Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
File:                     accb8eb5-8eac-38d6-b382-61138ad997cc.roa (raw, json)
Hash identifier:          1g8x8f43Cp1JG/SoEDmAhlf68SE36yzidSmWi1s/x5c=
Subject key identifier:   11:D1:4A:82:A7:77:31:38:84:CF:E9:F9:FC:77:4E:59:45:9C:66:28
Certificate issuer:       /CN=141b1a76-b2c0-444e-a0ce-919d160454f9
Certificate serial:       010D0C9F4328584D359FDE252E1E76845671A180
Authority key identifier: 6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     29802
IP address blocks:        192.214.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:de:25:2e:1e:76:84:56:71:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141b1a76-b2c0-444e-a0ce-919d160454f9
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=7dc8f4dd-d4a5-43f2-a574-efbea0b7741d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:d4:0e:27:eb:7a:8b:4b:9b:4e:d3:93:38:
                    ac:0f:49:f8:36:44:16:7e:05:58:a2:d4:d8:1c:a8:
                    fa:1f:8c:d7:6b:7b:71:e7:0f:e7:4e:6d:32:d6:eb:
                    49:25:84:7f:ec:0e:99:eb:81:7a:eb:f0:cb:8a:d9:
                    e7:45:d2:c9:23:3f:57:9d:37:44:9b:c6:78:e7:d4:
                    69:1a:81:14:02:93:a7:41:c1:b5:05:c9:8c:ba:ab:
                    f4:29:88:9d:43:62:7a:1c:c9:74:6a:6a:2e:ec:98:
                    48:d1:32:79:b1:ff:78:f1:55:c5:a3:11:be:15:70:
                    fa:6b:0f:8c:6b:6b:6a:5f:f5:1a:78:0a:f5:66:01:
                    4b:8d:27:c0:17:5c:d9:27:75:48:73:56:cd:9d:f1:
                    8d:02:d4:3e:ca:f3:a9:f7:10:91:ac:cf:f1:6d:9d:
                    8c:6f:ac:49:59:bc:3f:07:02:95:fd:20:ce:1f:49:
                    91:95:61:fa:84:57:c1:5b:0d:40:08:a3:ac:68:9d:
                    74:5a:2d:af:90:f4:21:1e:85:d2:32:87:b1:29:7f:
                    aa:ec:e8:65:51:28:45:f0:43:be:75:1e:fc:1b:78:
                    ab:f5:dc:2c:cb:2a:ec:50:cf:bb:e7:36:62:1a:31:
                    46:94:0d:ae:c4:2d:29:e3:75:d4:85:95:44:7c:4f:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:4A:82:A7:77:31:38:84:CF:E9:F9:FC:77:4E:59:45:9C:66:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:e2:38:49:68:72:0b:69:d3:98:9d:b3:c6:f5:ae:9c:fd:
         b7:bf:3b:d5:9a:28:bc:35:7c:ee:e5:91:82:3d:bd:42:db:3f:
         44:74:dc:09:6a:cf:db:2f:32:a4:11:71:ef:34:c0:b3:4c:aa:
         13:85:8c:7f:1d:47:66:fa:14:05:23:86:53:98:6c:6a:d7:26:
         ad:aa:24:92:91:a0:78:92:03:48:47:b5:d3:ae:ee:6e:ef:b6:
         07:be:1b:d8:f2:f6:53:d4:01:df:5c:24:59:36:64:87:02:36:
         69:a9:4f:2b:03:db:28:67:0e:34:3a:71:a0:94:87:46:72:41:
         d3:56:2f:f6:16:15:6c:df:a5:ba:e9:10:58:ba:13:07:d6:39:
         9c:c0:0c:90:0c:ea:ba:01:ca:35:05:1b:75:48:73:c3:3e:2c:
         98:76:49:05:2d:47:da:ab:03:fc:11:bb:76:f2:f3:83:61:8e:
         c6:ad:c2:45:24:7e:e6:76:2a:f9:4b:15:2c:d5:90:e6:e7:3d:
         8c:92:63:8c:81:d3:d9:17:74:fb:bb:d0:94:fa:32:ff:aa:16:
         03:d0:3e:cb:0d:e2:af:6e:2e:7e:40:2a:60:82:73:68:3d:3c:
         af:85:06:07:6a:1d:40:20:0d:2c:3b:a8:0b:e6:10:76:64:b2:
         c6:70:4c:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n94lLh52hFZxoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQxYjFhNzYtYjJjMC00NDRlLWEwY2UtOTE5ZDE2MDQ1
NGY5MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
N2RjOGY0ZGQtZDRhNS00M2YyLWE1NzQtZWZiZWEwYjc3NDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJXUDifreotLm07TkzisD0n4NkQWfgVYotTY
HKj6H4zXa3tx5w/nTm0y1utJJYR/7A6Z64F66/DLitnnRdLJIz9XnTdEm8Z459Rp
GoEUApOnQcG1BcmMuqv0KYidQ2J6HMl0amou7JhI0TJ5sf948VXFoxG+FXD6aw+M
a2tqX/UaeAr1ZgFLjSfAF1zZJ3VIc1bNnfGNAtQ+yvOp9xCRrM/xbZ2Mb6xJWbw/
BwKV/SDOH0mRlWH6hFfBWw1ACKOsaJ10Wi2vkPQhHoXSMoexKX+q7OhlUShF8EO+
dR78G3ir9dwsyyrsUM+75zZiGjFGlA2uxC0p43XUhZVEfE+yUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHRSoKndzE4hM/p+fx3TllFnGYoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNDFi
MWE3Ni1iMmMwLTQ0NGUtYTBjZS05MTlkMTYwNDU0ZjkvYWNjYjhlYjUtOGVhYy0z
OGQ2LWIzODItNjExMzhhZDk5N2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTQxYjFhNzYtYjJjMC00NDRlLWEw
Y2UtOTE5ZDE2MDQ1NGY5LzE0MWIxYTc2LWIyYzAtNDQ0ZS1hMGNlLTkxOWQxNjA0
NTRmOS5jcmwwHwYDVR0jBBgwFoAUbahekoavKSuisjeaC0R914n5+0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNDFiMWE3Ni1iMmMwLTQ0NGUtYTBjZS05MTlk
MTYwNDU0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNZtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO/4jhJaHILadOYnbPG9a6c/be/O9WaKLw1fO7lkYI9vULbP0R03Alq
z9svMqQRce80wLNMqhOFjH8dR2b6FAUjhlOYbGrXJq2qJJKRoHiSA0hHtdOu7m7v
tge+G9jy9lPUAd9cJFk2ZIcCNmmpTysD2yhnDjQ6caCUh0ZyQdNWL/YWFWzfpbrp
EFi6EwfWOZzADJAM6roByjUFG3VIc8M+LJh2SQUtR9qrA/wRu3by84NhjsatwkUk
fuZ2KvlLFSzVkObnPYySY4yB09kXdPu70JT6Mv+qFgPQPssN4q9uLn5AKmCCc2g9
PK+FBgdqHUAgDSw7qAvmEHZkssZwTGI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:56 2026 by rpki-client