Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa
File:                     f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa (raw, json)
Hash identifier:          LcnvPXY5NJyHMGBpSAeVfnFNw/7Dkvqz1xvZ+VzC0ZE=
Subject key identifier:   D4:A7:F8:9A:EA:E8:AD:B5:70:67:BD:0D:0F:7D:8D:F8:55:52:3A:42
Certificate issuer:       /CN=4783e783-66a6-4b00-92dd-b4f5070c6029
Certificate serial:       010D0C9F4328584E4AEF2F6A76525DB027441700
Authority key identifier: AC:82:67:8B:FE:50:81:A3:84:19:CA:03:6A:3C:49:9C:63:7E:15:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     23156
IP address blocks:        142.248.221.0/24 maxlen: 24
                          170.39.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2f:6a:76:52:5d:b0:27:44:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4783e783-66a6-4b00-92dd-b4f5070c6029
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=4c126baf-21ce-4fcf-a617-543cd849a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:75:27:e4:d4:0f:45:c7:ff:4a:b7:36:6b:
                    ca:33:97:6d:b3:ee:1f:b7:53:53:f0:05:d6:d9:50:
                    03:91:99:9f:5a:d5:64:46:9e:f8:0b:4e:b1:26:0f:
                    6a:e4:4a:4a:3e:bf:d4:93:0a:82:a0:5a:a9:c5:fa:
                    d9:e5:f9:60:b2:33:72:40:1f:ab:0e:1b:da:6b:fa:
                    e7:19:10:1e:9e:21:b7:a7:a4:9e:63:f1:cb:0f:d8:
                    8b:16:5c:20:c0:fc:d4:b3:dd:77:ff:9f:a6:c0:47:
                    3c:95:a9:4e:53:7e:73:1a:10:9d:00:10:3b:2b:82:
                    91:bd:a1:86:94:df:cb:19:ec:69:02:17:f0:1e:5e:
                    c1:0d:44:52:5d:4c:13:1a:a0:5f:0d:03:de:06:b4:
                    fb:1f:9d:3a:6b:8a:bb:f7:b5:d3:4a:29:80:b0:c4:
                    d2:24:c4:ff:11:f8:a5:82:9c:b5:c9:f9:56:99:d1:
                    7b:77:76:df:f3:b2:b9:ff:53:f4:ec:2b:4d:97:5f:
                    d1:21:f7:ed:37:f5:b3:2f:90:58:41:df:48:3a:b9:
                    58:a0:a8:a9:97:5b:69:72:66:8c:6d:2c:92:9d:63:
                    80:49:8c:7f:89:c0:33:15:81:f4:cd:81:e8:ca:13:
                    fb:0d:66:c9:e6:03:9c:47:08:8c:89:45:b5:09:a7:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:F8:9A:EA:E8:AD:B5:70:67:BD:0D:0F:7D:8D:F8:55:52:3A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.crl

            X509v3 Authority Key Identifier:
                keyid:AC:82:67:8B:FE:50:81:A3:84:19:CA:03:6A:3C:49:9C:63:7E:15:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.221.0/24
                  170.39.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:f4:a0:47:f3:4b:1d:6c:20:87:f3:64:ee:24:c1:ce:94:
         a3:53:9d:ca:64:32:ab:d4:d4:2d:12:01:2a:ec:06:06:97:b5:
         b3:40:6c:57:be:8f:d7:05:f1:a9:14:32:6d:80:d5:47:71:45:
         6d:e1:00:f3:fe:aa:55:84:1f:37:93:66:80:22:cc:ca:9b:16:
         70:9c:0b:d1:fc:79:1e:e3:4b:81:72:ab:88:8d:53:1a:1a:e9:
         4b:8b:9b:07:b2:0f:68:2d:31:63:51:b2:c9:77:bc:20:30:76:
         11:e2:d7:b1:af:23:84:e7:47:d0:f6:cf:3c:97:4c:90:d6:02:
         b6:8b:76:8e:78:f3:a0:e5:bb:d5:16:a1:f8:ce:16:e6:36:c8:
         73:09:b9:79:58:df:59:74:61:f1:ca:92:e4:ad:1b:c3:f2:15:
         8a:ce:b7:ab:64:62:aa:eb:b5:0c:81:1f:e6:b3:72:0b:2b:14:
         06:5f:9a:48:8c:8d:8a:d5:b6:18:c7:ab:a1:32:95:47:b3:6d:
         6c:18:5c:38:47:ea:32:f1:ec:6a:64:bf:de:a5:5a:c0:8e:14:
         da:e8:03:0d:a8:77:5f:e0:e0:e5:af:53:40:a8:22:c0:f6:79:
         ae:19:d9:18:9e:c8:aa:16:86:29:3a:0b:1f:53:ff:bb:7d:40:
         d1:52:ca:b5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5K7y9qdlJdsCdEFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDc4M2U3ODMtNjZhNi00YjAwLTkyZGQtYjRmNTA3MGM2
MDI5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
NGMxMjZiYWYtMjFjZS00ZmNmLWE2MTctNTQzY2Q4NDlhNmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUd1J+TUD0XH/0q3NmvKM5dts+4ft1NT8AXW
2VADkZmfWtVkRp74C06xJg9q5EpKPr/UkwqCoFqpxfrZ5flgsjNyQB+rDhvaa/rn
GRAeniG3p6SeY/HLD9iLFlwgwPzUs913/5+mwEc8lalOU35zGhCdABA7K4KRvaGG
lN/LGexpAhfwHl7BDURSXUwTGqBfDQPeBrT7H506a4q797XTSimAsMTSJMT/Efil
gpy1yflWmdF7d3bf87K5/1P07CtNl1/RIfftN/WzL5BYQd9IOrlYoKipl1tpcmaM
bSySnWOASYx/icAzFYH0zYHoyhP7DWbJ5gOcRwiMiUW1CafyJQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNSn+Jrq6K21cGe9DQ99jfhVUjpCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Nzgz
ZTc4My02NmE2LTRiMDAtOTJkZC1iNGY1MDcwYzYwMjkvZjFlMWFkNWEtNGZkMS0z
MjQzLWEyNzUtMzIwN2Q1NGFkMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDc4M2U3ODMtNjZhNi00YjAwLTky
ZGQtYjRmNTA3MGM2MDI5LzQ3ODNlNzgzLTY2YTYtNGIwMC05MmRkLWI0ZjUwNzBj
NjAyOS5jcmwwHwYDVR0jBBgwFoAUrIJni/5QgaOEGcoDajxJnGN+FcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzgzZTc4My02NmE2LTRiMDAtOTJkZC1iNGY1
MDcwYzYwMjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjvjdAwQA
qicVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIcu9KBH80sdbCCH82TuJMHOlKNTncpkMqvU1C0SASrsBgaX
tbNAbFe+j9cF8akUMm2A1UdxRW3hAPP+qlWEHzeTZoAizMqbFnCcC9H8eR7jS4Fy
q4iNUxoa6UuLmweyD2gtMWNRssl3vCAwdhHi17GvI4TnR9D2zzyXTJDWAraLdo54
86Dlu9UWofjOFuY2yHMJuXlY31l0YfHKkuStG8PyFYrOt6tkYqrrtQyBH+azcgsr
FAZfmkiMjYrVthjHq6EylUezbWwYXDhH6jLx7Gpkv96lWsCOFNroAw2od1/g4OWv
U0CoIsD2ea4Z2RieyKoWhik6Cx9T/7t9QNFSyrU=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:53:34 2026 by rpki-client