Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa
File:                     66642488-4347-307b-882e-fd74b22f745d.roa (raw, json)
Hash identifier:          NG6Gk4r0C5/aoASgRW3Dr5xQKjFlriNDWhvLg+aKMlM=
Subject key identifier:   14:B4:A0:0D:48:05:4D:82:75:63:D8:8E:4E:0C:B7:F8:AF:EC:C1:F8
Certificate issuer:       /CN=16081d83-2c3e-4a40-bac7-fc5f584ca8fb
Certificate serial:       010D0C9F4328584E2D9F3CE9D6DE732AAF3DC000
Authority key identifier: 7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     401558
IP address blocks:        142.248.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3c:e9:d6:de:73:2a:af:3d:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16081d83-2c3e-4a40-bac7-fc5f584ca8fb
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=20e8d766-0ad0-43f8-8f51-1752f3608a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:ab:b5:ae:e9:68:b8:ac:77:96:cd:de:69:
                    3d:cc:3b:cd:7f:ca:30:d1:f3:c3:fb:a1:b6:07:42:
                    eb:e8:23:31:f8:a9:fb:e7:e7:83:4b:f3:70:f9:dc:
                    0f:c1:4b:de:4a:84:d4:d1:5a:d8:af:e9:8e:71:21:
                    a2:0a:6d:51:07:d9:ba:d2:7c:90:e1:95:11:0c:9b:
                    57:d3:4d:11:54:97:9e:2e:5a:f7:07:69:3e:6a:3b:
                    8c:1f:a5:02:be:2b:91:05:a4:c9:58:7d:0d:82:15:
                    45:ec:70:11:ba:63:49:77:75:ee:13:7d:6c:c2:bc:
                    0e:d8:c3:b1:9c:bd:1e:75:5c:7b:8d:ed:09:bf:27:
                    25:e9:f8:ca:5b:e3:cb:fd:d8:a7:b3:cb:52:33:36:
                    38:9f:17:64:a4:cb:3c:41:88:bd:66:dd:c4:d1:d4:
                    52:82:cf:a7:6f:ae:70:46:37:4a:8d:64:21:1f:de:
                    d7:ab:2b:63:5e:70:44:bd:9f:f3:d0:84:f2:9d:ec:
                    09:26:8e:5a:b0:ac:24:78:8a:9c:df:6c:8a:5e:a1:
                    00:ce:69:2e:d5:12:f8:b4:bd:20:fe:43:b5:1c:4e:
                    a2:4f:25:a1:41:d8:88:68:da:d4:3a:ec:02:25:17:
                    b9:16:a2:80:b2:1d:38:4e:1a:42:3b:0b:87:5f:67:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B4:A0:0D:48:05:4D:82:75:63:D8:8E:4E:0C:B7:F8:AF:EC:C1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/66642488-4347-307b-882e-fd74b22f745d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.crl

            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:43:0f:d3:af:64:d9:4d:15:37:db:4c:23:94:e1:9e:f0:a0:
         1d:60:eb:80:25:3a:f2:69:eb:06:00:32:ae:66:01:e0:09:bd:
         31:f6:64:cd:f0:28:75:ee:b9:39:85:76:a3:20:55:bd:93:83:
         3d:8e:e4:76:77:4d:af:bf:05:d0:b6:c1:e9:0c:6b:5c:f3:f7:
         12:51:7d:d4:a5:79:10:f6:73:37:ce:2e:d1:ee:71:ee:0e:e1:
         1a:1d:c7:71:4f:3f:0a:74:a1:09:00:78:8f:c0:dc:15:15:40:
         c9:85:46:47:52:c2:23:5b:3d:9f:0f:df:00:af:45:04:c0:ff:
         f4:d6:f9:65:2b:17:8f:e1:23:2d:9b:e7:5a:e7:cd:26:6a:55:
         02:50:8a:f6:a2:f7:9d:80:bf:59:37:ea:f6:ee:19:2f:43:f5:
         21:56:88:29:20:92:24:d8:0b:15:8a:5c:b1:b5:7b:00:ec:28:
         d0:c5:85:b5:cd:2f:68:3f:b5:59:12:95:da:01:d9:e3:02:c5:
         61:85:36:a8:34:8a:f4:61:cf:94:54:d1:9b:f0:5d:c3:92:16:
         ba:19:af:c3:00:10:d9:7a:ae:a1:df:67:0e:76:b6:61:a2:23:
         31:50:e2:4b:38:1f:2c:e6:f6:c1:03:25:87:c2:c9:94:5e:46:
         af:bc:e6:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnzzp1t5zKq89wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYwODFkODMtMmMzZS00YTQwLWJhYzctZmM1ZjU4NGNh
OGZiMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
MjBlOGQ3NjYtMGFkMC00M2Y4LThmNTEtMTc1MmYzNjA4YTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqOrta7paLisd5bN3mk9zDvNf8ow0fPD+6G2
B0Lr6CMx+Kn75+eDS/Nw+dwPwUveSoTU0VrYr+mOcSGiCm1RB9m60nyQ4ZURDJtX
000RVJeeLlr3B2k+ajuMH6UCviuRBaTJWH0NghVF7HARumNJd3XuE31swrwO2MOx
nL0edVx7je0Jvycl6fjKW+PL/dins8tSMzY4nxdkpMs8QYi9Zt3E0dRSgs+nb65w
RjdKjWQhH97XqytjXnBEvZ/z0ITynewJJo5asKwkeIqc32yKXqEAzmku1RL4tL0g
/kO1HE6iTyWhQdiIaNrUOuwCJRe5FqKAsh04ThpCOwuHX2excQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBS0oA1IBU2CdWPYjk4Mt/iv7MH4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNjA4
MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVmNTg0Y2E4ZmIvNjY2NDI0ODgtNDM0Ny0z
MDdiLTg4MmUtZmQ3NGIyMmY3NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTYwODFkODMtMmMzZS00YTQwLWJh
YzctZmM1ZjU4NGNhOGZiLzE2MDgxZDgzLTJjM2UtNGE0MC1iYWM3LWZjNWY1ODRj
YThmYi5jcmwwHwYDVR0jBBgwFoAUe6K+emzDmSIF9U//u3IkvSVwm/0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNjA4MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVm
NTg0Y2E4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvg/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERDD9OvZNlNFTfbTCOU4Z7woB1g64AlOvJp6wYAMq5mAeAJvTH2ZM3w
KHXuuTmFdqMgVb2Tgz2O5HZ3Ta+/BdC2wekMa1zz9xJRfdSleRD2czfOLtHuce4O
4Rodx3FPPwp0oQkAeI/A3BUVQMmFRkdSwiNbPZ8P3wCvRQTA//TW+WUrF4/hIy2b
51rnzSZqVQJQivai952Av1k36vbuGS9D9SFWiCkgkiTYCxWKXLG1ewDsKNDFhbXN
L2g/tVkSldoB2eMCxWGFNqg0ivRhz5RU0ZvwXcOSFroZr8MAENl6rqHfZw52tmGi
IzFQ4ks4Hyzm9sEDJYfCyZReRq+85sY=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:53:49 2026 by rpki-client