Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/f0fd29dc-e5a7-3400-9d3a-285c50c4df1f.roa
File:                     f0fd29dc-e5a7-3400-9d3a-285c50c4df1f.roa (raw, json)
Hash identifier:          UGeeUp0yFyhvjswZMwzwclXjTAmogeujxvQRIUYRNgk=
Subject key identifier:   1B:48:E1:FA:42:02:41:77:8C:17:AC:DD:F9:AC:AA:8F:44:82:9B:70
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584F5A32A462F7E6A3D4CC928C00
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/f0fd29dc-e5a7-3400-9d3a-285c50c4df1f.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401133
IP address blocks:        148.59.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a4:62:f7:e6:a3:d4:cc:92:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=2a404d5a-fdb6-488f-9a19-d29271808661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:6f:af:ad:f7:3d:c4:90:3e:c4:4c:17:95:
                    a7:81:ab:a8:5c:7e:37:91:8b:6f:9c:c7:b2:71:16:
                    d6:77:07:bc:61:c3:aa:15:9d:3b:23:02:1d:68:cc:
                    9d:44:a1:74:90:ba:f4:48:d6:42:40:64:eb:ea:20:
                    6b:e0:d9:c9:5a:a7:ef:81:cd:07:5b:ab:53:ca:1c:
                    f3:94:76:0d:2b:58:f8:a9:4d:b7:0e:0f:35:7b:00:
                    9d:41:8d:21:61:94:56:32:f7:fa:e9:cc:51:bd:9c:
                    df:27:e5:02:4d:1c:fe:48:da:55:ea:9b:6f:b2:aa:
                    f2:fe:f2:3a:b5:3e:54:70:ed:d1:cc:e0:c9:53:93:
                    9d:c5:03:49:00:46:fa:55:ad:89:95:84:75:d5:85:
                    8a:86:3c:ff:9a:ed:4a:38:55:83:01:0b:91:c1:2f:
                    aa:6e:cd:3b:44:7b:3e:26:26:c6:91:a2:90:d5:c1:
                    20:84:da:67:ee:98:44:e5:f3:42:1f:e3:74:43:a8:
                    c5:59:c7:3d:e2:6e:f7:91:f8:a8:ff:7a:7b:3c:88:
                    87:fa:50:3d:31:49:85:4e:e2:81:a6:b8:01:31:70:
                    32:5f:73:d6:3a:70:3e:f2:72:24:0d:f3:ad:ef:4e:
                    f8:b1:ca:4f:ec:78:c6:43:7f:42:92:49:21:e7:d9:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:48:E1:FA:42:02:41:77:8C:17:AC:DD:F9:AC:AA:8F:44:82:9B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/f0fd29dc-e5a7-3400-9d3a-285c50c4df1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:04:d3:7f:b5:4d:b8:86:43:a7:16:85:7a:28:71:a4:4e:
         a7:a6:3a:e5:be:3b:40:7f:0a:1e:62:81:46:67:e3:49:c9:47:
         83:da:b4:8c:13:fd:03:64:38:12:b1:fc:08:cd:7f:41:6f:1c:
         62:14:c8:61:cc:b2:ad:91:7d:90:b8:3f:66:1d:af:78:52:10:
         ca:54:8a:3e:47:83:ab:4e:36:1b:4c:be:fc:95:5b:eb:a4:47:
         43:c6:84:87:cf:10:df:46:c2:f4:ff:10:91:8e:a9:05:bb:5b:
         c4:0a:90:9a:f9:0a:b3:20:be:89:5f:56:45:5f:86:9b:7e:3b:
         9d:e8:50:2b:44:0d:a5:ba:35:61:f2:4b:87:ed:c6:dc:cc:fc:
         8d:f4:6c:fb:c0:51:65:74:4e:1f:1e:21:05:ab:19:e4:28:a0:
         01:d1:8c:6d:9a:d4:af:3f:be:24:95:c0:40:ab:3e:c5:24:01:
         22:6d:56:3c:d8:d2:15:88:19:9c:58:ae:91:58:e1:2f:99:a0:
         4d:d4:3e:f3:01:89:52:7a:94:24:12:ca:4d:94:79:74:87:1d:
         41:e5:76:f7:5a:18:3c:a9:cc:c2:5b:83:23:55:ab:79:25:0d:
         4c:8d:80:7a:f9:8a:13:06:57:a9:02:dd:30:ac:7d:12:73:ff:
         f2:f8:65:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqRi9+aj1MySjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYzN2E3ODAtMTk0NC00ZDc1LWI2MjMtMGMxMGM5NmY1
NmViMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MmE0MDRkNWEtZmRiNi00ODhmLTlhMTktZDI5MjcxODA4NjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDVvr633PcSQPsRMF5WngauoXH43kYtvnMey
cRbWdwe8YcOqFZ07IwIdaMydRKF0kLr0SNZCQGTr6iBr4NnJWqfvgc0HW6tTyhzz
lHYNK1j4qU23Dg81ewCdQY0hYZRWMvf66cxRvZzfJ+UCTRz+SNpV6ptvsqry/vI6
tT5UcO3RzODJU5OdxQNJAEb6Va2JlYR11YWKhjz/mu1KOFWDAQuRwS+qbs07RHs+
JibGkaKQ1cEghNpn7phE5fNCH+N0Q6jFWcc94m73kfio/3p7PIiH+lA9MUmFTuKB
prgBMXAyX3PWOnA+8nIkDfOt7074scpP7HjGQ39Ckkkh59m0tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtI4fpCAkF3jBes3fmsqo9EgptwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NjM3
YTc4MC0xOTQ0LTRkNzUtYjYyMy0wYzEwYzk2ZjU2ZWIvZjBmZDI5ZGMtZTVhNy0z
NDAwLTlkM2EtMjg1YzUwYzRkZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODYzN2E3ODAtMTk0NC00ZDc1LWI2
MjMtMGMxMGM5NmY1NmViLzg2MzdhNzgwLTE5NDQtNGQ3NS1iNjIzLTBjMTBjOTZm
NTZlYi5jcmwwHwYDVR0jBBgwFoAUl2nepdrGIH9CzH2G2Ces4TYE9pcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NjM3YTc4MC0xOTQ0LTRkNzUtYjYyMy0wYzEw
Yzk2ZjU2ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9LBNN/tU24hkOnFoV6KHGkTqemOuW+O0B/Ch5igUZn40nJR4PatIwT
/QNkOBKx/AjNf0FvHGIUyGHMsq2RfZC4P2Ydr3hSEMpUij5Hg6tONhtMvvyVW+uk
R0PGhIfPEN9GwvT/EJGOqQW7W8QKkJr5CrMgvolfVkVfhpt+O53oUCtEDaW6NWHy
S4ftxtzM/I30bPvAUWV0Th8eIQWrGeQooAHRjG2a1K8/viSVwECrPsUkASJtVjzY
0hWIGZxYrpFY4S+ZoE3UPvMBiVJ6lCQSyk2UeXSHHUHldvdaGDypzMJbgyNVq3kl
DUyNgHr5ihMGV6kC3TCsfRJz//L4ZXY=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:18 2026 by rpki-client