Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa
File:                     4c311621-e919-3130-8cc1-4b1e9355a9d7.roa (raw, json)
Hash identifier:          Xw23imECGPIfdojHGhQfcoRBJiScxOlxAj31FzFtdp0=
Subject key identifier:   85:DD:47:E7:81:47:EB:97:B4:E9:08:28:A4:B3:90:6A:2E:2B:E3:EE
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F4328584D703FD8E42C3164D82C895340
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     40676
IP address blocks:        142.248.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d8:e4:2c:31:64:d8:2c:89:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=2283448c-79c0-4210-a377-eba659bf37b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:37:a9:ed:dc:ea:35:0b:4e:40:df:5d:76:
                    f4:af:63:64:eb:d0:bd:39:ff:f8:c4:c9:7a:51:dd:
                    c1:0e:7e:57:99:2f:a7:ee:9a:93:f2:f4:d2:9c:14:
                    e8:0a:18:b9:89:50:92:48:64:ee:1a:ed:33:69:88:
                    61:31:11:cc:e1:9c:7c:f6:c6:33:72:b4:18:e9:dc:
                    ed:e7:9d:a4:d6:c1:e2:74:6d:91:f5:20:f4:3c:a1:
                    d8:e0:8b:66:7b:52:ce:55:fb:5d:aa:04:e1:76:43:
                    c4:5a:64:21:eb:22:de:15:f7:d8:64:c7:f6:2a:50:
                    2a:de:f7:8a:c0:bd:0a:f8:18:aa:18:02:70:7d:3b:
                    b9:ea:e0:4d:1c:27:4f:97:b4:85:dd:69:4b:db:e1:
                    db:9a:b2:dd:44:e1:54:62:c1:07:9b:45:fd:e7:20:
                    20:84:96:73:e7:ff:a5:80:e3:d6:52:79:0b:98:05:
                    93:c1:1b:7e:2c:b6:01:23:28:38:0b:b4:d9:02:e3:
                    b6:d7:0d:1f:ee:58:90:83:b8:3b:c1:5a:1b:2e:36:
                    5b:92:b8:a7:20:88:60:3b:29:11:da:ed:db:19:ac:
                    ca:90:23:64:9c:f8:24:87:12:b6:66:14:6c:71:c1:
                    bf:62:c7:03:b1:42:d9:84:7d:53:47:77:42:99:c9:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DD:47:E7:81:47:EB:97:B4:E9:08:28:A4:B3:90:6A:2E:2B:E3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:b3:4c:b4:46:54:12:03:1d:fd:8a:30:ed:63:08:90:23:
         73:94:ed:20:f6:d1:d6:92:11:08:82:12:3b:6b:42:8d:84:51:
         41:15:7a:ca:00:5f:10:a1:72:05:a0:26:c1:bc:85:49:f4:b0:
         fe:89:1d:ed:37:68:11:1e:11:91:ce:7f:9f:97:d5:53:57:0a:
         e6:7c:de:b7:0f:f0:b2:ff:03:3e:ce:8a:94:10:1c:49:cd:b8:
         e1:52:07:fb:f5:d5:f9:3a:40:8d:f6:3e:05:2c:ca:24:62:08:
         13:1d:cf:8c:fc:36:8f:b9:fe:eb:92:d4:15:32:bf:63:6b:0b:
         4a:29:1e:71:ca:03:c0:b6:32:b7:cc:97:94:94:9f:4f:6c:fe:
         fb:53:a8:7c:27:90:7a:a2:80:03:27:7c:42:39:2b:a2:fa:0c:
         fd:03:cb:3d:98:a6:87:4a:3f:95:cc:50:fc:b0:1b:3f:ec:02:
         46:63:04:9c:32:f0:0a:29:e0:1f:be:bd:b6:19:c1:5c:8e:11:
         a8:67:25:e0:9c:6c:d6:b0:bd:90:87:bd:80:c0:aa:b5:16:d5:
         c3:58:47:90:e7:ec:1d:45:fc:74:59:0b:66:8d:28:96:54:9e:
         66:ad:c6:a6:7a:df:54:0b:ea:8b:b5:e2:4e:c1:3e:d3:2f:d7:
         10:67:41:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9jkLDFk2CyJU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2ODBiZjgtNWE4Yy00ZGQ1LTg2NWEtYzM4YTUwOTQ2
NDk0MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
MjI4MzQ0OGMtNzljMC00MjEwLWEzNzctZWJhNjU5YmYzN2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWU3qe3c6jULTkDfXXb0r2Nk69C9Of/4xMl6
Ud3BDn5XmS+n7pqT8vTSnBToChi5iVCSSGTuGu0zaYhhMRHM4Zx89sYzcrQY6dzt
552k1sHidG2R9SD0PKHY4Itme1LOVftdqgThdkPEWmQh6yLeFffYZMf2KlAq3veK
wL0K+BiqGAJwfTu56uBNHCdPl7SF3WlL2+HbmrLdROFUYsEHm0X95yAghJZz5/+l
gOPWUnkLmAWTwRt+LLYBIyg4C7TZAuO21w0f7liQg7g7wVobLjZbkrinIIhgOykR
2u3bGazKkCNknPgkhxK2ZhRsccG/YscDsULZhH1TR3dCmcl3CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXdR+eBR+uXtOkIKKSzkGouK+PuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYzY4
MGJmOC01YThjLTRkZDUtODY1YS1jMzhhNTA5NDY0OTQvNGMzMTE2MjEtZTkxOS0z
MTMwLThjYzEtNGIxZTkzNTVhOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWM2ODBiZjgtNWE4Yy00ZGQ1LTg2
NWEtYzM4YTUwOTQ2NDk0LzFjNjgwYmY4LTVhOGMtNGRkNS04NjVhLWMzOGE1MDk0
NjQ5NC5jcmwwHwYDVR0jBBgwFoAUTAoqi+c+pGDX8GZ8d2U0WsqVTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYzY4MGJmOC01YThjLTRkZDUtODY1YS1jMzhh
NTA5NDY0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK2s0y0RlQSAx39ijDtYwiQI3OU7SD20daSEQiCEjtrQo2EUUEVesoA
XxChcgWgJsG8hUn0sP6JHe03aBEeEZHOf5+X1VNXCuZ83rcP8LL/Az7OipQQHEnN
uOFSB/v11fk6QI32PgUsyiRiCBMdz4z8No+5/uuS1BUyv2NrC0opHnHKA8C2MrfM
l5SUn09s/vtTqHwnkHqigAMnfEI5K6L6DP0Dyz2YpodKP5XMUPywGz/sAkZjBJwy
8Aop4B++vbYZwVyOEahnJeCcbNawvZCHvYDAqrUW1cNYR5Dn7B1F/HRZC2aNKJZU
nmatxqZ631QL6ou14k7BPtMv1xBnQTc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:04 2026 by rpki-client