Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/2eb885c3-efa7-3a34-85f9-c4926d5238fa.roa
File:                     2eb885c3-efa7-3a34-85f9-c4926d5238fa.roa (raw, json)
Hash identifier:          IM4XPeXvSWgD7RxIrv1bVmuNfVu2A7a1PiXh99A/Wqw=
Subject key identifier:   12:C8:CB:5F:56:AC:07:8A:8E:31:C9:6B:DC:79:F0:25:F2:22:BE:B9
Certificate issuer:       /CN=343f3818-9125-4058-ac0a-1c14eb831ce3
Certificate serial:       010D0C9F4328584E6EC180CF6A8E160623514480
Authority key identifier: 4A:56:53:A4:17:EA:69:55:6C:CE:B2:A8:DA:8C:E5:2D:FA:27:87:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/2eb885c3-efa7-3a34-85f9-c4926d5238fa.roa
Signing time:             Wed 08 Jul 2026 16:57:19 +0000
ROA not before:           Wed 08 Jul 2026 16:57:19 +0000
ROA not after:            Tue 06 Oct 2026 16:57:19 +0000
asID:                     401751
IP address blocks:        143.223.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/343f3818-9125-4058-ac0a-1c14eb831ce3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/343f3818-9125-4058-ac0a-1c14eb831ce3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:c1:80:cf:6a:8e:16:06:23:51:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=343f3818-9125-4058-ac0a-1c14eb831ce3
        Validity
            Not Before: Jul  8 16:57:19 2026 GMT
            Not After : Oct  6 16:57:19 2026 GMT
        Subject: CN=ebd3c58a-fe77-4ef2-948b-076ff06242ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:2f:8c:1f:61:0b:48:1e:ab:4f:67:32:d7:
                    89:ce:1e:27:4b:2c:97:cd:19:cc:38:2d:80:0c:5c:
                    7f:e8:14:51:89:09:97:0e:fa:1d:ec:4a:9e:35:c5:
                    ba:30:28:cd:0e:fd:e4:88:d6:00:cd:b8:b7:06:33:
                    5c:ae:0c:14:e1:74:b9:40:af:bd:3e:50:52:cf:3d:
                    98:ef:01:ee:8e:67:2b:85:58:c9:51:6d:d6:1b:7c:
                    3d:f6:72:2e:bc:b5:9a:d1:e8:4e:ab:60:d4:e4:f2:
                    3e:6b:a6:c7:7d:3f:62:06:57:b7:62:2f:e0:30:24:
                    16:2f:6b:cf:dd:47:80:c2:d4:7b:36:67:da:aa:7d:
                    be:04:09:1a:08:e6:7c:58:f8:9d:af:43:03:a2:fc:
                    cf:b9:9c:cd:f7:96:0b:16:64:0b:06:d4:3a:c0:97:
                    44:c7:57:4c:a1:e8:f9:05:36:54:15:12:6e:c0:e9:
                    26:5f:81:57:5f:94:0d:a2:3a:be:cc:eb:ab:d9:78:
                    1c:7b:ff:76:f7:32:85:5e:a1:d3:ce:8a:18:09:14:
                    1a:73:05:35:3d:f1:e1:8e:3e:ff:bc:b5:9f:bb:52:
                    62:1f:c8:8b:fc:11:4f:f6:3a:1b:32:b4:1a:62:3f:
                    30:76:f6:94:e0:80:a2:6f:a1:10:9b:cc:cf:2f:0e:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C8:CB:5F:56:AC:07:8A:8E:31:C9:6B:DC:79:F0:25:F2:22:BE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/2eb885c3-efa7-3a34-85f9-c4926d5238fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/343f3818-9125-4058-ac0a-1c14eb831ce3.crl

