Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa
File:                     fb1ec478-9e0c-324d-9230-e38ddaa87431.roa (raw, json)
Hash identifier:          M/DoBAwF6TjhGM4emh/sHbX4gh8E3SNaoZDQDJD+248=
Subject key identifier:   AC:BD:C2:19:B5:67:71:F3:54:EB:89:AB:F7:25:F3:20:30:A2:5D:48
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F4328584F497408583D48CA397D462F00
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400541
IP address blocks:        147.185.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:08:58:3d:48:ca:39:7d:46:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=53909657-663a-451f-8f50-a00863e89125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:27:3b:96:5c:7e:ad:ab:37:e3:84:35:32:
                    ff:33:c9:76:5f:7e:c9:dc:1a:d7:be:82:c9:81:23:
                    ee:9b:c0:a0:27:ba:83:9c:1d:f4:39:2e:23:97:e3:
                    61:e3:7d:b2:6a:5f:58:b9:9e:5c:ba:c8:5f:4d:f6:
                    1b:19:39:de:4d:15:27:84:ca:ab:1f:68:65:ba:83:
                    32:3a:2e:61:49:eb:18:32:32:dd:76:9c:27:2e:cb:
                    ea:01:49:e1:cf:ef:52:3f:09:e0:77:2f:58:6c:06:
                    d5:4c:38:0a:5e:5f:4a:ba:7c:f5:8d:97:d7:bc:df:
                    a4:51:57:36:96:10:dc:e8:5e:94:50:22:39:2c:91:
                    b0:33:73:e1:bd:e4:29:57:8e:ed:80:b0:f1:11:26:
                    b7:17:01:8f:c1:50:bf:03:b9:5a:a9:73:8f:7e:21:
                    81:3e:b3:75:ef:de:65:52:c3:d7:23:ba:a5:34:1c:
                    78:31:79:07:80:aa:6a:ae:24:eb:3b:9f:76:37:c9:
                    57:68:0a:91:06:42:f0:e9:36:43:82:f3:87:3d:a2:
                    40:56:f7:f2:cf:8a:44:02:d1:c4:2f:3d:86:9a:18:
                    60:08:6c:82:5e:88:51:f7:df:32:80:85:f1:70:a1:
                    2a:08:45:38:3d:20:fe:11:29:e8:0b:ce:fd:fd:16:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:C2:19:B5:67:71:F3:54:EB:89:AB:F7:25:F3:20:30:A2:5D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e6:ae:d7:21:cb:90:85:45:ed:e4:f7:a5:aa:db:ba:41:da:
         53:e9:af:c2:3a:a4:22:0e:89:96:31:aa:df:08:96:7c:0c:61:
         28:3b:ea:a6:4a:72:68:1d:d2:49:1b:11:85:07:8f:3d:c0:70:
         f1:ac:d8:6d:75:8f:1b:19:47:ea:16:39:82:a6:a1:5c:32:31:
         b4:bc:71:9f:de:3d:57:6d:05:f5:ee:8d:48:3c:e4:0b:bf:f6:
         c0:c2:5b:96:f8:2b:6e:bb:5b:c8:37:41:fd:5a:3f:79:f2:f7:
         fa:b4:70:dc:6d:8b:8c:55:84:4e:6e:1c:47:82:9a:22:be:bc:
         8a:a7:bf:ea:69:e7:c2:7c:f4:e2:85:ad:f7:e9:65:9b:29:be:
         07:58:84:e7:89:51:fe:5b:67:af:0f:86:e7:5d:a0:55:a5:5f:
         b1:5f:f8:0e:45:b4:b5:b2:90:66:b0:f0:5d:0c:42:fe:2d:45:
         69:9b:01:4a:0f:bd:f8:10:26:60:90:91:73:81:a4:6d:e9:b2:
         a6:e3:3e:d0:ca:82:0f:00:e4:09:fa:03:cd:89:e8:0b:2d:a1:
         ba:86:0a:b6:05:99:0a:0a:62:e6:20:c0:f1:6f:67:5d:97:7e:
         7f:03:50:22:5c:07:44:90:be:5d:8c:5a:09:15:1b:62:a4:09:
         2b:7e:3e:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAhYPUjKOX1GLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc4OGE5NDEtNDBhNi00OWUzLWFiYzYtMWY1MWYxMWU2
ZjNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTM5MDk2NTctNjYzYS00NTFmLThmNTAtYTAwODYzZTg5MTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm50nO5Zcfq2rN+OENTL/M8l2X37J3BrXvoLJ
gSPum8CgJ7qDnB30OS4jl+Nh432yal9YuZ5cushfTfYbGTneTRUnhMqrH2hluoMy
Oi5hSesYMjLddpwnLsvqAUnhz+9SPwngdy9YbAbVTDgKXl9Kunz1jZfXvN+kUVc2
lhDc6F6UUCI5LJGwM3PhveQpV47tgLDxESa3FwGPwVC/A7laqXOPfiGBPrN1795l
UsPXI7qlNBx4MXkHgKpqriTrO592N8lXaAqRBkLw6TZDgvOHPaJAVvfyz4pEAtHE
Lz2GmhhgCGyCXohR998ygIXxcKEqCEU4PSD+ESnoC879/RaNrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKy9whm1Z3HzVOuJq/cl8yAwol1IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4
YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUxZjExZTZmM2EvZmIxZWM0NzgtOWUwYy0z
MjRkLTkyMzAtZTM4ZGRhYTg3NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc4OGE5NDEtNDBhNi00OWUzLWFi
YzYtMWY1MWYxMWU2ZjNhLzE3ODhhOTQxLTQwYTYtNDllMy1hYmM2LTFmNTFmMTFl
NmYzYS5jcmwwHwYDVR0jBBgwFoAUxOcZn90XJU7Mz/mhIfJhVKKx44kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUx
ZjExZTZmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7lYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLmrtchy5CFRe3k96Wq27pB2lPpr8I6pCIOiZYxqt8IlnwMYSg76qZK
cmgd0kkbEYUHjz3AcPGs2G11jxsZR+oWOYKmoVwyMbS8cZ/ePVdtBfXujUg85Au/
9sDCW5b4K267W8g3Qf1aP3ny9/q0cNxti4xVhE5uHEeCmiK+vIqnv+pp58J89OKF
rffpZZspvgdYhOeJUf5bZ68PhuddoFWlX7Ff+A5FtLWykGaw8F0MQv4tRWmbAUoP
vfgQJmCQkXOBpG3psqbjPtDKgg8A5An6A82J6AstobqGCrYFmQoKYuYgwPFvZ12X
fn8DUCJcB0SQvl2MWgkVG2KkCSt+Ph8=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:48:34 2026 by rpki-client