Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
File:                     c24e6a3a-c40a-3eac-bef2-a8039c545265.roa (raw, json)
Hash identifier:          KVQwiQ3m33156rs7T9bxoQJomrcfljPSzMYSCBKwYVc=
Subject key identifier:   36:D6:E1:F9:2F:80:5A:7A:E0:82:61:F8:C1:64:C8:8F:75:ED:6C:68
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584E37646D9BB82E278D977C4A00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        157.248.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6d:9b:b8:2e:27:8d:97:7c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=fc2442e2-ae2c-433c-ba8a-4a587ac08647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:27:ee:19:59:2d:20:cd:5d:8a:13:6d:88:
                    da:e0:d1:85:92:29:15:2d:69:34:2b:0f:31:df:7d:
                    a5:a2:63:a1:bc:5f:2b:fc:2a:ae:89:73:e3:78:7b:
                    6e:02:62:13:92:09:ea:eb:c5:01:3a:1c:ac:71:38:
                    3d:ba:94:00:9e:25:1a:8d:bc:e0:a6:ed:9a:bc:5b:
                    c2:b0:cd:75:a9:d9:77:9e:f9:37:47:95:71:3c:e9:
                    00:fa:91:50:00:6c:d6:cb:18:78:f1:34:93:5b:ec:
                    49:2d:9b:15:82:10:a3:98:12:a7:b3:75:be:a2:ee:
                    b7:d0:e1:06:99:9a:f7:bf:a9:ce:f8:e1:d8:81:e1:
                    66:d6:af:aa:13:10:49:2c:ca:4a:17:34:92:b3:75:
                    2e:eb:7e:21:3a:29:5e:7d:16:5c:06:e7:62:2a:97:
                    a9:d5:97:78:ac:0c:ca:68:53:0d:24:4b:a5:31:8f:
                    7f:d0:bd:40:ef:ec:12:04:60:ec:58:0e:96:0d:28:
                    8a:0f:9c:fc:45:25:d5:b3:6e:46:12:21:af:51:b0:
                    e6:d1:18:e2:9d:06:8a:29:f1:73:02:2f:7e:66:49:
                    91:36:1e:53:8b:c1:55:db:bb:86:ea:cf:15:b5:72:
                    f7:2e:6a:d5:79:b8:f4:b4:00:68:69:16:90:99:55:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:E1:F9:2F:80:5A:7A:E0:82:61:F8:C1:64:C8:8F:75:ED:6C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:89:85:4b:9a:88:1a:97:80:15:7e:f2:db:80:b4:a2:a4:
         cb:e5:72:96:c8:dc:61:3a:fa:fa:47:39:52:39:36:61:d3:46:
         c0:94:73:09:4e:f9:e1:d4:c0:7d:34:32:8a:7b:83:60:eb:96:
         70:8c:60:bc:9b:38:f0:6c:98:3a:e1:39:b5:7f:4d:fd:d8:d7:
         6f:af:14:16:2d:78:80:37:41:97:b3:e7:24:30:32:7c:70:23:
         48:38:c9:99:2e:c4:d5:9f:f3:de:a9:53:f9:ab:a3:a1:aa:23:
         ca:43:9a:73:ca:9e:c0:ae:43:d8:18:cf:ef:61:5e:a5:64:d5:
         b4:bc:d6:a7:09:0a:ba:da:e5:03:9b:2b:9f:0a:46:ef:ca:1e:
         7b:4c:d0:42:15:a5:73:38:5f:13:b1:6c:e6:98:99:0a:ff:a6:
         55:96:c0:e0:4c:5a:9a:61:58:9c:6b:79:17:b5:44:36:33:79:
         d7:b9:b8:83:99:64:e2:ef:aa:9e:a5:4b:61:b7:64:45:21:0c:
         eb:f7:7d:c8:cd:5e:7b:00:2a:cd:d6:48:9b:ff:8e:06:96:49:
         02:54:eb:46:64:67:4e:a7:f7:05:b3:2d:cd:57:72:73:d8:4b:
         cc:38:62:56:ee:95:23:28:ac:31:4e:cb:b0:e9:2e:b2:b0:74:
         92:1a:d8:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZG2buC4njZd8SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZmMyNDQyZTItYWUyYy00MzNjLWJhOGEtNGE1ODdhYzA4NjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbsn7hlZLSDNXYoTbYja4NGFkikVLWk0Kw8x
332lomOhvF8r/CquiXPjeHtuAmITkgnq68UBOhyscTg9upQAniUajbzgpu2avFvC
sM11qdl3nvk3R5VxPOkA+pFQAGzWyxh48TSTW+xJLZsVghCjmBKns3W+ou630OEG
mZr3v6nO+OHYgeFm1q+qExBJLMpKFzSSs3Uu634hOilefRZcBudiKpep1Zd4rAzK
aFMNJEulMY9/0L1A7+wSBGDsWA6WDSiKD5z8RSXVs25GEiGvUbDm0RjinQaKKfFz
Ai9+ZkmRNh5Ti8FV27uG6s8VtXL3LmrVebj0tABoaRaQmVUCcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbW4fkvgFp64IJh+MFkyI917WxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvYzI0ZTZhM2EtYzQwYS0z
ZWFjLWJlZjItYTgwMzljNTQ1MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHYiYVLmogal4AVfvLbgLSipMvlcpbI3GE6+vpHOVI5NmHTRsCUcwlO
+eHUwH00Mop7g2DrlnCMYLybOPBsmDrhObV/Tf3Y12+vFBYteIA3QZez5yQwMnxw
I0g4yZkuxNWf896pU/mro6GqI8pDmnPKnsCuQ9gYz+9hXqVk1bS81qcJCrra5QOb
K58KRu/KHntM0EIVpXM4XxOxbOaYmQr/plWWwOBMWpphWJxreRe1RDYzede5uIOZ
ZOLvqp6lS2G3ZEUhDOv3fcjNXnsAKs3WSJv/jgaWSQJU60ZkZ06n9wWzLc1XcnPY
S8w4YlbulSMorDFOy7DpLrKwdJIa2Kk=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:23:47 2026 by rpki-client