Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa
File:                     142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa (raw, json)
Hash identifier:          9e8fre/EOVSyizwRvLlEdX9rVvwaDtBVxCRVpCfL+jY=
Subject key identifier:   51:AA:65:C7:49:86:C5:42:C7:88:57:A5:77:24:A4:DD:91:BD:5A:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A7F3163472C50647993C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        104.198.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7f:31:63:47:2c:50:64:79:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4edf4b3c-54a0-4838-bfdf-b8367bc1eb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:14:f9:ce:b5:75:fe:73:cc:10:8a:02:98:
                    8a:19:4c:7e:aa:e9:b1:b3:58:dd:ce:5e:e4:50:11:
                    f7:f5:4a:aa:c6:27:86:03:7d:de:89:f2:1d:af:f2:
                    52:78:f8:c6:22:a8:4f:ff:8b:47:4f:6f:27:0b:e9:
                    b2:0c:a0:11:f0:66:4c:eb:50:dc:cc:0a:42:88:44:
                    43:b2:7b:a9:0f:45:bc:c0:67:b8:d5:e0:d3:3f:eb:
                    19:e9:8e:be:f2:a1:b7:d2:79:3b:00:64:e5:ba:50:
                    10:4e:b0:9b:7b:f2:b1:cb:aa:23:65:7b:fa:45:ac:
                    84:a5:bd:40:bb:1c:47:0f:bc:e4:16:6c:c7:c1:df:
                    59:c8:72:ba:ae:0d:9a:96:11:74:0a:da:d9:33:e2:
                    4e:b2:fd:96:19:3c:1f:15:0c:b3:a6:11:c5:f8:23:
                    b1:5c:af:63:7c:a1:b6:4d:22:b4:7f:1b:92:56:07:
                    d9:13:e4:5f:ad:a5:d4:8d:3f:37:84:e6:58:2d:ab:
                    3e:e2:e6:c4:b8:c0:91:e5:ae:ba:1d:cb:93:83:e8:
                    d4:d3:b5:fb:a2:2f:53:d6:8b:82:c5:9f:3c:b7:9d:
                    71:84:bd:bd:f9:71:55:af:d4:88:df:90:0a:11:60:
                    10:05:e7:c7:04:ac:b0:89:26:ae:6e:26:48:89:2b:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:65:C7:49:86:C5:42:C7:88:57:A5:77:24:A4:DD:91:BD:5A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:73:36:b5:b4:c5:ac:95:56:ec:8b:5d:11:9e:9e:89:4e:
         1f:f8:d2:a2:02:82:bb:42:d9:54:a1:09:c5:88:37:5a:98:cd:
         a1:0c:c9:b2:e8:6e:8d:48:e7:15:b7:92:fe:d0:a8:15:39:b7:
         48:b6:c6:e4:45:4c:41:69:57:db:b8:bf:1d:4e:80:46:3c:ae:
         33:5d:02:1c:e7:0d:1a:9d:67:74:0f:33:5a:1b:3e:91:91:1f:
         7b:55:43:27:4b:09:3f:08:69:e4:d1:dc:fc:00:dc:9d:85:7c:
         5b:75:45:0b:09:16:2c:7e:e4:5c:55:03:4b:f1:8b:29:c4:a2:
         ed:7e:43:f0:7a:ea:37:ba:67:75:dc:12:0e:30:d7:2f:2b:61:
         c8:1e:4b:18:19:62:dd:f4:70:e9:f6:ec:1e:24:74:52:48:96:
         f7:54:e6:e1:00:5b:4f:9e:51:d6:13:df:50:66:3d:e8:8a:eb:
         da:c3:9e:5a:3e:30:67:59:a9:8c:76:ea:ea:c6:16:76:84:4f:
         15:39:91:d1:fc:3a:70:96:7a:2d:43:fd:0d:82:f1:2b:c2:6a:
         99:e7:d7:7b:60:6a:47:20:aa:e6:ba:97:a7:bd:74:92:34:d8:
         e4:e5:e2:18:5c:26:e6:84:ad:38:73:02:77:df:03:4d:26:1e:
         7f:ec:70:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSn8xY0csUGR5k8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NGVkZjRiM2MtNTRhMC00ODM4LWJmZGYtYjgzNjdiYzFlYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRgU+c61df5zzBCKApiKGUx+qumxs1jdzl7k
UBH39UqqxieGA33eifIdr/JSePjGIqhP/4tHT28nC+myDKAR8GZM61DczApCiERD
snupD0W8wGe41eDTP+sZ6Y6+8qG30nk7AGTlulAQTrCbe/Kxy6ojZXv6RayEpb1A
uxxHD7zkFmzHwd9ZyHK6rg2alhF0CtrZM+JOsv2WGTwfFQyzphHF+COxXK9jfKG2
TSK0fxuSVgfZE+RfraXUjT83hOZYLas+4ubEuMCR5a66HcuTg+jU07X7oi9T1ouC
xZ88t51xhL29+XFVr9SI35AKEWAQBefHBKywiSaubiZIiSulzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGqZcdJhsVCx4hXpXckpN2RvVrqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQyYWE4OWItMTJjNy0z
Nzk3LThhZTQtYzVjYjdlYzNhYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOacza1tMWslVbsi10Rnp6JTh/40qICgrtC2VShCcWIN1qYzaEMybLo
bo1I5xW3kv7QqBU5t0i2xuRFTEFpV9u4vx1OgEY8rjNdAhznDRqdZ3QPM1obPpGR
H3tVQydLCT8IaeTR3PwA3J2FfFt1RQsJFix+5FxVA0vxiynEou1+Q/B66je6Z3Xc
Eg4w1y8rYcgeSxgZYt30cOn27B4kdFJIlvdU5uEAW0+eUdYT31BmPeiK69rDnlo+
MGdZqYx26urGFnaETxU5kdH8OnCWei1D/Q2C8SvCapnn13tgakcgqua6l6e9dJI0
2OTl4hhcJuaErThzAnffA00mHn/scF4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:28 2026 by rpki-client