Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa
File:                     7cf3189a-1651-32ac-987c-253702b7ced8.roa (raw, json)
Hash identifier:          cY8CdFBei2+XzCJ0ljrwD1IdAAvxcB5+VPRfzbDqjOY=
Subject key identifier:   2A:80:20:1C:1B:ED:2D:BF:C8:D4:8D:08:6A:14:DD:31:52:AF:D6:81
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F1CC7949668C138996E3B6CA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     31898
IP address blocks:        192.22.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:94:96:68:c1:38:99:6e:3b:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=8e0f7e80-e0a7-441e-a58f-07a68ef9d5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:58:b2:4c:1a:ce:66:29:a2:f7:77:76:c9:
                    d6:f6:75:8b:18:fa:89:96:73:d2:eb:94:7c:1a:71:
                    9e:cc:cc:7b:07:c1:f2:88:a2:99:f7:12:ed:c9:01:
                    de:1a:c9:af:0a:70:30:b9:28:00:9f:34:6c:50:3a:
                    d7:33:73:b4:1d:d4:29:81:83:9b:e3:8b:13:2f:5b:
                    94:77:3a:67:1d:e5:ee:27:be:78:65:80:88:a6:76:
                    84:ce:6d:61:27:80:b2:67:99:d9:3a:e0:4c:85:9e:
                    76:b4:07:4c:ec:bb:90:1c:0b:fe:3a:4e:09:92:71:
                    3f:8e:89:f2:8e:b0:a2:87:47:f2:62:87:0d:4c:b9:
                    d8:fa:a9:55:c4:aa:d5:94:a6:02:ab:7b:36:f0:d8:
                    d4:be:95:50:2d:9c:2e:23:7d:7d:9f:59:a5:0a:38:
                    90:6e:14:3b:bc:00:ef:9b:b2:8b:0e:cb:80:76:97:
                    11:3a:7a:7a:e7:46:2c:e5:e0:48:b7:7f:36:b5:a3:
                    91:3b:64:aa:f8:73:6d:55:ff:9b:4a:cf:35:ce:7a:
                    7b:95:a5:97:bd:19:ae:34:b0:5b:c7:ea:2b:15:f6:
                    7f:0e:34:51:88:85:b4:4b:8f:6a:08:96:9d:4d:0a:
                    69:22:63:da:da:e1:a4:24:83:b4:ef:86:25:8e:97:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:20:1C:1B:ED:2D:BF:C8:D4:8D:08:6A:14:DD:31:52:AF:D6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.22.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:51:ca:2b:b7:e4:eb:e4:a4:20:93:d0:41:8d:bd:e1:7c:
         de:28:01:b4:18:f4:05:f4:48:0e:f7:98:31:9c:d2:db:41:8e:
         02:ee:b4:9f:2c:d2:2a:f7:68:b0:ae:49:e9:24:da:06:ef:e7:
         18:73:d8:32:90:a5:6b:53:d9:9f:bd:49:f6:82:04:e7:cf:d2:
         6d:2e:b2:71:01:f7:c6:4d:0d:3d:e4:c1:5f:e4:bd:cf:67:c3:
         b4:d0:e6:96:09:14:8d:7f:7b:96:53:43:33:9c:5f:75:72:47:
         66:8b:7c:4f:49:8d:3f:04:c5:a6:c4:56:b9:22:60:c3:68:17:
         83:3c:d5:ec:1e:c3:de:5c:8c:31:a0:d2:51:70:15:8f:9c:b5:
         6b:2f:6b:96:b0:05:37:73:01:18:03:86:34:4f:0a:52:10:2b:
         5d:16:12:30:7c:a0:71:30:7a:26:37:46:8f:0e:56:38:28:e3:
         9e:68:5f:bc:ee:d1:83:a1:29:d5:46:2e:29:c4:8f:2f:78:ab:
         66:d3:79:b6:83:ac:5c:d3:27:3b:02:b4:de:16:fc:b6:d5:cc:
         8d:ec:75:8b:7e:0b:67:e0:2d:35:e3:b4:5e:21:13:2f:b6:80:
         1c:b8:fc:ea:a1:13:c7:2b:09:78:38:e7:8a:7b:aa:9e:58:4e:
         2f:40:85:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5SWaME4mW47bKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
OGUwZjdlODAtZTBhNy00NDFlLWE1OGYtMDdhNjhlZjlkNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhORYskwazmYpovd3dsnW9nWLGPqJlnPS65R8
GnGezMx7B8HyiKKZ9xLtyQHeGsmvCnAwuSgAnzRsUDrXM3O0HdQpgYOb44sTL1uU
dzpnHeXuJ754ZYCIpnaEzm1hJ4CyZ5nZOuBMhZ52tAdM7LuQHAv+Ok4JknE/jony
jrCih0fyYocNTLnY+qlVxKrVlKYCq3s28NjUvpVQLZwuI319n1mlCjiQbhQ7vADv
m7KLDsuAdpcROnp650Ys5eBIt382taORO2Sq+HNtVf+bSs81znp7laWXvRmuNLBb
x+orFfZ/DjRRiIW0S49qCJadTQppImPa2uGkJIO074Yljpd8uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqAIBwb7S2/yNSNCGoU3TFSr9aBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NmMzE4OWEtMTY1MS0z
MmFjLTk4N2MtMjUzNzAyYjdjZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwTUcort+Tr5KQgk9BBjb3hfN4oAbQY9AX0SA73mDGc0ttBjgLutJ8s
0ir3aLCuSekk2gbv5xhz2DKQpWtT2Z+9SfaCBOfP0m0usnEB98ZNDT3kwV/kvc9n
w7TQ5pYJFI1/e5ZTQzOcX3VyR2aLfE9JjT8ExabEVrkiYMNoF4M81ewew95cjDGg
0lFwFY+ctWsva5awBTdzARgDhjRPClIQK10WEjB8oHEweiY3Ro8OVjgo455oX7zu
0YOhKdVGLinEjy94q2bTebaDrFzTJzsCtN4W/LbVzI3sdYt+C2fgLTXjtF4hEy+2
gBy4/OqhE8crCXg454p7qp5YTi9Ahao=
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:43:07 2026 by rpki-client