            X509v3 Authority Key Identifier:
                keyid:4A:56:53:A4:17:EA:69:55:6C:CE:B2:A8:DA:8C:E5:2D:FA:27:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:78:1d:da:9a:eb:8f:39:c9:24:a7:94:b5:05:1b:7b:2e:
         0f:44:4f:5f:8b:db:d0:d4:b7:cb:16:07:4c:a2:1d:07:b5:7d:
         88:f0:6d:b9:2a:3d:d7:c3:f9:2b:6c:1d:29:3a:a2:f0:06:68:
         e4:f8:72:37:c3:e2:9f:f0:e3:f8:cd:d4:27:47:07:45:b3:d6:
         7b:0e:02:49:a8:e8:73:83:8c:72:be:ab:86:4a:34:7e:4c:cb:
         12:c0:7b:cc:ff:7c:9b:1b:0f:5f:65:74:ab:be:55:01:e0:d7:
         2d:fa:4c:22:63:14:d6:d8:f1:8a:b6:e0:d9:9b:39:83:10:3d:
         94:9a:f9:d3:81:a7:1c:0f:59:fa:bb:48:32:d9:ea:3e:61:b9:
         6f:b3:c0:e6:a0:95:f7:52:a6:40:d0:51:e8:1b:d9:c0:e9:5d:
         39:c3:a3:e7:d3:64:d5:d3:8f:85:6d:b0:54:87:cd:26:7d:bf:
         dd:84:7e:43:34:85:77:7e:ba:d2:54:46:98:01:7f:de:5f:85:
         23:ad:fa:6d:eb:6f:29:06:2b:68:70:8e:23:d2:70:44:c1:ec:
         49:07:cb:78:0d:1a:86:4a:7b:a8:5c:54:3c:82:6b:c5:87:b9:
         6b:17:7b:d3:b5:57:eb:e9:32:ce:ce:9e:09:d8:d2:39:25:08:
         59:e0:87:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5uwYDPao4WBiNRRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQzZjM4MTgtOTEyNS00MDU4LWFjMGEtMWMxNGViODMx
Y2UzMB4XDTI2MDcwODE2NTcxOVoXDTI2MTAwNjE2NTcxOVowLzEtMCsGA1UEAxMk
ZWJkM2M1OGEtZmU3Ny00ZWYyLTk0OGItMDc2ZmYwNjI0MmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndwvjB9hC0geq09nMteJzh4nSyyXzRnMOC2A
DFx/6BRRiQmXDvod7EqeNcW6MCjNDv3kiNYAzbi3BjNcrgwU4XS5QK+9PlBSzz2Y
7wHujmcrhVjJUW3WG3w99nIuvLWa0ehOq2DU5PI+a6bHfT9iBle3Yi/gMCQWL2vP
3UeAwtR7Nmfaqn2+BAkaCOZ8WPidr0MDovzPuZzN95YLFmQLBtQ6wJdEx1dMoej5
BTZUFRJuwOkmX4FXX5QNojq+zOur2Xgce/929zKFXqHTzooYCRQacwU1PfHhjj7/
vLWfu1JiH8iL/BFP9jobMrQaYj8wdvaU4ICib6EQm8zPLw5e1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLIy19WrAeKjjHJa9x58CXyIr65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zNDNm
MzgxOC05MTI1LTQwNTgtYWMwYS0xYzE0ZWI4MzFjZTMvMmViODg1YzMtZWZhNy0z
YTM0LTg1ZjktYzQ5MjZkNTIzOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzQzZjM4MTgtOTEyNS00MDU4LWFj
MGEtMWMxNGViODMxY2UzLzM0M2YzODE4LTkxMjUtNDA1OC1hYzBhLTFjMTRlYjgz
MWNlMy5jcmwwHwYDVR0jBBgwFoAUSlZTpBfqaVVszrKo2ozlLfonh00wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zNDNmMzgxOC05MTI1LTQwNTgtYWMwYS0xYzE0
ZWI4MzFjZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuXeB3amuuPOckkp5S1BRt7Lg9ET1+L29DUt8sWB0yiHQe1fYjwbbkq
PdfD+StsHSk6ovAGaOT4cjfD4p/w4/jN1CdHB0Wz1nsOAkmo6HODjHK+q4ZKNH5M
yxLAe8z/fJsbD19ldKu+VQHg1y36TCJjFNbY8Yq24NmbOYMQPZSa+dOBpxwPWfq7
SDLZ6j5huW+zwOaglfdSpkDQUegb2cDpXTnDo+fTZNXTj4VtsFSHzSZ9v92EfkM0
hXd+utJURpgBf95fhSOt+m3rbykGK2hwjiPScETB7EkHy3gNGoZKe6hcVDyCa8WH
uWsXe9O1V+vpMs7OngnY0jklCFngh7c=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:09 2026 by rpki-client