Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1e35956c-4531-3f32-8a56-23587266cdc5.roa
File:                     1e35956c-4531-3f32-8a56-23587266cdc5.roa (raw, json)
Hash identifier:          yf45m9cfhBNHx9O9kD5nRdwJr61VcBxXJFt8Za8s5Ic=
Subject key identifier:   74:F5:5C:D9:40:F7:9C:DB:41:25:5C:B8:8B:E0:1B:11:5B:02:52:73
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F4328584E842A34AD6B04E5EA3C678C00
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1e35956c-4531-3f32-8a56-23587266cdc5.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     140227
IP address blocks:        142.248.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:34:ad:6b:04:e5:ea:3c:67:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=233032a1-b7fe-4189-a4a8-c95d06987e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:d7:17:24:49:d4:87:7e:2e:7f:73:64:d8:
                    da:96:be:9c:b0:26:8e:33:6d:34:d5:de:ba:19:60:
                    a6:72:b3:40:0e:a5:9b:77:49:67:a9:9d:6a:06:69:
                    97:3c:22:c7:d0:d5:0d:e2:46:c6:58:84:73:98:9a:
                    72:93:5a:cc:05:49:66:40:98:9d:f6:ac:b5:e7:d6:
                    f4:6f:ad:e2:a9:09:6c:51:60:91:48:c4:20:9b:a1:
                    4c:74:0e:bd:9a:79:5f:37:eb:a0:a8:1d:ef:63:87:
                    47:df:c3:71:04:24:00:d5:1f:64:7d:57:d3:67:6a:
                    71:d9:ed:1f:f1:da:dd:a8:14:18:71:32:c5:1a:3c:
                    5f:56:87:fe:85:41:11:64:a9:af:b0:b9:73:35:2c:
                    d1:59:59:1f:e1:86:3f:cb:9e:0a:9d:cf:14:b9:7d:
                    56:8b:9b:c7:83:56:8c:cb:3d:19:6f:7f:0f:0d:b8:
                    54:30:bf:c7:14:c2:93:f6:41:06:22:0d:51:27:8a:
                    03:39:7b:14:d3:c5:14:47:2b:e9:3a:ff:50:40:dd:
                    bd:05:7d:c6:e3:75:f5:00:fa:0f:d3:a2:5a:bd:8c:
                    a2:93:48:46:61:34:3f:15:5b:16:7d:61:59:54:2d:
                    ba:a9:ff:24:23:e5:3e:bf:bf:4f:b0:39:cd:39:76:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:5C:D9:40:F7:9C:DB:41:25:5C:B8:8B:E0:1B:11:5B:02:52:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1e35956c-4531-3f32-8a56-23587266cdc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:d2:fd:0d:04:cc:61:12:a1:06:5d:ac:14:c6:d4:f2:fc:
         ab:ae:50:db:b5:e5:a4:bc:93:31:0f:96:53:7e:f1:99:39:8a:
         cc:6d:cc:ce:aa:2a:99:e3:14:2f:72:13:5d:75:3f:e6:4a:e1:
         ae:c7:83:a6:6f:38:0a:e7:15:bc:69:6e:5b:c9:d5:12:d9:9f:
         64:c4:82:1e:05:af:d4:63:8d:0d:62:f3:31:78:76:ae:03:58:
         fa:86:b8:ac:9e:cc:7d:f8:72:25:ec:32:9a:cb:74:e1:ba:34:
         ae:b1:77:e3:a3:c6:cd:9f:6a:5f:88:34:fa:cf:90:f6:4d:3b:
         2d:67:15:64:a7:b4:b6:c9:b3:54:e5:78:82:79:0c:f5:8b:c9:
         b3:79:c2:ae:5a:93:95:3a:e6:5b:15:23:80:6b:47:b4:fa:fe:
         45:9b:af:52:6f:64:21:f0:d2:9c:72:00:e9:f8:e3:92:e0:5b:
         ed:cc:af:2f:14:6a:2c:ce:b6:46:97:4e:b9:21:ca:e6:27:ef:
         81:69:b7:1d:8c:eb:90:19:f1:f5:f0:98:fe:cc:55:5a:61:7c:
         67:aa:29:cb:ae:44:f6:5d:84:76:b8:fc:64:6c:94:0d:98:1a:
         d3:e2:a8:a1:fd:ca:c4:c8:86:68:5b:8e:be:11:7c:4e:e4:87:
         44:e9:fc:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjStawTl6jxnjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4
NTBiMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
MjMzMDMyYTEtYjdmZS00MTg5LWE0YTgtYzk1ZDA2OTg3ZTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HPXFyRJ1Id+Ln9zZNjalr6csCaOM2001d66
GWCmcrNADqWbd0lnqZ1qBmmXPCLH0NUN4kbGWIRzmJpyk1rMBUlmQJid9qy159b0
b63iqQlsUWCRSMQgm6FMdA69mnlfN+ugqB3vY4dH38NxBCQA1R9kfVfTZ2px2e0f
8drdqBQYcTLFGjxfVof+hUERZKmvsLlzNSzRWVkf4YY/y54Knc8UuX1Wi5vHg1aM
yz0Zb38PDbhUML/HFMKT9kEGIg1RJ4oDOXsU08UURyvpOv9QQN29BX3G43X1APoP
06JavYyik0hGYTQ/FVsWfWFZVC26qf8kI+U+v79PsDnNOXbVCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT1XNlA95zbQSVcuIvgGxFbAlJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2
MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMWUzNTk1NmMtNDUzMS0z
ZjMyLThhNTYtMjM1ODcyNjZjZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1
NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw
ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2
YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuw0v0NBMxhEqEGXawUxtTy/KuuUNu15aS8kzEPllN+8Zk5isxtzM6q
KpnjFC9yE111P+ZK4a7Hg6ZvOArnFbxpblvJ1RLZn2TEgh4Fr9RjjQ1i8zF4dq4D
WPqGuKyezH34ciXsMprLdOG6NK6xd+Ojxs2fal+INPrPkPZNOy1nFWSntLbJs1Tl
eIJ5DPWLybN5wq5ak5U65lsVI4BrR7T6/kWbr1JvZCHw0pxyAOn445LgW+3Mry8U
aizOtkaXTrkhyuYn74Fptx2M65AZ8fXwmP7MVVphfGeqKcuuRPZdhHa4/GRslA2Y
GtPiqKH9ysTIhmhbjr4RfE7kh0Tp/Oc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:36 2026 by rpki-client