Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa
File:                     49ddd083-e7f3-37cc-86ea-eef71c189fea.roa (raw, json)
Hash identifier:          T5DbhKvWzqKXAvEByrbb5DKcRSx1NFm1ysWPo0NzN2M=
Subject key identifier:   96:02:FB:68:6C:31:AE:3E:E9:E4:1C:E3:86:29:C6:6F:F6:A0:2F:61
Certificate issuer:       /CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc
Certificate serial:       010D0C9F4328584D47C4DE939CCDA6542F45E7D8
Authority key identifier: 00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     402092
IP address blocks:        131.143.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:de:93:9c:cd:a6:54:2f:45:e7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=091f0264-68e1-4b53-bef9-163c1c01165c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:fd:88:2c:c0:d9:ca:da:b1:85:e1:64:46:
                    46:ec:77:81:61:05:66:67:88:a7:80:84:d2:66:f7:
                    ef:b0:db:5c:0c:be:dc:15:63:0d:b3:9c:e6:f4:74:
                    9a:85:b5:6d:34:a9:32:7d:f0:65:12:ab:a0:9b:7d:
                    99:68:2d:c6:d5:59:ad:73:53:e5:ed:bb:4d:5b:4b:
                    6a:50:af:98:c9:ab:eb:0e:19:32:63:47:86:27:e0:
                    f1:ff:ba:a7:1f:41:f0:aa:29:f9:0f:a1:5b:aa:5c:
                    93:25:ea:76:fa:ee:44:4e:56:04:c7:36:59:b9:fe:
                    b1:75:33:37:7f:b6:f5:5b:da:b2:61:67:89:39:6f:
                    9a:d1:96:52:e3:ac:04:8d:f4:12:89:ad:08:45:63:
                    fa:29:d8:51:ff:81:0e:6d:cc:b4:5f:96:aa:41:fb:
                    84:72:f9:e4:46:a5:50:2c:20:66:61:22:45:72:8b:
                    5e:2b:d2:09:82:bf:50:e3:65:45:bf:5b:8a:36:a0:
                    e5:b5:09:ee:21:4f:82:f5:a9:a8:2a:0e:30:4b:be:
                    3d:d6:ff:db:1f:c9:81:6f:f7:8e:fa:89:8d:f6:a0:
                    82:ec:cb:68:d8:2b:39:45:0d:f8:41:fd:eb:cf:6c:
                    9c:ea:39:5e:c1:f9:e0:9c:f1:07:07:dd:e7:05:0e:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:02:FB:68:6C:31:AE:3E:E9:E4:1C:E3:86:29:C6:6F:F6:A0:2F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl

            X509v3 Authority Key Identifier:
                keyid:00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:ab:39:bc:97:25:62:47:3e:7c:88:c7:b0:84:85:5a:f0:
         6f:7e:1d:4b:97:ea:79:39:36:25:58:63:b0:5a:19:22:a2:09:
         67:e1:51:7b:50:9b:84:d6:76:f5:a8:56:f4:4a:34:eb:88:8f:
         16:e7:a0:07:3c:01:12:54:4c:93:d1:cb:18:95:aa:ac:df:32:
         bb:9d:be:60:92:aa:56:f3:75:a6:f4:57:5f:4f:2b:cf:95:ca:
         19:37:58:bd:ca:14:b7:35:03:c2:59:19:e1:6a:23:d4:18:fe:
         fd:a4:ad:70:61:30:4c:79:e2:3d:c8:ee:46:86:75:39:9c:1c:
         42:32:f8:5e:63:1f:3b:43:5e:d3:f3:57:5e:32:97:53:b3:f1:
         b3:db:8d:8a:a5:a8:b6:a6:47:fe:85:db:a6:4e:16:ed:c6:fb:
         4f:a6:50:3a:bd:1a:da:07:21:9a:e1:ff:06:5f:08:79:14:c7:
         95:9f:37:08:47:1a:67:d9:c8:8d:e1:14:e9:4a:c6:41:af:d6:
         b4:eb:13:75:01:99:f1:7d:d6:49:ca:42:fb:d2:7a:f2:18:da:
         07:51:96:39:2c:d5:53:92:7f:a0:a3:a7:78:79:9d:cd:97:15:
         2d:61:c4:58:a1:61:fc:ae:bd:7d:43:9a:d5:0f:06:5f:e3:be:
         da:b8:51:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN6TnM2mVC9F59gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjZTVjYzctODJlYy00YmVjLTk0N2UtOTdlNzQwMWFh
MWNjMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
MDkxZjAyNjQtNjhlMS00YjUzLWJlZjktMTYzYzFjMDExNjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyL9iCzA2crasYXhZEZG7HeBYQVmZ4ingITS
ZvfvsNtcDL7cFWMNs5zm9HSahbVtNKkyffBlEqugm32ZaC3G1Vmtc1Pl7btNW0tq
UK+YyavrDhkyY0eGJ+Dx/7qnH0Hwqin5D6FbqlyTJep2+u5ETlYExzZZuf6xdTM3
f7b1W9qyYWeJOW+a0ZZS46wEjfQSia0IRWP6KdhR/4EObcy0X5aqQfuEcvnkRqVQ
LCBmYSJFcoteK9IJgr9Q42VFv1uKNqDltQnuIU+C9amoKg4wS7491v/bH8mBb/eO
+omN9qCC7Mto2Cs5RQ34Qf3rz2yc6jlewfngnPEHB93nBQ5+GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYC+2hsMa4+6eQc44Ypxm/2oC9hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNl
NWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3NDAxYWExY2MvNDlkZGQwODMtZTdmMy0z
N2NjLTg2ZWEtZWVmNzFjMTg5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWFjZTVjYzctODJlYy00YmVjLTk0
N2UtOTdlNzQwMWFhMWNjLzlhY2U1Y2M3LTgyZWMtNGJlYy05NDdlLTk3ZTc0MDFh
YTFjYy5jcmwwHwYDVR0jBBgwFoAUAKPurGe/3kzMzU8f4Ed6zyYJ10AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNlNWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3
NDAxYWExY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeqqzm8lyViRz58iMewhIVa8G9+HUuX6nk5NiVYY7BaGSKiCWfhUXtQ
m4TWdvWoVvRKNOuIjxbnoAc8ARJUTJPRyxiVqqzfMrudvmCSqlbzdab0V19PK8+V
yhk3WL3KFLc1A8JZGeFqI9QY/v2krXBhMEx54j3I7kaGdTmcHEIy+F5jHztDXtPz
V14yl1Oz8bPbjYqlqLamR/6F26ZOFu3G+0+mUDq9GtoHIZrh/wZfCHkUx5WfNwhH
GmfZyI3hFOlKxkGv1rTrE3UBmfF91knKQvvSevIY2gdRljks1VOSf6Cjp3h5nc2X
FS1hxFihYfyuvX1DmtUPBl/jvtq4USI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:24 2026 by rpki-client