Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/09412a0b-663a-3ae2-9211-47ca531b0de2.roa
File:                     09412a0b-663a-3ae2-9211-47ca531b0de2.roa (raw, json)
Hash identifier:          2YGYHyEAGodSdBrdYk+kfXbiZg0pBcqxOf7OeZ7dSB0=
Subject key identifier:   03:86:F3:76:11:AD:3C:44:45:59:88:26:FF:87:52:E6:CB:CE:A5:03
Certificate issuer:       /CN=55f39aa5-00cb-4343-9f9b-d96316cb120a
Certificate serial:       010D0C9F4328584DFCAF069DBA815C0C08A7C000
Authority key identifier: EB:B2:8B:97:A2:1B:FC:8D:BB:E5:B8:1D:1B:C8:BA:03:5C:FE:40:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/09412a0b-663a-3ae2-9211-47ca531b0de2.roa
Signing time:             Thu 28 May 2026 20:17:56 +0000
ROA not before:           Thu 28 May 2026 20:17:56 +0000
ROA not after:            Wed 26 Aug 2026 20:17:56 +0000
asID:                     35857
IP address blocks:        142.99.240.0/23 maxlen: 23
                          142.99.242.0/23 maxlen: 23
                          142.99.246.0/23 maxlen: 23
                          142.99.246.0/24 maxlen: 24
                          142.99.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/55f39aa5-00cb-4343-9f9b-d96316cb120a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/55f39aa5-00cb-4343-9f9b-d96316cb120a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:af:06:9d:ba:81:5c:0c:08:a7:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f39aa5-00cb-4343-9f9b-d96316cb120a
        Validity
            Not Before: May 28 20:17:56 2026 GMT
            Not After : Aug 26 20:17:56 2026 GMT
        Subject: CN=3187d2ad-6914-4171-bcff-93bd902819ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:da:97:86:02:ef:b7:5a:68:59:d3:b0:9c:
                    74:cd:a9:75:f6:8e:4e:8d:6e:be:3d:fb:75:9d:61:
                    76:8d:0d:e5:6d:b8:2f:63:c9:c3:34:62:af:43:f8:
                    21:dc:c2:76:6f:12:3c:1a:75:ec:09:ac:43:63:75:
                    70:96:65:4a:6d:76:cc:6d:1d:c7:23:94:b2:e2:11:
                    34:55:27:08:27:a0:1b:8e:fc:b3:53:14:fc:ae:9a:
                    8a:4e:66:72:c8:c6:b7:a5:53:53:f8:08:54:a1:d7:
                    24:58:fe:5b:3e:d1:de:cc:aa:91:a0:c2:ac:a1:fc:
                    b8:9d:c3:a8:16:87:ff:01:66:be:44:54:80:ae:5e:
                    1d:6d:d6:fd:a8:3e:21:d5:17:d3:55:96:36:a1:d5:
                    41:ac:4e:e4:86:b7:87:d4:f6:fa:15:e9:1a:e9:83:
                    67:2a:e9:47:07:f2:69:a3:44:a4:ef:d1:80:1b:b6:
                    ba:ee:bf:31:f4:60:71:51:b8:a8:00:04:93:cb:78:
                    e2:17:d1:aa:58:f6:a6:fa:41:ce:57:bf:79:83:35:
                    e2:9d:26:55:d4:b4:57:d3:52:6e:ae:12:a6:e5:64:
                    cb:4f:f8:51:52:1f:fd:a3:40:61:8b:d1:c2:70:c8:
                    6d:9c:a1:3f:31:41:9c:19:f1:fc:d5:a9:00:e9:70:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:86:F3:76:11:AD:3C:44:45:59:88:26:FF:87:52:E6:CB:CE:A5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/09412a0b-663a-3ae2-9211-47ca531b0de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a/55f39aa5-00cb-4343-9f9b-d96316cb120a.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B2:8B:97:A2:1B:FC:8D:BB:E5:B8:1D:1B:C8:BA:03:5C:FE:40:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55f39aa5-00cb-4343-9f9b-d96316cb120a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.99.240.0/22
