Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/57ce0ac8-8777-3c80-8414-3e9fa5bad92a.roa
File:                     57ce0ac8-8777-3c80-8414-3e9fa5bad92a.roa (raw, json)
Hash identifier:          2HYEDVhFc1+EfeIBvKlcYDVYdMqkkgMxXzMMy3lmvuQ=
Subject key identifier:   E8:90:32:82:26:5B:5D:AC:AE:C8:C3:4C:CD:BE:DC:5E:B9:9E:E9:06
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584F4976DA9FDE9D73135ACD8A00
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/57ce0ac8-8777-3c80-8414-3e9fa5bad92a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394453
IP address blocks:        198.134.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:da:9f:de:9d:73:13:5a:cd:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ced49bc-dec1-4711-9f3e-ae0a6ee0bc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:ff:ea:90:85:0b:db:2a:96:a1:07:15:f0:
                    e0:6a:c8:b3:ff:87:cc:98:6e:13:bf:25:20:6a:f9:
                    9a:c2:a7:40:ee:ba:3d:56:73:bc:80:aa:93:e6:e3:
                    57:1b:2e:06:70:da:49:f4:18:5f:99:b7:3e:37:b8:
                    9e:49:07:ad:48:3b:9d:28:8f:be:88:b8:c2:87:76:
                    91:42:cb:12:50:33:8b:f4:30:15:fb:f1:d3:24:63:
                    86:9e:d7:b9:17:d6:84:35:f0:1e:86:a9:7b:52:1a:
                    44:88:b9:c3:29:f6:e3:03:2b:0b:6e:73:7b:02:83:
                    a9:b2:33:f9:78:6c:32:d0:d6:38:0b:be:58:fa:83:
                    eb:5a:11:83:af:c8:1d:49:b5:be:54:0b:c2:e9:38:
                    54:ae:1e:93:48:c8:33:e8:7a:55:69:74:7d:e4:1d:
                    fa:01:64:6c:9a:54:b9:0d:3c:ee:d7:6f:92:37:c6:
                    d0:02:f2:da:8c:d5:eb:77:d8:78:fe:ca:79:09:b6:
                    a5:e3:0a:41:35:24:be:24:23:f6:27:a3:90:7a:b6:
                    fa:c1:fa:41:e8:cc:9a:5c:87:46:64:d7:87:5b:e6:
                    9f:34:d3:0d:5c:1d:01:d3:b4:de:ca:7e:1e:bd:ba:
                    a9:bc:2e:2b:8e:3b:f1:e2:da:f5:f2:ab:74:53:a6:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:32:82:26:5B:5D:AC:AE:C8:C3:4C:CD:BE:DC:5E:B9:9E:E9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/57ce0ac8-8777-3c80-8414-3e9fa5bad92a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:62:cb:12:0e:af:55:3d:c0:5b:7a:30:7a:c0:93:b6:7f:a1:
         13:b9:df:7b:3d:82:90:22:a6:b2:50:68:97:d3:08:6e:69:01:
         79:2d:6a:3f:90:5b:b6:c3:b1:3d:b2:e8:23:1f:3e:c2:c1:d1:
         47:c3:66:5f:cb:53:e5:1f:92:a8:e1:ad:cf:a4:f5:11:a5:1d:
         9d:22:90:2e:4c:d1:cf:18:c7:8c:a3:f8:d5:c7:f8:a2:5f:8c:
         f4:d9:8f:f9:fe:45:90:27:83:95:72:38:71:60:b9:94:7f:49:
         d7:87:32:02:26:08:76:e8:c3:02:4e:fe:56:e7:43:34:fc:d8:
         d2:b7:83:38:5f:dd:8d:07:68:f4:e8:d2:4d:07:ca:0d:2c:a8:
         b4:2a:59:56:41:b6:ea:f0:63:7f:e8:2b:c2:24:01:e2:93:dd:
         7f:3b:4b:62:91:d3:58:6a:23:ed:e6:83:70:e8:f1:c5:5c:88:
         8a:a5:e4:0f:17:46:32:43:db:f1:fd:3e:8a:6c:c4:05:ba:6a:
         4c:d3:e7:71:32:bf:18:f2:b8:df:0a:1c:29:cf:20:ef:4b:4d:
         0f:68:95:89:af:14:eb:5a:71:35:47:70:5c:10:c4:01:56:37:
         c8:08:e0:bd:ce:e8:15:e2:1e:0e:be:fa:ec:88:f0:c1:3a:a0:
         4f:68:2c:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdtqf3p1zE1rNigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw
NTUxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmNlZDQ5YmMtZGVjMS00NzExLTlmM2UtYWUwYTZlZTBiYzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTD/6pCFC9sqlqEHFfDgasiz/4fMmG4TvyUg
avmawqdA7ro9VnO8gKqT5uNXGy4GcNpJ9Bhfmbc+N7ieSQetSDudKI++iLjCh3aR
QssSUDOL9DAV+/HTJGOGnte5F9aENfAehql7UhpEiLnDKfbjAysLbnN7AoOpsjP5
eGwy0NY4C75Y+oPrWhGDr8gdSbW+VAvC6ThUrh6TSMgz6HpVaXR95B36AWRsmlS5
DTzu12+SN8bQAvLajNXrd9h4/sp5Cbal4wpBNSS+JCP2J6OQerb6wfpB6MyaXIdG
ZNeHW+afNNMNXB0B07Teyn4evbqpvC4rjjvx4tr18qt0U6ZJtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiQMoImW12srsjDTM2+3F65nukGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx
NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvNTdjZTBhYzgtODc3Ny0z
YzgwLTg0MTQtM2U5ZmE1YmFkOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl
NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj
MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5
YmRlYzA1NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFiyxIOr1U9wFt6MHrAk7Z/oRO533s9gpAiprJQaJfTCG5pAXktaj+Q
W7bDsT2y6CMfPsLB0UfDZl/LU+Ufkqjhrc+k9RGlHZ0ikC5M0c8Yx4yj+NXH+KJf
jPTZj/n+RZAng5VyOHFguZR/SdeHMgImCHbowwJO/lbnQzT82NK3gzhf3Y0HaPTo
0k0Hyg0sqLQqWVZBturwY3/oK8IkAeKT3X87S2KR01hqI+3mg3Do8cVciIql5A8X
RjJD2/H9PopsxAW6akzT53EyvxjyuN8KHCnPIO9LTQ9olYmvFOtacTVHcFwQxAFW
N8gI4L3O6BXiHg6++uyI8ME6oE9oLOI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:06:19 2026 by rpki-client