Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
File:                     8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa (raw, json)
Hash identifier:          PmStH0kmHPWqTyF00MSfdxzWTFZBo41V49dr++9l9Eg=
Subject key identifier:   EF:91:EE:A1:D5:56:3F:1E:04:E8:59:67:CA:63:1B:98:68:1A:10:61
Certificate issuer:       /CN=4d86c782-c9fe-4446-9e6e-7812e6590960
Certificate serial:       010D0C9F4328584ED001F21167FDB6C651481780
Authority key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     62989
IP address blocks:        144.80.0.0/16 maxlen: 24
                          192.150.225.0/24 maxlen: 24
                          192.153.123.0/24 maxlen: 24
                          192.231.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f2:11:67:fd:b6:c6:51:48:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d86c782-c9fe-4446-9e6e-7812e6590960
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=ac88a13a-5d99-495a-9139-60c08a4ca54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:87:da:fa:43:63:ef:36:ef:77:36:33:a6:
                    7e:8e:eb:0b:8c:82:ef:bf:03:f8:f5:c5:47:2e:13:
                    9a:17:a4:11:23:21:cd:82:61:5b:e8:cb:99:39:4c:
                    e1:e5:df:4c:b4:c7:b5:06:75:58:b7:2e:1c:9b:a1:
                    4a:82:cd:5a:c7:2a:1a:44:97:7e:55:d6:81:fb:a5:
                    7a:96:bd:66:ae:78:f1:10:af:b8:7b:2f:af:89:01:
                    dc:cc:e4:26:5e:41:95:b0:96:30:0c:16:27:27:10:
                    13:7d:a7:f3:ed:33:39:71:b2:80:4e:2b:13:ed:92:
                    6e:dc:f5:28:e8:66:9e:bc:40:50:7d:2d:27:66:70:
                    ee:f3:86:e5:8c:86:b8:24:a3:d8:43:6c:25:a2:a0:
                    d6:a6:6b:bc:89:08:cc:87:5f:48:0f:87:9c:1f:f0:
                    93:d7:59:91:db:a2:41:c0:5e:b1:1e:c0:0f:23:43:
                    e1:c0:24:26:3f:22:4d:ba:de:0f:b4:df:fc:b8:f0:
                    d9:1c:53:7f:cb:c6:27:b7:09:ee:79:3c:8d:0c:80:
                    31:ab:41:33:2b:8f:d3:90:0e:df:0c:fd:f9:17:01:
                    95:e9:f0:2b:63:62:d0:c3:15:81:73:67:db:7e:ad:
                    9a:09:9f:f3:4e:a8:6f:22:cd:84:65:28:ac:b8:a6:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:EE:A1:D5:56:3F:1E:04:E8:59:67:CA:63:1B:98:68:1A:10:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.crl

            X509v3 Authority Key Identifier:
                keyid:E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.80.0.0/16
                  192.150.225.0/24
                  192.153.123.0/24
                  192.231.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:ae:02:a9:1f:20:06:8f:16:43:b4:ec:d3:4a:ee:70:81:
         dd:ec:54:e3:7b:42:cc:50:bf:c5:29:b3:63:a3:54:c8:8b:70:
         6a:91:26:27:a9:e3:68:18:bb:4c:91:87:e4:62:91:b6:1a:7a:
         b5:a6:7c:d9:b9:89:8f:3b:b6:35:97:bb:55:53:5f:21:0a:4a:
         b2:54:47:89:72:75:4d:6c:bd:df:89:71:dc:db:18:8f:08:bd:
         bb:a9:94:55:ed:c9:44:23:d9:a8:6b:b5:62:a7:68:31:57:f2:
         1f:7d:af:98:8a:01:2f:ab:67:ae:d4:03:66:63:b1:d9:b1:84:
         f6:53:c2:bc:c8:58:ff:7d:dd:14:53:13:d6:6b:f3:0d:8c:94:
         e2:c6:e9:69:ee:5d:a5:0d:57:64:bb:35:93:8a:a4:22:d6:67:
         65:02:91:d6:f5:df:ea:fb:68:af:6d:1a:0d:02:b7:39:a1:51:
         4e:7a:cd:93:c1:4e:e8:ce:db:1a:93:13:03:36:85:a7:36:f3:
         30:c4:7b:14:8c:2a:a3:43:19:e0:71:6a:aa:f9:9b:af:7b:0a:
         83:b6:da:c9:c9:b7:d4:35:59:64:9d:d5:ee:c5:fb:ce:18:cf:
         47:6b:5f:56:d5:62:f0:d7:b2:8f:d2:f5:db:d9:8b:af:d1:88:
         a3:9a:d6:23
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7QAfIRZ/22xlFIF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4NmM3ODItYzlmZS00NDQ2LTllNmUtNzgxMmU2NTkw
OTYwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
YWM4OGExM2EtNWQ5OS00OTVhLTkxMzktNjBjMDhhNGNhNTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06uH2vpDY+8273c2M6Z+jusLjILvvwP49cVH
LhOaF6QRIyHNgmFb6MuZOUzh5d9MtMe1BnVYty4cm6FKgs1axyoaRJd+VdaB+6V6
lr1mrnjxEK+4ey+viQHczOQmXkGVsJYwDBYnJxATfafz7TM5cbKATisT7ZJu3PUo
6GaevEBQfS0nZnDu84bljIa4JKPYQ2wloqDWpmu8iQjMh19ID4ecH/CT11mR26JB
wF6xHsAPI0PhwCQmPyJNut4PtN/8uPDZHFN/y8YntwnueTyNDIAxq0EzK4/TkA7f
DP35FwGV6fArY2LQwxWBc2fbfq2aCZ/zTqhvIs2EZSisuKZWgQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFO+R7qHVVj8eBOhZZ8pjG5hoGhBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDg2
Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1OTA5NjAvOGQ1MjlhM2QtZDhjNC0z
NmEyLWFkZGEtM2I4N2VlOTRlYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4NmM3ODItYzlmZS00NDQ2LTll
NmUtNzgxMmU2NTkwOTYwLzRkODZjNzgyLWM5ZmUtNDQ0Ni05ZTZlLTc4MTJlNjU5
MDk2MC5jcmwwHwYDVR0jBBgwFoAU4WM5kPx+qh40fFMP81ZMLxuRB0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEy
ZTY1OTA5NjAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAkFADBADA
luEDBADAmXsDBADA59wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALy+uAqkfIAaPFkO07NNK7nCB3exU43tC
zFC/xSmzY6NUyItwapEmJ6njaBi7TJGH5GKRthp6taZ82bmJjzu2NZe7VVNfIQpK
slRHiXJ1TWy934lx3NsYjwi9u6mUVe3JRCPZqGu1YqdoMVfyH32vmIoBL6tnrtQD
ZmOx2bGE9lPCvMhY/33dFFMT1mvzDYyU4sbpae5dpQ1XZLs1k4qkItZnZQKR1vXf
6vtor20aDQK3OaFRTnrNk8FO6M7bGpMTAzaFpzbzMMR7FIwqo0MZ4HFqqvmbr3sK
g7baycm31DVZZJ3V7sX7zhjPR2tfVtVi8Neyj9L129mLr9GIo5rWIw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 22:05:43 2026 by rpki-client