Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa
File:                     f29bc5ef-4151-3787-82c8-edfd86593688.roa (raw, json)
Hash identifier:          kKZJcUlGEih3jZ9iDBg92hQGzuJzpjaSIUQ4IxqBDB0=
Subject key identifier:   9F:11:22:B9:B4:1D:57:B5:E6:64:6B:41:2C:2C:72:2C:9B:D7:F1:D6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F6D367E2D32380D425980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        142.115.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6d:36:7e:2d:32:38:0d:42:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=653307d5-81ff-4381-a54d-d22a56109569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:ac:32:12:bb:41:43:f7:1a:17:ba:b2:a6:
                    59:1c:57:4d:bb:3e:7d:da:91:9e:a8:b5:ee:69:67:
                    73:9f:38:96:42:61:a8:87:8b:49:8f:10:f1:fb:a4:
                    e9:d6:f1:31:4e:d0:2d:a5:da:13:8b:f6:f5:b0:40:
                    79:95:fd:a9:88:56:75:fa:7a:85:89:3e:df:75:ed:
                    42:7c:8e:6a:28:df:4a:67:4f:f9:bf:b2:1f:f8:21:
                    0b:35:9d:00:d8:bb:52:71:65:54:6a:f5:2c:f8:80:
                    2a:54:24:2a:4a:86:6e:ca:1d:f4:26:88:ce:9e:f7:
                    5b:10:8a:d9:62:49:be:e6:22:d5:6e:74:68:59:72:
                    d1:da:96:05:03:e4:3e:e2:46:7f:03:c8:0c:1e:25:
                    1f:03:30:3c:0a:e7:cd:0d:5b:b4:1a:4d:44:f8:6e:
                    10:a7:e9:34:79:c7:39:c7:eb:83:d5:53:7c:85:42:
                    75:80:1e:8d:6f:e7:ab:0d:8d:8f:e9:a9:a7:89:d4:
                    06:47:0c:8a:d0:86:c2:dd:13:8c:b2:d7:2b:5c:e7:
                    8b:07:3d:72:cc:38:7c:f4:61:b9:d2:75:df:a9:78:
                    9c:d3:e7:75:ba:a1:3c:ae:de:0f:20:ae:98:58:52:
                    bb:fc:40:ce:27:46:cd:c0:9c:1a:8c:87:77:f9:66:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:11:22:B9:B4:1D:57:B5:E6:64:6B:41:2C:2C:72:2C:9B:D7:F1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:1a:ab:c4:0a:10:a2:2c:6e:fb:c3:d6:ca:62:3e:01:03:
         f7:96:33:5a:7d:58:dc:fa:b6:7c:a3:f7:26:cc:bf:5b:47:34:
         f0:8d:42:18:35:8b:8b:c8:01:35:3a:c1:7f:be:44:e1:ba:84:
         78:c2:b4:52:ca:eb:77:69:fd:c6:c4:2c:45:a8:d6:5c:13:24:
         03:49:8a:50:bf:f1:06:f5:54:3f:9c:07:5b:05:ac:6e:6f:0e:
         89:c6:ae:d4:3e:69:f3:be:d1:14:90:f2:f6:f0:fe:87:67:6c:
         31:f1:af:ca:5a:fb:47:f9:e7:e4:5a:f5:42:60:ee:3a:47:73:
         8e:55:78:eb:15:5b:7c:74:4e:49:8d:e8:50:62:ee:51:7b:a6:
         36:49:fe:f2:ff:ea:ac:41:83:0f:da:8a:2d:4e:da:35:20:41:
         82:a4:5a:e6:1b:14:e3:d2:7f:ec:60:da:49:09:dc:63:19:1a:
         32:e5:6e:84:07:12:71:84:bd:2d:41:85:10:98:af:40:f4:4d:
         ae:9a:6f:23:e6:7a:c9:5f:86:c8:ec:01:70:c3:ee:6f:f8:12:
         20:3e:6c:63:ba:f8:96:18:59:a1:90:b1:5a:bc:50:52:c8:b7:
         2a:bb:5b:33:ef:4c:87:b7:b7:b3:3c:8e:55:4f:4b:c7:3c:50:
         b1:8b:56:c4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5kD202fi0yOA1CWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NjUzMzA3ZDUtODFmZi00MzgxLWE1NGQtZDIyYTU2MTA5NTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUysMhK7QUP3Ghe6sqZZHFdNuz592pGeqLXu
aWdznziWQmGoh4tJjxDx+6Tp1vExTtAtpdoTi/b1sEB5lf2piFZ1+nqFiT7fde1C
fI5qKN9KZ0/5v7If+CELNZ0A2LtScWVUavUs+IAqVCQqSoZuyh30JojOnvdbEIrZ
Ykm+5iLVbnRoWXLR2pYFA+Q+4kZ/A8gMHiUfAzA8CufNDVu0Gk1E+G4Qp+k0ecc5
x+uD1VN8hUJ1gB6Nb+erDY2P6amnidQGRwyK0IbC3ROMstcrXOeLBz1yzDh89GG5
0nXfqXic0+d1uqE8rt4PIK6YWFK7/EDOJ0bNwJwajId3+Wbg0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ8RIrm0HVe15mRrQSwsciyb1/HWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjI5YmM1ZWYtNDE1MS0z
Nzg3LTgyYzgtZWRmZDg2NTkzNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjnMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYE0aq8QKEKIsbvvD1spiPgED95YzWn1Y3Pq2fKP3Jsy/W0c08I1CGDWL
i8gBNTrBf75E4bqEeMK0Usrrd2n9xsQsRajWXBMkA0mKUL/xBvVUP5wHWwWsbm8O
icau1D5p877RFJDy9vD+h2dsMfGvylr7R/nn5Fr1QmDuOkdzjlV46xVbfHROSY3o
UGLuUXumNkn+8v/qrEGDD9qKLU7aNSBBgqRa5hsU49J/7GDaSQncYxkaMuVuhAcS
cYS9LUGFEJivQPRNrppvI+Z6yV+GyOwBcMPub/gSID5sY7r4lhhZoZCxWrxQUsi3
KrtbM+9Mh7e3szyOVU9LxzxQsYtWxA==
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:53 2026 by rpki-client