Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa16ba2e-1c35-3b45-a0d2-910a0ddb4eb0.roa
File:                     fa16ba2e-1c35-3b45-a0d2-910a0ddb4eb0.roa (raw, json)
Hash identifier:          lzmShlUAkDa3cmipfo/VilPFY9hp2AVkANPBAfDYQ5o=
Subject key identifier:   95:9C:E1:2E:BD:B2:92:A1:D7:4D:57:41:93:AB:81:B1:74:5B:E3:3E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F10379E98B474E9613E4D37C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa16ba2e-1c35-3b45-a0d2-910a0ddb4eb0.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     33387
IP address blocks:        142.111.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9e:98:b4:74:e9:61:3e:4d:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=63b49705-8139-4c49-87b6-8eff8e1025af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:00:5f:2d:a8:45:d3:2d:c0:54:cd:f4:11:
                    b7:79:15:17:a3:25:ea:a5:16:6a:01:7b:8b:cc:41:
                    20:3e:f3:23:27:a3:3a:db:4f:6c:8a:3f:42:f0:7d:
                    b9:e4:4f:e5:7e:6f:a4:10:51:1d:52:17:dd:c3:2f:
                    47:98:38:2e:50:21:47:67:57:4e:25:a2:de:17:23:
                    38:bd:9f:7d:90:1d:6e:7c:48:5b:b6:28:8d:35:23:
                    d0:32:6f:8d:a0:b4:50:1e:67:1f:0a:40:d2:36:18:
                    7a:8d:74:2b:40:5c:7d:f5:50:bb:78:2d:fe:21:e6:
                    c9:70:1d:b3:f1:a4:db:31:f2:14:7a:59:38:60:ed:
                    50:b4:fe:b1:78:23:75:31:27:9c:23:5a:3a:79:b5:
                    59:63:e0:31:58:73:76:7a:b0:67:cb:9c:d4:24:3b:
                    21:42:a3:3c:bf:57:6a:17:3a:37:0f:61:a4:8a:9d:
                    85:70:e3:04:f6:4c:cb:e6:dd:85:c8:33:94:01:0a:
                    6c:70:8b:d0:6a:73:bc:5d:10:a3:0a:e5:9a:91:2f:
                    eb:bb:8c:05:33:aa:5c:13:45:e2:9b:55:e3:16:f6:
                    d7:a4:61:b7:a9:c2:0b:19:97:30:d9:4c:86:c0:b3:
                    44:61:83:84:cc:84:7d:db:ec:fd:d6:97:75:69:e9:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:E1:2E:BD:B2:92:A1:D7:4D:57:41:93:AB:81:B1:74:5B:E3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa16ba2e-1c35-3b45-a0d2-910a0ddb4eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:05:d5:cd:94:f5:b2:5a:ad:ba:cb:e1:16:73:7b:7d:a7:
         01:31:08:0b:fd:b5:0e:6a:9e:c4:80:67:e0:1f:be:a7:10:5d:
         8d:fc:b9:d9:e4:82:69:72:ef:88:9f:1e:56:15:bc:1d:b6:5c:
         16:41:49:4e:a5:e9:58:6e:16:0b:e6:2b:a2:80:56:4b:be:e1:
         84:07:c9:1b:bf:ba:ff:bb:75:72:2a:e4:4e:20:c1:37:16:a0:
         0a:80:e1:80:e3:07:7c:be:6d:f8:ba:77:77:53:3a:64:59:8b:
         bb:d5:05:01:07:bd:70:3b:b4:83:a5:e1:a4:77:96:58:28:91:
         bd:75:9d:55:30:41:17:1c:21:1d:84:59:43:68:5c:08:0a:9a:
         89:0d:60:c5:3f:2d:24:c5:69:91:a0:79:76:ee:24:ed:17:ab:
         de:da:d0:f4:ec:ba:a9:4a:88:53:2f:e3:a6:8d:33:90:5f:89:
         15:7c:6d:dc:51:bb:1b:a4:a3:8c:d0:36:58:86:63:2d:58:0c:
         39:44:7c:5c:2c:34:7e:64:47:17:91:98:fe:d1:fe:f7:c4:c9:
         b9:a4:0f:b2:6a:74:6e:ce:6b:28:73:68:f2:5b:f4:a8:58:87:
         55:e8:f5:ab:f4:a9:1b:23:f4:21:95:29:0e:55:ce:a4:8f:58:
         48:62:76:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN56YtHTpYT5NN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NjNiNDk3MDUtODEzOS00YzQ5LTg3YjYtOGVmZjhlMTAyNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqgAXy2oRdMtwFTN9BG3eRUXoyXqpRZqAXuL
zEEgPvMjJ6M6209sij9C8H255E/lfm+kEFEdUhfdwy9HmDguUCFHZ1dOJaLeFyM4
vZ99kB1ufEhbtiiNNSPQMm+NoLRQHmcfCkDSNhh6jXQrQFx99VC7eC3+IebJcB2z
8aTbMfIUelk4YO1QtP6xeCN1MSecI1o6ebVZY+AxWHN2erBny5zUJDshQqM8v1dq
Fzo3D2Gkip2FcOME9kzL5t2FyDOUAQpscIvQanO8XRCjCuWakS/ru4wFM6pcE0Xi
m1XjFvbXpGG3qcILGZcw2UyGwLNEYYOEzIR92+z91pd1aemyxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWc4S69spKh101XQZOrgbF0W+M+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmExNmJhMmUtMWMzNS0z
YjQ1LWEwZDItOTEwYTBkZGI0ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm++MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoFBdXNlPWyWq26y+EWc3t9pwExCAv9tQ5qnsSAZ+AfvqcQXY38udnk
gmly74ifHlYVvB22XBZBSU6l6VhuFgvmK6KAVku+4YQHyRu/uv+7dXIq5E4gwTcW
oAqA4YDjB3y+bfi6d3dTOmRZi7vVBQEHvXA7tIOl4aR3llgokb11nVUwQRccIR2E
WUNoXAgKmokNYMU/LSTFaZGgeXbuJO0Xq97a0PTsuqlKiFMv46aNM5BfiRV8bdxR
uxuko4zQNliGYy1YDDlEfFwsNH5kRxeRmP7R/vfEybmkD7JqdG7OayhzaPJb9KhY
h1Xo9av0qRsj9CGVKQ5VzqSPWEhidqM=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:51:32 2026 by rpki-client