Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa
File:                     2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa (raw, json)
Hash identifier:          BqduVAzkIu48aJE+Z04tsTloaEHuTd+IZJU+C/TEdhs=
Subject key identifier:   BF:FC:57:E1:47:0C:A6:F7:11:B4:5E:05:BE:47:E6:FD:21:0B:B1:1B
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F4328584E7A64CE3E9FA9FC6078086080
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     153517
IP address blocks:        142.248.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ce:3e:9f:a9:fc:60:78:08:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=74106de4-e11a-4e17-8fce-464a3b55091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:59:c6:dd:54:7d:f1:da:2a:83:ca:b8:8e:
                    6b:f1:ea:b3:bd:c0:1e:79:08:bb:d8:d6:9e:34:bd:
                    5f:04:32:7d:dc:87:b6:a1:1d:d5:53:ef:9b:a7:64:
                    c5:c3:9c:75:98:c4:e0:22:4f:84:f2:6f:62:0e:24:
                    2a:c6:7f:ec:46:ab:f9:fc:11:f3:8f:fa:2f:7c:ea:
                    57:49:9a:41:fe:a4:e2:8c:03:39:3f:5e:df:4e:69:
                    8a:0b:71:ad:4b:03:6c:80:c3:82:21:95:20:ab:d4:
                    a5:b9:17:85:c7:cc:83:da:ec:42:62:1a:22:9b:99:
                    bf:c6:df:c3:e8:5c:5f:6b:3b:41:a5:05:49:89:e6:
                    fe:c4:46:e1:d2:9c:97:07:8d:1c:ba:d3:6c:f6:2d:
                    4b:93:c4:0c:4c:df:72:94:c0:1f:9d:03:c2:01:b7:
                    7b:42:5c:8f:81:83:31:7b:6d:6b:cc:4c:09:c3:7c:
                    37:de:6b:09:49:62:d2:a5:54:99:b0:3d:ea:92:84:
                    6f:b2:92:41:42:2a:dd:aa:d7:6e:38:e0:09:50:a9:
                    c0:37:35:22:e2:3c:cc:11:ff:33:ef:0a:f9:5c:2f:
                    8b:29:bf:43:36:90:e9:0f:2d:28:81:34:d0:18:a5:
                    f3:23:96:19:b0:7e:81:50:bb:da:36:8d:f9:fb:a8:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:57:E1:47:0C:A6:F7:11:B4:5E:05:BE:47:E6:FD:21:0B:B1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:0c:fc:0b:e7:ba:a6:1c:66:f4:57:d4:71:1d:3c:b0:e6:
         0f:17:2e:78:f2:9f:04:0a:64:f8:5e:0b:fe:4f:83:d0:80:90:
         84:0d:94:fa:8a:32:c0:c9:68:13:17:c8:d3:30:6f:32:80:ac:
         d3:67:94:fd:26:ed:41:a9:70:c8:1a:c4:49:14:07:9f:40:96:
         ca:96:51:85:0d:65:47:48:df:53:1d:2a:b9:d9:82:6b:b5:49:
         da:91:49:1e:a4:66:17:4a:57:e0:db:53:e3:6e:27:e8:49:60:
         02:3a:3a:be:b1:e3:47:b8:31:05:4e:38:f8:f3:32:8c:d4:ed:
         3d:1f:25:df:e0:d0:5b:f0:b4:3f:1b:a9:99:f4:88:29:e9:49:
         b0:5c:db:12:2f:1a:39:00:43:a6:34:d7:d8:f3:02:2d:7b:d9:
         d3:26:91:19:5f:51:80:3f:9c:95:02:28:eb:60:48:5b:17:98:
         f0:17:f8:20:22:74:ec:ce:5d:b3:5a:a0:02:55:8d:9c:bd:35:
         10:11:48:0d:7c:b6:ac:0d:d6:39:71:b5:56:42:4f:99:98:43:
         cb:00:ed:61:85:6a:9c:9a:1f:7c:50:86:71:67:9b:4f:fc:11:
         ea:0f:8d:21:59:d1:a9:da:85:8e:eb:50:82:84:51:1b:39:15:
         aa:34:7b:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZM4+n6n8YHgIYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4
NTBiMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
NzQxMDZkZTQtZTExYS00ZTE3LThmY2UtNDY0YTNiNTUwOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqBZxt1UffHaKoPKuI5r8eqzvcAeeQi72Nae
NL1fBDJ93Ie2oR3VU++bp2TFw5x1mMTgIk+E8m9iDiQqxn/sRqv5/BHzj/ovfOpX
SZpB/qTijAM5P17fTmmKC3GtSwNsgMOCIZUgq9SluReFx8yD2uxCYhoim5m/xt/D
6FxfaztBpQVJieb+xEbh0pyXB40cutNs9i1Lk8QMTN9ylMAfnQPCAbd7QlyPgYMx
e21rzEwJw3w33msJSWLSpVSZsD3qkoRvspJBQirdqtduOOAJUKnANzUi4jzMEf8z
7wr5XC+LKb9DNpDpDy0ogTTQGKXzI5YZsH6BULvaNo35+6hEzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/8V+FHDKb3EbReBb5H5v0hC7EbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2
MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMmMyMWJkZjItOTRkZC0z
ZWY1LWFmNGYtMDc5Y2QwYjc3ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1
NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw
ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2
YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHMDPwL57qmHGb0V9RxHTyw5g8XLnjynwQKZPheC/5Pg9CAkIQNlPqK
MsDJaBMXyNMwbzKArNNnlP0m7UGpcMgaxEkUB59AlsqWUYUNZUdI31MdKrnZgmu1
SdqRSR6kZhdKV+DbU+NuJ+hJYAI6Or6x40e4MQVOOPjzMozU7T0fJd/g0FvwtD8b
qZn0iCnpSbBc2xIvGjkAQ6Y019jzAi172dMmkRlfUYA/nJUCKOtgSFsXmPAX+CAi
dOzOXbNaoAJVjZy9NRARSA18tqwN1jlxtVZCT5mYQ8sA7WGFapyaH3xQhnFnm0/8
EeoPjSFZ0anahY7rUIKEURs5Fao0e1c=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:15 2026 by rpki-client