Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa
File:                     4f389951-b84b-350e-8ff3-bc20b46b35a0.roa (raw, json)
Hash identifier:          R4GtE6lCs5jOsQdXraHrO9At/P7vDdUCEfKvnLW8e4Q=
Subject key identifier:   13:1C:B6:B7:36:0C:B5:45:78:B5:4F:C8:77:22:B9:CF:A4:7B:DC:66
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584D316F744CB7477E8EA32EE780
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        131.143.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:74:4c:b7:47:7e:8e:a3:2e:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=659455b8-bc99-4c66-87a3-d8c5b82f0a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:99:7b:09:4c:96:51:51:e6:21:cc:11:14:
                    e4:da:55:9f:1a:f2:36:24:bf:6a:11:bb:53:ef:ab:
                    61:3b:3d:7b:dc:c3:87:47:54:f3:c7:54:cc:3e:ed:
                    c2:0d:a9:0f:83:dd:96:64:5f:12:c6:b3:7d:8d:62:
                    3f:56:8c:3b:19:b7:f6:ef:82:75:2e:57:27:10:19:
                    e4:75:82:6b:5b:9d:33:c1:2d:31:de:fd:e7:74:e6:
                    63:83:e9:49:aa:8f:bc:56:83:76:11:b3:b3:0d:ce:
                    8f:8b:2d:02:90:14:28:46:2b:32:03:a1:f9:f2:86:
                    06:48:1f:e5:a2:fc:5b:59:4f:35:3b:4a:ab:4c:b9:
                    2e:06:cc:34:f3:d7:04:fe:cd:2c:87:9a:73:9e:b4:
                    8e:5c:38:a7:60:c6:96:ae:63:62:bc:93:e2:03:dd:
                    fa:58:bd:4d:f4:74:8d:9a:fa:f0:06:10:a7:d7:81:
                    3e:ce:f3:bb:15:ce:e0:00:be:2f:e9:c2:c4:52:0a:
                    79:60:b8:82:32:0d:11:7f:83:de:03:82:67:06:81:
                    e4:1a:69:f0:73:ce:e8:64:ea:fa:a6:aa:88:13:1a:
                    59:3a:d7:a7:72:d6:22:3a:d1:26:fc:42:dd:85:86:
                    be:4a:11:f5:bb:27:ef:0a:35:f5:da:fa:09:1b:94:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:B6:B7:36:0C:B5:45:78:B5:4F:C8:77:22:B9:CF:A4:7B:DC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:3f:fe:74:98:7e:ba:f0:ec:e7:ae:b2:f9:3d:c9:1f:9a:
         37:b8:e5:49:5e:34:68:74:5c:43:86:34:f5:0a:e1:e0:6d:8a:
         d3:9e:75:64:c7:00:c5:53:5f:b2:09:b1:63:36:6d:9d:06:70:
         a3:c0:97:85:58:5a:a9:71:8d:61:ec:fd:ab:e0:d3:4b:a5:41:
         85:ab:77:99:d0:6e:06:32:bc:33:a8:79:14:dc:55:05:d5:7d:
         ed:50:d7:86:ae:da:95:52:7d:e0:d8:99:97:e4:ca:cf:33:b8:
         44:76:01:ca:56:c8:b5:d7:04:b0:94:05:eb:01:21:d5:d9:a5:
         7c:27:73:91:7b:b9:e7:0d:72:1a:c5:76:a3:db:97:23:29:b8:
         c6:51:f8:c3:e4:09:33:da:3a:5b:76:2a:ce:2d:9c:8a:0f:e3:
         f5:aa:35:6b:7a:ba:e4:8d:5b:c6:c2:6d:b1:f0:0e:1c:32:00:
         6f:23:ab:d5:bf:19:cd:81:7b:d2:f4:07:69:27:37:c8:4e:dc:
         6c:0a:fd:bd:35:91:72:80:54:eb:80:f8:44:d4:0f:9a:96:2a:
         18:11:61:a9:59:2a:e5:63:56:5a:b5:6c:b1:ab:cc:42:14:03:
         3b:f8:32:8a:dc:6e:4d:e3:86:af:41:1d:69:9c:e1:35:f5:ef:
         ae:21:73:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3RMt0d+jqMu54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgyZjMxNzYtY2ViOC00MmJmLWE1MWMtOWZiMjg2ZTVk
YzAwMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk
NjU5NDU1YjgtYmM5OS00YzY2LTg3YTMtZDhjNWI4MmYwYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmSZewlMllFR5iHMERTk2lWfGvI2JL9qEbtT
76thOz173MOHR1Tzx1TMPu3CDakPg92WZF8SxrN9jWI/Vow7Gbf274J1LlcnEBnk
dYJrW50zwS0x3v3ndOZjg+lJqo+8VoN2EbOzDc6Piy0CkBQoRisyA6H58oYGSB/l
ovxbWU81O0qrTLkuBsw089cE/s0sh5pznrSOXDinYMaWrmNivJPiA936WL1N9HSN
mvrwBhCn14E+zvO7Fc7gAL4v6cLEUgp5YLiCMg0Rf4PeA4JnBoHkGmnwc87oZOr6
pqqIExpZOtenctYiOtEm/ELdhYa+ShH1uyfvCjX12voJG5Q7FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMctrc2DLVFeLVPyHciuc+ke9xmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODJm
MzE3Ni1jZWI4LTQyYmYtYTUxYy05ZmIyODZlNWRjMDAvNGYzODk5NTEtYjg0Yi0z
NTBlLThmZjMtYmMyMGI0NmIzNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjgyZjMxNzYtY2ViOC00MmJmLWE1
MWMtOWZiMjg2ZTVkYzAwLzI4MmYzMTc2LWNlYjgtNDJiZi1hNTFjLTlmYjI4NmU1
ZGMwMC5jcmwwHwYDVR0jBBgwFoAUexxb9718DJAh2mhmrF9NnBW1dBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODJmMzE3Ni1jZWI4LTQyYmYtYTUxYy05ZmIy
ODZlNWRjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg480MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeoP/50mH668OznrrL5Pckfmje45UleNGh0XEOGNPUK4eBtitOedWTH
AMVTX7IJsWM2bZ0GcKPAl4VYWqlxjWHs/avg00ulQYWrd5nQbgYyvDOoeRTcVQXV
fe1Q14au2pVSfeDYmZfkys8zuER2AcpWyLXXBLCUBesBIdXZpXwnc5F7uecNchrF
dqPblyMpuMZR+MPkCTPaOlt2Ks4tnIoP4/WqNWt6uuSNW8bCbbHwDhwyAG8jq9W/
Gc2Be9L0B2knN8hO3GwK/b01kXKAVOuA+ETUD5qWKhgRYalZKuVjVlq1bLGrzEIU
Azv4Morcbk3jhq9BHWmc4TX1764hc0A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:29 2026 by rpki-client