Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa
File:                     acdfc857-b60f-31a5-a03d-714b58be33d7.roa (raw, json)
Hash identifier:          DGGxMULh2QgRXQnTiUeG4NbMzLVxn6x1QIPrheCzLH8=
Subject key identifier:   77:30:6F:7F:D7:B3:67:E9:74:C1:E3:D2:BA:18:E9:F4:E3:7D:F6:B8
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EB416FA659F2914F958292750
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     63199
IP address blocks:        148.153.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:fa:65:9f:29:14:f9:58:29:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=6fd9f0e3-b10f-4c5e-a268-d26f9b51d1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:82:a6:dd:52:17:55:9c:97:87:47:90:4b:
                    9a:62:5a:a9:76:01:c4:a4:2d:40:1a:20:81:3f:f1:
                    ee:73:34:bf:c3:25:e6:8b:2d:26:7a:73:4f:2d:9a:
                    5d:61:65:7b:4e:e2:55:94:55:05:6c:45:f4:ad:b9:
                    41:1e:77:0d:02:25:ab:e7:b6:e5:81:ae:e1:75:dd:
                    aa:08:16:54:b7:65:f3:ea:d8:72:96:46:82:c5:d6:
                    83:2f:e7:da:4b:0c:e9:3f:5f:ed:8f:8e:ca:7a:99:
                    8a:80:65:df:ed:f1:bc:e4:34:11:9f:d8:c9:ea:89:
                    d2:0e:ce:90:f9:d3:06:7b:f6:64:02:8d:7c:d1:92:
                    e6:a8:5b:d4:1a:e6:9f:52:60:35:eb:d9:67:e7:48:
                    8d:aa:60:39:c5:46:ae:d4:35:50:55:5b:19:f5:71:
                    68:f7:fb:11:4a:45:c7:53:a6:8c:a5:91:44:e7:84:
                    4f:74:db:4e:25:56:ef:01:52:7d:f3:e2:ce:ea:ab:
                    a3:89:27:c8:5c:8a:89:a4:d6:e4:06:c3:c2:02:67:
                    7a:59:0c:49:c2:e5:32:4f:4d:77:dc:f5:f7:e0:d4:
                    e9:02:f9:16:7d:30:29:6f:a1:5c:9f:55:49:57:2a:
                    fb:e1:25:40:cf:71:43:34:c7:af:3c:f4:19:f7:86:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:6F:7F:D7:B3:67:E9:74:C1:E3:D2:BA:18:E9:F4:E3:7D:F6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:a9:6a:f6:0d:a6:5f:bf:ae:5b:83:9d:a3:9e:0a:81:50:
         34:3d:b7:52:c3:44:90:ab:36:09:25:12:06:6c:e6:a5:bf:ce:
         9e:02:bf:bd:b0:72:7d:55:2e:c2:f1:1c:85:b7:e8:c4:7e:3b:
         a5:9f:e8:74:06:46:7c:ae:f1:2b:47:0b:53:55:bb:55:22:2f:
         ab:f4:7b:32:8f:d6:ba:73:a9:ff:b5:f0:06:c5:ce:6e:45:da:
         ab:50:48:13:6e:d8:ff:aa:8e:6e:f7:5a:9c:da:56:27:8c:ab:
         8a:73:4c:46:0a:e7:a8:3c:d8:78:1a:9b:98:75:30:4c:0d:36:
         f7:6e:b7:3a:3d:52:1e:66:47:92:9f:0d:df:43:c9:0c:ad:71:
         c4:a6:7f:be:42:80:ed:16:90:3f:31:d7:bf:bd:9e:f3:a1:f0:
         a4:48:1d:14:3a:0a:22:87:01:15:79:b7:a6:bb:3a:b4:7d:22:
         6b:f0:53:13:7e:17:54:86:7e:49:ce:88:d8:ae:40:52:ef:e8:
         55:2f:1f:8f:b2:aa:72:cb:96:d4:39:d4:f8:6f:cf:5c:fd:85:
         10:26:43:b6:60:24:80:ca:62:17:4e:be:83:72:65:60:f2:d6:
         71:a9:6c:7e:12:6f:18:2e:da:ee:15:76:0d:4e:9e:3e:5a:c9:
         79:53:15:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvplnykU+VgpJ1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk
NmZkOWYwZTMtYjEwZi00YzVlLWEyNjgtZDI2ZjliNTFkMWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HiCpt1SF1Wcl4dHkEuaYlqpdgHEpC1AGiCB
P/HuczS/wyXmiy0menNPLZpdYWV7TuJVlFUFbEX0rblBHncNAiWr57blga7hdd2q
CBZUt2Xz6thylkaCxdaDL+faSwzpP1/tj47KepmKgGXf7fG85DQRn9jJ6onSDs6Q
+dMGe/ZkAo180ZLmqFvUGuafUmA169ln50iNqmA5xUau1DVQVVsZ9XFo9/sRSkXH
U6aMpZFE54RPdNtOJVbvAVJ98+LO6qujiSfIXIqJpNbkBsPCAmd6WQxJwuUyT013
3PX34NTpAvkWfTApb6Fcn1VJVyr74SVAz3FDNMevPPQZ94YO5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcwb3/Xs2fpdMHj0roY6fTjffa4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWNkZmM4NTctYjYwZi0z
MWE1LWEwM2QtNzE0YjU4YmUzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGt6qWr2DaZfv65bg52jngqBUDQ9t1LDRJCrNgklEgZs5qW/zp4Cv72w
cn1VLsLxHIW36MR+O6Wf6HQGRnyu8StHC1NVu1UiL6v0ezKP1rpzqf+18AbFzm5F
2qtQSBNu2P+qjm73WpzaVieMq4pzTEYK56g82Hgam5h1MEwNNvdutzo9Uh5mR5Kf
Dd9DyQytccSmf75CgO0WkD8x17+9nvOh8KRIHRQ6CiKHARV5t6a7OrR9ImvwUxN+
F1SGfknOiNiuQFLv6FUvH4+yqnLLltQ51Phvz1z9hRAmQ7ZgJIDKYhdOvoNyZWDy
1nGpbH4Sbxgu2u4Vdg1Onj5ayXlTFdQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:22 2026 by rpki-client