Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/55ab435e-1652-3717-b8d3-530e993593b5.roa
File:                     55ab435e-1652-3717-b8d3-530e993593b5.roa (raw, json)
Hash identifier:          AK9gAjb1R6HpGnVMtA3ARIcOJmKTUpQJRK41/1bsCFc=
Subject key identifier:   F4:B0:6E:CE:CD:1E:98:74:51:D3:DC:EE:03:D6:96:87:90:2D:17:53
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584EA7919331ECDFD1E9A281E080
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/55ab435e-1652-3717-b8d3-530e993593b5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        142.249.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:93:31:ec:df:d1:e9:a2:81:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0af2fa43-b4c2-4707-8733-b544a6601e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:9d:f0:a0:f0:27:47:a1:bf:e7:82:bf:80:
                    37:18:d4:06:b3:48:7d:72:fb:f0:c5:38:f1:4e:f1:
                    03:78:07:c8:f6:7e:76:64:7c:67:b7:df:bd:ba:ac:
                    e2:c9:62:32:b0:a2:2e:8b:99:56:74:07:7a:c3:f3:
                    83:71:27:06:e8:a6:e3:ec:91:88:aa:63:c4:53:1b:
                    e7:d4:bc:ed:3f:86:cf:97:1c:60:fd:2e:1b:64:35:
                    79:ae:d4:fd:aa:02:57:2a:fe:ef:a7:3e:1d:92:b3:
                    13:13:0f:db:b5:fc:75:b1:fa:d1:97:d3:5b:03:94:
                    bc:35:81:da:d4:63:e6:1d:fc:6d:a9:4c:74:c0:c4:
                    1f:9a:0d:e0:be:d1:8c:02:a8:3e:b4:1e:22:01:b9:
                    a3:b9:5f:d8:d6:07:a8:23:e3:27:0a:d2:94:a6:9d:
                    a0:e4:9e:d3:40:a7:96:dd:24:d1:06:7e:da:0c:17:
                    df:ab:bc:b4:ac:13:a0:25:15:59:96:30:03:25:ea:
                    31:8f:14:2a:f4:5f:69:a1:9c:ee:04:7b:e1:65:58:
                    e3:c8:52:f5:5c:6f:37:7e:21:15:48:59:8f:2d:56:
                    48:2e:b3:1a:34:0e:53:f9:e1:e6:91:ae:a8:c6:45:
                    2e:dd:95:49:f8:58:26:82:03:03:cb:b1:8c:4f:a9:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B0:6E:CE:CD:1E:98:74:51:D3:DC:EE:03:D6:96:87:90:2D:17:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/55ab435e-1652-3717-b8d3-530e993593b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:15:ef:cf:fc:0f:c4:72:f5:0d:4f:17:27:6e:ea:8a:87:91:
         38:ae:b9:23:d4:77:47:77:44:a3:42:ce:28:02:2d:31:de:a2:
         25:3e:25:65:b4:28:2e:1e:57:c1:67:04:db:47:79:9c:75:3d:
         3f:80:2b:34:c6:91:0e:53:d1:e6:e0:d4:85:a3:74:7f:b4:62:
         97:6d:aa:d3:1c:0d:9b:80:0c:e6:c1:c3:1a:ee:96:1b:90:90:
         b7:c3:9b:22:2d:45:f3:6b:2e:5b:2d:ba:04:c8:d1:cf:6b:d4:
         be:ac:11:5b:0d:c3:fd:c0:14:16:0b:dc:dd:db:00:b7:35:d2:
         91:dd:8a:6b:60:86:ab:5f:fc:39:72:3e:ca:b1:fc:2e:08:1e:
         12:79:64:1a:09:6a:e5:1d:ae:63:6a:03:7f:64:09:fb:65:70:
         cd:67:12:ee:51:0e:22:c0:02:4e:47:57:31:1d:a8:50:91:f6:
         0c:51:b4:f3:05:3f:fe:d0:67:0d:db:bc:ef:2a:9b:7b:31:7c:
         dd:91:9b:ba:50:a8:b3:3a:f5:15:bb:85:cd:40:40:e5:86:34:
         31:f4:89:91:07:5d:19:58:f4:da:44:0d:e6:b4:12:53:37:fc:
         61:e2:8e:90:d8:75:2c:e5:c9:ad:da:22:f3:95:c8:43:0b:93:
         55:a7:65:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkZMx7N/R6aKB4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJm
NTQ2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MGFmMmZhNDMtYjRjMi00NzA3LTg3MzMtYjU0NGE2NjAxZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Kd8KDwJ0ehv+eCv4A3GNQGs0h9cvvwxTjx
TvEDeAfI9n52ZHxnt9+9uqziyWIysKIui5lWdAd6w/ODcScG6Kbj7JGIqmPEUxvn
1LztP4bPlxxg/S4bZDV5rtT9qgJXKv7vpz4dkrMTEw/btfx1sfrRl9NbA5S8NYHa
1GPmHfxtqUx0wMQfmg3gvtGMAqg+tB4iAbmjuV/Y1geoI+MnCtKUpp2g5J7TQKeW
3STRBn7aDBffq7y0rBOgJRVZljADJeoxjxQq9F9poZzuBHvhZVjjyFL1XG83fiEV
SFmPLVZILrMaNA5T+eHmka6oxkUu3ZVJ+FgmggMDy7GMT6k6dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSwbs7NHph0UdPc7gPWloeQLRdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJl
NjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvNTVhYjQzNWUtMTY1Mi0z
NzE3LWI4ZDMtNTMwZTk5MzU5M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWQyZTY2OWUtOGQ1ZC00YjM5LWE2
OGYtNGY1MzZjYzJmNTQ2LzFkMmU2NjllLThkNWQtNGIzOS1hNjhmLTRmNTM2Y2My
ZjU0Ni5jcmwwHwYDVR0jBBgwFoAUKz2jHTp9jhffSL1srEpi0l9UvhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUz
NmNjMmY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvmJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOoV78/8D8Ry9Q1PFydu6oqHkTiuuSPUd0d3RKNCzigCLTHeoiU+JWW0
KC4eV8FnBNtHeZx1PT+AKzTGkQ5T0ebg1IWjdH+0YpdtqtMcDZuADObBwxrulhuQ
kLfDmyItRfNrLlstugTI0c9r1L6sEVsNw/3AFBYL3N3bALc10pHdimtghqtf/Dly
Psqx/C4IHhJ5ZBoJauUdrmNqA39kCftlcM1nEu5RDiLAAk5HVzEdqFCR9gxRtPMF
P/7QZw3bvO8qm3sxfN2Rm7pQqLM69RW7hc1AQOWGNDH0iZEHXRlY9NpEDea0ElM3
/GHijpDYdSzlya3aIvOVyEMLk1WnZQU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:56 2026 by rpki-client