Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
File:                     c1dcd54c-383d-3372-b220-849655424f31.roa (raw, json)
Hash identifier:          Eiq+uek9siFuMZ984gaDN2xQ5bbkaG3g/dUDaAgNsUA=
Subject key identifier:   62:02:48:56:8F:E0:B4:7D:A7:50:EA:E2:EC:47:67:82:AE:B1:71:0A
Certificate issuer:       /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
Certificate serial:       010D0C9F4328584E2AD4543EBE7483BEF9E31A80
Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     33291
IP address blocks:        162.210.243.0/24 maxlen: 24
                          162.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:54:3e:be:74:83:be:f9:e3:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=a70a1ca7-a334-429e-9457-3d447d01aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:6d:7e:c6:b2:81:0d:ad:96:4c:0b:50:c6:
                    68:dd:b5:ed:6d:c2:4c:2d:77:41:03:c6:69:34:00:
                    e3:3c:3a:9b:36:9c:35:18:99:52:25:03:42:bf:0b:
                    82:35:38:41:3a:66:75:34:bb:e2:ad:50:31:97:26:
                    02:98:0e:b7:0b:87:b1:57:ea:83:06:99:21:ae:05:
                    15:bc:e0:1d:69:3a:d0:44:87:81:18:73:a4:b2:64:
                    75:2a:6d:cb:fd:7d:9f:ba:4b:4e:21:f7:72:9b:e5:
                    8d:2d:1c:01:01:3f:9a:26:3a:7d:92:be:60:96:47:
                    35:68:a8:e9:d6:86:8e:3f:53:e4:5f:b8:b3:0e:c1:
                    4b:2b:ae:69:56:24:4b:00:d3:cc:0f:57:07:2c:28:
                    5d:b1:b3:97:76:c6:8d:ae:fa:3b:d2:38:99:52:30:
                    02:9b:7e:45:f3:c4:a4:38:d8:4e:ae:f9:aa:73:fc:
                    fa:98:63:5b:9e:69:5c:37:8a:7a:62:e3:ab:f9:03:
                    5b:dd:c4:36:04:c3:d5:07:07:51:ad:1b:7d:8d:9e:
                    88:95:45:09:f5:7e:b6:f0:89:e9:f2:6b:60:06:3c:
                    0c:a4:a4:72:15:04:37:44:f1:ef:58:4c:03:0c:63:
                    21:63:2d:34:86:ad:9e:14:fc:7f:17:9e:5d:95:c5:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:48:56:8F:E0:B4:7D:A7:50:EA:E2:EC:47:67:82:AE:B1:71:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl

            X509v3 Authority Key Identifier:
                keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.243.0/24
                  162.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:20:15:4a:67:a8:35:c9:bb:07:7b:dc:7f:a0:d5:6d:3e:1a:
         af:f0:ea:f5:7b:d1:4c:9a:0f:64:3f:7b:64:ff:aa:f2:cb:3c:
         5c:14:3b:d5:aa:93:d2:2d:5f:37:f6:f8:59:f6:a5:24:6b:ea:
         29:c6:8a:d4:66:99:33:b6:f1:b2:0c:87:b4:0a:7d:47:0d:6e:
         a3:2f:18:fd:9f:cf:42:3b:3b:73:48:c7:ca:93:1b:22:39:e6:
         49:0e:48:24:f5:8a:3e:ad:bd:28:bc:2c:c6:ea:18:dd:98:cc:
         2c:96:69:48:86:95:3f:cc:ec:56:e8:a7:9c:46:67:0c:2b:ad:
         2f:ba:ac:34:f6:b2:d3:05:d4:52:59:11:3a:b2:5c:c3:21:25:
         54:5f:c5:8a:c5:e3:8a:f4:d5:76:db:ae:4b:35:c8:27:5b:76:
         04:62:05:c4:a2:38:c0:55:62:5e:72:0d:b5:d1:81:06:0d:ec:
         86:6a:8e:27:c8:ad:56:8b:a3:9b:94:37:88:ab:f8:00:c0:56:
         8e:a8:c1:6d:82:70:cb:4d:9a:67:43:cb:cb:56:cb:44:e0:cd:
         33:a4:a3:7b:fa:8e:21:eb:8b:5f:e5:61:31:29:5e:74:83:f6:
         b8:8b:4d:67:a0:94:63:06:ae:38:46:64:aa:51:83:04:60:7e:
         19:bf:2a:b2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4q1FQ+vnSDvvnjGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1MDAtMDUyNWFkNWZh
YzFhMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
YTcwYTFjYTctYTMzNC00MjllLTk0NTctM2Q0NDdkMDFhZWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+JtfsaygQ2tlkwLUMZo3bXtbcJMLXdBA8Zp
NADjPDqbNpw1GJlSJQNCvwuCNThBOmZ1NLvirVAxlyYCmA63C4exV+qDBpkhrgUV
vOAdaTrQRIeBGHOksmR1Km3L/X2fuktOIfdym+WNLRwBAT+aJjp9kr5glkc1aKjp
1oaOP1PkX7izDsFLK65pViRLANPMD1cHLChdsbOXdsaNrvo70jiZUjACm35F88Sk
ONhOrvmqc/z6mGNbnmlcN4p6YuOr+QNb3cQ2BMPVBwdRrRt9jZ6IlUUJ9X628Inp
8mtgBjwMpKRyFQQ3RPHvWEwDDGMhYy00hq2eFPx/F55dlcXPSwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGICSFaP4LR9p1Dq4uxHZ4KusXEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgz
ZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1YWQ1ZmFjMWEvYzFkY2Q1NGMtMzgzZC0z
MzcyLWIyMjAtODQ5NjU1NDI0ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1
MDAtMDUyNWFkNWZhYzFhL2ZkODNmNTI2LWRkOGItNGNmMy1iNTAwLTA1MjVhZDVm
YWMxYS5jcmwwHwYDVR0jBBgwFoAU6tWZqteBYox/bUT22de2zRVarrkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgzZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1
YWQ1ZmFjMWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAotLzAwQA
ovSNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAYgFUpnqDXJuwd73H+g1W0+Gq/w6vV70UyaD2Q/e2T/qvLL
PFwUO9Wqk9ItXzf2+Fn2pSRr6inGitRmmTO28bIMh7QKfUcNbqMvGP2fz0I7O3NI
x8qTGyI55kkOSCT1ij6tvSi8LMbqGN2YzCyWaUiGlT/M7Fbop5xGZwwrrS+6rDT2
stMF1FJZETqyXMMhJVRfxYrF44r01Xbbrks1yCdbdgRiBcSiOMBVYl5yDbXRgQYN
7IZqjifIrVaLo5uUN4ir+ADAVo6owW2CcMtNmmdDy8tWy0TgzTOko3v6jiHri1/l
YTEpXnSD9riLTWeglGMGrjhGZKpRgwRgfhm/KrI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:11 2026 by rpki-client