Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa
File:                     617324fd-eefc-3037-b0c3-cbee81d5849a.roa (raw, json)
Hash identifier:          CQ04Gow86q7J5mfPsnuc2nKP/jbcX3+JY5rtsNZ6p+M=
Subject key identifier:   7F:1F:9E:DB:43:02:71:CC:57:F8:A4:1C:B2:C8:A2:8A:1A:CD:DE:D7
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584D44FA3B380E1CB798EA49B640
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        142.54.38.0/24 maxlen: 24
                          142.54.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3b:38:0e:1c:b7:98:ea:49:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=93e38a99-6bec-46c7-9056-12533a494e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:38:39:5c:00:e1:da:a3:ea:70:a6:85:09:
                    81:d0:79:77:e4:33:44:95:61:2e:c7:27:5b:a3:54:
                    6e:60:0c:be:ae:9a:11:63:69:ff:04:fb:da:e1:56:
                    a6:49:c7:62:9e:ca:0b:f8:cf:c8:a4:27:6b:43:53:
                    38:52:5c:b3:30:ab:76:43:fe:c2:7d:96:88:8d:d9:
                    4a:af:75:d4:d1:10:e2:82:f9:32:25:d5:ea:dc:27:
                    4e:60:d2:fa:93:06:4c:5f:17:00:56:21:d0:de:c4:
                    de:ff:3d:d1:24:2c:86:5b:36:be:1d:2b:a8:29:e9:
                    01:6c:00:cc:f3:68:bd:0e:70:91:a5:e3:98:63:00:
                    6b:f3:42:30:a4:60:55:6c:7a:5c:9b:7c:2d:6a:4e:
                    73:5f:a7:fc:28:f6:33:0e:1b:d3:ec:f8:fd:70:e0:
                    cd:7d:ff:d8:ed:ca:2d:5f:f9:08:41:65:23:eb:82:
                    44:ac:a3:f6:b5:e6:c5:84:c7:eb:21:3f:b7:ce:e2:
                    c3:bc:c4:c5:a8:83:dc:39:33:55:b9:79:37:d6:ba:
                    c0:74:44:6f:b9:c7:1d:4e:1b:18:6a:ba:79:74:f7:
                    c8:a1:36:a8:03:05:8f:49:86:14:df:be:ac:77:6b:
                    41:d3:53:6d:80:cb:ac:fb:1f:d2:c0:7c:2c:e8:22:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:9E:DB:43:02:71:CC:57:F8:A4:1C:B2:C8:A2:8A:1A:CD:DE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:90:14:bf:45:37:78:78:56:b7:66:97:c9:68:18:0d:80:f6:
         54:f4:f4:88:90:fe:01:ae:8b:91:5f:6f:65:e3:be:7c:66:e3:
         12:5b:30:d7:7c:30:99:db:32:32:43:3c:51:67:6c:92:65:ba:
         6f:62:fb:92:87:99:28:58:c2:64:3d:e0:1d:f4:29:94:0f:8f:
         a6:d7:a8:10:41:e8:08:6f:e6:03:ff:0b:43:8b:a3:b9:8b:b2:
         1a:a3:b1:1d:d3:33:6a:20:ce:88:d7:1e:ba:db:46:58:a5:4b:
         cf:d5:cf:37:3f:13:93:58:f7:18:38:6e:28:8d:a1:26:19:d4:
         de:bf:2a:e6:32:22:ee:48:c0:3c:e9:95:9f:5d:81:9a:43:a0:
         c3:a4:61:24:99:54:ff:e6:29:40:16:90:c2:16:61:b0:18:83:
         d2:df:a1:06:b2:88:04:22:a1:59:ee:c3:49:43:16:bd:04:69:
         b1:d7:45:81:1c:12:44:aa:7b:5f:1b:c9:e0:5a:3e:f6:7a:fd:
         df:d3:07:fa:7d:25:95:af:bb:88:74:78:cd:58:52:24:ae:f9:
         1b:01:3a:c0:57:3e:61:74:16:69:f0:db:a2:23:99:26:42:ea:
         e0:cc:86:d5:2f:48:e8:41:bf:82:a6:cb:0b:82:21:47:56:70:
         47:98:6f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+js4Dhy3mOpJtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx
MTQ0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
OTNlMzhhOTktNmJlYy00NmM3LTkwNTYtMTI1MzNhNDk0ZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbw4OVwA4dqj6nCmhQmB0Hl35DNElWEuxydb
o1RuYAy+rpoRY2n/BPva4VamScdinsoL+M/IpCdrQ1M4UlyzMKt2Q/7CfZaIjdlK
r3XU0RDigvkyJdXq3CdOYNL6kwZMXxcAViHQ3sTe/z3RJCyGWza+HSuoKekBbADM
82i9DnCRpeOYYwBr80IwpGBVbHpcm3wtak5zX6f8KPYzDhvT7Pj9cODNff/Y7cot
X/kIQWUj64JErKP2tebFhMfrIT+3zuLDvMTFqIPcOTNVuXk31rrAdERvuccdThsY
arp5dPfIoTaoAwWPSYYU376sd2tB01NtgMus+x/SwHws6CLsCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8fnttDAnHMV/ikHLLIoooazd7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj
YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvNjE3MzI0ZmQtZWVmYy0z
MDM3LWIwYzMtY2JlZTgxZDU4NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx
NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz
MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl
OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjjYmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKQFL9FN3h4Vrdml8loGA2A9lT09IiQ/gGui5Ffb2Xjvnxm4xJbMNd8
MJnbMjJDPFFnbJJlum9i+5KHmShYwmQ94B30KZQPj6bXqBBB6Ahv5gP/C0OLo7mL
shqjsR3TM2ogzojXHrrbRlilS8/Vzzc/E5NY9xg4biiNoSYZ1N6/KuYyIu5IwDzp
lZ9dgZpDoMOkYSSZVP/mKUAWkMIWYbAYg9LfoQayiAQioVnuw0lDFr0EabHXRYEc
EkSqe18byeBaPvZ6/d/TB/p9JZWvu4h0eM1YUiSu+RsBOsBXPmF0Fmnw26IjmSZC
6uDMhtUvSOhBv4KmywuCIUdWcEeYbwI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:30 2026 by rpki-client