Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/acaccd05-890c-3610-bea1-24f511398203.roa
File:                     acaccd05-890c-3610-bea1-24f511398203.roa (raw, json)
Hash identifier:          27GsEG9gBOT8riPmoXMt8WQz7PYrKzuo4eLLpc1H4g8=
Subject key identifier:   5F:1A:76:76:59:B7:7B:A1:8E:24:EC:83:EF:25:D4:70:2A:C5:E5:B1
Certificate issuer:       /CN=73d6002b-995e-4a63-943c-bf2474d0b147
Certificate serial:       010D0C9F4328584E3E5F5A1C97BDB2B05A5C83E0
Authority key identifier: 8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/acaccd05-890c-3610-bea1-24f511398203.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     400950
IP address blocks:        131.143.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:5a:1c:97:bd:b2:b0:5a:5c:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d6002b-995e-4a63-943c-bf2474d0b147
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=4a16899c-afd3-4f20-8c3e-6e8e0b23d65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:51:22:7f:78:f5:c5:8a:b8:cb:8d:82:b8:
                    c0:f7:ef:2c:d0:32:80:c2:49:3a:2e:76:b9:9b:c7:
                    6c:cb:c1:ef:e1:f3:81:cb:45:e9:2d:9a:43:3d:01:
                    58:3d:35:bb:85:c4:ad:30:f1:f2:49:50:6f:9a:11:
                    05:2b:69:89:be:0f:5b:ba:dc:50:68:5e:ad:7e:fd:
                    b3:2d:8e:b4:b2:6c:ba:35:d7:4a:34:2b:d5:39:f1:
                    37:2b:32:a7:e4:59:60:28:b2:62:66:00:3a:85:df:
                    a6:c7:55:6e:1b:bd:66:f9:ad:88:e3:2e:c2:ec:db:
                    10:49:66:0e:52:be:ed:64:15:d7:7c:95:22:02:99:
                    41:77:85:2d:7c:69:b9:78:be:a0:9e:46:ac:92:97:
                    b2:3b:39:d6:34:cf:af:af:d9:27:54:73:48:ae:fc:
                    a9:de:1f:18:01:56:a0:32:ff:84:04:a9:84:1d:1e:
                    86:18:ef:bd:65:87:a3:34:c6:68:9c:55:b3:69:c3:
                    e6:f4:e6:d6:39:7d:bf:e8:5c:58:7e:6e:1e:6c:c1:
                    ba:c1:eb:c5:b9:b8:68:c2:3b:1f:13:04:26:5e:a0:
                    ce:7a:fc:a9:c8:25:09:b3:d1:d0:a5:85:5d:98:c5:
                    9d:85:2d:ef:79:20:53:a6:d3:77:56:65:1c:22:a2:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:76:76:59:B7:7B:A1:8E:24:EC:83:EF:25:D4:70:2A:C5:E5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/acaccd05-890c-3610-bea1-24f511398203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:00:4b:aa:20:c1:f3:1d:18:45:a5:2d:17:a5:a6:46:69:d4:
         71:41:0b:6a:d9:cd:4b:a1:43:3f:78:0a:dc:ca:06:2a:f9:35:
         30:6c:65:88:1e:d4:40:15:ee:6c:8a:fc:0e:28:47:6b:24:cd:
         2a:ba:67:e0:64:8b:51:07:7d:60:7c:80:1b:9d:ab:4d:b0:cd:
         d5:66:09:8f:bc:06:71:c6:08:32:13:d9:e7:22:a1:ed:b5:03:
         43:c6:2d:03:37:53:0c:0d:e4:72:f4:87:ee:be:24:ad:e6:e9:
         1b:0f:28:df:36:f7:a7:81:d7:e1:f9:2b:68:45:27:31:0f:bd:
         bf:9a:bd:b6:f7:06:8f:6c:f7:f9:6f:40:84:bb:87:5f:fa:9e:
         bf:96:d3:19:a2:8b:fe:bc:e1:c1:2c:09:d7:1e:41:5d:c7:e1:
         cb:c1:94:8f:3b:fe:68:c7:97:46:3d:42:6e:ef:d7:6d:8a:7d:
         6e:e7:e6:54:ed:e6:2e:4d:e4:74:bf:c6:63:86:81:04:de:fe:
         39:4e:d0:a2:f1:39:29:ac:1e:7c:4c:ec:06:c2:73:05:4e:ad:
         01:9f:db:cd:83:95:a6:71:ab:9a:5c:96:fa:ac:42:ff:8c:48:
         30:51:33:c5:0f:ac:57:ea:24:05:da:b6:a3:95:5b:b9:6a:fe:
         c5:90:a3:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1ocl72ysFpcg+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNkNjAwMmItOTk1ZS00YTYzLTk0M2MtYmYyNDc0ZDBi
MTQ3MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NGExNjg5OWMtYWZkMy00ZjIwLThjM2UtNmU4ZTBiMjNkNjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl1RIn949cWKuMuNgrjA9+8s0DKAwkk6Lna5
m8dsy8Hv4fOBy0XpLZpDPQFYPTW7hcStMPHySVBvmhEFK2mJvg9butxQaF6tfv2z
LY60smy6NddKNCvVOfE3KzKn5FlgKLJiZgA6hd+mx1VuG71m+a2I4y7C7NsQSWYO
Ur7tZBXXfJUiAplBd4UtfGm5eL6gnkaskpeyOznWNM+vr9knVHNIrvyp3h8YAVag
Mv+EBKmEHR6GGO+9ZYejNMZonFWzacPm9ObWOX2/6FxYfm4ebMG6wevFubhowjsf
EwQmXqDOevypyCUJs9HQpYVdmMWdhS3veSBTptN3VmUcIqKKlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8adnZZt3uhjiTsg+8l1HAqxeWxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2Q2
MDAyYi05OTVlLTRhNjMtOTQzYy1iZjI0NzRkMGIxNDcvYWNhY2NkMDUtODkwYy0z
NjEwLWJlYTEtMjRmNTExMzk4MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNkNjAwMmItOTk1ZS00YTYzLTk0
M2MtYmYyNDc0ZDBiMTQ3LzczZDYwMDJiLTk5NWUtNGE2My05NDNjLWJmMjQ3NGQw
YjE0Ny5jcmwwHwYDVR0jBBgwFoAUjqR8TvV6dR4H7J2iyXMZ66UKKU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83M2Q2MDAyYi05OTVlLTRhNjMtOTQzYy1iZjI0
NzRkMGIxNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4/+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMAS6ogwfMdGEWlLRelpkZp1HFBC2rZzUuhQz94CtzKBir5NTBsZYge
1EAV7myK/A4oR2skzSq6Z+Bki1EHfWB8gBudq02wzdVmCY+8BnHGCDIT2ecioe21
A0PGLQM3UwwN5HL0h+6+JK3m6RsPKN8296eB1+H5K2hFJzEPvb+avbb3Bo9s9/lv
QIS7h1/6nr+W0xmii/684cEsCdceQV3H4cvBlI87/mjHl0Y9Qm7v122KfW7n5lTt
5i5N5HS/xmOGgQTe/jlO0KLxOSmsHnxM7AbCcwVOrQGf282DlaZxq5pclvqsQv+M
SDBRM8UPrFfqJAXatqOVW7lq/sWQo48=
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:57:15 2026 by rpki-client