Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
File:                     bec70105-240d-3338-ac1a-1f6dd61ef242.roa (raw, json)
Hash identifier:          LkFK9w6s0h1bYb1y8OHDbM46wwuc7Kh2J+XldxbErEs=
Subject key identifier:   32:A8:E2:FA:DB:25:B0:0B:8F:D7:D2:B0:12:B6:4E:FF:6F:2D:36:7F
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584DB0758D847B93084D4EE8D600
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     395222
IP address blocks:        142.249.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8d:84:7b:93:08:4d:4e:e8:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=13954513-63a8-4dd8-a236-1bfcb35d0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:ac:bd:46:71:a8:b3:7f:45:aa:cc:34:6c:
                    96:3e:da:d4:0f:7a:36:ff:e8:01:82:9a:bc:8f:1b:
                    ce:c6:1c:60:ab:f7:67:7e:2a:48:71:49:78:d3:ee:
                    27:94:68:73:f5:09:69:6a:dc:ab:f8:c8:1c:f4:73:
                    41:12:7d:46:97:6b:37:26:cf:a3:ac:49:a7:62:99:
                    fb:7f:f6:ca:1e:2e:18:56:ec:6b:20:74:ce:5e:81:
                    01:52:91:2c:7d:31:33:a7:9c:a3:4c:75:58:31:da:
                    3b:58:86:9b:9c:6a:bd:8a:d0:36:10:51:36:72:df:
                    fc:8d:33:d4:77:b5:a0:57:df:54:f1:09:b0:26:62:
                    ca:88:22:09:6f:f8:c6:ff:3a:65:8b:df:d5:a6:c9:
                    0e:7f:5a:f0:30:1d:85:6a:48:04:ee:1f:f1:cc:fa:
                    74:9c:26:ca:0e:4a:17:94:06:0a:df:97:c9:10:6c:
                    ef:b9:ee:7c:ed:2a:0b:3e:b0:5a:4a:b2:92:96:bb:
                    cc:ae:c3:d3:9f:6b:31:4f:df:b3:ed:8c:6d:dd:6f:
                    e9:5a:19:fd:44:97:d0:33:03:aa:50:b9:45:b4:bb:
                    11:20:28:03:24:0b:64:fb:ab:d9:f1:60:b8:7a:10:
                    99:c2:fa:53:cc:fa:46:22:e1:9d:0b:0b:cd:03:07:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:E2:FA:DB:25:B0:0B:8F:D7:D2:B0:12:B6:4E:FF:6F:2D:36:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:28:ce:db:06:17:22:49:c7:6a:0d:45:40:80:88:22:a9:2a:
         64:50:98:69:84:7a:62:4d:95:08:fb:cd:cf:f9:7b:50:57:f9:
         b0:0c:bc:07:4c:c5:f2:7a:67:01:7c:b6:e9:cc:15:93:c6:1b:
         87:a0:fc:11:8b:83:02:9a:81:ab:1f:7d:4a:47:d3:5c:2b:1b:
         ed:52:b7:f7:f5:d6:95:6f:4c:a9:40:e8:a5:a8:86:a9:38:13:
         e9:b8:6b:a1:38:8e:1b:7d:8f:85:27:21:e2:e8:2a:c9:83:dd:
         6c:c6:d8:f8:1d:9e:85:37:ec:44:28:6c:27:9e:32:03:16:5c:
         22:48:43:c2:9c:ca:82:27:42:c6:e5:cb:43:c0:a2:83:5f:5e:
         c9:5b:e2:f4:7b:45:a2:ef:aa:f1:8f:9e:bb:13:56:c6:de:bf:
         3f:16:b3:69:a2:8c:1f:94:f3:55:a4:4e:78:0e:b3:c4:fe:ff:
         18:6d:ba:ad:7b:36:b3:b1:dd:bc:c3:9a:0e:da:6a:b5:00:5e:
         92:94:bc:93:04:16:e8:67:56:d1:f1:d4:41:70:80:77:24:18:
         35:a8:df:3b:37:4d:3d:0e:d4:a2:33:79:07:78:4d:32:62:39:
         84:25:78:21:ee:5e:98:cd:c3:53:1c:86:e0:dd:06:14:10:37:
         27:7c:f9:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdY2Ee5MITU7o1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4
Yjg0MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
MTM5NTQ1MTMtNjNhOC00ZGQ4LWEyMzYtMWJmY2IzNWQwMTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgusvUZxqLN/RarMNGyWPtrUD3o2/+gBgpq8
jxvOxhxgq/dnfipIcUl40+4nlGhz9Qlpatyr+Mgc9HNBEn1Gl2s3Js+jrEmnYpn7
f/bKHi4YVuxrIHTOXoEBUpEsfTEzp5yjTHVYMdo7WIabnGq9itA2EFE2ct/8jTPU
d7WgV99U8QmwJmLKiCIJb/jG/zpli9/VpskOf1rwMB2FakgE7h/xzPp0nCbKDkoX
lAYK35fJEGzvue587SoLPrBaSrKSlrvMrsPTn2sxT9+z7Yxt3W/pWhn9RJfQMwOq
ULlFtLsRICgDJAtk+6vZ8WC4ehCZwvpTzPpGIuGdCwvNAwdH9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKo4vrbJbALj9fSsBK2Tv9vLTZ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk
MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYmVjNzAxMDUtMjQwZC0z
MzM4LWFjMWEtMWY2ZGQ2MWVmMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy
ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4
OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw
OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgoztsGFyJJx2oNRUCAiCKpKmRQmGmEemJNlQj7zc/5e1BX+bAMvAdM
xfJ6ZwF8tunMFZPGG4eg/BGLgwKagasffUpH01wrG+1St/f11pVvTKlA6KWohqk4
E+m4a6E4jht9j4UnIeLoKsmD3WzG2PgdnoU37EQobCeeMgMWXCJIQ8KcyoInQsbl
y0PAooNfXslb4vR7RaLvqvGPnrsTVsbevz8Ws2mijB+U81WkTngOs8T+/xhtuq17
NrOx3bzDmg7aarUAXpKUvJMEFuhnVtHx1EFwgHckGDWo3zs3TT0O1KIzeQd4TTJi
OYQleCHuXpjNw1MchuDdBhQQNyd8+Sc=
-----END CERTIFICATE-----
Generated at Wed May 13 14:30:49 2026 by rpki-client