Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/fea3448e-f1a9-38b4-8d36-8e1584fec00c.roa
File:                     fea3448e-f1a9-38b4-8d36-8e1584fec00c.roa (raw, json)
Hash identifier:          sKWWNzSxbpAvwt0LLg/OrnYybJP1AMRcPPpl4UBh9zk=
Subject key identifier:   85:81:8D:32:40:1E:19:E7:C2:F6:E0:91:34:FD:4C:6A:75:C4:48:1D
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584F3482792DCDF96F5E22E0B680
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/fea3448e-f1a9-38b4-8d36-8e1584fec00c.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     14499
IP address blocks:        142.192.218.0/23 maxlen: 23
                          142.192.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:79:2d:cd:f9:6f:5e:22:e0:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=501dae1e-3fc9-45cd-a8df-75db3e2c85db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:3f:16:b3:d5:78:56:1b:1b:91:bb:67:3a:
                    26:8f:e0:66:c7:7f:19:06:13:dc:15:1b:51:f0:1c:
                    4c:b9:4c:09:e7:16:36:42:c6:86:b8:06:91:72:94:
                    68:f8:37:67:4f:d3:08:a4:ec:80:8b:7b:53:8e:ae:
                    84:8f:6a:8f:06:87:83:05:7e:f6:1b:77:6a:08:d7:
                    c8:1a:f2:11:4c:7b:9a:7c:d3:b5:d6:80:9b:f8:28:
                    db:40:b5:8e:a0:6b:5d:62:05:7a:08:65:00:55:59:
                    16:41:59:0a:d5:3d:22:a2:98:f3:91:b8:15:55:0a:
                    f1:ba:31:da:8d:cb:6e:ce:4f:e1:d6:44:e9:12:68:
                    7f:aa:37:f0:44:ef:a5:41:58:0e:0e:55:7e:82:cf:
                    cf:ef:bc:6f:7d:01:ff:e2:fe:a4:08:cc:76:4b:97:
                    61:d7:82:81:35:17:38:f4:4c:5d:05:f8:2c:42:68:
                    7f:67:66:c0:52:8a:bb:2b:98:2d:2f:7e:51:60:0a:
                    13:74:34:21:22:66:04:6b:0b:bb:f1:10:c2:82:8c:
                    d5:85:c4:cb:77:45:9d:40:1e:af:9c:57:ac:6c:c4:
                    39:ee:d7:8e:c0:5d:c9:54:ec:0b:c6:59:e4:c8:9f:
                    8f:fe:57:07:3f:68:a1:45:d7:15:f6:c3:70:f4:ca:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:8D:32:40:1E:19:E7:C2:F6:E0:91:34:FD:4C:6A:75:C4:48:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/fea3448e-f1a9-38b4-8d36-8e1584fec00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:ce:89:30:86:3f:95:0b:64:b6:01:83:61:e6:fa:98:14:
         df:ee:c7:76:e4:28:a7:03:f1:10:8c:f4:b8:4e:b3:38:13:6e:
         00:db:f0:45:f9:71:8d:e4:bd:3e:06:14:a7:c9:0a:f3:a9:91:
         7f:7f:21:24:9a:32:4d:0f:2b:e9:2d:f2:e6:3b:c8:cd:3a:d1:
         24:fe:25:e6:e4:16:d6:de:62:64:96:96:a4:45:40:44:af:d3:
         3b:64:09:f8:42:3c:3a:1d:d8:34:11:9d:83:97:7b:79:4d:40:
         4f:6c:60:4f:58:84:9b:25:60:7f:2c:af:d1:0e:b0:3b:06:9d:
         f8:b6:dc:11:4d:e0:f7:79:e7:a7:a9:1a:76:6f:64:72:2b:d2:
         f3:4c:5c:47:a4:66:a2:f1:e8:2e:1f:01:66:01:37:a7:0f:2d:
         ad:fa:25:58:67:3a:a2:55:36:8c:8c:1e:61:76:92:02:db:31:
         29:8a:52:9e:93:e1:55:3c:64:c4:f1:94:21:1a:d8:16:3b:96:
         d0:b9:51:2f:4c:d2:0c:e8:6b:71:e2:ad:a1:a7:c0:a2:05:3d:
         48:a3:d4:4e:9e:9f:72:af:97:ad:80:70:94:cd:ad:0d:45:cc:
         11:0d:6a:3f:e8:a1:ab:97:97:d4:c0:c8:3f:1c:30:6a:7d:f1:
         77:d4:f8:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnktzflvXiLgtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmMTIzMzctOGViOC00M2EyLWE3NWUtMmIwMWNlYjk1
YzM5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
NTAxZGFlMWUtM2ZjOS00NWNkLWE4ZGYtNzVkYjNlMmM4NWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqU/FrPVeFYbG5G7Zzomj+Bmx38ZBhPcFRtR
8BxMuUwJ5xY2QsaGuAaRcpRo+DdnT9MIpOyAi3tTjq6Ej2qPBoeDBX72G3dqCNfI
GvIRTHuafNO11oCb+CjbQLWOoGtdYgV6CGUAVVkWQVkK1T0iopjzkbgVVQrxujHa
jctuzk/h1kTpEmh/qjfwRO+lQVgODlV+gs/P77xvfQH/4v6kCMx2S5dh14KBNRc4
9ExdBfgsQmh/Z2bAUoq7K5gtL35RYAoTdDQhImYEawu78RDCgozVhcTLd0WdQB6v
nFesbMQ57teOwF3JVOwLxlnkyJ+P/lcHP2ihRdcV9sNw9MrUowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWBjTJAHhnnwvbgkTT9TGp1xEgdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Y2Yx
MjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2ViOTVjMzkvZmVhMzQ0OGUtZjFhOS0z
OGI0LThkMzYtOGUxNTg0ZmVjMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGNmMTIzMzctOGViOC00M2EyLWE3
NWUtMmIwMWNlYjk1YzM5LzhjZjEyMzM3LThlYjgtNDNhMi1hNzVlLTJiMDFjZWI5
NWMzOS5jcmwwHwYDVR0jBBgwFoAUfN95hHXOT8cMdsRbFV6R2RyaPmwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAx
Y2ViOTVjMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjsDaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDdzokwhj+VC2S2AYNh5vqYFN/ux3bkKKcD8RCM9LhOszgTbgDb8EX5
cY3kvT4GFKfJCvOpkX9/ISSaMk0PK+kt8uY7yM060ST+JebkFtbeYmSWlqRFQESv
0ztkCfhCPDod2DQRnYOXe3lNQE9sYE9YhJslYH8sr9EOsDsGnfi23BFN4Pd556ep
GnZvZHIr0vNMXEekZqLx6C4fAWYBN6cPLa36JVhnOqJVNoyMHmF2kgLbMSmKUp6T
4VU8ZMTxlCEa2BY7ltC5US9M0gzoa3HiraGnwKIFPUij1E6en3Kvl62AcJTNrQ1F
zBENaj/ooauXl9TAyD8cMGp98XfU+Jg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:37:49 2026 by rpki-client