Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/46288ecd-61ab-3fb8-b063-5744ce88b18b.roa
File:                     46288ecd-61ab-3fb8-b063-5744ce88b18b.roa (raw, json)
Hash identifier:          fEPePJT3rTLyqT7H3SjKGKzOMOeOn6oCqxKiOGIl0lM=
Subject key identifier:   8C:AC:36:B0:0D:D8:6D:A7:5C:05:31:99:0C:2B:E2:52:00:F2:7E:2F
Certificate issuer:       /CN=0d419888-80a0-4fd9-90ba-6342b677f849
Certificate serial:       010D0C9F4328584EABB6EF97B88DBC2F8BEBFA80
Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/46288ecd-61ab-3fb8-b063-5744ce88b18b.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     5650
IP address blocks:        142.248.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ef:97:b8:8d:bc:2f:8b:eb:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=192449b4-53ac-4dc1-b15e-f381c07ad2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:21:ef:ce:e2:7e:b5:00:af:97:6c:63:69:
                    35:52:3b:18:a3:36:ab:b1:3a:c4:08:74:d9:f8:1d:
                    49:4a:9b:ee:9c:7f:98:30:c2:fb:2b:1a:88:d0:cb:
                    d1:99:1f:2d:f0:23:8f:e3:71:53:45:7d:92:3c:95:
                    c3:18:da:bc:2a:94:73:68:0b:94:3e:1d:ec:0f:7b:
                    c8:7a:03:e1:a8:a3:1c:fe:ff:02:8e:a4:2d:2c:52:
                    41:8a:bf:5c:20:58:be:8c:92:aa:9b:7a:26:be:e8:
                    38:11:e4:c3:06:57:b7:b2:37:a4:0b:a4:63:1b:c4:
                    c9:dc:c1:3b:fc:39:ba:ba:4d:19:18:a6:c8:8c:c5:
                    7d:58:1f:30:2d:01:ba:1a:50:71:5c:24:a9:ad:50:
                    dd:1b:d2:0b:98:69:a4:77:83:88:41:b4:7e:20:eb:
                    68:eb:82:50:b1:a5:a6:eb:86:65:ad:d2:7b:82:25:
                    e0:76:f9:7c:d5:7b:ad:d5:8c:a5:1b:48:61:e1:13:
                    40:d5:45:ff:19:75:67:fc:5e:25:6b:e0:e3:2b:5b:
                    1c:a7:be:ee:1b:d1:41:0d:e7:dc:91:9d:00:d5:24:
                    cd:85:2e:54:da:19:9b:e5:65:05:fd:24:c3:fc:c2:
                    5f:2f:4e:37:05:7c:a9:01:88:d9:da:63:ad:3e:3c:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:36:B0:0D:D8:6D:A7:5C:05:31:99:0C:2B:E2:52:00:F2:7E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/46288ecd-61ab-3fb8-b063-5744ce88b18b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl

            X509v3 Authority Key Identifier:
                keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:6c:8f:63:3c:91:b0:ef:05:78:e3:91:68:c1:3f:84:83:
         be:3c:24:b1:77:a5:17:98:f7:9c:d9:82:94:f9:6c:8e:ce:7a:
         16:1a:9f:d0:1a:4e:fb:c7:b4:e4:f3:f9:5e:fa:dd:73:fd:fb:
         fe:2c:42:12:91:75:d1:c1:64:d9:ff:a7:84:98:21:65:6c:ca:
         7d:08:14:ef:c6:c4:5a:90:23:19:d0:98:15:2c:f7:5b:28:f5:
         c5:8b:3b:88:47:39:36:c2:cf:75:15:2e:0f:93:33:17:83:62:
         40:18:dc:f6:de:93:68:c1:26:82:f5:97:00:61:4d:28:09:1a:
         d7:86:bf:26:38:7b:bc:73:8a:76:ad:db:7a:c1:ee:27:dc:9b:
         72:4c:75:4e:15:21:8e:a5:e7:ea:ef:46:b5:94:34:1b:6b:37:
         01:14:a5:f2:ed:c9:d2:f0:af:99:69:10:99:b6:ff:c5:e5:27:
         d1:48:b2:ae:87:e4:b2:5e:39:d4:a9:86:4f:de:6e:75:66:1f:
         29:c8:90:f7:75:e0:f6:e8:2b:b7:39:9f:05:9f:44:6c:35:47:
         b1:15:1d:7b:05:b0:80:18:a5:bc:c7:20:06:49:3e:99:50:49:
         fc:a1:64:8b:97:54:0b:0d:48:c9:3a:50:f0:dc:d2:62:ce:78:
         f6:ca:6a:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtu+XuI28L4vr+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ0MTk4ODgtODBhMC00ZmQ5LTkwYmEtNjM0MmI2Nzdm
ODQ5MB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk
MTkyNDQ5YjQtNTNhYy00ZGMxLWIxNWUtZjM4MWMwN2FkMmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulwh787ifrUAr5dsY2k1UjsYozarsTrECHTZ
+B1JSpvunH+YMML7KxqI0MvRmR8t8COP43FTRX2SPJXDGNq8KpRzaAuUPh3sD3vI
egPhqKMc/v8CjqQtLFJBir9cIFi+jJKqm3omvug4EeTDBle3sjekC6RjG8TJ3ME7
/Dm6uk0ZGKbIjMV9WB8wLQG6GlBxXCSprVDdG9ILmGmkd4OIQbR+IOto64JQsaWm
64ZlrdJ7giXgdvl81Xut1YylG0hh4RNA1UX/GXVn/F4la+DjK1scp77uG9FBDefc
kZ0A1STNhS5U2hmb5WUF/STD/MJfL043BXypAYjZ2mOtPjwOJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIysNrAN2G2nXAUxmQwr4lIA8n4vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQx
OTg4OC04MGEwLTRmZDktOTBiYS02MzQyYjY3N2Y4NDkvNDYyODhlY2QtNjFhYi0z
ZmI4LWIwNjMtNTc0NGNlODhiMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ0MTk4ODgtODBhMC00ZmQ5LTkw
YmEtNjM0MmI2NzdmODQ5LzBkNDE5ODg4LTgwYTAtNGZkOS05MGJhLTYzNDJiNjc3
Zjg0OS5jcmwwHwYDVR0jBBgwFoAUQeDNvQAmJWZ21tpDmhJFbaSoFoMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQxOTg4OC04MGEwLTRmZDktOTBiYS02MzQy
YjY3N2Y4NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvh0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpYbI9jPJGw7wV445FowT+Eg748JLF3pReY95zZgpT5bI7OehYan9Aa
TvvHtOTz+V763XP9+/4sQhKRddHBZNn/p4SYIWVsyn0IFO/GxFqQIxnQmBUs91so
9cWLO4hHOTbCz3UVLg+TMxeDYkAY3Pbek2jBJoL1lwBhTSgJGteGvyY4e7xzinat
23rB7ifcm3JMdU4VIY6l5+rvRrWUNBtrNwEUpfLtydLwr5lpEJm2/8XlJ9FIsq6H
5LJeOdSphk/ebnVmHynIkPd14PboK7c5nwWfRGw1R7EVHXsFsIAYpbzHIAZJPplQ
SfyhZIuXVAsNSMk6UPDc0mLOePbKamo=
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:24:26 2026 by rpki-client