Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
File:                     894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json)
Hash identifier:          77ShEteDbiQTxyaUARcQLhLXgg7JPDAGRL8r50UGYlM=
Subject key identifier:   53:EC:13:7D:30:C8:81:0E:A1:93:DD:D6:AB:A7:20:C6:32:14:F7:A6
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B0206CC4B8F56E3ADC3100
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        24.149.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:20:6c:c4:b8:f5:6e:3a:dc:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=e75373c0-ca69-430d-a595-f80b26ef2800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:34:52:20:15:31:05:75:d2:2c:c7:c3:75:
                    66:be:41:09:90:14:4f:8e:ea:2c:32:4b:aa:01:0b:
                    b1:c6:b6:89:32:5a:8b:fe:79:53:dc:38:fa:64:a3:
                    60:a9:7c:08:da:58:90:08:28:9b:d5:de:b2:2e:a8:
                    d2:be:16:59:50:1b:2f:05:58:e7:8d:f4:93:eb:99:
                    7d:3a:76:ae:31:70:84:0b:49:09:d3:8a:f5:22:ce:
                    33:50:5b:a3:9d:5e:e5:3f:ef:37:4b:58:b0:9f:44:
                    b6:8b:c4:cc:6b:2a:68:79:21:e4:17:ea:6d:94:96:
                    00:f1:27:fd:c8:7e:70:e2:3a:0a:a5:5b:f5:7a:84:
                    79:a8:3d:16:08:c0:a1:b1:0d:77:8c:52:4b:dd:31:
                    a6:0d:7c:ad:bb:87:87:71:03:95:05:f2:cf:e6:ca:
                    8e:c5:6e:80:47:9c:99:cb:3c:00:51:84:9c:30:69:
                    bf:f0:17:77:3f:03:41:31:25:cc:67:d3:30:c9:26:
                    89:9e:21:dd:9a:a7:ad:9c:57:46:db:5f:69:37:55:
                    b1:6a:42:42:bd:72:5d:c4:a1:2d:8f:66:27:a5:7b:
                    0b:ae:1e:0a:85:da:6f:89:aa:be:13:59:91:f3:39:
                    ca:ba:3e:2b:fc:c8:df:77:d9:2f:fb:eb:c6:67:08:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:13:7D:30:C8:81:0E:A1:93:DD:D6:AB:A7:20:C6:32:14:F7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:43:9d:ba:1e:9f:2d:f4:75:e1:0f:35:3b:60:ff:18:fa:f7:
         9e:56:8b:57:25:04:36:34:9f:0a:80:51:dd:1e:85:cf:b8:0b:
         51:3a:cf:94:0b:34:8c:96:d2:e6:5b:f5:c1:fa:0f:c0:f0:a0:
         68:09:4a:fc:12:1b:0b:c3:7f:da:df:a4:0e:b2:68:21:ff:36:
         ae:07:45:d9:1d:7d:0f:05:60:2c:fc:c9:62:49:5c:b5:90:a9:
         41:5f:34:a3:66:93:41:89:49:ce:27:ba:16:9c:da:54:77:b7:
         ea:a7:b4:21:ea:d4:51:d1:0c:13:5a:d3:59:b1:a1:41:9c:15:
         6b:b6:44:79:1f:13:13:74:3c:a0:3c:c8:cd:bc:1d:0c:8f:f5:
         00:52:21:41:0a:11:4c:11:57:65:37:69:cf:17:9b:c4:bb:84:
         82:f5:10:48:2e:57:37:89:c4:2e:6f:fe:f8:d4:d4:66:b5:9e:
         ec:7c:93:3e:aa:7a:88:ee:45:bc:dc:18:08:60:cf:8e:ab:55:
         b5:7c:49:95:91:d5:1a:ef:56:8e:00:81:ff:ee:d3:d1:a2:7d:
         4e:5b:22:e0:2c:5a:46:17:89:e3:0c:f6:6d:d4:b1:6b:01:32:
         de:36:b1:67:b2:ac:86:5b:39:a4:83:4a:1a:82:6b:8b:61:d2:
         5d:8f:48:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCBsxLj1bjrcMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZTc1MzczYzAtY2E2OS00MzBkLWE1OTUtZjgwYjI2ZWYyODAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf80UiAVMQV10izHw3VmvkEJkBRPjuosMkuq
AQuxxraJMlqL/nlT3Dj6ZKNgqXwI2liQCCib1d6yLqjSvhZZUBsvBVjnjfST65l9
OnauMXCEC0kJ04r1Is4zUFujnV7lP+83S1iwn0S2i8TMaypoeSHkF+ptlJYA8Sf9
yH5w4joKpVv1eoR5qD0WCMChsQ13jFJL3TGmDXytu4eHcQOVBfLP5sqOxW6AR5yZ
yzwAUYScMGm/8Bd3PwNBMSXMZ9MwySaJniHdmqetnFdG219pN1WxakJCvXJdxKEt
j2YnpXsLrh4Khdpviaq+E1mR8znKuj4r/Mjfd9kv++vGZwiKOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPsE30wyIEOoZPd1qunIMYyFPemMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvODk0YjY4NjYtM2ExOS0z
YzI2LTliOTktZDI1YzNjNDE3ZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGJVWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJDnboeny30deEPNTtg/xj6955Wi1clBDY0nwqAUd0ehc+4C1E6z5QL
NIyW0uZb9cH6D8DwoGgJSvwSGwvDf9rfpA6yaCH/Nq4HRdkdfQ8FYCz8yWJJXLWQ
qUFfNKNmk0GJSc4nuhac2lR3t+qntCHq1FHRDBNa01mxoUGcFWu2RHkfExN0PKA8
yM28HQyP9QBSIUEKEUwRV2U3ac8Xm8S7hIL1EEguVzeJxC5v/vjU1Ga1nux8kz6q
eojuRbzcGAhgz46rVbV8SZWR1RrvVo4Agf/u09GifU5bIuAsWkYXieMM9m3UsWsB
Mt42sWeyrIZbOaSDShqCa4th0l2PSAc=
-----END CERTIFICATE-----
Generated at Wed May 13 11:27:31 2026 by rpki-client