Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
File:                     78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa (raw, json)
Hash identifier:          L0jWElQwRhwzkXUr4CFWaTMdpFgFbv8CQoHFkVW7NKs=
Subject key identifier:   94:53:AF:7C:5E:E3:84:07:10:C5:50:4A:BD:63:30:F2:44:70:D3:33
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328584F480D36D1AF820CD36701F880
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     394356
IP address blocks:        207.135.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:36:d1:af:82:0c:d3:67:01:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=a9be6951-ab2e-49b9-b9cf-b626c4f0eaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:b4:c4:28:c5:21:ab:50:04:72:b1:fa:89:
                    8f:55:8c:7e:0d:02:e8:27:05:52:47:4d:17:f0:99:
                    a9:13:c3:57:31:75:80:5e:7c:de:3b:fd:15:9f:b4:
                    14:65:ad:92:8c:6b:f9:97:d7:c4:50:52:54:90:2a:
                    b3:57:3f:62:b1:1d:79:bb:b1:e0:b5:c0:eb:ba:a9:
                    d8:2d:2e:1e:25:bb:23:db:28:95:96:b9:77:9b:5e:
                    6e:7c:90:fb:c9:52:55:f0:f7:94:84:5d:86:c0:21:
                    93:96:b6:cb:6e:4d:50:19:c9:06:15:e5:b9:98:99:
                    96:db:dc:8f:ff:5b:f1:da:35:16:25:f3:aa:c3:5b:
                    ec:b8:1e:30:c0:c0:a6:6b:47:95:1c:4d:03:8a:79:
                    e4:15:c9:24:62:b5:e6:cd:57:83:81:96:7b:f6:a7:
                    ce:20:bd:d8:76:00:f4:d1:ad:b1:e3:8b:b6:7e:ba:
                    39:f8:0c:33:4b:3f:1b:9a:b2:9e:9a:5b:95:a0:55:
                    ef:30:9a:a6:de:d8:43:d5:f3:41:15:c0:f5:aa:6f:
                    c2:2a:8c:cc:2d:9c:6b:bc:2c:6d:46:4a:db:1e:e3:
                    c0:13:3c:bb:2f:03:02:7d:f7:07:64:57:7a:44:18:
                    fe:e1:7f:05:b0:e7:bd:83:df:3e:29:b0:93:0b:02:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:AF:7C:5E:E3:84:07:10:C5:50:4A:BD:63:30:F2:44:70:D3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:a0:70:11:b9:65:53:c4:16:01:6b:80:26:5c:0d:78:c8:
         fe:ba:c8:28:ce:9b:12:ee:d0:54:cc:98:19:d4:39:4e:f2:ec:
         a6:ba:d7:48:be:17:56:12:ad:c5:bd:35:e3:ba:30:b5:5a:8a:
         d3:c3:bb:46:1c:b0:a0:0e:fe:7b:f5:6f:f4:85:5f:f7:6a:6d:
         c6:46:76:bc:b8:0c:90:77:8a:40:65:d0:b7:58:25:34:d3:45:
         d6:bd:17:0e:4b:57:6a:89:02:ec:ae:0c:94:3a:f3:7d:58:f8:
         36:93:9c:83:ce:d8:fe:5e:e3:05:75:a4:c4:fe:0c:96:66:81:
         c2:34:b8:1f:17:f7:13:d8:14:c2:4d:4a:91:91:91:7a:fc:16:
         78:e1:d2:53:ae:0c:24:5b:0f:31:cd:0b:ae:ff:1f:9c:89:22:
         32:19:7e:3f:fe:c5:43:65:5e:59:4d:49:e8:da:a0:98:6f:5e:
         d4:a6:3e:f1:85:49:f5:f9:16:80:2b:9b:54:37:ea:33:51:ae:
         d4:25:67:a8:57:c1:a6:6a:23:63:f6:61:93:bd:fd:24:6f:d8:
         41:9f:e3:79:44:df:80:67:0e:20:e4:26:6a:ee:05:55:35:24:
         25:50:d0:c5:43:51:5f:93:f3:55:37:27:6a:f7:88:0f:b6:88:
         06:8f:4e:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTbRr4IM02cB+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJmYTc0NTMtNmI4NS00MTJiLWIyODAtN2M3MWVlYzZj
NDZiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
YTliZTY5NTEtYWIyZS00OWI5LWI5Y2YtYjYyNmM0ZjBlYWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqle0xCjFIatQBHKx+omPVYx+DQLoJwVSR00X
8JmpE8NXMXWAXnzeO/0Vn7QUZa2SjGv5l9fEUFJUkCqzVz9isR15u7HgtcDruqnY
LS4eJbsj2yiVlrl3m15ufJD7yVJV8PeUhF2GwCGTlrbLbk1QGckGFeW5mJmW29yP
/1vx2jUWJfOqw1vsuB4wwMCma0eVHE0DinnkFckkYrXmzVeDgZZ79qfOIL3YdgD0
0a2x44u2fro5+AwzSz8bmrKemluVoFXvMJqm3thD1fNBFcD1qm/CKozMLZxrvCxt
RkrbHuPAEzy7LwMCffcHZFd6RBj+4X8FsOe9g98+KbCTCwIhJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRTr3xe44QHEMVQSr1jMPJEcNMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZh
NzQ1My02Yjg1LTQxMmItYjI4MC03YzcxZWVjNmM0NmIvNzhjYWYzNWEtOWE2YS0z
MGE1LWE2ODctYWQ3OWE0MjJlZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0NTMtNmI4NS00MTJiLWIy
ODAtN2M3MWVlYzZjNDZiLzEyZmE3NDUzLTZiODUtNDEyYi1iMjgwLTdjNzFlZWM2
YzQ2Yi5jcmwwHwYDVR0jBBgwFoAUalK3AKb6f222PMyXY6B/GDHvGhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZhNzQ1My02Yjg1LTQxMmItYjI4MC03Yzcx
ZWVjNmM0NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz4feMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1GoHARuWVTxBYBa4AmXA14yP66yCjOmxLu0FTMmBnUOU7y7Ka610i+
F1YSrcW9NeO6MLVaitPDu0YcsKAO/nv1b/SFX/dqbcZGdry4DJB3ikBl0LdYJTTT
Rda9Fw5LV2qJAuyuDJQ6831Y+DaTnIPO2P5e4wV1pMT+DJZmgcI0uB8X9xPYFMJN
SpGRkXr8Fnjh0lOuDCRbDzHNC67/H5yJIjIZfj/+xUNlXllNSejaoJhvXtSmPvGF
SfX5FoArm1Q36jNRrtQlZ6hXwaZqI2P2YZO9/SRv2EGf43lE34BnDiDkJmruBVU1
JCVQ0MVDUV+T81U3J2r3iA+2iAaPTrE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:53:46 2026 by rpki-client