Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa
File:                     486c762d-468b-3683-b187-79e803c0b3fb.roa (raw, json)
Hash identifier:          yIKwOL6lePf+PhiDocgMAKRv7lWR54SYj7OhEmentkU=
Subject key identifier:   6B:B4:FC:8A:B4:5A:B5:C4:83:DB:74:F8:7E:5B:79:65:38:14:55:10
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F46A7F746256D573940197850
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     577
IP address blocks:        142.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:f7:46:25:6d:57:39:40:19:78:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=e1cc933e-c273-4640-9331-d1f5fae859d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:2f:84:d7:23:85:af:5a:fb:57:7d:e8:43:
                    07:39:14:9d:96:b6:f8:f0:34:04:af:2c:c6:db:84:
                    55:86:a9:53:5e:d1:b2:32:ff:ee:56:89:f7:77:08:
                    cf:01:18:74:44:22:8d:01:c2:3b:3c:ec:92:1c:eb:
                    e2:f5:12:ed:95:bb:3b:09:eb:34:21:31:d6:51:68:
                    f2:41:2e:c8:41:f9:16:75:a9:46:7c:6c:e5:4c:14:
                    93:74:e4:f9:93:c6:8f:0a:3c:47:e2:56:7c:66:8f:
                    9d:3f:51:81:a9:5e:0c:89:15:05:13:1b:e4:3b:83:
                    55:ca:59:fd:d7:5b:5e:56:00:d2:3f:fd:0a:33:6b:
                    f7:88:09:86:c3:2d:7e:41:a2:f4:6b:02:fc:c9:47:
                    b0:3c:20:4e:92:af:8a:f4:1b:c5:e6:2f:e0:e7:94:
                    db:af:27:5b:39:0e:27:bc:6f:2f:31:af:df:69:9b:
                    da:5b:b1:d3:da:97:9b:bd:5e:b0:7f:2f:32:46:e6:
                    b3:0c:58:2f:96:f4:f6:93:1c:d7:13:2f:a0:0d:46:
                    e2:91:15:b2:e4:ef:b8:e2:b8:2c:0a:e6:b5:d3:0f:
                    24:37:c7:bd:e3:11:54:64:ee:37:3c:1f:a1:9d:4a:
                    f7:ae:39:a6:de:e8:7f:79:49:b8:a8:d1:a9:82:68:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:FC:8A:B4:5A:B5:C4:83:DB:74:F8:7E:5B:79:65:38:14:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:6d:c2:6e:c3:0d:09:64:41:11:88:fc:a5:1d:a4:32:b1:
         0a:c6:24:52:92:20:e5:22:cf:e8:8d:f2:bb:68:c6:b5:8f:ee:
         34:f5:ce:bc:48:72:69:56:f3:8d:3e:80:78:79:e6:69:bd:8d:
         c2:80:26:3f:d1:f2:1a:40:15:9b:8b:45:6f:e0:66:b2:3e:e8:
         d1:37:db:1f:70:98:f3:35:be:a0:eb:ad:ff:a3:62:f4:23:16:
         3e:67:ac:5e:50:d2:22:c5:32:09:1c:8b:8d:4c:0a:65:07:c9:
         c7:52:58:86:40:4f:70:04:79:87:37:75:3a:73:d5:98:d4:31:
         cb:4b:eb:c0:f0:a4:36:5a:bb:c5:3d:8b:02:8e:44:4a:5c:cc:
         c6:bd:1a:72:3d:ce:0f:be:e5:1f:b7:56:19:ae:7f:15:0e:7e:
         63:0a:d4:7d:8a:a8:2d:df:f9:90:58:0a:c4:85:4d:7b:8d:6a:
         c8:c6:7b:b9:d4:a5:e9:57:6d:81:7f:25:06:69:e2:c0:ff:9f:
         c1:19:e2:2b:45:4e:a2:1b:ce:e7:2a:0f:54:81:08:85:f7:5f:
         8e:6f:fd:10:28:4b:2f:28:df:d2:74:91:1b:77:e9:23:5e:85:
         06:05:49:ff:e2:fb:8d:e9:22:70:d3:10:bd:28:54:91:9d:90:
         44:8c:63:63
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Gp/dGJW1XOUAZeFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTFjYzkzM2UtYzI3My00NjQwLTkzMzEtZDFmNWZhZTg1OWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKEvhNcjha9a+1d96EMHORSdlrb48DQEryzG
24RVhqlTXtGyMv/uVon3dwjPARh0RCKNAcI7POySHOvi9RLtlbs7Ces0ITHWUWjy
QS7IQfkWdalGfGzlTBSTdOT5k8aPCjxH4lZ8Zo+dP1GBqV4MiRUFExvkO4NVyln9
11teVgDSP/0KM2v3iAmGwy1+QaL0awL8yUewPCBOkq+K9BvF5i/g55TbrydbOQ4n
vG8vMa/faZvaW7HT2pebvV6wfy8yRuazDFgvlvT2kxzXEy+gDUbikRWy5O+44rgs
Cua10w8kN8e94xFUZO43PB+hnUr3rjmm3uh/eUm4qNGpgmhm7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGu0/Iq0WrXEg9t0+H5beWU4FFUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDg2Yzc2MmQtNDY4Yi0z
NjgzLWIxODctNzllODAzYzBiM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACbttwm7DDQlkQRGI/KUdpDKxCsYkUpIg5SLP6I3yu2jGtY/uNPXOvEhy
aVbzjT6AeHnmab2NwoAmP9HyGkAVm4tFb+Bmsj7o0TfbH3CY8zW+oOut/6Ni9CMW
PmesXlDSIsUyCRyLjUwKZQfJx1JYhkBPcAR5hzd1OnPVmNQxy0vrwPCkNlq7xT2L
Ao5ESlzMxr0acj3OD77lH7dWGa5/FQ5+YwrUfYqoLd/5kFgKxIVNe41qyMZ7udSl
6VdtgX8lBmniwP+fwRniK0VOohvO5yoPVIEIhfdfjm/9EChLLyjf0nSRG3fpI16F
BgVJ/+L7jekicNMQvShUkZ2QRIxjYw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:15:26 2026 by rpki-client