Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa
File:                     9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa (raw, json)
Hash identifier:          fe4hQI8PuE+y+7nsL2/ptp1IFqsVI/p/YC0/l6oDxfA=
Subject key identifier:   80:19:0B:7F:7D:D8:6B:85:A2:EC:2A:64:03:14:0D:93:24:1F:06:FF
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E7634DAC9642A62BD897B6FC0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     36511
IP address blocks:        192.149.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:da:c9:64:2a:62:bd:89:7b:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=050a4588-8e9c-4b34-978c-c2acf7e030ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:77:6f:46:b8:67:ed:a2:27:68:9c:c8:bb:
                    e7:74:33:35:1b:a2:b4:aa:52:c8:b6:d3:22:bf:f7:
                    98:4a:75:4d:1a:4d:3b:42:3a:b4:82:84:be:ec:4c:
                    44:76:b8:c8:4a:1b:c5:b3:a0:d6:55:78:32:6f:56:
                    69:08:b5:07:45:8f:55:89:d5:55:bf:f0:15:09:41:
                    7d:bf:98:28:fe:6b:f5:38:69:f7:cc:f5:5f:d9:7d:
                    92:3f:74:d1:c9:d0:93:28:59:05:0f:ca:d8:dc:79:
                    36:35:2c:07:6f:c2:7d:00:97:e9:c9:83:d7:7b:ab:
                    99:35:cc:c3:6c:bb:8c:74:e8:6b:cb:0a:fc:f8:a3:
                    21:ad:7e:de:fe:7b:72:3e:dc:71:ca:39:ae:ad:25:
                    b5:85:d9:54:db:d1:3b:de:e2:94:2d:58:ec:0a:34:
                    1e:f8:a5:8c:8a:ae:41:0f:97:42:f5:d0:2d:c3:09:
                    07:d7:b9:3f:6e:f5:ac:69:8b:ef:a4:f9:d6:70:39:
                    ba:09:65:d3:64:df:b2:f8:4b:31:84:42:8c:a8:ed:
                    17:f5:3b:2f:7b:21:30:15:5e:06:f2:91:2e:17:0d:
                    b4:91:e5:a4:d1:f7:66:61:83:18:54:01:4d:6d:00:
                    03:55:68:29:2d:6e:e8:16:96:5a:ba:e4:2b:13:94:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:0B:7F:7D:D8:6B:85:A2:EC:2A:64:03:14:0D:93:24:1F:06:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:50:10:ac:7c:cf:1a:f4:1c:8b:d0:38:a5:87:9c:40:0f:13:
         39:66:b8:de:7e:44:39:57:1b:29:75:15:29:c9:44:8a:b3:94:
         ff:3e:af:e9:31:af:6f:2c:bc:0d:7a:3e:82:1d:70:de:be:f5:
         f9:c8:9c:57:ef:3b:8e:e8:30:03:89:bd:00:d0:c0:63:9c:ad:
         57:5a:15:cd:06:85:d9:d0:84:b1:25:c1:55:12:98:93:a4:de:
         a3:5f:88:2f:db:6d:b4:73:b3:fd:c0:65:f1:2f:63:e0:22:c4:
         16:17:14:9d:75:16:85:a2:0c:fc:62:84:9a:2a:a2:67:bd:c2:
         42:d3:89:9c:9e:29:f5:7b:ef:7c:4f:8d:e4:c1:a3:44:a4:39:
         0b:26:53:b0:c1:37:76:c4:c1:f1:45:89:e7:bb:40:5a:85:a6:
         b5:fe:eb:07:03:b0:bd:bd:08:c4:9f:0c:e5:3f:7e:a6:36:d4:
         a1:d5:c9:b2:54:5b:91:ef:08:9f:9d:3b:8d:e9:03:71:ee:89:
         ae:20:47:19:13:15:35:29:e5:21:f1:8d:72:29:08:9e:bf:88:
         fc:90:2b:2e:9a:cf:10:8b:75:75:42:af:c2:05:c1:2b:f3:4b:
         e3:4a:9d:6c:ed:bf:84:1b:94:e6:67:ac:a3:36:17:59:36:68:
         c2:a9:d3:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNrJZCpivYl7b8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDUwYTQ1ODgtOGU5Yy00YjM0LTk3OGMtYzJhY2Y3ZTAzMGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx793b0a4Z+2iJ2icyLvndDM1G6K0qlLIttMi
v/eYSnVNGk07Qjq0goS+7ExEdrjIShvFs6DWVXgyb1ZpCLUHRY9VidVVv/AVCUF9
v5go/mv1OGn3zPVf2X2SP3TRydCTKFkFD8rY3Hk2NSwHb8J9AJfpyYPXe6uZNczD
bLuMdOhrywr8+KMhrX7e/ntyPtxxyjmurSW1hdlU29E73uKULVjsCjQe+KWMiq5B
D5dC9dAtwwkH17k/bvWsaYvvpPnWcDm6CWXTZN+y+EsxhEKMqO0X9TsveyEwFV4G
8pEuFw20keWk0fdmYYMYVAFNbQADVWgpLW7oFpZauuQrE5SdWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAZC3992GuFouwqZAMUDZMkHwb/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvOTM1OGQ2ZTMtMTVkYS0z
ZjJkLTlhNGEtZmY2NWM3OTgwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdQEKx8zxr0HIvQOKWHnEAPEzlmuN5+RDlXGyl1FSnJRIqzlP8+r+kx
r28svA16PoIdcN6+9fnInFfvO47oMAOJvQDQwGOcrVdaFc0GhdnQhLElwVUSmJOk
3qNfiC/bbbRzs/3AZfEvY+AixBYXFJ11FoWiDPxihJoqome9wkLTiZyeKfV773xP
jeTBo0SkOQsmU7DBN3bEwfFFiee7QFqFprX+6wcDsL29CMSfDOU/fqY21KHVybJU
W5HvCJ+dO43pA3Huia4gRxkTFTUp5SHxjXIpCJ6/iPyQKy6azxCLdXVCr8IFwSvz
S+NKnWztv4QblOZnrKM2F1k2aMKp08A=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:06:01 2026 by rpki-client