Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
File:                     84a0a74c-cc53-3066-8960-1cddc270afad.roa (raw, json)
Hash identifier:          Lvh60kZlmqKIaK3PRU0CL5v3XnfeAS3+eUxmk6CmIaI=
Subject key identifier:   19:BA:B9:A3:CA:D3:B2:64:D1:AB:18:AB:62:EE:52:F4:4D:E4:19:2F
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F4328584F49752E62C17606CE2151C800
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62739
IP address blocks:        162.220.116.0/24 maxlen: 24
                          162.220.117.0/24 maxlen: 24
                          162.220.118.0/24 maxlen: 24
                          162.220.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:2e:62:c1:76:06:ce:21:51:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fff114b5-18ae-40e2-b551-1887989975dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:53:71:1c:6b:d2:1d:7f:4d:fc:6a:2b:ec:
                    58:d8:de:e0:1e:42:ce:40:d0:fa:07:45:a7:1f:90:
                    53:77:2e:d3:a0:a6:fc:5d:76:39:d0:ef:03:b7:5d:
                    44:cc:88:6b:36:6a:c2:35:c5:77:f2:a2:64:0f:f9:
                    5c:35:ba:e3:24:44:d7:cd:2e:00:78:83:af:dc:59:
                    3a:2c:3d:2d:5e:b2:4d:cd:84:ae:f9:51:1d:77:bb:
                    64:63:62:ea:77:2b:86:2a:00:df:fa:92:e8:de:1e:
                    2d:fb:11:f7:2f:a8:b9:72:ce:44:be:a7:98:5e:13:
                    59:09:b8:07:a0:d3:e8:11:da:e8:c1:7a:01:ed:4b:
                    5d:bb:a8:e6:cc:7a:3a:66:60:fd:3d:4d:81:62:b5:
                    db:5a:74:7b:2d:e3:b5:bb:7c:c2:fb:81:16:c3:ae:
                    79:24:dd:f5:d6:a0:5b:b3:5c:f8:f6:17:8a:e9:6c:
                    e7:54:2f:b7:72:d3:22:64:ae:0c:d8:2b:ab:d7:bf:
                    2e:51:c4:7b:4f:77:fd:a7:e8:8c:78:fc:a2:51:68:
                    45:57:b8:ce:21:ab:44:52:c4:aa:05:ec:3d:a3:09:
                    fa:4f:62:db:05:a1:20:4c:6d:a7:b2:ba:3e:35:56:
                    4e:a2:f1:50:91:7d:c2:95:40:ee:dc:bc:a9:5a:54:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:B9:A3:CA:D3:B2:64:D1:AB:18:AB:62:EE:52:F4:4D:E4:19:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:0e:85:2f:4a:e1:a7:79:f1:0a:9c:d8:a8:24:08:c8:26:
         a6:34:33:80:b9:e0:04:f1:3c:d4:0f:0b:b9:41:63:d8:5b:12:
         bb:4a:86:51:d6:05:10:93:d6:68:c7:47:2a:0f:0f:0d:11:7b:
         70:73:15:2b:45:33:a2:38:27:63:c2:8a:7f:53:4d:b5:45:fd:
         ee:47:cc:f2:e8:d3:80:5d:07:45:79:04:d2:c8:3c:44:60:cf:
         f7:05:90:d8:7b:60:00:72:49:04:5b:af:29:b8:03:56:ac:0e:
         0c:19:75:f5:ac:bf:ef:7c:74:9f:d7:72:2e:57:55:bf:33:b1:
         6e:26:d7:b9:f3:7d:49:57:04:1c:82:fc:3a:42:81:91:5c:0c:
         0a:96:62:a7:b4:13:49:f4:99:ae:14:6f:b5:74:53:9e:c9:19:
         21:32:6e:1d:f2:98:1c:40:c6:c4:36:c4:cf:7c:9e:97:10:b8:
         b2:f7:01:56:1d:a7:4c:a6:77:9c:aa:44:44:e1:5b:2b:73:b3:
         74:83:8f:0b:d1:4c:de:7f:61:03:53:a2:22:7b:38:54:c2:1d:
         5f:41:a2:a0:ee:70:40:80:e5:5f:c8:8d:b1:4d:89:27:81:4a:
         84:85:83:c6:f4:a2:f9:e0:9c:a2:4a:52:67:76:d4:30:c3:24:
         6c:2f:be:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdS5iwXYGziFRyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc3OWFkNWQtNWNhNy00YzIzLTkyOGYtMDkxZTBlMWEz
ZjkzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmZmMTE0YjUtMThhZS00MGUyLWI1NTEtMTg4Nzk4OTk3NWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslZTcRxr0h1/TfxqK+xY2N7gHkLOQND6B0Wn
H5BTdy7ToKb8XXY50O8Dt11EzIhrNmrCNcV38qJkD/lcNbrjJETXzS4AeIOv3Fk6
LD0tXrJNzYSu+VEdd7tkY2LqdyuGKgDf+pLo3h4t+xH3L6i5cs5EvqeYXhNZCbgH
oNPoEdrowXoB7Utdu6jmzHo6ZmD9PU2BYrXbWnR7LeO1u3zC+4EWw655JN311qBb
s1z49heK6WznVC+3ctMiZK4M2Cur178uUcR7T3f9p+iMePyiUWhFV7jOIatEUsSq
Bew9own6T2LbBaEgTG2nsro+NVZOovFQkX3ClUDu3LypWlQe/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBm6uaPK07Jk0asYq2LuUvRN5BkvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5
YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFlMGUxYTNmOTMvODRhMGE3NGMtY2M1My0z
MDY2LTg5NjAtMWNkZGMyNzBhZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzc3OWFkNWQtNWNhNy00YzIzLTky
OGYtMDkxZTBlMWEzZjkzLzM3NzlhZDVkLTVjYTctNGMyMy05MjhmLTA5MWUwZTFh
M2Y5My5jcmwwHwYDVR0jBBgwFoAU3UBYo70iE7ShZ8UHLgPVQAuSHEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFl
MGUxYTNmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKnaDoUvSuGnefEKnNioJAjIJqY0M4C54ATxPNQPC7lBY9hbErtKhlHW
BRCT1mjHRyoPDw0Re3BzFStFM6I4J2PCin9TTbVF/e5HzPLo04BdB0V5BNLIPERg
z/cFkNh7YABySQRbrym4A1asDgwZdfWsv+98dJ/Xci5XVb8zsW4m17nzfUlXBByC
/DpCgZFcDAqWYqe0E0n0ma4Ub7V0U57JGSEybh3ymBxAxsQ2xM98npcQuLL3AVYd
p0ymd5yqREThWytzs3SDjwvRTN5/YQNToiJ7OFTCHV9BoqDucECA5V/IjbFNiSeB
SoSFg8b0ovngnKJKUmd21DDDJGwvvgI=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:46:20 2026 by rpki-client