Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          9fP7/fXsIDG2CbN2R/P5NvR39wCnrtRcs+iRYDLoOm0=
Subject key identifier:   0D:1F:2F:80:A2:AD:38:EB:14:13:70:B7:9F:2E:FE:F7:EF:1D:AF:24
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584EAD1C566986FF08B2818A1CC0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:56:69:86:ff:08:b2:81:8a:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=685d700a-6eb6-4b8a-9104-547e13f74b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:60:3c:64:78:29:39:ec:cd:07:b8:c5:48:
                    17:f5:f0:4a:85:2a:48:0a:fc:b9:6a:f8:8e:4c:3b:
                    0e:6e:42:2f:74:95:da:f6:d3:ed:c3:5e:4a:b1:a9:
                    7a:5e:43:21:55:fb:d6:bb:bb:cf:39:ed:27:67:09:
                    1f:2a:52:ff:72:7b:fb:59:58:c1:e7:f7:90:3c:b8:
                    c7:7c:2e:2a:a0:35:21:ea:41:b2:92:b6:89:c1:d9:
                    71:39:59:00:f6:ac:1b:b7:dd:dd:fd:7c:97:48:71:
                    e5:b2:db:fc:89:2e:fa:2f:1b:e8:c3:86:ca:53:bb:
                    7b:f0:75:52:6a:0a:c7:b0:8b:7f:9a:97:4c:53:63:
                    62:fc:63:a3:2e:3c:0b:ef:3d:1f:3f:e1:40:16:74:
                    c8:ac:24:9e:6f:52:f7:f5:9d:b3:61:c9:db:8b:1c:
                    76:62:45:6b:d9:c2:50:ce:cd:11:ab:eb:6a:a1:e1:
                    98:0a:98:45:61:9c:17:d6:d4:62:01:37:b8:48:fb:
                    f3:39:5b:9e:70:50:52:69:f4:d1:3c:20:cc:f2:fa:
                    22:86:32:6a:d8:f0:65:96:dc:e8:8b:2e:69:73:a0:
                    4b:a4:88:66:36:da:f8:1c:2c:63:af:ad:e5:78:98:
                    7e:06:01:97:f9:cc:a9:27:e8:e2:5d:66:30:bb:4b:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:2F:80:A2:AD:38:EB:14:13:70:B7:9F:2E:FE:F7:EF:1D:AF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:15:70:f5:9d:8f:07:f1:02:ec:4c:3c:02:5d:a5:ec:6f:
         c9:22:fd:38:f6:db:6f:fa:b1:b8:fa:24:c8:43:5a:ff:8b:06:
         52:47:d2:94:52:ae:26:b5:4e:dd:08:5d:34:e5:a6:5d:81:5a:
         5e:ad:04:aa:62:ba:aa:81:e9:d2:25:a9:bb:67:e9:71:78:42:
         9a:97:15:02:90:b4:f7:10:ca:d0:a0:19:f6:92:fc:3e:5b:5f:
         7f:28:38:53:bd:0b:db:dc:ad:6b:f6:d0:2a:16:61:6c:fe:cc:
         d0:a7:54:92:cd:3a:4b:a1:57:45:49:03:9c:4a:fd:f9:14:d1:
         d5:0e:0b:5d:9b:3d:94:ee:5e:ec:49:14:74:2a:ae:be:6d:ee:
         3e:8f:6e:e4:31:28:45:e0:0e:79:7c:8a:42:ff:45:b9:5e:31:
         c6:32:84:ff:05:f9:b2:0c:63:e8:b9:b8:3f:fc:1e:59:fe:06:
         a4:99:55:8b:23:b2:60:bd:8d:0f:41:05:eb:bb:71:ea:e9:95:
         1c:b8:db:1f:23:92:f0:eb:ca:ee:15:89:eb:df:19:20:cf:b9:
         6d:42:50:42:6c:83:1d:36:36:2f:32:d5:2d:c5:ec:5e:ef:aa:
         c8:c7:ae:a1:f3:0a:bf:42:5b:44:b4:f4:5c:31:17:52:57:b1:
         b4:6e:66:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFZphv8IsoGKHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5
ZjI3MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
Njg1ZDcwMGEtNmViNi00YjhhLTkxMDQtNTQ3ZTEzZjc0Yjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucJgPGR4KTnszQe4xUgX9fBKhSpICvy5aviO
TDsObkIvdJXa9tPtw15Ksal6XkMhVfvWu7vPOe0nZwkfKlL/cnv7WVjB5/eQPLjH
fC4qoDUh6kGykraJwdlxOVkA9qwbt93d/XyXSHHlstv8iS76Lxvow4bKU7t78HVS
agrHsIt/mpdMU2Ni/GOjLjwL7z0fP+FAFnTIrCSeb1L39Z2zYcnbixx2YkVr2cJQ
zs0Rq+tqoeGYCphFYZwX1tRiATe4SPvzOVuecFBSafTRPCDM8voihjJq2PBlltzo
iy5pc6BLpIhmNtr4HCxjr63leJh+BgGX+cypJ+jiXWYwu0tkTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0fL4CirTjrFBNwt58u/vfvHa8kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0
NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvMGQ5YjAwMDctMjVmNC0z
MmUzLTk1YWEtNGJjOTdkY2RlNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1
ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0
OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy
MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClDu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq1FXD1nY8H8QLsTDwCXaXsb8ki/Tj222/6sbj6JMhDWv+LBlJH0pRS
ria1Tt0IXTTlpl2BWl6tBKpiuqqB6dIlqbtn6XF4QpqXFQKQtPcQytCgGfaS/D5b
X38oOFO9C9vcrWv20CoWYWz+zNCnVJLNOkuhV0VJA5xK/fkU0dUOC12bPZTuXuxJ
FHQqrr5t7j6PbuQxKEXgDnl8ikL/RbleMcYyhP8F+bIMY+i5uD/8Hln+BqSZVYsj
smC9jQ9BBeu7cerplRy42x8jkvDryu4VievfGSDPuW1CUEJsgx02Ni8y1S3F7F7v
qsjHrqHzCr9CW0S09FwxF1JXsbRuZuo=
-----END CERTIFICATE-----
Generated at Sun Sep 13 12:09:28 2026 by rpki-client