Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa
File:                     66642488-4347-307b-882e-fd74b22f745d.roa (raw, json)
Hash identifier:          E+f3sqqWaCXah+LwPhGkJd4WjEM9qWyMpN7zEZwZaoE=
Subject key identifier:   42:C0:B1:A4:A7:7F:FA:D9:4F:D9:B3:B4:AD:60:C8:44:54:64:55:03
Certificate issuer:       /CN=16081d83-2c3e-4a40-bac7-fc5f584ca8fb
Certificate serial:       010D0C9F4328584ED0020AA844A37595517AE780
Authority key identifier: 7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     401558
IP address blocks:        142.248.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0a:a8:44:a3:75:95:51:7a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16081d83-2c3e-4a40-bac7-fc5f584ca8fb
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e305c7f7-3715-4e94-889b-e8c747656f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:ca:34:57:9a:99:1e:27:f5:77:7f:a9:5e:
                    c7:f9:a8:03:f3:28:cd:68:b2:c1:0b:2e:6a:0f:60:
                    e7:41:c2:43:70:cb:1c:e1:4b:88:51:2f:01:c5:86:
                    77:e6:eb:43:e1:39:e0:31:04:7c:fa:37:5b:a3:bb:
                    8a:a8:18:8b:c2:75:90:00:1a:77:03:a4:28:26:6a:
                    7b:c5:92:dc:4b:00:91:b4:dd:4b:66:ea:55:b4:77:
                    14:ae:31:bb:25:ce:51:63:6e:b7:f2:b8:8a:d8:d8:
                    e7:83:c4:cf:29:34:95:2c:c1:88:4c:64:44:2c:2d:
                    91:8e:20:0b:66:d5:0d:a1:ca:80:73:94:5d:b2:dc:
                    fb:0e:4f:6a:bf:1a:be:f4:36:f1:d9:23:f9:a0:80:
                    30:43:7a:2f:3a:52:af:25:4c:5d:76:0b:4b:66:52:
                    ef:d1:aa:08:c6:72:20:f0:9d:54:35:fc:e2:f1:4e:
                    54:15:0d:7b:c5:0e:86:49:97:bd:75:f9:ae:6c:fe:
                    44:1d:62:24:35:79:7a:0a:25:02:61:a9:cb:07:5a:
                    70:6f:96:90:b9:7e:75:6f:05:ad:39:e3:6b:5f:a1:
                    89:25:b6:a4:bf:9d:79:0e:42:54:4b:e4:8c:cc:36:
                    de:31:03:8e:0a:ac:fb:0e:c3:86:d5:5c:54:35:7b:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C0:B1:A4:A7:7F:FA:D9:4F:D9:B3:B4:AD:60:C8:44:54:64:55:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.crl

            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:1a:2e:f1:82:88:32:90:52:17:93:e6:7d:3e:d1:d5:21:
         d8:cb:f2:ff:27:8d:9a:0c:b0:93:d5:1e:19:75:af:f0:16:e6:
         d4:fb:eb:8e:8a:b8:1c:9c:14:e1:63:e8:48:ff:0a:b8:b2:0a:
         6a:77:b5:90:89:7a:4d:6c:8b:3c:14:56:c3:ac:24:0c:e6:fb:
         3d:0c:d4:34:04:f1:3f:c6:92:79:52:52:ee:fa:d2:b5:f8:a8:
         64:b7:f5:1b:a7:71:41:fb:a2:51:3b:67:61:2b:aa:5c:ea:c5:
         ca:4a:84:88:b6:bd:37:b4:f7:c2:42:6f:e4:53:68:71:74:1f:
         11:78:e9:50:81:d4:e4:a4:9b:06:09:36:21:a5:5a:9b:17:0c:
         19:43:13:68:35:d3:0e:8d:71:48:22:df:fe:18:1e:c9:80:eb:
         14:27:79:a2:b4:11:79:73:d3:18:88:44:89:c9:7f:01:de:0a:
         b6:de:1d:3f:d6:d3:f4:63:86:8f:00:9f:c2:45:6f:0e:e3:5a:
         5f:3f:fc:36:75:8f:c3:2d:5b:48:e7:6d:a8:34:4d:cb:9b:ed:
         8c:10:bb:49:42:c3:04:f4:6e:b5:8c:d7:9d:64:72:01:ea:e7:
         cb:62:ba:9e:a1:31:60:44:9e:37:3b:4d:89:f9:67:b5:ff:4f:
         05:d7:31:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgqoRKN1lVF654AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYwODFkODMtMmMzZS00YTQwLWJhYzctZmM1ZjU4NGNh
OGZiMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTMwNWM3ZjctMzcxNS00ZTk0LTg4OWItZThjNzQ3NjU2Zjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IfKNFeamR4n9Xd/qV7H+agD8yjNaLLBCy5q
D2DnQcJDcMsc4UuIUS8BxYZ35utD4TngMQR8+jdbo7uKqBiLwnWQABp3A6QoJmp7
xZLcSwCRtN1LZupVtHcUrjG7Jc5RY2638riK2Njng8TPKTSVLMGITGRELC2RjiAL
ZtUNocqAc5Rdstz7Dk9qvxq+9Dbx2SP5oIAwQ3ovOlKvJUxddgtLZlLv0aoIxnIg
8J1UNfzi8U5UFQ17xQ6GSZe9dfmubP5EHWIkNXl6CiUCYanLB1pwb5aQuX51bwWt
OeNrX6GJJbakv515DkJUS+SMzDbeMQOOCqz7DsOG1VxUNXuEXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELAsaSnf/rZT9mztK1gyERUZFUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNjA4
MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVmNTg0Y2E4ZmIvNjY2NDI0ODgtNDM0Ny0z
MDdiLTg4MmUtZmQ3NGIyMmY3NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTYwODFkODMtMmMzZS00YTQwLWJh
YzctZmM1ZjU4NGNhOGZiLzE2MDgxZDgzLTJjM2UtNGE0MC1iYWM3LWZjNWY1ODRj
YThmYi5jcmwwHwYDVR0jBBgwFoAUe6K+emzDmSIF9U//u3IkvSVwm/0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNjA4MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVm
NTg0Y2E4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvg/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbIGi7xgogykFIXk+Z9PtHVIdjL8v8njZoMsJPVHhl1r/AW5tT7646K
uBycFOFj6Ej/CriyCmp3tZCJek1sizwUVsOsJAzm+z0M1DQE8T/GknlSUu760rX4
qGS39RuncUH7olE7Z2ErqlzqxcpKhIi2vTe098JCb+RTaHF0HxF46VCB1OSkmwYJ
NiGlWpsXDBlDE2g10w6NcUgi3/4YHsmA6xQneaK0EXlz0xiIRInJfwHeCrbeHT/W
0/Rjho8An8JFbw7jWl8//DZ1j8MtW0jnbag0Tcub7YwQu0lCwwT0brWM151kcgHq
58tiup6hMWBEnjc7TYn5Z7X/TwXXMfo=
-----END CERTIFICATE-----
Generated at Thu Aug 27 10:32:38 2026 by rpki-client