Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa
File:                     3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa (raw, json)
Hash identifier:          sYVvW2fbsLsCwb0Zv5+PHEGU7DN5vmWMMV2dFgzk7Cc=
Subject key identifier:   C1:03:2C:3F:C2:30:36:42:46:5A:85:CE:44:C9:97:D2:31:B2:BE:2A
Certificate issuer:       /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial:       010D0C9F4328584F7D30C635492207458199E100
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa
Signing time:             Tue 13 Oct 2026 13:49:46 +0000
ROA not before:           Tue 13 Oct 2026 13:49:46 +0000
ROA not after:            Mon 11 Jan 2027 14:49:46 +0000
asID:                     46606
IP address blocks:        162.253.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:30:c6:35:49:22:07:45:81:99:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
        Validity
            Not Before: Oct 13 13:49:46 2026 GMT
            Not After : Jan 11 14:49:46 2027 GMT
        Subject: CN=3ac72ce1-4229-4648-9b3f-a130b4774bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:bb:cf:96:14:87:d1:81:92:3b:60:39:e7:
                    02:c4:02:bc:0b:b6:41:ba:b7:75:88:27:61:85:f3:
                    80:87:56:6a:ae:0d:d0:24:c7:1e:ce:3f:c8:6d:9b:
                    6a:c0:bd:79:8b:d6:f2:4c:4a:dd:b1:a4:9c:57:b8:
                    c9:6b:35:36:be:21:46:74:fb:8c:9f:77:a3:0b:0f:
                    1d:90:fe:fa:fc:3a:e3:09:b8:5b:45:7d:bf:f4:16:
                    a8:b6:ea:d6:60:0e:77:56:db:cc:5a:90:2a:3b:30:
                    a7:d5:b1:ad:5b:98:71:94:08:3a:4a:ce:b0:c8:8a:
                    35:61:be:fc:7b:b5:ba:f4:a5:ac:af:22:e2:0a:94:
                    14:39:4d:04:c4:c8:bc:58:5b:de:c9:5d:19:bd:56:
                    f6:1a:fc:f5:22:bf:9a:3e:8d:fe:0a:72:fe:00:c8:
                    f8:1f:22:c9:c0:ae:94:b4:21:34:3b:62:8f:84:06:
                    c2:98:bb:c8:36:93:52:ee:ec:f0:f5:b4:5d:49:09:
                    76:d2:fd:b7:a7:97:e7:c5:3f:5c:2c:7c:34:e6:65:
                    71:be:0c:85:fe:dc:f9:e3:47:e3:18:3e:56:49:9d:
                    b4:dc:51:a6:86:02:98:a7:41:99:bd:f4:4d:26:73:
                    db:1c:fb:32:ed:bc:e9:7f:58:00:57:5b:a9:8c:f1:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:2C:3F:C2:30:36:42:46:5A:85:CE:44:C9:97:D2:31:B2:BE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:13:9e:a5:35:20:af:e1:52:dd:ae:e3:90:06:e0:c7:fe:
         01:07:48:fd:60:ac:e2:d9:7a:a7:37:80:df:29:55:e7:d5:25:
         f1:ce:5f:d9:83:ed:33:f7:27:3d:fa:8a:36:f3:09:29:91:ce:
         99:9d:cc:4a:d9:50:cd:7c:47:a6:3c:b7:c0:86:3b:32:8f:eb:
         66:9e:90:e3:1c:f5:4d:5a:8e:c5:b5:f8:f1:a8:f8:56:b1:f3:
         9b:84:be:d3:18:f9:bf:19:55:8b:39:f4:25:f9:db:83:65:61:
         5f:27:4b:58:03:f3:e8:fd:24:46:72:29:99:54:93:61:d9:8a:
         6e:eb:33:2c:dc:15:1a:e0:5d:84:15:96:a6:90:81:6e:71:b8:
         1b:6c:01:67:93:b6:32:5b:26:65:6e:a6:82:68:62:30:e4:d7:
         7f:e5:90:f8:ee:47:6a:a6:05:03:27:b5:6d:f4:c2:d5:a7:74:
         59:e3:98:68:2a:62:7d:2f:29:c8:bf:d8:17:83:3f:da:d0:19:
         76:ef:e3:42:d1:59:63:0c:e1:22:3e:28:e8:42:9d:42:15:8a:
         19:f8:d1:c1:9b:4c:68:71:fb:c9:b5:f6:3d:99:16:b2:17:39:
         e6:38:a6:7a:4f:23:33:a5:3b:0a:6d:bb:79:51:fd:40:a1:61:
         49:6d:7f:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99MMY1SSIHRYGZ4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1
ZGEwMB4XDTI2MTAxMzEzNDk0NloXDTI3MDExMTE0NDk0NlowLzEtMCsGA1UEAxMk
M2FjNzJjZTEtNDIyOS00NjQ4LTliM2YtYTEzMGI0Nzc0YmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooi7z5YUh9GBkjtgOecCxAK8C7ZBurd1iCdh
hfOAh1Zqrg3QJMcezj/IbZtqwL15i9byTErdsaScV7jJazU2viFGdPuMn3ejCw8d
kP76/DrjCbhbRX2/9BaoturWYA53VtvMWpAqOzCn1bGtW5hxlAg6Ss6wyIo1Yb78
e7W69KWsryLiCpQUOU0ExMi8WFveyV0ZvVb2Gvz1Ir+aPo3+CnL+AMj4HyLJwK6U
tCE0O2KPhAbCmLvINpNS7uzw9bRdSQl20v23p5fnxT9cLHw05mVxvgyF/tz540fj
GD5WSZ203FGmhgKYp0GZvfRNJnPbHPsy7bzpf1gAV1upjPHp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEDLD/CMDZCRlqFzkTJl9Ixsr4qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk
YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvM2Y0OWU2YTMtZjNjYy0z
Zjg1LWJjODAtM2Y3NTQwMTQ0YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5
MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi
NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3
MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwhE56lNSCv4VLdruOQBuDH/gEHSP1grOLZeqc3gN8pVefVJfHOX9mD
7TP3Jz36ijbzCSmRzpmdzErZUM18R6Y8t8CGOzKP62aekOMc9U1ajsW1+PGo+Fax
85uEvtMY+b8ZVYs59CX524NlYV8nS1gD8+j9JEZyKZlUk2HZim7rMyzcFRrgXYQV
lqaQgW5xuBtsAWeTtjJbJmVupoJoYjDk13/lkPjuR2qmBQMntW30wtWndFnjmGgq
Yn0vKci/2BeDP9rQGXbv40LRWWMM4SI+KOhCnUIVihn40cGbTGhx+8m19j2ZFrIX
OeY4pnpPIzOlOwptu3lR/UChYUltfyI=
-----END CERTIFICATE-----
Generated at Sun Oct 18 20:56:40 2026 by rpki-client