Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa
File:                     d52ea58c-e29f-3a43-840a-2f77aba702be.roa (raw, json)
Hash identifier:          wRMped6G17zYgYabZ83jHA3zVuL9hhulxFu/YamimPc=
Subject key identifier:   8D:9E:A4:5E:DC:E0:A1:D0:DD:BF:CA:0D:EF:43:49:A3:A5:50:3C:F1
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584E3601874A9CFCFEF4D2C37A7C
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     12198
IP address blocks:        131.143.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:87:4a:9c:fc:fe:f4:d2:c3:7a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=bf5bcfe5-557c-4301-9732-3f3d653fe2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:e5:4d:c0:1a:b1:98:38:2a:7e:7e:b2:a2:
                    dc:a1:4c:4d:db:d0:6e:f3:f3:6e:aa:20:f8:63:19:
                    9b:cd:8f:66:7a:4b:25:d9:d7:1c:de:98:de:b4:de:
                    36:ee:b6:f1:97:b3:01:f7:8d:35:6e:89:ef:94:c4:
                    0c:0b:39:6c:43:ce:73:8c:47:a1:af:64:ec:54:bb:
                    09:76:f8:63:47:01:6d:a5:5d:a0:86:35:ab:8c:50:
                    7c:d9:b0:39:48:e7:c7:b1:4f:b4:d9:80:b0:ae:25:
                    e8:20:a4:9e:8d:ab:a4:37:5a:bb:73:ac:b4:cd:39:
                    45:b6:2e:44:3f:b7:68:18:0a:ba:47:44:c5:ef:fd:
                    c9:69:62:02:5f:dc:5b:5e:1a:a8:20:fb:70:6c:00:
                    c2:5c:61:29:28:c9:0d:7a:bb:63:d8:c9:51:c2:fc:
                    c8:7f:ea:64:2c:d9:e5:e2:11:ce:3e:b2:1a:be:27:
                    52:84:fd:b0:41:63:94:03:6d:17:32:e7:60:e1:38:
                    b6:df:41:06:3e:ff:28:18:4e:56:41:17:8e:3d:26:
                    3b:5d:77:2f:6a:63:3f:b9:3a:aa:01:84:d0:9e:94:
                    97:53:c6:ae:e6:1d:5b:2c:86:b7:92:be:29:aa:82:
                    1e:47:5a:dd:98:67:8c:0b:e1:e4:99:47:ca:0f:c6:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:A4:5E:DC:E0:A1:D0:DD:BF:CA:0D:EF:43:49:A3:A5:50:3C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:52:ee:04:66:36:19:1f:dd:a6:7b:04:12:41:98:11:8d:
         94:41:51:be:40:bf:85:10:cc:e2:df:f8:4f:75:12:5f:54:85:
         39:9c:11:c4:39:07:3d:ae:46:fc:a6:4c:b2:d1:27:9f:be:2e:
         96:fc:de:14:1a:a1:bf:62:45:a3:3a:ee:fa:e0:ea:c6:99:4a:
         92:f6:5a:23:56:63:49:dd:7f:7c:b6:6c:48:d6:bb:77:fb:82:
         c4:2b:62:59:d1:09:26:bb:e9:9f:ea:9f:11:1e:3f:d9:88:4b:
         c4:70:58:b5:bb:c1:eb:89:f4:e1:b6:18:36:08:d2:ec:99:8d:
         86:d3:16:0e:ed:4f:23:f2:51:61:5d:9f:6e:ba:e1:af:19:07:
         23:a6:7e:a9:e6:a4:42:89:93:e2:eb:78:be:80:d2:57:63:28:
         11:3e:cf:31:de:4d:95:07:8e:f0:8a:d4:1c:8a:f7:62:35:a4:
         39:5a:6f:9e:03:4a:78:ac:be:52:14:15:96:b8:ae:56:5f:85:
         bd:c5:ac:1e:5e:9a:f7:61:34:45:63:1c:b6:2b:60:8f:c0:47:
         35:04:00:11:db:04:f7:2b:da:de:98:7c:dd:b3:3c:02:27:f3:
         6f:f3:e4:dd:82:6d:b8:83:1f:be:4b:54:2b:48:fb:2f:7e:e3:
         40:e7:a2:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AYdKnPz+9NLDenwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
YmY1YmNmZTUtNTU3Yy00MzAxLTk3MzItM2YzZDY1M2ZlMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPnlTcAasZg4Kn5+sqLcoUxN29Bu8/NuqiD4
YxmbzY9meksl2dcc3pjetN427rbxl7MB9401bonvlMQMCzlsQ85zjEehr2TsVLsJ
dvhjRwFtpV2ghjWrjFB82bA5SOfHsU+02YCwriXoIKSejaukN1q7c6y0zTlFti5E
P7doGAq6R0TF7/3JaWICX9xbXhqoIPtwbADCXGEpKMkNertj2MlRwvzIf+pkLNnl
4hHOPrIavidShP2wQWOUA20XMudg4Ti230EGPv8oGE5WQReOPSY7XXcvamM/uTqq
AYTQnpSXU8au5h1bLIa3kr4pqoIeR1rdmGeMC+HkmUfKD8YmFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2epF7c4KHQ3b/KDe9DSaOlUDzxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvZDUyZWE1OGMtZTI5Zi0z
YTQzLTg0MGEtMmY3N2FiYTcwMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4/vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeoUu4EZjYZH92mewQSQZgRjZRBUb5Av4UQzOLf+E91El9UhTmcEcQ5
Bz2uRvymTLLRJ5++Lpb83hQaob9iRaM67vrg6saZSpL2WiNWY0ndf3y2bEjWu3f7
gsQrYlnRCSa76Z/qnxEeP9mIS8RwWLW7weuJ9OG2GDYI0uyZjYbTFg7tTyPyUWFd
n2664a8ZByOmfqnmpEKJk+LreL6A0ldjKBE+zzHeTZUHjvCK1ByK92I1pDlab54D
SnisvlIUFZa4rlZfhb3FrB5emvdhNEVjHLYrYI/ARzUEABHbBPcr2t6YfN2zPAIn
82/z5N2CbbiDH75LVCtI+y9+40DnolM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:54 2026 by rpki-client