Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa
File:                     452529d3-121b-36d8-8a2b-57e095a91af7.roa (raw, json)
Hash identifier:          BJKMbA5mYKB3/oSSxtbdcPUKoLFQgnRG485X+ZLqovE=
Subject key identifier:   82:81:B6:20:07:6C:8F:9E:DA:39:F9:1A:36:4F:A8:88:C8:E7:6B:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DE1235F373548CF54AD40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        97.89.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:e1:23:5f:37:35:48:cf:54:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=2d287f06-2b8a-4cd4-bab2-b19769e3c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:cf:15:47:d3:20:60:c7:eb:d9:42:82:b8:
                    9b:3a:fc:fb:7c:b5:67:3a:14:5c:7b:98:d0:af:9f:
                    b2:de:57:14:9c:75:d1:2b:c2:ec:21:40:3f:63:66:
                    ad:63:0f:47:9b:0d:21:a1:2e:fb:81:44:a2:c6:c4:
                    20:03:4a:f8:50:e2:51:6a:96:49:ac:77:ba:cb:3e:
                    5f:60:ef:07:b3:c0:5c:f7:cf:76:5e:8e:80:1d:bc:
                    a2:cd:cd:15:68:a9:22:a4:62:6a:39:8e:74:c9:ae:
                    8f:92:69:b0:d4:22:70:ce:e1:33:fa:ba:d5:b6:10:
                    f3:5f:34:a7:22:97:1c:42:6d:92:0a:8f:7b:15:8d:
                    f9:f1:30:d7:74:e0:f3:f4:03:a1:e5:0a:fa:65:c2:
                    00:c0:3f:ba:1f:71:f0:f4:e2:7b:5b:cc:db:01:a9:
                    aa:33:af:86:10:58:e5:c2:53:0f:c2:34:b6:02:f2:
                    b2:c1:e1:cc:03:96:5e:0d:38:b2:a6:01:44:54:4c:
                    e7:94:16:3b:e1:d0:bf:fa:5b:be:83:e7:86:a6:39:
                    8f:7c:fd:a9:5f:91:ae:16:6b:b0:c4:ee:ab:49:33:
                    c7:7b:23:70:c4:18:f4:5f:4f:02:39:7f:86:b4:2f:
                    a9:30:31:f2:82:9c:be:91:da:6d:a5:0a:ee:6d:da:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:B6:20:07:6C:8F:9E:DA:39:F9:1A:36:4F:A8:88:C8:E7:6B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:99:9c:ac:fe:33:cc:11:bf:0b:b7:20:98:74:cb:7d:29:
         21:70:a0:5f:b1:9e:8d:91:9e:0a:ac:a0:14:5d:d4:36:65:4a:
         03:d2:57:cc:9d:91:b2:82:f1:8d:bc:4a:a3:08:85:e6:73:fd:
         1b:b2:70:86:08:55:7f:4e:e3:ae:fc:84:09:13:a6:df:69:be:
         0e:56:de:fd:d0:43:7d:40:ba:58:c2:33:fa:13:1d:df:d2:4a:
         35:87:18:a0:11:ce:3c:4c:6a:1d:f6:27:03:67:34:f6:ee:a4:
         ec:2f:0d:f6:07:29:72:6e:d2:2f:84:c5:2d:3a:d3:ef:37:ea:
         17:3a:0f:ea:93:62:96:f6:5b:9d:28:17:97:e8:3e:f7:4f:4a:
         77:b8:f5:f5:67:17:a7:c3:c9:41:2a:41:df:99:43:cd:cf:4c:
         9d:0a:34:97:4b:bc:16:0e:f4:8e:7c:63:ab:3c:c8:49:cd:d5:
         2e:d1:b3:9b:80:0b:6d:83:10:c0:50:ce:d4:69:87:c4:2b:77:
         fe:f6:d5:b5:2d:9a:17:56:f5:0f:1c:e2:e4:40:ea:bd:4c:39:
         41:07:2f:02:af:17:3a:f8:da:85:9e:08:a6:4b:63:82:2c:7d:
         66:64:67:9e:f6:98:ab:fe:f7:c2:86:52:e1:52:3a:86:93:ac:
         1c:96:c9:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXeEjXzc1SM9UrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MmQyODdmMDYtMmI4YS00Y2Q0LWJhYjItYjE5NzY5ZTNjNGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/PFUfTIGDH69lCgribOvz7fLVnOhRce5jQ
r5+y3lcUnHXRK8LsIUA/Y2atYw9Hmw0hoS77gUSixsQgA0r4UOJRapZJrHe6yz5f
YO8Hs8Bc9892Xo6AHbyizc0VaKkipGJqOY50ya6Pkmmw1CJwzuEz+rrVthDzXzSn
IpccQm2SCo97FY358TDXdODz9AOh5Qr6ZcIAwD+6H3Hw9OJ7W8zbAamqM6+GEFjl
wlMPwjS2AvKyweHMA5ZeDTiypgFEVEznlBY74dC/+lu+g+eGpjmPfP2pX5GuFmuw
xO6rSTPHeyNwxBj0X08COX+GtC+pMDHygpy+kdptpQrubdqArwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKBtiAHbI+e2jn5GjZPqIjI52vbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDUyNTI5ZDMtMTIxYi0z
NmQ4LThhMmItNTdlMDk1YTkxYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrpmZys/jPMEb8LtyCYdMt9KSFwoF+xno2RngqsoBRd1DZlSgPSV8yd
kbKC8Y28SqMIheZz/RuycIYIVX9O4678hAkTpt9pvg5W3v3QQ31AuljCM/oTHd/S
SjWHGKARzjxMah32JwNnNPbupOwvDfYHKXJu0i+ExS060+836hc6D+qTYpb2W50o
F5foPvdPSne49fVnF6fDyUEqQd+ZQ83PTJ0KNJdLvBYO9I58Y6s8yEnN1S7Rs5uA
C22DEMBQztRph8Qrd/721bUtmhdW9Q8c4uRA6r1MOUEHLwKvFzr42oWeCKZLY4Is
fWZkZ572mKv+98KGUuFSOoaTrByWyS8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:06:36 2026 by rpki-client