Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
File:                     38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json)
Hash identifier:          EjK8q39M9VQrL5vtx4Duf6w7VH9beXqFLbRvP9oP8Fs=
Subject key identifier:   B5:3A:73:3A:88:E4:89:3E:EA:42:00:23:DB:31:F1:E0:43:E8:6D:F6
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584E1B799440AF2E7ABB4302B600
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     33039
IP address blocks:        142.248.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:94:40:af:2e:7a:bb:43:02:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=6fe7b693-65bb-4c5b-acbd-a13c53ea0b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:de:ca:10:56:96:70:62:8b:97:09:7e:94:7f:
                    ce:b8:ee:ca:88:01:cf:d6:c5:d7:c0:c0:6e:77:04:
                    76:fc:32:a7:ae:19:b3:18:18:2e:33:d9:48:03:8c:
                    1a:41:f0:88:5c:e3:f6:13:1d:59:80:f3:d4:77:d5:
                    ad:f1:2a:fc:53:36:73:b3:43:ff:9c:2e:cf:52:58:
                    e4:cd:86:4d:26:36:5b:06:25:a7:8d:ae:8d:7b:8a:
                    38:40:a8:75:ff:63:1e:d4:0a:b4:8d:c6:e2:80:df:
                    ec:29:ba:f0:5a:15:2f:c1:22:96:dc:44:03:bc:e5:
                    e4:0f:de:ae:fd:48:d7:39:03:fc:3b:9d:25:39:75:
                    b4:5e:16:13:00:0a:ef:97:37:37:53:cb:d9:36:52:
                    2e:3e:bc:2c:46:b4:82:31:a4:06:56:36:4c:32:84:
                    d8:94:39:54:30:67:b1:e1:21:a3:2e:a7:be:82:e2:
                    1b:a0:ed:1f:4f:af:fa:d7:38:76:2a:b6:12:2a:07:
                    13:cf:3d:fe:b8:e6:c5:c4:ee:76:05:af:be:ea:df:
                    cb:9e:50:3b:d5:54:7d:8d:44:7f:b9:fc:89:a2:a0:
                    d3:bf:ab:68:0c:a3:38:bc:b2:0d:c8:24:dc:a2:36:
                    10:68:0b:c9:4a:d5:a3:86:57:ab:ba:f4:b6:4d:bc:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:73:3A:88:E4:89:3E:EA:42:00:23:DB:31:F1:E0:43:E8:6D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:42:bf:f2:4c:ed:58:10:d7:59:27:6c:99:c1:04:f6:8a:89:
         48:f2:1f:78:94:72:b2:1b:f2:0b:f8:3e:f6:78:3f:1b:2e:45:
         6c:3e:6f:e7:78:f2:53:5c:d4:a3:21:a6:4e:bc:d5:50:9d:35:
         61:48:c9:a7:75:a4:5b:b1:f5:20:61:fa:48:33:0d:96:bd:13:
         a3:2e:af:63:56:0a:5e:b6:65:4d:e4:f8:67:07:dc:22:16:fe:
         25:1d:27:5d:cc:8c:cd:59:8b:ff:f1:93:d5:ab:c4:5b:6c:3d:
         da:48:e6:3a:3a:03:ff:ae:8f:03:ab:79:af:95:ee:68:2e:20:
         3d:c1:cd:76:a0:df:96:4c:86:ec:85:76:b3:3c:0e:d6:4b:37:
         db:4a:c9:56:cf:52:09:be:55:17:d3:ab:0f:db:d9:5b:74:8e:
         8f:61:16:5c:d1:52:f1:ad:10:6f:13:86:9d:19:03:e3:bf:2c:
         f6:c5:5a:86:b5:86:c4:59:62:f1:96:24:e1:c9:c5:90:da:f3:
         f6:f1:ac:7f:2e:7e:4d:80:9f:d3:18:23:9c:3b:7f:60:0f:1e:
         65:6e:7e:04:83:70:de:53:53:cb:5b:0b:f5:7a:59:51:53:26:
         89:32:a2:fd:b9:48:8a:66:fd:26:c3:b7:23:8c:4a:1a:01:d0:
         e4:bf:c9:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beZRAry56u0MCtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw
YzhlMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NmZlN2I2OTMtNjViYi00YzViLWFjYmQtYTEzYzUzZWEwYjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt7KEFaWcGKLlwl+lH/OuO7KiAHP1sXXwMBu
dwR2/DKnrhmzGBguM9lIA4waQfCIXOP2Ex1ZgPPUd9Wt8Sr8UzZzs0P/nC7PUljk
zYZNJjZbBiWnja6Ne4o4QKh1/2Me1Aq0jcbigN/sKbrwWhUvwSKW3EQDvOXkD96u
/UjXOQP8O50lOXW0XhYTAArvlzc3U8vZNlIuPrwsRrSCMaQGVjZMMoTYlDlUMGex
4SGjLqe+guIboO0fT6/61zh2KrYSKgcTzz3+uObFxO52Ba++6t/LnlA71VR9jUR/
ufyJoqDTv6toDKM4vLINyCTcojYQaAvJStWjhleruvS2TbwQWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLU6czqI5Ik+6kIAI9sx8eBD6G32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3
OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzg0NDIyMDMtMGEyMy0z
YzQwLTg5NDEtNmY0OWY4YTVmYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl
MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz
MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi
OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhCv/JM7VgQ11knbJnBBPaKiUjyH3iUcrIb8gv4PvZ4PxsuRWw+b+d4
8lNc1KMhpk681VCdNWFIyad1pFux9SBh+kgzDZa9E6Mur2NWCl62ZU3k+GcH3CIW
/iUdJ13MjM1Zi//xk9WrxFtsPdpI5jo6A/+ujwOrea+V7mguID3BzXag35ZMhuyF
drM8DtZLN9tKyVbPUgm+VRfTqw/b2Vt0jo9hFlzRUvGtEG8Thp0ZA+O/LPbFWoa1
hsRZYvGWJOHJxZDa8/bxrH8ufk2An9MYI5w7f2APHmVufgSDcN5TU8tbC/V6WVFT
Jokyov25SIpm/SbDtyOMShoB0OS/yao=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:07 2026 by rpki-client