Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
File:                     2a3dd29d-c7c4-3c26-822a-864742fe7486.roa (raw, json)
Hash identifier:          U2ncnj/uKR0UBZGh5BzwP0EnAxIMFBQRtpc07HXGXPw=
Subject key identifier:   7E:C5:5D:1A:15:9D:62:99:27:6C:49:B0:1D:30:9F:E2:D4:2E:B4:B3
Certificate issuer:       /CN=786ab4fb-a46d-40d6-8281-3c79061676da
Certificate serial:       010D0C9F4328584F3CE28B5BDBBC021053F85200
Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     30263
IP address blocks:        216.7.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8b:5b:db:bc:02:10:53:f8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=8c543fe6-b72a-4c3c-b7f1-4608d27e075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:04:e8:f7:3b:62:ec:cb:35:af:b8:9c:da:
                    96:ff:d3:5b:95:a1:6e:da:9e:63:41:79:99:4c:13:
                    16:6b:07:23:1a:67:c3:31:92:05:9b:12:c2:12:8e:
                    ff:71:ba:f3:37:f0:73:2f:49:f5:7e:10:52:6b:21:
                    79:17:8b:63:4f:38:80:38:7b:9c:88:30:3d:5e:cc:
                    49:a5:24:bc:66:f6:9c:3d:54:f1:ce:95:01:69:9e:
                    2f:36:b1:d5:ad:b7:61:f3:7a:96:db:11:ed:99:4d:
                    54:9e:71:a7:f0:b0:93:ca:e4:01:08:11:14:46:92:
                    75:51:4e:84:a8:90:3f:a2:a8:2a:59:ea:08:76:67:
                    26:2b:5d:12:4e:f1:1e:d6:5e:e0:b4:3b:82:e6:f8:
                    50:46:0c:2f:b8:2f:c9:7e:01:a4:5d:a5:bb:58:64:
                    c4:c4:a9:8d:a0:27:a3:83:98:ec:88:f9:9c:52:af:
                    9d:88:a7:0a:91:6d:85:ff:bf:be:1a:42:06:15:7c:
                    c9:b5:80:77:a1:ed:67:5b:16:15:24:8a:39:b4:d5:
                    a5:59:6b:5d:c9:72:ed:71:4a:b7:11:df:7a:5c:b8:
                    38:f3:e9:43:ba:05:04:5d:9b:74:d3:94:a1:7b:32:
                    86:10:1d:5a:18:fd:b6:d3:5a:e8:93:a9:7f:c7:fe:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:5D:1A:15:9D:62:99:27:6C:49:B0:1D:30:9F:E2:D4:2E:B4:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:8c:f6:f9:ca:e6:04:46:2f:67:66:65:85:db:e4:26:fe:
         c3:00:64:0a:64:57:02:2a:a7:6a:f9:98:f6:14:2c:b7:83:d9:
         84:af:a6:d8:fe:d2:c7:d3:c8:e3:ce:65:18:e8:22:95:a9:57:
         6c:aa:03:bf:e0:a9:ed:a0:21:bb:97:71:fd:9a:3b:64:8d:63:
         18:ff:be:09:36:3f:a5:52:c8:dc:65:47:dd:dd:df:d9:39:5c:
         30:9c:76:40:dc:a6:6f:61:7d:43:96:27:0d:4f:ee:80:3e:e4:
         23:94:0c:9b:bf:03:f6:6c:4b:cb:77:99:3c:5b:c8:09:1f:51:
         9f:5a:ea:0c:3f:7b:0d:d6:e8:72:43:f0:59:b4:46:b9:65:b9:
         0f:90:80:ac:55:4b:89:e0:4e:5e:e3:3d:61:ad:fa:6e:13:71:
         a8:44:aa:c5:9d:e4:2a:d0:74:49:4f:56:ce:21:fc:cc:ca:b7:
         e5:fc:8f:3c:22:cb:ae:f3:37:99:f1:f6:75:14:77:e2:48:17:
         c7:ba:99:37:7c:b0:04:19:e1:7e:ce:3c:f7:b7:7f:62:01:41:
         0c:72:6c:cb:6a:07:d6:06:a5:a0:95:83:5f:be:8f:4b:01:fe:
         a6:98:b5:f7:06:e3:af:3d:5e:89:71:68:b4:28:77:6b:37:2a:
         3a:d3:18:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884otb27wCEFP4UgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3
NmRhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
OGM1NDNmZTYtYjcyYS00YzNjLWI3ZjEtNDYwOGQyN2UwNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhIE6Pc7YuzLNa+4nNqW/9NblaFu2p5jQXmZ
TBMWawcjGmfDMZIFmxLCEo7/cbrzN/BzL0n1fhBSayF5F4tjTziAOHuciDA9XsxJ
pSS8ZvacPVTxzpUBaZ4vNrHVrbdh83qW2xHtmU1UnnGn8LCTyuQBCBEURpJ1UU6E
qJA/oqgqWeoIdmcmK10STvEe1l7gtDuC5vhQRgwvuC/JfgGkXaW7WGTExKmNoCej
g5jsiPmcUq+diKcKkW2F/7++GkIGFXzJtYB3oe1nWxYVJIo5tNWlWWtdyXLtcUq3
Ed96XLg48+lDugUEXZt005ShezKGEB1aGP2201rok6l/x/7nuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7FXRoVnWKZJ2xJsB0wn+LULrSzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh
YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvMmEzZGQyOWQtYzdjNC0z
YzI2LTgyMmEtODY0NzQyZmU3NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy
ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2
NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5
MDYxNjc2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjwjPb5yuYERi9nZmWF2+Qm/sMAZApkVwIqp2r5mPYULLeD2YSvptj+
0sfTyOPOZRjoIpWpV2yqA7/gqe2gIbuXcf2aO2SNYxj/vgk2P6VSyNxlR93d39k5
XDCcdkDcpm9hfUOWJw1P7oA+5COUDJu/A/ZsS8t3mTxbyAkfUZ9a6gw/ew3W6HJD
8Fm0RrlluQ+QgKxVS4ngTl7jPWGt+m4TcahEqsWd5CrQdElPVs4h/MzKt+X8jzwi
y67zN5nx9nUUd+JIF8e6mTd8sAQZ4X7OPPe3f2IBQQxybMtqB9YGpaCVg1++j0sB
/qaYtfcG4689XolxaLQod2s3KjrTGEI=
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:45:04 2026 by rpki-client