Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa
File:                     f723bfab-57e9-3e15-8955-723df020ce36.roa (raw, json)
Hash identifier:          81RQlQb4DT94O9sbyEU4p4AOf3jXIs0gUazlQ8u0wrw=
Subject key identifier:   DB:36:08:0A:CB:FE:1F:80:63:7A:25:CB:1F:78:15:CF:3C:97:21:EF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA95623D3864A2E7394E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        142.114.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:95:62:3d:38:64:a2:e7:39:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2bb714d7-7afe-48ff-9487-6ee73eeeb6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:84:ec:96:93:a7:53:63:7d:a0:43:26:ef:
                    9e:c4:18:f8:a5:c4:82:22:83:f0:d6:0a:d8:53:6e:
                    4a:9a:bc:1a:4f:8a:15:61:c6:2c:c1:ae:c7:63:48:
                    53:c1:6e:4a:7a:de:57:da:15:e3:3d:87:b2:3a:c4:
                    d0:c5:74:7a:dc:6f:19:c8:82:4a:3b:9c:90:c1:9d:
                    c7:57:82:6c:5d:13:98:d7:88:b1:ab:fa:32:b3:1e:
                    a4:4d:51:25:c6:44:d5:8d:c6:c5:ac:a8:fb:a5:52:
                    c0:ed:17:64:9d:f4:37:9e:94:32:46:d5:76:92:6e:
                    33:8a:9f:d0:12:1b:df:c2:b1:f9:ac:f2:64:04:2d:
                    b0:d4:5c:97:cd:ba:15:b9:e0:92:2b:c7:7f:53:26:
                    34:e2:fd:a3:b3:69:f4:a1:33:25:0a:e0:4c:ab:f6:
                    f5:52:08:da:d3:98:a3:c3:b3:77:fa:78:e0:91:d5:
                    08:28:8d:33:9d:a9:0c:92:3b:ba:bc:36:0a:49:2b:
                    e3:9f:0f:47:3e:a2:54:86:9f:9d:5b:17:cd:51:c2:
                    db:7b:b0:4c:0e:54:68:8a:49:d1:12:8d:d6:fd:89:
                    af:2b:bf:df:74:a1:41:7e:39:2a:05:3e:c2:62:48:
                    64:a1:63:30:06:c6:d9:9c:70:bc:ec:fd:52:fd:fc:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:08:0A:CB:FE:1F:80:63:7A:25:CB:1F:78:15:CF:3C:97:21:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f723bfab-57e9-3e15-8955-723df020ce36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:73:4d:9f:bf:9f:16:49:cb:d3:fc:cf:45:eb:0c:8f:8d:
         b6:3e:04:8e:19:87:2f:72:05:26:59:26:d3:be:61:5e:30:75:
         86:55:0b:b2:29:21:21:96:de:fa:c5:65:63:83:9f:39:34:9e:
         81:58:21:5e:20:50:c3:3c:50:6b:ac:c5:7b:e6:3b:1e:cb:27:
         6b:86:79:0c:fd:39:a5:dc:ad:2d:76:e9:5c:a9:88:9b:40:6f:
         96:26:9f:75:16:9b:2e:4f:75:0f:13:14:7e:a8:7c:fb:20:b2:
         89:cf:99:86:44:8a:1b:d5:fb:07:3e:66:26:7f:48:7e:d3:5b:
         15:82:d5:1f:e6:1b:1b:d6:51:54:8d:11:24:4d:36:6c:12:86:
         25:c3:96:c5:3b:0d:ae:e8:cb:52:d4:33:d7:aa:fa:fa:3d:91:
         ec:d7:45:04:82:6b:7c:1e:05:33:1c:2d:47:b5:9d:04:81:8d:
         f3:58:fa:31:7f:5b:98:66:5c:8f:a7:09:d7:5d:af:f8:29:e6:
         70:5e:cf:66:a7:90:37:c1:77:a9:89:58:db:fd:bf:c3:70:0a:
         bd:c6:fb:c0:1a:ae:f2:aa:11:84:e2:9f:c4:72:6c:02:17:4d:
         d2:eb:0d:f8:e8:dc:91:f6:3f:89:41:b8:32:c6:ca:6c:58:eb:
         dc:6a:0f:a6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2DypViPThkouc5ToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MmJiNzE0ZDctN2FmZS00OGZmLTk0ODctNmVlNzNlZWViNmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUSE7JaTp1NjfaBDJu+exBj4pcSCIoPw1grY
U25KmrwaT4oVYcYswa7HY0hTwW5Ket5X2hXjPYeyOsTQxXR63G8ZyIJKO5yQwZ3H
V4JsXROY14ixq/oysx6kTVElxkTVjcbFrKj7pVLA7RdknfQ3npQyRtV2km4zip/Q
EhvfwrH5rPJkBC2w1FyXzboVueCSK8d/UyY04v2js2n0oTMlCuBMq/b1Ugja05ij
w7N3+njgkdUIKI0znakMkju6vDYKSSvjnw9HPqJUhp+dWxfNUcLbe7BMDlRoiknR
Eo3W/YmvK7/fdKFBfjkqBT7CYkhkoWMwBsbZnHC87P1S/fz+ewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNs2CArL/h+AY3olyx94Fc88lyHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjcyM2JmYWItNTdlOS0z
ZTE1LTg5NTUtNzIzZGYwMjBjZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjnIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACkJzTZ+/nxZJy9P8z0XrDI+Ntj4EjhmHL3IFJlkm075hXjB1hlULsikh
IZbe+sVlY4OfOTSegVghXiBQwzxQa6zFe+Y7Hssna4Z5DP05pdytLXbpXKmIm0Bv
liafdRabLk91DxMUfqh8+yCyic+ZhkSKG9X7Bz5mJn9IftNbFYLVH+YbG9ZRVI0R
JE02bBKGJcOWxTsNrujLUtQz16r6+j2R7NdFBIJrfB4FMxwtR7WdBIGN81j6MX9b
mGZcj6cJ112v+CnmcF7PZqeQN8F3qYlY2/2/w3AKvcb7wBqu8qoRhOKfxHJsAhdN
0usN+OjckfY/iUG4MsbKbFjr3GoPpg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:52 2026 by rpki-client