Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
File:                     3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa (raw, json)
Hash identifier:          msHOEh6OGcIFPGqdsphs5mpqEQIjtZw7o6g376u4jnk=
Subject key identifier:   F9:FD:48:F2:07:54:98:71:81:06:A3:12:9D:28:8B:CA:0B:8B:29:01
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584D8AC5465CAFF56BEE8EB64600
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     398343
IP address blocks:        128.254.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:46:5c:af:f5:6b:ee:8e:b6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=365e5578-af3e-4c08-b18d-9ff58d8ca178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:fc:12:2c:9b:b5:7b:09:b8:ef:be:38:cf:
                    cc:e5:da:d0:a3:dc:57:71:c3:9a:b0:32:36:da:17:
                    94:62:1f:12:d6:67:44:fd:10:0e:74:f5:ef:34:58:
                    ac:a2:f7:05:7c:01:1e:6a:d3:58:19:d6:35:3e:f0:
                    a8:ac:d7:a7:9c:f2:76:3f:10:3b:64:31:9a:f3:bd:
                    ee:2a:fa:30:73:47:88:46:4c:5c:07:12:aa:49:e5:
                    6c:77:8b:6b:43:12:de:88:0a:29:21:65:09:87:c8:
                    30:07:e4:65:2e:f3:65:ee:b4:b0:23:90:be:d1:27:
                    c0:94:3f:38:17:20:e8:f9:8a:c9:78:c5:cb:9b:42:
                    d1:38:eb:dd:8f:54:fc:c5:d0:57:b7:94:cc:28:0d:
                    56:22:a3:83:77:cb:1b:38:8d:c7:f2:58:b2:78:0f:
                    47:80:db:cf:7f:23:b0:28:64:e3:2d:f1:81:17:81:
                    5c:89:ce:36:a2:de:ae:8c:15:26:17:bf:e5:57:49:
                    c3:ea:e6:c3:aa:a2:84:c0:90:6f:1f:05:08:5f:69:
                    1b:dc:0e:b9:f9:51:85:fd:35:86:29:53:8e:af:81:
                    ba:b4:d8:ec:3e:b6:d7:32:10:db:60:1d:96:5e:20:
                    bb:2b:ec:65:72:42:9d:ed:d0:af:a2:58:d1:99:a7:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:48:F2:07:54:98:71:81:06:A3:12:9D:28:8B:CA:0B:8B:29:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:47:dd:78:21:43:2b:92:b0:34:0a:06:0f:02:62:63:29:41:
         1e:48:60:a8:88:3c:7b:30:85:cd:47:03:af:50:d7:be:49:78:
         98:45:ad:8e:ef:74:ad:68:b5:33:a7:e2:f5:2e:c2:ea:07:cd:
         a3:37:dc:96:53:8a:c3:2a:a5:fb:c5:b6:53:c3:7a:16:10:19:
         88:5f:4f:84:57:d2:cf:a3:9b:72:70:37:74:93:5f:68:ad:f9:
         1f:be:5f:c3:9c:b6:18:4e:fb:ec:4d:ad:d9:97:86:c0:2c:a5:
         d9:a6:dd:50:70:53:da:46:5d:e9:48:40:8a:c4:33:5d:42:86:
         e6:1c:af:bb:90:e9:63:8a:9a:24:5b:77:59:51:02:55:03:21:
         5f:f2:0c:88:94:7a:00:f0:3c:df:f8:04:aa:83:75:84:c1:99:
         17:34:04:46:66:10:bc:b2:12:6f:19:9c:ec:01:7f:77:c3:97:
         65:1b:de:a8:cc:9d:c8:bf:89:f3:db:0c:8f:5e:66:1e:33:2b:
         57:26:09:83:16:41:de:ac:77:16:5f:da:bd:8e:4e:60:ec:85:
         f2:f0:f4:6e:f1:66:16:5b:b4:ad:4a:ac:60:6c:1d:fc:8b:f1:
         9b:38:f3:b8:5e:8f:33:0b:d8:71:35:13:7a:aa:0b:40:d9:08:
         f6:2b:b6:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUZcr/Vr7o62RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MzY1ZTU1NzgtYWYzZS00YzA4LWIxOGQtOWZmNThkOGNhMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAT8EiybtXsJuO++OM/M5drQo9xXccOasDI2
2heUYh8S1mdE/RAOdPXvNFisovcFfAEeatNYGdY1PvCorNennPJ2PxA7ZDGa873u
Kvowc0eIRkxcBxKqSeVsd4trQxLeiAopIWUJh8gwB+RlLvNl7rSwI5C+0SfAlD84
FyDo+YrJeMXLm0LROOvdj1T8xdBXt5TMKA1WIqODd8sbOI3H8liyeA9HgNvPfyOw
KGTjLfGBF4Fcic42ot6ujBUmF7/lV0nD6ubDqqKEwJBvHwUIX2kb3A65+VGF/TWG
KVOOr4G6tNjsPrbXMhDbYB2WXiC7K+xlckKd7dCvoljRmaeoXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn9SPIHVJhxgQajEp0oi8oLiykBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvM2MwZTMwMjQtZTkyYi0z
MWQyLWI5OTAtZTJlZjU1YmU2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZH3XghQyuSsDQKBg8CYmMpQR5IYKiIPHswhc1HA69Q175JeJhFrY7v
dK1otTOn4vUuwuoHzaM33JZTisMqpfvFtlPDehYQGYhfT4RX0s+jm3JwN3STX2it
+R++X8OcthhO++xNrdmXhsAspdmm3VBwU9pGXelIQIrEM11ChuYcr7uQ6WOKmiRb
d1lRAlUDIV/yDIiUegDwPN/4BKqDdYTBmRc0BEZmELyyEm8ZnOwBf3fDl2Ub3qjM
nci/ifPbDI9eZh4zK1cmCYMWQd6sdxZf2r2OTmDshfLw9G7xZhZbtK1KrGBsHfyL
8Zs487hejzML2HE1E3qqC0DZCPYrtn8=
-----END CERTIFICATE-----
Generated at Wed Apr 22 07:06:46 2026 by rpki-client