Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
File:                     6bc53289-b90e-34be-bcd9-c39465f48c2f.roa (raw, json)
Hash identifier:          lRFHgNM5OCCvcIcdAeC40xuRYZPFfbaqUiNJgz6qfwk=
Subject key identifier:   CA:71:02:F7:A0:A6:41:B9:7A:B0:D5:52:5C:8A:85:B1:8F:19:C3:BD
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA8EC3E03E993ED5CC9E82440
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     63199
IP address blocks:        148.153.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3e:03:e9:93:ed:5c:c9:e8:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=e03f65d5-f1fc-4826-a5d7-cac1f557132d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:41:4e:df:54:58:d4:8b:23:dc:51:db:eb:
                    96:91:eb:3a:af:f4:a7:c4:44:d1:63:d9:ab:a1:46:
                    e9:d6:6c:44:72:cf:aa:9e:b9:ce:f9:a6:7c:91:77:
                    a2:1b:32:00:53:4e:1f:39:2b:24:68:23:40:fd:8a:
                    b0:95:af:36:00:a9:b2:22:e5:30:d3:ca:33:89:72:
                    b3:cb:f9:51:dd:3f:77:56:1c:80:43:66:c4:f0:db:
                    63:28:1e:da:5b:a4:5a:d2:00:0e:af:1b:00:92:cb:
                    41:ee:47:e3:0a:e1:0a:91:03:72:c5:4b:e9:1a:44:
                    a6:13:d1:33:b7:af:af:f0:90:d1:43:46:20:92:20:
                    7c:4f:2d:b1:af:b8:82:54:63:c7:4b:cf:f8:72:1f:
                    a8:4d:ab:1b:59:29:61:0c:d3:61:38:af:d6:04:d5:
                    a8:f5:a3:a5:0e:d2:10:6d:b8:b8:ca:ff:68:8c:33:
                    40:d2:78:47:21:bb:65:bf:9a:e4:74:c1:d1:44:1e:
                    b5:b5:2e:61:9d:40:91:34:01:e5:12:e7:9f:eb:62:
                    d4:c7:0e:e6:30:eb:16:3e:0d:16:de:5f:dd:85:a9:
                    ba:97:c1:14:bf:62:bb:c1:27:bb:31:89:d9:fb:8f:
                    53:f2:17:9d:e3:d4:1a:0e:09:c6:d8:d1:f9:63:db:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:71:02:F7:A0:A6:41:B9:7A:B0:D5:52:5C:8A:85:B1:8F:19:C3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:63:59:cd:66:1e:74:ba:9b:65:77:44:4b:c7:87:58:0e:
         4a:5e:8b:bf:30:d5:fe:23:a3:c1:22:ae:ae:f6:b0:b4:4a:33:
         b4:fe:de:f5:f6:1c:7c:83:52:84:4f:e7:1c:09:a1:a5:0c:59:
         a4:c0:62:86:3d:47:bc:12:ee:1e:50:82:12:09:98:8d:5e:51:
         bd:8b:cb:cf:0f:cf:d8:53:76:aa:a8:28:0a:5f:96:e5:4e:e7:
         f5:f8:94:9a:3d:38:cb:15:fd:6f:1d:37:e6:ff:46:cc:ea:6a:
         bb:d3:55:7b:66:f3:92:7a:1e:93:07:b4:9c:d6:11:bb:cf:6f:
         3f:6a:44:dc:0c:8a:2d:1f:7e:b4:db:a1:22:a0:8c:eb:49:88:
         5a:f3:45:64:1c:62:5d:3a:9d:ba:a5:b5:8e:c5:64:43:34:8b:
         e3:56:42:ff:6e:90:cf:7a:9d:d7:48:f5:aa:1f:57:5e:b6:06:
         28:e5:7a:42:6e:8c:df:25:8e:06:fa:c6:b5:5d:6c:26:a6:3c:
         65:8e:c4:0c:c3:67:de:cc:77:59:7e:c5:53:df:e6:02:47:cb:
         3a:9e:90:0a:94:94:85:ce:cb:1e:60:bd:5a:bb:a0:fc:1f:b9:
         3c:a1:dd:d2:b5:61:4b:22:fe:d0:2f:bb:56:8d:a1:ad:bd:32:
         e8:58:5f:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7D4D6ZPtXMnoJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
ZTAzZjY1ZDUtZjFmYy00ODI2LWE1ZDctY2FjMWY1NTcxMzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVVBTt9UWNSLI9xR2+uWkes6r/SnxETRY9mr
oUbp1mxEcs+qnrnO+aZ8kXeiGzIAU04fOSskaCNA/Yqwla82AKmyIuUw08oziXKz
y/lR3T93VhyAQ2bE8NtjKB7aW6Ra0gAOrxsAkstB7kfjCuEKkQNyxUvpGkSmE9Ez
t6+v8JDRQ0YgkiB8Ty2xr7iCVGPHS8/4ch+oTasbWSlhDNNhOK/WBNWo9aOlDtIQ
bbi4yv9ojDNA0nhHIbtlv5rkdMHRRB61tS5hnUCRNAHlEuef62LUxw7mMOsWPg0W
3l/dham6l8EUv2K7wSe7MYnZ+49T8hed49QaDgnG2NH5Y9vlUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpxAvegpkG5erDVUlyKhbGPGcO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNmJjNTMyODktYjkwZS0z
NGJlLWJjZDktYzM5NDY1ZjQ4YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjZY1nNZh50uptld0RLx4dYDkpei78w1f4jo8Eirq72sLRKM7T+3vX2
HHyDUoRP5xwJoaUMWaTAYoY9R7wS7h5QghIJmI1eUb2Ly88Pz9hTdqqoKApfluVO
5/X4lJo9OMsV/W8dN+b/RszqarvTVXtm85J6HpMHtJzWEbvPbz9qRNwMii0ffrTb
oSKgjOtJiFrzRWQcYl06nbqltY7FZEM0i+NWQv9ukM96nddI9aofV162BijlekJu
jN8ljgb6xrVdbCamPGWOxAzDZ97Md1l+xVPf5gJHyzqekAqUlIXOyx5gvVq7oPwf
uTyh3dK1YUsi/tAvu1aNoa29MuhYX6Q=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:07:50 2026 by rpki-client