08:a3:61:7a:d8:7a:d2:45:5a:a1:2e:61:23:94:
                    e9:a4:ee:da:77:8b:bd:b0:c0:13:0f:87:c8:29:a1:
                    7b:58:4e:29:bd:65:b8:b1:3c:bd:28:fd:55:de:d6:
                    f9:1a:04:25:7b:44:65:ae:fd:7c:38:75:30:ee:3c:
                    56:42:6e:56:2a:ea:95:b6:c7:2b:ec:a9:34:d7:02:
                    5f:57:6d:24:42:fa:8a:83:f7:27:de:cd:ba:52:68:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:32:A4:EF:A8:F7:DF:C0:FF:B1:5F:43:99:FF:C5:6A:11:D3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/9add7b7f-c7fd-3099-989a-51e432449408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.crl

            X509v3 Authority Key Identifier:
                keyid:86:05:95:B4:50:44:F5:38:FB:32:75:6E:8B:9A:73:08:47:61:A0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78ce7226-3ed1-455d-aa4a-f6f2b74f0448.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:64:e4:f0:75:6c:c3:28:c6:26:fa:af:98:da:74:e2:39:
         ef:b0:0b:bc:e1:59:7f:98:51:99:c4:f7:1c:d8:91:5e:f9:fa:
         fb:3c:01:0b:c7:56:f8:15:80:b1:01:91:fe:e0:7e:bc:4a:b9:
         3f:f4:af:9b:dd:63:e3:14:87:a7:c2:c4:ac:dc:7a:43:c2:4a:
         7d:66:2b:a1:a9:08:b7:6a:bd:b0:bf:70:28:d5:c9:08:83:f2:
         d9:d3:d4:ab:06:a5:db:be:09:67:b0:c9:3d:8d:ed:0f:7e:1a:
         a3:e7:a2:bc:63:d5:1c:b8:0b:a4:ce:36:23:4a:61:7f:97:be:
         d0:97:a4:58:a9:a9:20:cd:5a:dc:be:47:fe:e7:b7:e3:c3:c7:
         28:47:09:e3:5a:40:f5:68:43:f2:db:59:11:4c:c0:30:19:dc:
         a1:88:4a:03:12:d2:9c:8b:eb:b5:03:50:c8:69:b3:f1:14:8b:
         7d:e2:7d:25:25:ed:32:4f:93:dc:40:15:35:0b:c6:28:78:63:
         e0:49:c7:57:43:55:25:2a:81:f6:82:92:ed:0f:a7:0c:4d:6b:
         af:f7:86:c3:05:b1:97:d2:cf:ef:c8:db:8d:d1:f4:95:f6:69:
         d2:ff:c5:55:5c:df:69:00:a6:48:4e:03:47:28:7f:9e:20:6f:
         6b:1f:26:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7r7KCuJafThNZeUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhjZTcyMjYtM2VkMS00NTVkLWFhNGEtZjZmMmI3NGYw
NDQ4MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk
OWRlMDhjMzItYzczMi00MjJjLWEwZDctMGM4NTQ4YzE4MmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8BB0RGSh3PSz0D2/1q7SYVKgDNjcQ+jRur
55g7ObnzFpFj12ZVo4AarKom8GLHfF4KG5qyR7lPVr3m9Hrr7rwiccKGW5W6iq6+
Pkk+kCCzgjhSfSLtFvEkCwTBd4AA8shq21EXpt3alQ1wk7vMLAO3/VQd7e3R9752
LDNmR3i/wJ8LVrKGbWCOKF5XogfXMdDhwud6ZZousbEf3rk/P52gMZShCKNheth6
0kVaoS5hI5TppO7ad4u9sMATD4fIKaF7WE4pvWW4sTy9KP1V3tb5GgQle0Rlrv18
OHUw7jxWQm5WKuqVtscr7Kk01wJfV20kQvqKg/cn3s26Umh9SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsYMqTvqPffwP+xX0OZ/8VqEdNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83OGNl
NzIyNi0zZWQxLTQ1NWQtYWE0YS1mNmYyYjc0ZjA0NDgvOWFkZDdiN2YtYzdmZC0z
MDk5LTk4OWEtNTFlNDMyNDQ5NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzhjZTcyMjYtM2VkMS00NTVkLWFh
NGEtZjZmMmI3NGYwNDQ4Lzc4Y2U3MjI2LTNlZDEtNDU1ZC1hYTRhLWY2ZjJiNzRm
MDQ0OC5jcmwwHwYDVR0jBBgwFoAUhgWVtFBE9Tj7MnVui5pzCEdhoNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83OGNlNzIyNi0zZWQxLTQ1NWQtYWE0YS1mNmYy
Yjc0ZjA0NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm2eMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKyZOTwdWzDKMYm+q+Y2nTiOe+wC7zhWX+YUZnE9xzYkV75+vs8AQvH
VvgVgLEBkf7gfrxKuT/0r5vdY+MUh6fCxKzcekPCSn1mK6GpCLdqvbC/cCjVyQiD
8tnT1KsGpdu+CWewyT2N7Q9+GqPnorxj1Ry4C6TONiNKYX+XvtCXpFipqSDNWty+
R/7nt+PDxyhHCeNaQPVoQ/LbWRFMwDAZ3KGISgMS0pyL67UDUMhps/EUi33ifSUl
7TJPk9xAFTULxih4Y+BJx1dDVSUqgfaCku0PpwxNa6/3hsMFsZfSz+/I243R9JX2
adL/xVVc32kApkhOA0cof54gb2sfJlo=
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:33:35 2026 by rpki-client