Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/7a467ae3-950c-310a-8e43-fd17c51e6651.roa
File:                     7a467ae3-950c-310a-8e43-fd17c51e6651.roa (raw, json)
Hash identifier:          IE8Vy0/Ycu/YVKQ9sF1K+KrWGPQ9De9xcAsEIMW0EFE=
Subject key identifier:   DA:AF:26:84:58:02:53:CC:73:D8:12:7B:3B:5C:83:B5:C7:D9:E3:39
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F4328584F1DDA40DAAA0779F8284BEA80
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/7a467ae3-950c-310a-8e43-fd17c51e6651.roa
Signing time:             Wed 09 Sep 2026 10:13:39 +0000
ROA not before:           Wed 09 Sep 2026 10:13:39 +0000
ROA not after:            Tue 08 Dec 2026 11:13:39 +0000
asID:                     211745
IP address blocks:        142.249.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1d:da:40:da:aa:07:79:f8:28:4b:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Sep  9 10:13:39 2026 GMT
            Not After : Dec  8 11:13:39 2026 GMT
        Subject: CN=583d53f7-f38e-4f7c-afaa-cf28279d943b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:cd:e9:d8:ea:59:c7:63:b4:29:86:73:e1:
                    dd:b7:68:38:ca:36:aa:67:65:f7:08:59:b2:b6:c3:
                    42:0a:2a:58:de:b6:df:57:1d:1b:39:27:ae:08:cb:
                    0d:1f:fd:83:cc:4c:1a:0d:6d:0f:2e:c7:31:fb:82:
                    40:db:63:9c:23:cd:ac:c2:2f:4b:21:4c:4f:75:9a:
                    16:a5:ba:84:1e:15:f8:b7:87:54:a9:28:40:99:10:
                    ac:39:30:86:74:ba:27:54:bc:01:56:09:48:8b:07:
                    ff:bb:37:e6:c6:ae:0b:98:97:48:af:25:22:30:3c:
                    f7:db:40:49:35:93:ab:bf:5c:db:37:c5:76:0d:d9:
                    b6:28:e6:48:e6:d3:71:f0:36:bd:7d:27:65:5e:2a:
                    32:b6:01:1d:b4:a9:b8:f3:ad:14:53:7c:81:d7:5b:
                    e2:e8:99:d4:bb:54:90:e7:21:a0:76:ff:d0:5b:59:
                    7b:9e:65:6a:2a:07:af:d7:f5:59:b8:d0:54:e8:00:
                    56:ec:21:bb:3c:dc:dd:d6:4d:7f:ab:1b:7c:69:0e:
                    23:26:77:88:e3:a5:30:44:0a:a1:da:6f:a6:43:32:
                    bd:2a:2f:c5:64:da:c7:aa:70:8b:fe:e0:81:a5:6c:
                    57:54:00:98:db:eb:0a:3e:87:c9:45:b0:e8:ba:65:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:26:84:58:02:53:CC:73:D8:12:7B:3B:5C:83:B5:C7:D9:E3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/7a467ae3-950c-310a-8e43-fd17c51e6651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:93:d2:dc:e8:00:fe:de:d5:e5:0a:8b:8e:04:5a:09:77:
         09:5e:60:f5:36:dc:14:44:1d:93:36:90:a1:89:71:b5:63:fe:
         e1:fb:6a:bb:fd:cb:b6:5a:e3:96:b2:e7:b8:eb:cb:c1:4b:c3:
         bb:04:90:89:1d:55:39:b9:33:3e:75:3c:4d:6f:64:3e:8f:1d:
         d2:9e:bf:df:58:42:c7:ae:7e:aa:e8:ec:a8:76:ce:e0:50:e5:
         eb:5c:68:3f:5e:18:2f:1b:ef:cc:eb:31:a6:c5:44:9d:5d:98:
         1a:db:2d:69:b8:c7:ee:ac:e6:56:72:4e:ef:61:08:13:d2:9e:
         77:53:0f:0c:86:f0:38:c1:92:27:5d:42:a5:c2:d5:96:aa:da:
         c6:bf:00:23:fe:22:f8:4a:30:6b:6c:0f:66:62:73:06:99:6d:
         ca:77:9c:7e:5e:b3:19:b5:84:54:2a:9e:eb:21:5f:96:60:d7:
         76:a2:e3:3d:7c:29:94:5e:55:39:8b:f1:0c:32:74:e3:d2:c0:
         d7:be:6d:3c:8d:ca:1c:d1:2e:09:a7:ac:24:94:a8:77:d0:8b:
         dc:e9:32:4a:e1:cc:02:a0:10:eb:43:a0:90:0d:a1:2b:70:7f:
         48:c9:54:d5:42:3f:88:55:75:00:28:79:9c:23:bd:8a:64:ec:
         d1:68:0c:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8d2kDaqgd5+ChL6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3
MTlmMB4XDTI2MDkwOTEwMTMzOVoXDTI2MTIwODExMTMzOVowLzEtMCsGA1UEAxMk
NTgzZDUzZjctZjM4ZS00ZjdjLWFmYWEtY2YyODI3OWQ5NDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArinN6djqWcdjtCmGc+Hdt2g4yjaqZ2X3CFmy
tsNCCipY3rbfVx0bOSeuCMsNH/2DzEwaDW0PLscx+4JA22OcI82swi9LIUxPdZoW
pbqEHhX4t4dUqShAmRCsOTCGdLonVLwBVglIiwf/uzfmxq4LmJdIryUiMDz320BJ
NZOrv1zbN8V2Ddm2KOZI5tNx8Da9fSdlXioytgEdtKm4860UU3yB11vi6JnUu1SQ
5yGgdv/QW1l7nmVqKgev1/VZuNBU6ABW7CG7PNzd1k1/qxt8aQ4jJneI46UwRAqh
2m+mQzK9Ki/FZNrHqnCL/uCBpWxXVACY2+sKPofJRbDoumV2kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqvJoRYAlPMc9gSeztcg7XH2eM5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj
ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvN2E0NjdhZTMtOTUwYy0z
MTBhLThlNDMtZmQxN2M1MWU2NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0
NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0
NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw
MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvlOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDQk9Lc6AD+3tXlCouOBFoJdwleYPU23BREHZM2kKGJcbVj/uH7arv9
y7Za45ay57jry8FLw7sEkIkdVTm5Mz51PE1vZD6PHdKev99YQseufqro7Kh2zuBQ
5etcaD9eGC8b78zrMabFRJ1dmBrbLWm4x+6s5lZyTu9hCBPSnndTDwyG8DjBkidd
QqXC1Zaq2sa/ACP+IvhKMGtsD2ZicwaZbcp3nH5esxm1hFQqnushX5Zg13ai4z18
KZReVTmL8QwydOPSwNe+bTyNyhzRLgmnrCSUqHfQi9zpMkrhzAKgEOtDoJANoStw
f0jJVNVCP4hVdQAoeZwjvYpk7NFoDHA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:17 2026 by rpki-client