Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File:                     2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier:          xhgGlUBwpPLtWzjGphBU6E8OVHc4tyL98ItEOa9VAQk=
Subject key identifier:   72:17:F7:6D:6B:D6:B0:52:D3:2F:D5:05:1C:78:0D:24:3E:DB:E1:92
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584EE38C94B4F4B79E61B43EA080
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        143.220.144.0/23 maxlen: 23
                          143.220.146.0/23 maxlen: 23
                          143.220.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:94:b4:f4:b7:9e:61:b4:3e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=d002aac4-d226-4712-a815-0101726edfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:96:bf:5e:5f:5f:75:49:07:21:5c:22:fa:
                    8b:9c:d7:39:0d:b3:59:1e:50:f6:58:70:5d:65:c8:
                    74:32:03:e3:d3:e0:26:73:81:73:21:7e:52:c2:91:
                    58:f2:9c:6c:0d:7a:c3:12:0e:61:09:23:4e:d5:60:
                    e2:8a:f6:c4:34:a5:89:e7:79:7e:97:e9:fa:d9:69:
                    dc:94:11:1c:cb:8e:e6:c4:30:bb:7a:25:95:6a:8c:
                    81:eb:9c:ec:1c:6e:2c:6f:04:a4:ba:ec:8e:55:30:
                    1b:b8:b7:6b:c5:da:51:58:e5:ee:bd:01:93:b7:2d:
                    c5:f5:17:be:5a:4d:b1:71:fe:1d:32:03:f7:ae:72:
                    6b:f0:a0:a0:cc:42:49:5f:5f:47:dc:50:c7:09:63:
                    6e:68:db:f9:70:34:3e:29:f7:e9:c1:86:1b:dd:33:
                    f3:54:25:02:6a:f7:1a:0b:83:dc:9f:1d:f2:b0:ae:
                    b4:48:b8:66:a5:ae:f1:bd:88:86:f6:c2:00:df:18:
                    6d:41:a1:da:f0:17:21:10:69:8d:7d:f6:68:4e:59:
                    ff:0f:23:0a:80:9f:dc:d2:cb:d3:b4:bb:88:a5:d3:
                    9d:7d:19:2a:75:c4:a9:3c:01:eb:81:66:8f:29:82:
                    71:c9:c4:a8:f3:1a:b2:12:a9:6c:ca:8b:ef:d7:b6:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:F7:6D:6B:D6:B0:52:D3:2F:D5:05:1C:78:0D:24:3E:DB:E1:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.144.0-143.220.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:a8:d7:c8:5c:f5:3e:b1:26:fd:4f:2b:45:a2:cf:a6:43:
         12:e2:99:85:94:93:aa:bf:4e:e5:1a:0a:44:82:61:d6:f8:6f:
         b2:5c:7f:18:2a:d7:49:2f:fe:7f:e0:f2:3a:5d:e3:f3:a1:23:
         a4:4f:35:6d:11:7e:f9:de:e9:19:5c:ec:2d:02:dc:32:45:dd:
         af:8f:3e:25:f1:22:b5:a9:21:13:fc:bf:31:d7:cf:4c:fe:73:
         b2:c3:a2:7a:b9:26:fb:d4:f8:95:5d:aa:5b:a3:67:e7:5e:f4:
         5c:af:1f:30:84:5a:1d:cc:82:39:1b:d5:e5:ec:a4:65:ec:ff:
         a3:74:10:31:df:3d:24:2c:db:2e:af:b5:66:35:7f:ba:bb:68:
         0c:ff:74:a1:b0:01:79:54:0d:fa:77:96:d4:d5:2f:19:92:7c:
         1a:aa:8a:1c:57:fe:c1:70:76:76:54:98:26:cc:8c:e0:62:94:
         80:4b:fe:cb:a9:c6:df:be:8e:51:01:4a:d8:93:95:34:fa:11:
         1e:4f:17:0d:79:d1:da:31:b1:11:17:55:ae:b6:ef:08:fb:01:
         9d:6a:4c:05:ab:7e:78:6f:a5:07:88:bb:72:26:d2:63:d4:94:
         79:8a:6b:95:1b:51:62:bc:66:de:13:c2:73:d3:b8:e3:a7:8d:
         3e:31:55:03
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7jjJS09LeeYbQ+oIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3
ODliMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
ZDAwMmFhYzQtZDIyNi00NzEyLWE4MTUtMDEwMTcyNmVkZmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP+Wv15fX3VJByFcIvqLnNc5DbNZHlD2WHBd
Zch0MgPj0+Amc4FzIX5SwpFY8pxsDXrDEg5hCSNO1WDiivbENKWJ53l+l+n62Wnc
lBEcy47mxDC7eiWVaoyB65zsHG4sbwSkuuyOVTAbuLdrxdpRWOXuvQGTty3F9Re+
Wk2xcf4dMgP3rnJr8KCgzEJJX19H3FDHCWNuaNv5cDQ+KffpwYYb3TPzVCUCavca
C4Pcnx3ysK60SLhmpa7xvYiG9sIA3xhtQaHa8BchEGmNffZoTln/DyMKgJ/c0svT
tLuIpdOdfRkqdcSpPAHrgWaPKYJxycSo8xqyEqlsyovv17b/UwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHIX921r1rBS0y/VBRx4DSQ+2+GSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj
MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMmM4OTk3NTYtYWQxZi0z
NzM0LTk3N2MtNjVlYWVmMmJiYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw
Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy
Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex
ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD
BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEATOOo18hc9T6xJv1PK0Wiz6ZDEuKZhZSTqr9O5RoKRIJh
1vhvslx/GCrXSS/+f+DyOl3j86EjpE81bRF++d7pGVzsLQLcMkXdr48+JfEitakh
E/y/MdfPTP5zssOierkm+9T4lV2qW6Nn5170XK8fMIRaHcyCORvV5eykZez/o3QQ
Md89JCzbLq+1ZjV/urtoDP90obABeVQN+neW1NUvGZJ8GqqKHFf+wXB2dlSYJsyM
4GKUgEv+y6nG376OUQFK2JOVNPoRHk8XDXnR2jGxERdVrrbvCPsBnWpMBat+eG+l
B4i7cibSY9SUeYprlRtRYrxm3hPCc9O446eNPjFVAw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:08:19 2026 by rpki-client