Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/acfa6752-551d-3d5a-b799-156c616b1214.roa
File:                     acfa6752-551d-3d5a-b799-156c616b1214.roa (raw, json)
Hash identifier:          8RPNCu5Xxq61Nr6W4jricDcpsvFhL/fyM56dbCcZWZ8=
Subject key identifier:   4F:EA:85:E7:FA:B6:D1:66:B4:9C:6F:C5:BC:E1:B4:A0:79:DA:C2:F9
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F4328584EB2B1BB24F093D9D91281D080
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/acfa6752-551d-3d5a-b799-156c616b1214.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     28931
IP address blocks:        162.250.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bb:24:f0:93:d9:d9:12:81:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=0ac17dad-95f4-4d19-95de-a81b0bdd8949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:ef:81:a1:1b:ba:71:84:1b:86:b2:9c:59:
                    da:6d:f7:b9:0d:36:d9:19:61:46:2b:04:fa:a0:53:
                    d0:9e:1b:c4:9f:63:7e:1b:b4:63:68:db:c7:a4:a4:
                    80:c8:17:00:59:06:ec:77:5f:3d:0d:23:d6:4a:21:
                    00:9c:bc:8d:37:8f:67:1a:31:ef:ee:d8:ab:60:2d:
                    21:0e:ec:3e:0c:1f:9f:32:9a:45:8c:f4:f0:f9:2a:
                    e1:93:67:ec:b0:e0:42:51:7b:e6:79:bf:97:27:a1:
                    48:33:84:f7:1f:0e:be:a2:3f:16:42:34:9b:c9:1b:
                    6b:57:d2:09:73:60:ac:7d:4e:e5:77:cd:3d:2d:6f:
                    dc:ad:d1:16:ad:64:59:50:eb:07:42:2d:8d:06:45:
                    42:b0:1b:70:da:0f:cf:fc:26:47:84:91:15:14:1a:
                    b7:2f:ee:28:03:26:7a:ff:5d:2e:b6:ed:e5:54:c1:
                    62:42:ec:59:96:87:dd:e9:44:8f:21:a8:88:2a:db:
                    40:96:3b:c3:8e:91:8b:d8:74:4d:c4:c7:12:2f:79:
                    45:4c:a6:a9:94:4f:b7:b1:9a:48:01:f3:1a:57:27:
                    93:5a:51:b0:79:97:36:1d:3f:7f:40:cd:86:6f:11:
                    68:be:33:46:44:08:34:5a:e9:0a:be:4f:ef:1c:8d:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:85:E7:FA:B6:D1:66:B4:9C:6F:C5:BC:E1:B4:A0:79:DA:C2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/acfa6752-551d-3d5a-b799-156c616b1214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:89:2b:d2:0b:21:4d:34:20:9d:13:5a:13:70:b2:29:06:
         98:be:9c:97:11:0e:f0:2c:b8:91:63:97:f1:c0:8f:17:ba:88:
         d1:fa:4f:67:e7:83:8a:62:85:1b:94:25:ed:46:66:c5:72:81:
         9b:54:8d:f5:f0:6f:95:1c:dc:a2:68:1c:6c:27:3b:a6:56:2a:
         7b:cf:9c:65:37:c3:b0:58:b8:a9:ef:2e:68:f4:f8:81:0e:39:
         3a:c0:1d:a1:38:0a:12:51:3b:da:8b:d6:d6:99:14:eb:76:ac:
         7f:15:1f:42:25:90:e0:bc:59:32:bb:8e:3b:3d:e9:d0:fe:e2:
         88:48:af:4a:e7:80:d1:ae:d5:b1:18:dc:51:92:bb:39:37:26:
         45:72:d5:b1:8b:04:c4:46:32:b7:40:f5:2d:3b:ec:77:b4:08:
         d3:85:ca:d3:06:72:b3:29:60:98:e5:f5:c0:4a:0d:c4:c3:28:
         f3:cc:1b:8c:1c:f0:20:5b:57:41:d5:be:4b:4e:0d:2a:e7:3b:
         d6:e0:45:8d:80:25:12:8c:00:36:e0:86:67:c1:7b:f4:7f:76:
         c0:13:87:47:00:c1:73:d3:dd:1c:31:64:18:03:e4:59:0e:8f:
         e5:1c:19:5f:8f:f9:2b:2b:e7:7c:64:02:67:e4:c6:b8:29:b2:
         87:4b:0b:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbsk8JPZ2RKB0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy
YWEyMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MGFjMTdkYWQtOTVmNC00ZDE5LTk1ZGUtYTgxYjBiZGQ4OTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EHvgaEbunGEG4aynFnabfe5DTbZGWFGKwT6
oFPQnhvEn2N+G7RjaNvHpKSAyBcAWQbsd189DSPWSiEAnLyNN49nGjHv7tirYC0h
Duw+DB+fMppFjPTw+Srhk2fssOBCUXvmeb+XJ6FIM4T3Hw6+oj8WQjSbyRtrV9IJ
c2CsfU7ld809LW/crdEWrWRZUOsHQi2NBkVCsBtw2g/P/CZHhJEVFBq3L+4oAyZ6
/10utu3lVMFiQuxZlofd6USPIaiIKttAljvDjpGL2HRNxMcSL3lFTKaplE+3sZpI
AfMaVyeTWlGweZc2HT9/QM2GbxFovjNGRAg0WukKvk/vHI0efwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/qhef6ttFmtJxvxbzhtKB52sL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl
OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYWNmYTY3NTItNTUxZC0z
ZDVhLWI3OTktMTU2YzYxNmIxMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1
OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0
MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4
ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ/iSvSCyFNNCCdE1oTcLIpBpi+nJcRDvAsuJFjl/HAjxe6iNH6T2fn
g4pihRuUJe1GZsVygZtUjfXwb5Uc3KJoHGwnO6ZWKnvPnGU3w7BYuKnvLmj0+IEO
OTrAHaE4ChJRO9qL1taZFOt2rH8VH0IlkOC8WTK7jjs96dD+4ohIr0rngNGu1bEY
3FGSuzk3JkVy1bGLBMRGMrdA9S077He0CNOFytMGcrMpYJjl9cBKDcTDKPPMG4wc
8CBbV0HVvktODSrnO9bgRY2AJRKMADbghmfBe/R/dsATh0cAwXPT3RwxZBgD5FkO
j+UcGV+P+Ssr53xkAmfkxrgpsodLC8A=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:16:44 2026 by rpki-client