Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa
File:                     9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa (raw, json)
Hash identifier:          Aqh85F1gyza0mx0SupoIqfqVuMWuhAqYy8iLaieF6g8=
Subject key identifier:   17:49:1E:99:41:A6:5A:F3:BA:AC:5D:DD:1D:09:E9:22:DB:FD:DE:13
Certificate issuer:       /CN=b3f53674-93ef-439e-9019-e6308b1c1738
Certificate serial:       010D0C9F4328584E5D149EBA67844366DEA560A0
Authority key identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     397156
IP address blocks:        141.193.239.0/24 maxlen: 24
                          148.59.73.0/24 maxlen: 24
                          216.116.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:9e:ba:67:84:43:66:de:a5:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f53674-93ef-439e-9019-e6308b1c1738
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=449a7672-84bc-4402-9453-e20c0abe90a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:9e:7a:de:82:a1:31:28:d0:7a:c8:64:e2:
                    ce:ce:3b:ad:7f:75:cf:05:db:02:72:58:41:16:cc:
                    ca:df:96:6d:67:89:8a:25:d4:f5:dc:ac:a2:39:18:
                    66:19:92:12:af:92:99:d7:fd:8c:45:54:b4:74:08:
                    1f:6f:6f:aa:05:d0:f0:3f:71:da:03:d1:b3:99:49:
                    89:30:3a:ff:0e:d9:be:73:cc:63:5e:14:7e:83:96:
                    82:bd:e1:c2:95:59:9c:f3:5a:a5:a1:de:cd:d8:64:
                    a0:32:62:4e:b9:e8:db:37:e1:bd:07:46:60:f9:9b:
                    2c:37:a6:a0:d2:2d:3b:0b:13:df:de:46:a2:c5:ca:
                    41:de:70:a8:af:1d:d8:50:19:4c:a8:aa:b0:e3:cc:
                    f8:a8:a2:58:ac:95:8f:77:7c:6c:d2:ff:17:52:d5:
                    95:a8:8c:c3:d2:5d:83:f0:65:53:17:5e:94:f2:6a:
                    93:58:94:09:e7:6c:28:01:60:85:75:33:fc:7e:e5:
                    e7:60:7b:fd:8c:09:e6:61:66:2d:4a:c4:a0:33:aa:
                    39:72:06:11:ae:af:ac:74:c9:23:9f:2c:91:2f:c1:
                    9b:7d:36:9f:54:e8:ac:5a:f7:bc:c6:0f:2c:3d:41:
                    8d:3f:e4:9a:57:0d:bf:2f:5a:86:a7:b4:7d:c0:e2:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:49:1E:99:41:A6:5A:F3:BA:AC:5D:DD:1D:09:E9:22:DB:FD:DE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl

            X509v3 Authority Key Identifier:
                keyid:16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.239.0/24
                  148.59.73.0/24
                  216.116.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:15:37:f9:41:a3:95:38:8c:46:78:27:76:fa:1e:6e:8e:ba:
         aa:51:fe:84:6f:57:14:33:ce:ed:02:d0:4b:eb:7d:48:c4:d2:
         00:9f:cb:0f:c0:0c:dd:8f:2c:47:06:e4:00:d3:8d:d1:ff:b6:
         c0:18:4e:c8:9e:25:3a:7e:b3:f1:26:04:27:8b:40:ab:98:41:
         19:c0:aa:35:33:1f:b6:ba:ef:8b:f9:2e:65:0e:58:92:1f:3a:
         5d:35:c5:95:ab:c7:7d:6b:f1:d2:8c:69:37:d6:41:ff:af:3e:
         64:0a:e6:f4:34:97:22:c1:b9:63:3a:d4:b9:bc:64:eb:82:b0:
         b3:d6:f1:47:b1:b6:58:f2:e0:97:95:27:c2:df:95:cc:c7:c3:
         9a:e9:9e:93:63:f2:ae:e8:8c:74:0d:c5:4a:58:89:cf:3d:0c:
         b7:77:b7:4a:39:f4:cb:7e:73:0b:4c:3a:7e:a4:1a:bc:a2:9e:
         a5:ed:08:7d:d6:bb:70:d6:b0:a0:d1:bb:0c:22:25:25:ba:8e:
         b3:b9:61:61:f5:74:c5:f6:9c:a5:28:49:83:94:4a:46:10:45:
         5b:3e:71:bd:84:d1:c6:2d:a4:4e:56:18:b1:63:b7:d9:64:b0:
         43:ab:e3:26:65:d6:eb:1a:dd:83:02:ed:f0:69:fd:af:98:bb:
         54:4b:77:c4
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5dFJ66Z4RDZt6lYKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTM2NzQtOTNlZi00MzllLTkwMTktZTYzMDhiMWMx
NzM4MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
NDQ5YTc2NzItODRiYy00NDAyLTk0NTMtZTIwYzBhYmU5MGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BKeet6CoTEo0HrIZOLOzjutf3XPBdsCclhB
FszK35ZtZ4mKJdT13KyiORhmGZISr5KZ1/2MRVS0dAgfb2+qBdDwP3HaA9GzmUmJ
MDr/Dtm+c8xjXhR+g5aCveHClVmc81qlod7N2GSgMmJOuejbN+G9B0Zg+ZssN6ag
0i07CxPf3kaixcpB3nCorx3YUBlMqKqw48z4qKJYrJWPd3xs0v8XUtWVqIzD0l2D
8GVTF16U8mqTWJQJ52woAWCFdTP8fuXnYHv9jAnmYWYtSsSgM6o5cgYRrq+sdMkj
nyyRL8GbfTafVOisWve8xg8sPUGNP+SaVw2/L1qGp7R9wOK2lwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBdJHplBplrzuqxd3R0J6SLb/d4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1
MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIxYzE3MzgvOWRlMThmNmYtY2RkZC0z
ODg4LWFhM2YtNmUwZTdjMmYzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjNmNTM2NzQtOTNlZi00MzllLTkw
MTktZTYzMDhiMWMxNzM4L2IzZjUzNjc0LTkzZWYtNDM5ZS05MDE5LWU2MzA4YjFj
MTczOC5jcmwwHwYDVR0jBBgwFoAUFkKd+N+5lk6lpBTmtkJxrpv/LMYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMw
OGIxYzE3MzguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjcHvAwQA
lDtJAwQA2HSGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACQVN/lBo5U4jEZ4J3b6Hm6OuqpR/oRvVxQzzu0C
0EvrfUjE0gCfyw/ADN2PLEcG5ADTjdH/tsAYTsieJTp+s/EmBCeLQKuYQRnAqjUz
H7a674v5LmUOWJIfOl01xZWrx31r8dKMaTfWQf+vPmQK5vQ0lyLBuWM61Lm8ZOuC
sLPW8Uextljy4JeVJ8LflczHw5rpnpNj8q7ojHQNxUpYic89DLd3t0o59Mt+cwtM
On6kGryinqXtCH3Wu3DWsKDRuwwiJSW6jrO5YWH1dMX2nKUoSYOUSkYQRVs+cb2E
0cYtpE5WGLFjt9lksEOr4yZl1usa3YMC7fBp/a+Yu1RLd8Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:37 2026 by rpki-client