Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43f5a143-58a3-3be2-a768-f91884eab653.roa
File:                     43f5a143-58a3-3be2-a768-f91884eab653.roa (raw, json)
Hash identifier:          kLuzOPZ/igBkVMsUH1cFxT3E57JZ6U1fzpCa0Y1WTnA=
Subject key identifier:   DA:93:4A:F5:AC:33:79:62:CB:F9:E3:96:84:E0:C8:73:F5:D8:DC:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA797D2D8AE35705A17DF0C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43f5a143-58a3-3be2-a768-f91884eab653.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3561
IP address blocks:        142.252.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d2:d8:ae:35:70:5a:17:df:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99bc657e-117f-4604-9daa-6a9c51a05db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:a6:c1:67:8c:76:0f:7d:ae:a3:b3:68:f4:
                    08:b6:95:5b:ba:45:97:37:75:89:59:19:17:ce:2d:
                    fd:7e:cc:fa:0b:c0:09:e0:55:8b:a2:0f:b5:83:1c:
                    17:41:56:05:76:a0:c9:63:6e:f4:78:47:cd:28:36:
                    2f:cd:66:2e:bc:19:1e:39:1c:9d:fc:9c:51:83:e3:
                    b8:48:90:ba:dd:1d:72:e4:e5:70:dd:69:ab:26:e7:
                    85:76:5a:2a:67:21:98:03:9e:68:8f:83:93:c2:50:
                    9a:6b:4f:88:e2:7b:de:2f:a9:5c:63:bf:0f:4d:b8:
                    5c:2a:55:76:90:e0:38:ad:5b:15:1f:4a:01:4a:01:
                    ab:f0:a9:81:7c:cf:51:35:6b:b5:7f:f6:84:d5:de:
                    94:b8:77:a7:d1:40:b6:1c:7e:75:04:14:ee:df:a1:
                    fb:f7:8b:3d:1c:ab:0b:99:ae:65:8a:43:06:60:19:
                    3b:39:73:b2:61:04:9e:98:64:08:56:0d:be:49:ad:
                    7b:e6:83:e5:a9:33:6b:5d:b6:31:b6:82:c2:0e:9e:
                    a5:b6:13:01:3f:98:70:16:25:cf:a2:fb:cd:ab:fb:
                    3e:6b:d6:74:d3:06:ac:5f:27:1b:27:5e:90:60:50:
                    a9:cd:15:08:73:42:75:68:cb:ec:f6:6d:9b:47:aa:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:4A:F5:AC:33:79:62:CB:F9:E3:96:84:E0:C8:73:F5:D8:DC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43f5a143-58a3-3be2-a768-f91884eab653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:9a:1f:81:86:be:15:e8:00:9d:60:79:fd:36:e4:7a:36:
         fb:d2:22:3a:cb:b7:5e:5f:54:1a:58:48:b8:b6:67:2b:81:30:
         6c:ae:63:9f:56:f0:a2:bd:5a:6b:03:be:17:a0:1c:24:80:c6:
         92:1e:64:2e:24:99:34:aa:20:a1:fb:de:f3:da:17:c0:42:a6:
         14:73:0d:51:9b:a8:a8:fc:91:ea:74:9c:dc:26:14:96:65:4a:
         5e:5b:e2:d4:f9:81:83:15:4b:78:36:75:a2:5e:90:88:a9:bb:
         79:3c:3e:1d:fc:49:ef:87:4a:df:1f:6e:ae:5a:75:e0:c4:36:
         0c:ff:68:47:79:dc:50:d8:f7:45:c3:ba:65:00:e7:0e:b6:cb:
         25:ff:95:33:f0:70:3a:a6:39:5f:75:63:e1:ee:c3:ce:28:04:
         78:56:55:5c:35:12:68:66:18:a2:cc:3d:b5:ff:ba:56:db:b5:
         3e:69:ef:10:ce:95:d6:80:8b:36:e6:2a:49:9c:76:1a:18:8c:
         48:00:e5:0f:57:e8:3b:ad:49:4f:62:82:f6:e3:51:55:c2:bd:
         5a:33:c1:2b:e9:b3:e8:65:80:f8:d9:a1:11:40:5e:48:d6:3a:
         2a:30:f9:4e:5d:b2:1e:d8:97:f6:3c:15:64:bb:08:c6:c6:51:
         86:40:40:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl9LYrjVwWhffDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTliYzY1N2UtMTE3Zi00NjA0LTlkYWEtNmE5YzUxYTA1ZGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN6mwWeMdg99rqOzaPQItpVbukWXN3WJWRkX
zi39fsz6C8AJ4FWLog+1gxwXQVYFdqDJY270eEfNKDYvzWYuvBkeORyd/JxRg+O4
SJC63R1y5OVw3WmrJueFdloqZyGYA55oj4OTwlCaa0+I4nveL6lcY78PTbhcKlV2
kOA4rVsVH0oBSgGr8KmBfM9RNWu1f/aE1d6UuHen0UC2HH51BBTu36H794s9HKsL
ma5likMGYBk7OXOyYQSemGQIVg2+Sa175oPlqTNrXbYxtoLCDp6lthMBP5hwFiXP
ovvNq/s+a9Z00wasXycbJ16QYFCpzRUIc0J1aMvs9m2bR6rvSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqTSvWsM3liy/njloTgyHP12NznMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDNmNWExNDMtNThhMy0z
YmUyLWE3NjgtZjkxODg0ZWFiNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbRmh+Bhr4V6ACdYHn9NuR6NvvSIjrLt15fVBpYSLi2ZyuBMGyuY59W
8KK9WmsDvhegHCSAxpIeZC4kmTSqIKH73vPaF8BCphRzDVGbqKj8kep0nNwmFJZl
Sl5b4tT5gYMVS3g2daJekIipu3k8Ph38Se+HSt8fbq5adeDENgz/aEd53FDY90XD
umUA5w62yyX/lTPwcDqmOV91Y+Huw84oBHhWVVw1EmhmGKLMPbX/ulbbtT5p7xDO
ldaAizbmKkmcdhoYjEgA5Q9X6DutSU9igvbjUVXCvVozwSvps+hlgPjZoRFAXkjW
Oiow+U5dsh7Yl/Y8FWS7CMbGUYZAQGc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:19:40 2026 by rpki-client