Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa
File:                     cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json)
Hash identifier:          +N7cl37LCmNax0mP/Vmjp3YNpyr2mPfC/4ZYdss1q5g=
Subject key identifier:   06:23:64:6E:79:E8:3C:81:59:87:BC:91:CF:AF:B0:F8:E7:1E:78:52
Certificate issuer:       /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Certificate serial:       010D0C9F4328584EC7A1C8D011A9A0F2A0FD0A00
Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        147.160.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c8:d0:11:a9:a0:f2:a0:fd:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=bcf8d539-ad63-40e3-86ae-eb0a990c2c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:af:51:1b:7e:3e:39:cd:77:16:c6:84:42:
                    e6:a0:9a:8b:29:7a:1b:98:d3:aa:e2:b1:39:85:82:
                    27:9b:13:53:c9:58:4b:0e:27:b1:eb:92:0f:6f:49:
                    81:4d:73:2c:60:35:bf:c3:5a:46:60:a3:5f:39:49:
                    53:36:1e:03:df:07:be:cb:98:86:9b:30:0f:c0:0c:
                    9a:48:90:89:3c:09:3b:35:ad:ea:61:2f:be:40:55:
                    b8:41:bc:a6:9f:df:78:82:0d:44:28:c7:a8:bd:60:
                    b7:43:84:b7:63:5c:09:99:67:de:b3:b1:cc:38:f8:
                    98:f7:f0:7e:b7:84:95:e9:3b:a5:7d:bc:e4:25:f0:
                    dd:45:f3:a5:ea:dc:2c:70:5e:5d:df:5e:11:6f:c8:
                    6b:25:50:81:ef:42:b1:5f:07:b5:6a:dd:48:1c:69:
                    0e:c4:ab:56:8e:28:5e:a2:06:ad:aa:eb:1b:d7:e0:
                    30:5b:fe:ad:73:b9:07:9e:66:b3:86:18:b2:d3:05:
                    45:ee:76:12:e8:17:d5:4f:52:af:cd:bf:52:7c:5a:
                    6f:d8:43:e9:2c:bf:61:43:7a:1a:42:80:7c:f0:d3:
                    60:ee:01:32:2e:c8:76:0a:ce:3d:4a:0c:db:01:8f:
                    0b:c3:56:f4:61:ad:3e:a4:3e:f8:cb:d9:a8:4d:62:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:64:6E:79:E8:3C:81:59:87:BC:91:CF:AF:B0:F8:E7:1E:78:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl

            X509v3 Authority Key Identifier:
                keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:13:ec:ec:c6:92:ca:6a:f9:f0:0e:39:fc:3d:f8:14:8c:b8:
         75:1d:ba:1d:75:70:b7:5b:1a:04:f4:a3:f2:4d:a4:6a:c7:63:
         85:bf:05:6b:1e:ec:25:e6:0a:29:15:6a:0a:f2:e6:3a:bf:ed:
         5f:47:18:fa:4f:48:dd:82:38:cc:25:c3:52:a9:60:ca:4a:a0:
         e7:ed:a2:94:2b:2f:37:f7:f6:e8:3e:33:fe:2e:74:a3:2b:25:
         9a:95:89:bd:98:b4:21:c2:d7:9d:01:b5:62:56:84:35:29:6a:
         b1:a5:d7:b3:82:c6:a0:fa:ca:24:97:76:1d:43:f1:0a:2d:78:
         2b:f3:8e:03:12:e6:87:10:a0:c4:16:84:03:71:ef:25:f4:b0:
         2a:50:ad:6d:0a:8b:0a:61:a2:18:4b:07:f9:6b:d3:2f:f5:0e:
         f7:6b:f6:d0:ef:2f:f6:e3:20:0e:46:ca:d2:13:f3:ab:e7:e3:
         7e:8a:49:99:7e:a0:f2:c5:84:51:0d:48:bb:35:7d:ef:3f:c0:
         e2:ec:e6:1e:c4:1b:af:a9:b8:18:e5:9a:5c:33:57:d1:b7:db:
         80:03:98:54:d8:7b:bc:0a:46:f0:a1:62:83:33:06:b9:2e:77:
         8e:0c:f1:9d:49:bb:9a:95:ef:8b:9f:e4:e7:0e:2b:04:60:01:
         7b:7f:d1:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocjQEamg8qD9CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky
MmU2MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
YmNmOGQ1MzktYWQ2My00MGUzLTg2YWUtZWIwYTk5MGMyYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaCvURt+PjnNdxbGhELmoJqLKXobmNOq4rE5
hYInmxNTyVhLDiex65IPb0mBTXMsYDW/w1pGYKNfOUlTNh4D3we+y5iGmzAPwAya
SJCJPAk7Na3qYS++QFW4Qbymn994gg1EKMeovWC3Q4S3Y1wJmWfes7HMOPiY9/B+
t4SV6TulfbzkJfDdRfOl6twscF5d314Rb8hrJVCB70KxXwe1at1IHGkOxKtWjihe
ogatqusb1+AwW/6tc7kHnmazhhiy0wVF7nYS6BfVT1Kvzb9SfFpv2EPpLL9hQ3oa
QoB88NNg7gEyLsh2Cs49SgzbAY8Lw1b0Ya0+pD74y9moTWJtvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYjZG556DyBWYe8kc+vsPjnHnhSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4
OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvY2Y4ZmU1MmYtNTdhMi0z
YmM3LWIyNTEtZDc3MjIxOGE4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw
YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5
MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy
YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkT7OzGkspq+fAOOfw9+BSMuHUduh11cLdbGgT0o/JNpGrHY4W/BWse
7CXmCikVagry5jq/7V9HGPpPSN2COMwlw1KpYMpKoOftopQrLzf39ug+M/4udKMr
JZqVib2YtCHC150BtWJWhDUparGl17OCxqD6yiSXdh1D8QoteCvzjgMS5ocQoMQW
hANx7yX0sCpQrW0KiwphohhLB/lr0y/1Dvdr9tDvL/bjIA5GytIT86vn436KSZl+
oPLFhFENSLs1fe8/wOLs5h7EG6+puBjlmlwzV9G324ADmFTYe7wKRvChYoMzBrku
d44M8Z1Ju5qV74uf5OcOKwRgAXt/0Ro=
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:53 2026 by rpki-client