Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/b4bf3030-ae2b-3d07-bf19-6006a4d75a64.roa
File:                     b4bf3030-ae2b-3d07-bf19-6006a4d75a64.roa (raw, json)
Hash identifier:          byijoeEpQES84yOFabMkpwhwR9IqOeBiXq+8mlBAB5o=
Subject key identifier:   26:4E:F3:94:1D:9D:31:4C:56:02:5C:BB:27:91:16:E5:43:F6:61:CD
Certificate issuer:       /CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
Certificate serial:       010D0C9F4328584F9D331213DFDC28CFC47F34A0
Authority key identifier: 9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/b4bf3030-ae2b-3d07-bf19-6006a4d75a64.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     400370
IP address blocks:        142.228.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:12:13:df:dc:28:cf:c4:7f:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=18ed4786-d9fc-4f8b-ad9b-6f7e9f7cba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4a:79:7c:79:d8:d6:39:3a:e5:04:b4:87:43:
                    62:a6:65:f5:5e:aa:68:00:1a:df:67:00:0c:86:09:
                    8e:4c:e9:cf:c9:fa:06:3a:ef:2f:b6:b2:30:47:09:
                    b7:f2:07:f9:32:86:68:6f:f0:ce:e7:b1:1f:16:53:
                    4b:64:a2:c1:68:77:ef:c7:22:c2:1f:30:cb:0a:cc:
                    d6:da:ce:07:62:9f:88:42:6c:44:c4:75:b7:96:6b:
                    6c:9a:48:54:ed:e8:ea:93:74:ea:66:eb:34:d6:fe:
                    77:2e:7f:fd:12:16:98:8c:fc:05:83:d1:67:8d:65:
                    f8:4e:03:33:2c:b5:74:cf:e5:9d:15:4f:d6:e1:ed:
                    cf:4f:51:ba:ed:84:58:f2:53:21:8f:96:ef:27:57:
                    da:93:82:8f:81:de:d9:8b:35:33:46:e7:db:2e:ae:
                    00:f7:7d:c5:c9:81:55:f4:53:93:37:ab:4c:10:74:
                    55:89:f9:c8:f7:64:e1:8b:93:d6:c6:76:0d:9c:c1:
                    be:ab:34:3b:0b:97:22:e6:8b:28:6c:4f:40:41:18:
                    94:08:f4:ef:e2:8e:2c:5b:0c:bb:d9:00:b2:65:15:
                    89:8a:fa:36:57:37:7a:3c:d2:f5:77:1d:f0:2f:cb:
                    30:96:2a:29:a5:00:cd:4e:ac:0b:4b:29:bd:e3:21:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:F3:94:1D:9D:31:4C:56:02:5C:BB:27:91:16:E5:43:F6:61:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/b4bf3030-ae2b-3d07-bf19-6006a4d75a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.228.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:87:3a:30:86:61:50:39:4d:94:88:53:6d:7d:91:a6:4e:
         62:d7:1f:af:03:85:88:4d:10:43:bc:c7:e7:97:54:75:fb:90:
         96:cb:7c:79:2e:e2:b6:da:25:2a:63:40:69:3b:34:9e:a8:f6:
         c1:e9:68:07:b7:c9:39:1f:12:12:85:ab:cb:9d:7b:19:e6:cc:
         34:53:fd:f4:30:b8:61:0d:c1:0d:be:ce:8d:53:40:b0:4c:cc:
         66:e9:b8:ea:0f:e8:6a:3a:59:5c:71:28:a9:c0:cd:bd:a1:c5:
         ff:b3:b3:cf:bc:3b:42:d7:52:04:76:57:56:af:4a:60:00:9c:
         c3:be:3f:f5:d3:ee:58:7d:5d:ec:ca:a7:fa:cc:ae:a2:f2:73:
         56:75:59:dd:2d:f2:71:91:a2:46:f3:8a:72:20:d4:70:2e:1c:
         17:f5:57:39:87:06:6d:6c:7a:39:a3:65:1b:56:ad:5b:69:8d:
         5e:d2:4a:26:06:fc:d3:95:92:c8:9c:60:2e:15:2a:20:08:c7:
         c1:fd:b7:f3:73:73:6f:80:74:ce:24:76:2a:61:4f:fd:9b:11:
         df:21:a5:0d:18:e8:bf:35:f2:60:04:97:f7:25:3a:5d:6c:48:
         6a:1c:f5:12:77:ff:8e:27:ec:f9:5f:ef:64:8e:29:3a:c4:29:
         48:3e:fa:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxIT39woz8R/NKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNkMzhjOTgtZjUxYi00NmZmLThkNzItZTE3MGIxNzRm
M2RjMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk
MThlZDQ3ODYtZDlmYy00ZjhiLWFkOWItNmY3ZTlmN2NiYTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80p5fHnY1jk65QS0h0NipmX1XqpoABrfZwAM
hgmOTOnPyfoGOu8vtrIwRwm38gf5MoZob/DO57EfFlNLZKLBaHfvxyLCHzDLCszW
2s4HYp+IQmxExHW3lmtsmkhU7ejqk3TqZus01v53Ln/9EhaYjPwFg9FnjWX4TgMz
LLV0z+WdFU/W4e3PT1G67YRY8lMhj5bvJ1fak4KPgd7ZizUzRufbLq4A933FyYFV
9FOTN6tMEHRVifnI92Thi5PWxnYNnMG+qzQ7C5ci5osobE9AQRiUCPTv4o4sWwy7
2QCyZRWJivo2Vzd6PNL1dx3wL8swlioppQDNTqwLSym94yHa6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZO85QdnTFMVgJcuyeRFuVD9mHNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Qz
OGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcwYjE3NGYzZGMvYjRiZjMwMzAtYWUyYi0z
ZDA3LWJmMTktNjAwNmE0ZDc1YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNkMzhjOTgtZjUxYi00NmZmLThk
NzItZTE3MGIxNzRmM2RjL2ZjZDM4Yzk4LWY1MWItNDZmZi04ZDcyLWUxNzBiMTc0
ZjNkYy5jcmwwHwYDVR0jBBgwFoAUmw32VjNKSwbhot3VJesR/OCVQtUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2QzOGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcw
YjE3NGYzZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuQuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUrhzowhmFQOU2UiFNtfZGmTmLXH68DhYhNEEO8x+eXVHX7kJbLfHku
4rbaJSpjQGk7NJ6o9sHpaAe3yTkfEhKFq8udexnmzDRT/fQwuGENwQ2+zo1TQLBM
zGbpuOoP6Go6WVxxKKnAzb2hxf+zs8+8O0LXUgR2V1avSmAAnMO+P/XT7lh9XezK
p/rMrqLyc1Z1Wd0t8nGRokbzinIg1HAuHBf1VzmHBm1sejmjZRtWrVtpjV7SSiYG
/NOVksicYC4VKiAIx8H9t/Nzc2+AdM4kdiphT/2bEd8hpQ0Y6L818mAEl/clOl1s
SGoc9RJ3/44n7Plf72SOKTrEKUg++so=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:56:11 2026 by rpki-client