Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/5d5ee08f-e322-3bea-8083-30b75599f14a.roa
File:                     5d5ee08f-e322-3bea-8083-30b75599f14a.roa (raw, json)
Hash identifier:          umLzFqcBFKIZD3syiN86fXA+1jUEF5UFFNfKl7+1VCE=
Subject key identifier:   45:02:E2:22:7C:FB:D0:E6:F3:34:9C:73:3D:47:D9:CE:2A:C9:B6:D8
Certificate issuer:       /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial:       010D0C9F4328584F5ED991D8CE3B08FC98CCEB80
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/5d5ee08f-e322-3bea-8083-30b75599f14a.roa
Signing time:             Fri 02 Oct 2026 16:59:49 +0000
ROA not before:           Fri 02 Oct 2026 16:59:49 +0000
ROA not after:            Thu 31 Dec 2026 17:59:36 +0000
asID:                     400529
IP address blocks:        143.203.48.0/24 maxlen: 24
                          143.203.49.0/24 maxlen: 24
                          143.203.50.0/24 maxlen: 24
                          143.203.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:d9:91:d8:ce:3b:08:fc:98:cc:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
        Validity
            Not Before: Oct  2 16:59:49 2026 GMT
            Not After : Dec 31 17:59:36 2026 GMT
        Subject: CN=b67a6543-895b-41f9-9a80-8c3f68e6645b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:68:86:dc:99:8b:8b:61:b2:c9:0b:b1:1e:
                    c3:45:31:5e:11:13:60:b6:4a:54:79:68:3c:49:26:
                    7e:9e:92:dc:de:e6:ff:2b:f4:fd:c4:8b:b3:2d:a4:
                    e8:c7:d8:7b:b8:97:e7:68:f2:3c:ad:69:b0:a9:95:
                    ff:06:91:39:34:e6:ae:90:70:cc:40:35:4d:dc:68:
                    88:27:b2:a1:5f:3a:0e:18:b4:97:2c:68:03:45:13:
                    6a:95:87:56:4b:2a:eb:d4:b2:8c:fd:1a:75:48:55:
                    42:c3:9d:d5:ec:80:e9:e5:52:62:f7:46:4d:69:82:
                    c9:c0:c3:8f:b9:de:79:5f:7d:bd:a8:f8:c3:66:e7:
                    91:13:36:b3:c5:7e:ce:00:f2:f4:a4:66:56:ce:24:
                    93:9b:f5:8b:98:ad:12:6d:cb:11:02:4c:6d:2f:fa:
                    15:d7:4d:9c:a6:be:44:45:7d:b2:a9:ea:02:4e:ec:
                    c3:d2:16:9a:45:76:58:aa:ec:16:c2:83:83:52:44:
                    bd:e7:03:84:ba:91:74:26:f2:70:84:98:4d:61:c7:
                    6c:03:fc:92:f6:01:ad:18:b1:56:5b:76:f0:a6:9d:
                    9e:d1:71:24:24:5c:25:91:e7:93:b1:c4:40:8e:fa:
                    01:78:6c:11:45:52:58:12:92:a5:e6:89:97:73:e7:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:E2:22:7C:FB:D0:E6:F3:34:9C:73:3D:47:D9:CE:2A:C9:B6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/5d5ee08f-e322-3bea-8083-30b75599f14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl

            X509v3 Authority Key Identifier:
                keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:c2:28:4e:17:d7:49:3b:58:fb:8a:ea:43:d4:22:84:1d:
         2c:6e:93:f4:a2:ca:40:fb:d9:98:44:b6:b0:52:34:3c:1b:26:
         9c:83:59:23:16:f1:bb:9b:9b:e8:c0:00:dd:b6:64:64:33:56:
         75:46:75:2b:93:26:e9:60:cc:8e:5c:a0:b5:20:77:db:76:d6:
         80:24:04:66:60:6f:90:f7:c6:62:2c:79:8d:01:dc:a4:e0:e5:
         12:8c:7f:18:e2:72:27:dc:8c:5d:c0:8e:58:e8:98:26:3c:e4:
         dd:8f:52:46:e7:60:ee:02:b5:29:99:01:da:c0:b1:7e:79:e4:
         58:e4:fa:8a:81:05:e0:3d:7d:c7:20:1a:04:c3:6d:4f:0b:18:
         f5:bb:30:8a:88:7e:81:35:77:63:d7:64:dd:40:d0:67:07:4f:
         be:11:14:d8:58:c4:82:1d:09:50:cf:11:02:fd:01:e3:8d:09:
         25:47:7d:f9:39:58:b4:07:98:9e:2e:45:47:04:cb:47:93:8a:
         f2:5a:11:83:92:43:4e:f5:c6:a3:7e:86:61:85:5b:5d:b4:ba:
         fa:1c:fc:2d:e7:50:3c:1d:8f:81:9d:a2:c3:4c:13:49:7e:05:
         b3:e8:09:f2:68:c8:24:46:a5:46:c4:87:da:e4:82:83:63:6a:
         42:a9:e4:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9e2ZHYzjsI/JjM64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRk
YzU2MB4XDTI2MTAwMjE2NTk0OVoXDTI2MTIzMTE3NTkzNlowLzEtMCsGA1UEAxMk
YjY3YTY1NDMtODk1Yi00MWY5LTlhODAtOGMzZjY4ZTY2NDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptNohtyZi4thsskLsR7DRTFeERNgtkpUeWg8
SSZ+npLc3ub/K/T9xIuzLaTox9h7uJfnaPI8rWmwqZX/BpE5NOaukHDMQDVN3GiI
J7KhXzoOGLSXLGgDRRNqlYdWSyrr1LKM/Rp1SFVCw53V7IDp5VJi90ZNaYLJwMOP
ud55X329qPjDZueREzazxX7OAPL0pGZWziSTm/WLmK0SbcsRAkxtL/oV102cpr5E
RX2yqeoCTuzD0haaRXZYquwWwoODUkS95wOEupF0JvJwhJhNYcdsA/yS9gGtGLFW
W3bwpp2e0XEkJFwlkeeTscRAjvoBeGwRRVJYEpKl5omXc+fWRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUC4iJ8+9Dm8zSccz1H2c4qybbYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Njc4
NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvNWQ1ZWUwOGYtZTMyMi0z
YmVhLTgwODMtMzBiNzU1OTlmMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDY3ODYxZWUtMGFhOC00Njg4LWFm
OTQtN2Q1NDBlMmRkYzU2LzQ2Nzg2MWVlLTBhYTgtNDY4OC1hZjk0LTdkNTQwZTJk
ZGM1Ni5jcmwwHwYDVR0jBBgwFoAUEy8O6mK1t8eq7wnVPlRbTVP6/U0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0
MGUyZGRjNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8swMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTbwihOF9dJO1j7iupD1CKEHSxuk/SiykD72ZhEtrBSNDwbJpyDWSMW
8bubm+jAAN22ZGQzVnVGdSuTJulgzI5coLUgd9t21oAkBGZgb5D3xmIseY0B3KTg
5RKMfxjicifcjF3AjljomCY85N2PUkbnYO4CtSmZAdrAsX555Fjk+oqBBeA9fccg
GgTDbU8LGPW7MIqIfoE1d2PXZN1A0GcHT74RFNhYxIIdCVDPEQL9AeONCSVHffk5
WLQHmJ4uRUcEy0eTivJaEYOSQ071xqN+hmGFW120uvoc/C3nUDwdj4GdosNME0l+
BbPoCfJoyCRGpUbEh9rkgoNjakKp5No=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:44 2026 by rpki-client