Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa
File:                     ef8708ad-3d66-3e70-a91d-773c52885e52.roa (raw, json)
Hash identifier:          GqXabtviBz5jFr7lumBxg+k04F0PBqEw+kJrS63WWxE=
Subject key identifier:   57:EA:6F:4B:C9:D5:76:B7:AC:BA:14:93:C8:AF:11:02:9D:78:63:82
Certificate issuer:       /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial:       010D0C9F4328584D8EF577FA29D5C77E08801CC0
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     32121
IP address blocks:        142.152.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:77:fa:29:d5:c7:7e:08:80:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f2244ccc-ebe3-4d7d-9e8f-16e45c652fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:87:0a:14:a3:4b:53:ae:ed:7a:b5:a8:0e:
                    c5:ca:19:62:9f:a1:4b:9a:f1:46:00:83:8b:d9:da:
                    29:2a:14:b8:bb:d1:71:6a:6c:e9:6d:d6:78:36:95:
                    20:c2:86:09:3d:79:78:79:cd:bb:ae:b9:c9:a3:81:
                    11:2f:be:f4:d4:b2:10:d9:27:aa:67:f3:ab:4d:e5:
                    50:cb:65:df:ae:d9:a6:82:e7:c0:72:e1:b4:15:22:
                    50:66:c8:75:bf:0b:63:0e:59:49:a4:21:a7:84:e4:
                    77:17:8a:d7:d1:f0:07:ae:cc:37:c8:0e:31:19:79:
                    62:df:40:a5:58:f9:c8:ef:a0:cc:ad:a9:2e:b0:0a:
                    44:be:ca:cc:27:9e:f7:3c:24:79:b2:00:e9:69:46:
                    3d:0e:41:d8:0b:41:cf:ff:03:1e:58:83:53:36:27:
                    dd:4f:ea:84:91:d8:4d:86:0d:03:4b:8c:2f:e7:a3:
                    b2:50:7c:cf:f9:1f:0c:b8:59:17:23:b1:4e:7f:58:
                    bd:64:2f:16:ce:8b:d2:15:ff:e1:e8:c1:77:c8:9c:
                    c8:31:7a:bd:23:d6:02:ea:b1:3a:3a:23:84:db:e2:
                    cb:d9:f0:cf:38:42:5d:43:59:77:62:32:6d:df:b9:
                    e7:46:28:29:51:7a:9b:dc:99:4f:9c:32:f8:fc:e6:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EA:6F:4B:C9:D5:76:B7:AC:BA:14:93:C8:AF:11:02:9D:78:63:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl

            X509v3 Authority Key Identifier:
                keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.152.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:83:df:78:34:49:1c:d7:7e:18:e9:85:16:c3:57:fc:8c:
         d3:be:dd:ad:cb:e1:45:21:d9:d4:ad:35:c8:d1:d3:d6:ab:b7:
         49:0f:5d:8f:19:50:71:fc:a6:47:0b:25:28:4a:3e:ab:cd:06:
         76:74:f7:19:94:a0:8a:97:8c:3e:a4:b2:a3:f8:ed:03:80:26:
         38:73:3b:57:79:32:d5:0a:ac:6f:f9:da:d3:41:45:e0:c3:8c:
         3c:b1:01:7a:ab:ac:c2:58:c7:6a:96:0f:7a:6b:66:57:b9:4c:
         23:33:72:49:b6:7e:ac:b8:16:b6:6c:3c:c9:0c:34:07:b0:6c:
         f4:f3:f3:7f:d1:46:1f:3a:77:df:a0:26:18:f6:20:43:4b:7e:
         95:de:ff:bb:a5:98:de:ea:a1:ed:ca:3f:8c:4a:bf:49:58:8d:
         82:cc:fc:db:2d:5a:03:18:ad:f2:58:fe:7f:03:ff:1a:aa:00:
         9a:e6:b3:5d:38:34:74:7f:22:a5:8d:4d:1e:0f:6c:36:c7:ef:
         84:8b:94:ae:66:a8:25:45:88:8f:37:13:48:ac:4e:54:de:13:
         b5:f7:8f:b2:16:36:77:69:99:21:ed:e4:8a:51:66:0e:72:2f:
         0a:a9:0f:fb:09:6f:d9:0b:a1:b4:19:b5:97:b1:e5:43:ac:5e:
         31:be:a5:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Xf6KdXHfgiAHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3
ZjRkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZjIyNDRjY2MtZWJlMy00ZDdkLTllOGYtMTZlNDVjNjUyZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVyHChSjS1Ou7Xq1qA7Fyhlin6FLmvFGAIOL
2dopKhS4u9FxamzpbdZ4NpUgwoYJPXl4ec27rrnJo4ERL7701LIQ2SeqZ/OrTeVQ
y2XfrtmmgufAcuG0FSJQZsh1vwtjDllJpCGnhOR3F4rX0fAHrsw3yA4xGXli30Cl
WPnI76DMrakusApEvsrMJ573PCR5sgDpaUY9DkHYC0HP/wMeWINTNifdT+qEkdhN
hg0DS4wv56OyUHzP+R8MuFkXI7FOf1i9ZC8WzovSFf/h6MF3yJzIMXq9I9YC6rE6
OiOE2+LL2fDPOEJdQ1l3YjJt37nnRigpUXqb3JlPnDL4/OasRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfqb0vJ1Xa3rLoUk8ivEQKdeGOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi
M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvZWY4NzA4YWQtM2Q2Ni0z
ZTcwLWE5MWQtNzczYzUyODg1ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj
YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz
N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2
MTZjMzdmNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjphAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEung994NEkc134Y6YUWw1f8jNO+3a3L4UUh2dStNcjR09art0kPXY8Z
UHH8pkcLJShKPqvNBnZ09xmUoIqXjD6ksqP47QOAJjhzO1d5MtUKrG/52tNBReDD
jDyxAXqrrMJYx2qWD3prZle5TCMzckm2fqy4FrZsPMkMNAewbPTz83/RRh86d9+g
Jhj2IENLfpXe/7ulmN7qoe3KP4xKv0lYjYLM/NstWgMYrfJY/n8D/xqqAJrms104
NHR/IqWNTR4PbDbH74SLlK5mqCVFiI83E0isTlTeE7X3j7IWNndpmSHt5IpRZg5y
LwqpD/sJb9kLobQZtZex5UOsXjG+pds=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:29:50 2026 by rpki-client