Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/aaa1b0fc-acbe-3068-b417-d017a22364c2.roa
File:                     aaa1b0fc-acbe-3068-b417-d017a22364c2.roa (raw, json)
Hash identifier:          eHV+TlcJqLD04ghhSztmL+f5+qLxm0f1U2rneY3L9Ao=
Subject key identifier:   54:9F:92:D6:80:48:0B:12:31:49:5B:25:5C:75:92:90:C3:9C:AE:AF
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584E921F9B81A5AA492B59089100
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/aaa1b0fc-acbe-3068-b417-d017a22364c2.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     14499
IP address blocks:        142.192.224.0/23 maxlen: 23
                          142.192.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9b:81:a5:aa:49:2b:59:08:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=8221f9d1-d051-49c1-96d3-71f2cfb74173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:d3:08:05:3e:96:05:45:81:f9:a9:3e:41:
                    d6:0c:06:3f:e5:ce:2a:18:f5:11:63:28:d3:b3:dd:
                    f5:87:34:ae:a4:2c:f8:0b:4e:dd:60:e3:0e:eb:6f:
                    3d:e1:fb:03:fc:b5:27:7b:1f:3a:33:97:60:3a:84:
                    c1:c7:09:3f:cd:f3:cf:c1:db:e1:53:4f:56:a6:21:
                    56:72:9c:87:60:f7:ff:75:d5:19:54:9a:2b:5c:6b:
                    98:7f:0c:59:fa:3c:a4:13:45:33:e1:da:fd:08:d5:
                    30:0a:d9:4b:9e:4d:64:94:b1:6c:41:43:ca:a8:47:
                    f0:d3:77:14:7d:aa:6e:ba:a5:ff:07:e4:28:bc:72:
                    6d:c6:87:f8:3d:62:c4:a6:3a:6d:05:99:e8:73:f4:
                    14:e7:5b:22:f8:c0:25:ac:d6:98:f6:ba:32:d5:cc:
                    73:22:73:9c:e1:a1:9a:7a:54:2d:b4:96:3b:6e:2f:
                    73:59:f2:94:c8:ca:c7:35:6e:9a:62:7b:ea:64:aa:
                    70:97:e7:35:a3:fd:64:96:ff:10:e2:be:ea:90:7e:
                    09:58:c8:ca:f2:bc:4b:bc:24:be:a7:69:40:c2:e4:
                    6b:78:d4:49:e9:fa:d5:42:91:09:3c:26:fa:45:f1:
                    02:d0:29:27:2e:1e:48:e7:32:37:e0:1f:2a:89:b4:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:92:D6:80:48:0B:12:31:49:5B:25:5C:75:92:90:C3:9C:AE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/aaa1b0fc-acbe-3068-b417-d017a22364c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:7f:3e:78:01:48:97:49:15:01:f1:93:91:5a:39:26:70:da:
         b0:00:3d:69:6a:61:51:54:37:14:5f:a9:75:a8:d1:8e:ca:7a:
         b1:27:09:12:21:cb:fb:c3:d5:4a:72:b6:2d:0b:7b:4c:3a:fb:
         ea:da:3f:69:41:47:b5:5c:64:0b:e8:9c:c9:41:8d:d1:93:85:
         e0:fe:94:9a:77:08:8b:e4:52:d9:48:8c:4a:2e:e7:4c:b6:3e:
         3b:3b:e5:3d:74:0c:e1:a2:42:df:db:00:49:fa:65:29:94:67:
         4a:41:84:77:49:a5:04:4b:42:61:28:02:1e:c7:37:f8:da:48:
         ad:c7:27:b3:12:51:01:75:e6:4e:a6:10:f8:a9:4c:c1:af:3d:
         d8:9b:78:43:02:7c:87:50:22:e4:df:6f:a1:74:8e:49:ba:4b:
         33:72:fe:df:05:90:36:72:a2:f5:31:e4:bd:bb:bb:71:ed:a1:
         46:54:fe:f4:a7:30:ab:76:b4:21:20:72:23:30:56:dc:79:fc:
         61:80:0b:5e:06:52:a0:78:f8:b9:e6:4d:76:00:fe:33:a1:fb:
         a2:aa:1a:3a:64:1e:c8:8b:ec:d0:13:bb:97:b9:45:70:67:50:
         42:1e:31:7f:f8:57:1b:7b:7a:dd:c1:e5:13:32:0f:ac:8e:be:
         a2:ad:80:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH5uBpapJK1kIkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmMTIzMzctOGViOC00M2EyLWE3NWUtMmIwMWNlYjk1
YzM5MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ODIyMWY5ZDEtZDA1MS00OWMxLTk2ZDMtNzFmMmNmYjc0MTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgXTCAU+lgVFgfmpPkHWDAY/5c4qGPURYyjT
s931hzSupCz4C07dYOMO62894fsD/LUnex86M5dgOoTBxwk/zfPPwdvhU09WpiFW
cpyHYPf/ddUZVJorXGuYfwxZ+jykE0Uz4dr9CNUwCtlLnk1klLFsQUPKqEfw03cU
fapuuqX/B+QovHJtxof4PWLEpjptBZnoc/QU51si+MAlrNaY9roy1cxzInOc4aGa
elQttJY7bi9zWfKUyMrHNW6aYnvqZKpwl+c1o/1klv8Q4r7qkH4JWMjK8rxLvCS+
p2lAwuRreNRJ6frVQpEJPCb6RfEC0CknLh5I5zI34B8qibTOeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSfktaASAsSMUlbJVx1kpDDnK6vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Y2Yx
MjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2ViOTVjMzkvYWFhMWIwZmMtYWNiZS0z
MDY4LWI0MTctZDAxN2EyMjM2NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGNmMTIzMzctOGViOC00M2EyLWE3
NWUtMmIwMWNlYjk1YzM5LzhjZjEyMzM3LThlYjgtNDNhMi1hNzVlLTJiMDFjZWI5
NWMzOS5jcmwwHwYDVR0jBBgwFoAUfN95hHXOT8cMdsRbFV6R2RyaPmwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAx
Y2ViOTVjMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjsDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZ/PngBSJdJFQHxk5FaOSZw2rAAPWlqYVFUNxRfqXWo0Y7KerEnCRIh
y/vD1Upyti0Le0w6++raP2lBR7VcZAvonMlBjdGTheD+lJp3CIvkUtlIjEou50y2
Pjs75T10DOGiQt/bAEn6ZSmUZ0pBhHdJpQRLQmEoAh7HN/jaSK3HJ7MSUQF15k6m
EPipTMGvPdibeEMCfIdQIuTfb6F0jkm6SzNy/t8FkDZyovUx5L27u3HtoUZU/vSn
MKt2tCEgciMwVtx5/GGAC14GUqB4+LnmTXYA/jOh+6KqGjpkHsiL7NATu5e5RXBn
UEIeMX/4Vxt7et3B5RMyD6yOvqKtgJw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:00:21 2026 by rpki-client