Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa
File:                     6e655139-bd80-3230-8825-550d6ea12171.roa (raw, json)
Hash identifier:          N7OvIQCGGtUzNR4UAbzxoFeKQjEnBCbvgaGRTjeqhl4=
Subject key identifier:   74:00:66:9B:6B:6D:9F:2E:8F:00:17:B9:A4:B9:44:CB:92:51:51:25
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584F9D330D25DE798F34FEBA66C0
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     40124
IP address blocks:        142.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:0d:25:de:79:8f:34:fe:ba:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=c23ef0c2-6ce1-4fd4-bba8-ebca35f46007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:b4:cc:0d:3e:c7:a9:b3:8f:e7:7b:93:9c:
                    ee:bc:91:71:1e:49:6f:98:38:e9:b1:ad:d5:4d:c9:
                    87:a2:2c:c6:a3:c8:24:0f:97:47:de:d7:e9:19:74:
                    ed:80:64:48:a9:2d:8c:59:6e:a3:fe:60:b9:75:e1:
                    ee:f1:3c:b4:0b:51:93:f5:1b:67:04:4a:a0:f6:70:
                    64:93:68:07:20:af:5a:94:95:8e:df:6a:96:ba:ff:
                    28:3b:76:cb:c3:64:a5:b9:5c:37:34:1a:c6:21:65:
                    00:ff:b5:bf:99:ef:be:91:1d:8f:ac:d5:ab:01:b9:
                    3e:5a:a7:79:9a:c9:78:49:82:c3:bc:18:29:cf:39:
                    ae:14:fb:58:03:cc:73:58:ef:f1:65:57:60:a6:18:
                    59:79:e1:68:57:25:44:d0:86:88:a3:f3:fe:99:3f:
                    79:bf:fa:61:91:88:46:75:12:d8:51:04:53:6d:cd:
                    7c:14:4c:d2:b3:cf:09:54:2c:02:18:9e:93:74:eb:
                    28:eb:b5:7e:c4:11:7d:9c:f7:be:3f:dd:16:bc:e7:
                    a5:52:9a:41:95:5f:d7:84:2a:66:0e:1d:95:f3:52:
                    a9:0f:66:02:e9:df:57:f3:5d:84:8a:7e:97:f4:e0:
                    22:95:26:c7:2e:d6:9a:32:a1:1e:88:b4:8a:ba:cd:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:66:9B:6B:6D:9F:2E:8F:00:17:B9:A4:B9:44:CB:92:51:51:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:0d:8f:75:8b:12:bc:46:6b:a6:f8:7d:66:45:9c:2c:9a:
         f3:93:ed:92:88:c7:f9:98:7a:e6:ed:3d:1c:5c:74:01:2f:44:
         38:0f:a3:23:d9:ba:ef:e0:78:12:45:3c:bf:52:cd:97:f6:b0:
         d6:8c:be:52:66:c4:f7:7a:40:c9:90:b6:0d:a7:cf:d9:60:39:
         a0:12:26:e3:ce:1e:65:44:82:0d:17:0c:74:0a:e7:1a:23:51:
         c9:6c:03:e0:d1:28:4c:78:d7:fe:eb:5e:8d:54:a8:1f:ca:0c:
         5d:e3:cd:6a:d0:3e:bb:a3:21:ad:fa:90:53:1c:1a:0d:90:83:
         62:15:a9:e5:a9:9a:06:95:01:1e:69:64:2a:e7:c0:e1:87:2d:
         21:ce:5b:55:fa:b6:da:a6:34:19:58:0b:cb:81:ea:46:76:84:
         00:50:d4:2f:19:a7:ba:e7:03:89:b8:89:60:38:48:84:b7:13:
         38:db:bb:d6:89:f7:ea:00:a5:1c:b5:6b:51:7c:60:1d:ab:13:
         04:52:56:e9:55:e1:a8:4d:c0:08:b3:1d:21:20:df:8f:c9:f1:
         ed:ca:40:1f:ee:9b:4e:86:54:0b:ee:57:ae:c5:b1:3b:c2:97:
         78:c4:f5:bf:b3:dd:d7:4a:79:53:eb:25:12:f6:74:dc:e9:0c:
         d9:78:86:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMw0l3nmPNP66ZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz
ZmM1MB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk
YzIzZWYwYzItNmNlMS00ZmQ0LWJiYTgtZWJjYTM1ZjQ2MDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7+0zA0+x6mzj+d7k5zuvJFxHklvmDjpsa3V
TcmHoizGo8gkD5dH3tfpGXTtgGRIqS2MWW6j/mC5deHu8Ty0C1GT9RtnBEqg9nBk
k2gHIK9alJWO32qWuv8oO3bLw2SluVw3NBrGIWUA/7W/me++kR2PrNWrAbk+Wqd5
msl4SYLDvBgpzzmuFPtYA8xzWO/xZVdgphhZeeFoVyVE0IaIo/P+mT95v/phkYhG
dRLYUQRTbc18FEzSs88JVCwCGJ6TdOso67V+xBF9nPe+P90WvOelUppBlV/XhCpm
Dh2V81KpD2YC6d9X812Ein6X9OAilSbHLtaaMqEeiLSKus38hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQAZptrbZ8ujwAXuaS5RMuSUVElMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw
NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvNmU2NTUxMzktYmQ4MC0z
MjMwLTg4MjUtNTUwZDZlYTEyMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi
YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk
OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeVDY91ixK8Rmum+H1mRZwsmvOT7ZKIx/mYeubtPRxcdAEvRDgPoyPZ
uu/geBJFPL9SzZf2sNaMvlJmxPd6QMmQtg2nz9lgOaASJuPOHmVEgg0XDHQK5xoj
UclsA+DRKEx41/7rXo1UqB/KDF3jzWrQPrujIa36kFMcGg2Qg2IVqeWpmgaVAR5p
ZCrnwOGHLSHOW1X6ttqmNBlYC8uB6kZ2hABQ1C8Zp7rnA4m4iWA4SIS3Ezjbu9aJ
9+oApRy1a1F8YB2rEwRSVulV4ahNwAizHSEg34/J8e3KQB/um06GVAvuV67FsTvC
l3jE9b+z3ddKeVPrJRL2dNzpDNl4hl8=
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:22:03 2026 by rpki-client