                  142.99.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:65:08:a9:b4:07:8d:5f:c1:2c:a1:16:39:a4:7a:47:69:d6:
         19:46:2a:fb:9a:3a:2c:7c:05:a2:cf:87:2f:db:da:ee:76:39:
         d9:09:c4:58:55:a0:4a:99:79:c2:27:9b:e5:31:98:eb:bd:ba:
         f2:15:b1:e1:85:fc:a7:58:da:3f:e4:4b:2e:30:5c:70:4d:3e:
         73:7a:56:16:55:c9:f1:78:11:57:96:ce:a7:77:b8:c2:07:18:
         68:93:c3:e6:71:28:7d:9f:f9:aa:9f:f5:37:b0:e8:a3:3e:f7:
         cd:a0:ee:92:a9:c1:9f:b2:bc:3f:19:c7:93:6d:b2:5c:85:d3:
         a3:fb:72:8b:ea:dd:bf:a7:00:f4:78:2e:61:3d:a5:6d:32:83:
         bd:2f:93:c2:62:5d:06:b6:60:20:83:ca:3b:08:b2:3a:83:8f:
         67:a9:de:69:ce:26:c5:12:a2:13:f6:ea:a6:fc:20:35:15:fb:
         f6:cb:b9:02:ec:2c:29:79:dc:05:0d:2f:69:e6:17:f6:96:36:
         a9:c0:92:fb:bd:97:c9:38:61:e6:24:bd:c0:50:dd:4f:00:d5:
         8a:94:51:21:34:f5:34:6b:51:3c:0a:84:84:dd:ed:ee:79:81:
         0d:40:4f:6a:63:33:52:6d:f3:fc:03:a8:f9:0f:d3:5d:dc:4e:
         a7:64:09:c1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE38rwaduoFcDAinwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVmMzlhYTUtMDBjYi00MzQzLTlmOWItZDk2MzE2Y2Ix
MjBhMB4XDTI2MDUyODIwMTc1NloXDTI2MDgyNjIwMTc1NlowLzEtMCsGA1UEAxMk
MzE4N2QyYWQtNjkxNC00MTcxLWJjZmYtOTNiZDkwMjgxOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jal4YC77daaFnTsJx0zal19o5OjW6+Pft1
nWF2jQ3lbbgvY8nDNGKvQ/gh3MJ2bxI8GnXsCaxDY3VwlmVKbXbMbR3HI5Sy4hE0
VScIJ6AbjvyzUxT8rpqKTmZyyMa3pVNT+AhUodckWP5bPtHezKqRoMKsofy4ncOo
Fof/AWa+RFSArl4dbdb9qD4h1RfTVZY2odVBrE7khreH1Pb6Feka6YNnKulHB/Jp
o0Sk79GAG7a67r8x9GBxUbioAASTy3jiF9GqWPam+kHOV795gzXinSZV1LRX01Ju
rhKm5WTLT/hRUh/9o0Bhi9HCcMhtnKE/MUGcGfH81akA6XBUuwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAOG83YRrTxERVmIJv+HUubLzqUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NWYz
OWFhNS0wMGNiLTQzNDMtOWY5Yi1kOTYzMTZjYjEyMGEvMDk0MTJhMGItNjYzYS0z
YWUyLTkyMTEtNDdjYTUzMWIwZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTVmMzlhYTUtMDBjYi00MzQzLTlm
OWItZDk2MzE2Y2IxMjBhLzU1ZjM5YWE1LTAwY2ItNDM0My05ZjliLWQ5NjMxNmNi
MTIwYS5jcmwwHwYDVR0jBBgwFoAU67KLl6Ib/I275bgdG8i6A1z+QHIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81NWYzOWFhNS0wMGNiLTQzNDMtOWY5Yi1kOTYz
MTZjYjEyMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjmPwAwQB
jmP2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFhlCKm0B41fwSyhFjmkekdp1hlGKvuaOix8BaLPhy/b2u52
OdkJxFhVoEqZecInm+UxmOu9uvIVseGF/KdY2j/kSy4wXHBNPnN6VhZVyfF4EVeW
zqd3uMIHGGiTw+ZxKH2f+aqf9Tew6KM+982g7pKpwZ+yvD8Zx5NtslyF06P7covq
3b+nAPR4LmE9pW0yg70vk8JiXQa2YCCDyjsIsjqDj2ep3mnOJsUSohP26qb8IDUV
+/bLuQLsLCl53AUNL2nmF/aWNqnAkvu9l8k4YeYkvcBQ3U8A1YqUUSE09TRrUTwK
hITd7e55gQ1AT2pjM1Jt8/wDqPkP013cTqdkCcE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:47 2026 by rpki-client