Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa
File:                     da9882a5-4caf-3e30-8e9c-394572b74fee.roa (raw, json)
Hash identifier:          XF41qgVqVuauYwIWe/w6kZ6CLx8j8kNMgiqqfgHYkYI=
Subject key identifier:   D4:80:23:57:DE:85:43:AE:DF:F1:D2:05:2F:3E:26:D4:C1:2A:C3:19
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584E37645ED23924E9457866E100
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     14114
IP address blocks:        169.145.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:5e:d2:39:24:e9:45:78:66:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=b09e1044-ecef-4b9f-a22a-52b5f268e97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:37:94:8d:5c:46:53:12:53:9f:89:22:89:
                    52:4d:e0:e6:ad:7d:23:c5:1f:fc:23:c7:74:0b:40:
                    07:46:e5:3e:e1:13:09:c8:88:98:fd:28:3e:06:35:
                    de:8d:b8:af:ff:54:1c:93:38:b5:66:e8:4f:4b:e6:
                    74:54:55:40:77:7e:79:43:cb:ab:57:43:92:9a:9c:
                    71:f7:d2:e6:ce:e0:01:d3:66:35:00:ca:93:e0:b1:
                    ac:44:24:53:b2:c3:c4:51:ee:11:71:eb:43:8b:bf:
                    9f:a6:0c:7f:f8:c6:95:c9:b4:86:38:96:82:ae:38:
                    a3:f4:e6:74:1a:89:9b:a5:7a:cc:70:0a:95:4f:bd:
                    34:eb:71:04:da:cf:70:74:b0:19:f8:51:8b:21:c8:
                    2b:c5:e3:42:8e:61:01:12:23:07:f3:0e:29:c6:7f:
                    67:dc:d3:ac:0d:d2:f8:cd:8f:d7:4d:04:ae:c4:44:
                    b4:9f:f2:80:01:be:23:b6:e0:80:45:b7:8a:3c:99:
                    03:64:7c:86:fd:72:c7:14:b9:85:59:83:09:e1:42:
                    51:ef:7a:a4:a8:e5:3f:20:1f:67:1a:21:62:f0:cf:
                    19:c3:e6:80:4a:ab:7d:dd:de:f1:cd:cf:af:28:49:
                    a7:46:b7:28:d5:ee:a6:87:05:b6:84:42:a6:d8:a9:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:23:57:DE:85:43:AE:DF:F1:D2:05:2F:3E:26:D4:C1:2A:C3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:2d:54:50:19:8b:55:70:f4:f5:0c:10:f6:79:4b:48:aa:
         76:59:16:fe:ff:ba:3c:84:6c:3c:a0:63:90:7a:12:69:b2:ba:
         1c:be:94:0d:2d:bd:61:a7:c9:71:2d:c8:a2:c0:b4:8d:ac:6c:
         53:de:5d:26:2a:b1:87:c4:fd:26:0d:26:e9:b0:6f:3b:42:30:
         5e:6c:72:64:70:40:1f:0c:f6:ff:50:f7:7c:b5:b9:b8:23:48:
         a8:40:d7:15:05:bf:51:3b:1d:f2:29:71:2c:21:2c:64:ce:be:
         b9:29:ef:61:be:6f:a4:42:d8:e1:e9:6c:b2:5a:54:d4:51:05:
         d6:d0:d2:89:e6:8f:0e:c4:ee:85:db:c4:f4:f1:b0:a0:db:2b:
         d3:3e:91:70:7e:f8:84:ba:c6:2a:bc:35:2c:48:5a:3b:77:bb:
         4e:e8:1d:31:3b:d5:f3:3b:0d:83:62:96:da:4f:cf:a4:9d:83:
         fb:09:65:40:a4:85:79:49:ae:1a:a5:a2:fe:03:77:33:9d:24:
         c6:98:6e:b6:39:c6:1d:47:47:a6:bd:5f:65:35:df:b9:3a:20:
         8d:84:e0:ed:18:ed:d5:98:16:c9:54:8b:ff:05:1e:5d:b4:32:
         89:18:7a:38:ad:7d:e6:2c:1c:d9:23:dd:09:7a:05:c1:e3:f6:
         ac:13:88:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZF7SOSTpRXhm4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
YjA5ZTEwNDQtZWNlZi00YjlmLWEyMmEtNTJiNWYyNjhlOTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2I3lI1cRlMSU5+JIolSTeDmrX0jxR/8I8d0
C0AHRuU+4RMJyIiY/Sg+BjXejbiv/1Qckzi1ZuhPS+Z0VFVAd355Q8urV0OSmpxx
99LmzuAB02Y1AMqT4LGsRCRTssPEUe4RcetDi7+fpgx/+MaVybSGOJaCrjij9OZ0
GombpXrMcAqVT70063EE2s9wdLAZ+FGLIcgrxeNCjmEBEiMH8w4pxn9n3NOsDdL4
zY/XTQSuxES0n/KAAb4jtuCARbeKPJkDZHyG/XLHFLmFWYMJ4UJR73qkqOU/IB9n
GiFi8M8Zw+aASqt93d7xzc+vKEmnRrco1e6mhwW2hEKm2Kk+UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSAI1fehUOu3/HSBS8+JtTBKsMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvZGE5ODgyYTUtNGNhZi0z
ZTMwLThlOWMtMzk0NTcyYjc0ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZGOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHvLVRQGYtVcPT1DBD2eUtIqnZZFv7/ujyEbDygY5B6Emmyuhy+lA0t
vWGnyXEtyKLAtI2sbFPeXSYqsYfE/SYNJumwbztCMF5scmRwQB8M9v9Q93y1ubgj
SKhA1xUFv1E7HfIpcSwhLGTOvrkp72G+b6RC2OHpbLJaVNRRBdbQ0onmjw7E7oXb
xPTxsKDbK9M+kXB++IS6xiq8NSxIWjt3u07oHTE71fM7DYNiltpPz6Sdg/sJZUCk
hXlJrhqlov4DdzOdJMaYbrY5xh1HR6a9X2U137k6II2E4O0Y7dWYFslUi/8FHl20
MokYejitfeYsHNkj3Ql6BcHj9qwTiJY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:32 2026 by rpki-client