Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
File:                     0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa (raw, json)
Hash identifier:          9Q+9NSmRanvyb7s1GYTtGGoKaMrP6uMk1B35QLjDvWc=
Subject key identifier:   6D:F3:E7:5C:4F:57:E8:87:0E:25:49:77:C7:A0:B2:38:41:E6:E2:8D
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584E0005E684BE7502A33B481020
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     62468
IP address blocks:        107.151.192.0/24 maxlen: 24
                          107.151.193.0/24 maxlen: 24
                          107.151.194.0/24 maxlen: 24
                          107.151.195.0/24 maxlen: 24
                          107.151.196.0/24 maxlen: 24
                          107.151.197.0/24 maxlen: 24
                          107.151.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e6:84:be:75:02:a3:3b:48:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e3910f87-82e8-4b26-ad5f-ba45f1c71164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:e4:61:ae:8b:7c:71:82:3c:b0:39:09:7f:
                    bd:ac:bb:9e:1f:7f:77:0f:80:4a:3c:06:11:24:d2:
                    c2:0b:15:fd:79:50:64:3e:98:76:df:e9:24:82:5a:
                    17:d5:12:5a:0c:ab:11:05:7d:1d:df:cf:44:95:3c:
                    d7:f4:91:2a:5b:6d:86:ae:d9:1c:3b:34:e1:ac:9b:
                    70:e1:b7:5c:6b:4a:05:6e:6a:96:95:c6:0b:62:30:
                    2c:25:60:43:38:cd:ac:01:48:d6:e4:3e:27:57:0b:
                    c4:e5:53:54:ed:99:76:4e:9e:d5:24:c2:87:50:45:
                    e5:54:35:c9:32:d8:d1:4f:3e:47:73:81:ac:27:b0:
                    30:f2:38:2a:85:d4:86:fd:12:ac:10:98:23:a1:6c:
                    4b:62:90:12:77:71:3a:41:b7:76:3b:1e:e4:5f:ae:
                    a2:f6:35:66:4c:89:76:da:d1:4d:ff:75:55:4f:23:
                    84:47:53:60:d2:7e:d3:5d:c9:b9:3b:e5:bb:bd:71:
                    1a:4a:05:4e:16:10:ea:10:21:09:a6:95:6c:a6:81:
                    80:9b:bd:10:11:5b:b4:e0:7e:98:c5:ba:a1:82:5e:
                    38:5b:45:2a:50:3d:f3:a7:ab:97:29:1e:5c:b7:e1:
                    fc:2b:1c:22:34:5f:f2:1c:41:f6:12:02:04:21:17:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:E7:5C:4F:57:E8:87:0E:25:49:77:C7:A0:B2:38:41:E6:E2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.192.0-107.151.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:54:b3:1c:69:6f:b9:21:67:3f:9d:39:f2:96:30:1a:db:dd:
         ab:c1:5e:e0:d9:3f:0d:26:7c:fd:c9:7b:8a:fa:3c:d1:d8:87:
         59:0d:b1:d2:88:ec:7b:fd:c9:ad:07:68:f1:4b:ee:cf:af:d6:
         ff:4f:af:ed:81:d6:c5:99:07:82:07:84:b8:42:df:e0:5e:ca:
         f2:02:ba:52:0d:86:f8:1f:98:d3:72:a4:09:20:48:7f:e5:26:
         11:ff:a8:54:1a:3f:80:f0:e1:73:96:bb:27:90:a4:ae:80:f3:
         08:ad:82:d1:49:aa:0f:5c:51:60:da:30:4e:e6:cb:28:80:66:
         ad:e8:e6:fd:06:14:47:b5:65:5b:81:d9:38:c0:58:0e:d5:be:
         a3:4d:0b:2c:a2:38:4a:21:15:f5:f8:95:2c:65:02:e7:d2:7c:
         98:03:2c:62:cf:e0:7a:1a:6a:20:5f:20:8c:cc:2f:01:28:31:
         7a:3a:9f:dc:3c:0d:56:22:4c:59:b8:91:bc:d0:bf:2d:88:8a:
         05:1d:28:9b:83:ed:c0:a4:54:de:a4:66:55:47:23:66:d4:4b:
         24:7e:cf:46:3a:d4:13:80:40:1a:16:fe:ef:1f:00:f7:3f:57:
         4a:38:cb:55:a4:3d:c1:ea:03:7c:24:d5:80:48:bf:f9:c1:a9:
         08:37:57:8e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4ABeaEvnUCoztIECAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZTM5MTBmODctODJlOC00YjI2LWFkNWYtYmE0NWYxYzcxMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVzkYa6LfHGCPLA5CX+9rLueH393D4BKPAYR
JNLCCxX9eVBkPph23+kkgloX1RJaDKsRBX0d389ElTzX9JEqW22GrtkcOzThrJtw
4bdca0oFbmqWlcYLYjAsJWBDOM2sAUjW5D4nVwvE5VNU7Zl2Tp7VJMKHUEXlVDXJ
MtjRTz5Hc4GsJ7Aw8jgqhdSG/RKsEJgjoWxLYpASd3E6Qbd2Ox7kX66i9jVmTIl2
2tFN/3VVTyOER1Ng0n7TXcm5O+W7vXEaSgVOFhDqECEJppVspoGAm70QEVu04H6Y
xbqhgl44W0UqUD3zp6uXKR5ct+H8KxwiNF/yHEH2EgIEIRezIQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFG3z51xPV+iHDiVJd8egsjhB5uKNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMGQxYTMyYjMtYjJhNi0z
MzBjLWEwYzctZGI2MTk1YzU2NGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZrl8AD
BABrl8YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEABlSzHGlvuSFnP5058pYwGtvdq8Fe4Nk/DSZ8/cl7ivo8
0diHWQ2x0ojse/3JrQdo8Uvuz6/W/0+v7YHWxZkHggeEuELf4F7K8gK6Ug2G+B+Y
03KkCSBIf+UmEf+oVBo/gPDhc5a7J5CkroDzCK2C0UmqD1xRYNowTubLKIBmrejm
/QYUR7VlW4HZOMBYDtW+o00LLKI4SiEV9fiVLGUC59J8mAMsYs/gehpqIF8gjMwv
ASgxejqf3DwNViJMWbiRvNC/LYiKBR0om4PtwKRU3qRmVUcjZtRLJH7PRjrUE4BA
Ghb+7x8A9z9XSjjLVaQ9weoDfCTVgEi/+cGpCDdXjg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:51 2026 by rpki-client