Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
File:                     01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa (raw, json)
Hash identifier:          yoBIdMF/OxiY5r4NVpNU8InHUrQ1a129O/yK7VrgU1A=
Subject key identifier:   17:E7:38:3C:06:CC:2B:B4:2C:36:0E:04:DD:A5:98:ED:91:5B:4C:E3
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584EA79A5156F72F1BA4273E9B00
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        144.86.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:51:56:f7:2f:1b:a4:27:3e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2bd528ce-f162-4a98-8781-5bc73a1011be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:b0:2c:93:e4:40:44:a6:b1:a1:34:1e:34:
                    81:b6:4e:b7:2f:75:c6:6d:c2:60:d6:ae:61:cd:23:
                    b2:90:4c:1b:a5:6c:0c:82:ae:98:54:47:8b:8b:6f:
                    32:33:32:31:89:98:b8:e2:0a:d9:dd:64:88:09:ec:
                    3a:c7:62:89:04:68:cf:70:17:05:a2:a9:5d:ee:ea:
                    aa:2c:87:39:39:0b:d0:6c:7b:dd:85:68:67:dd:58:
                    77:af:f6:53:a6:3f:02:f1:62:01:b0:89:38:1c:01:
                    a6:4b:66:cd:ef:84:47:d4:bc:90:46:c2:77:9f:3e:
                    9e:f0:85:05:a5:14:db:f5:ae:ce:54:01:8a:6a:01:
                    32:f4:f5:b1:a4:9d:13:be:21:a7:0c:ca:6c:a6:8b:
                    33:c6:d3:71:39:a1:ee:e6:fc:17:1e:ce:77:12:1a:
                    30:f4:5e:c4:5e:93:c6:28:28:2f:fd:c5:5d:eb:c8:
                    33:f6:69:ed:83:25:28:52:d7:29:9f:d4:e2:e4:ec:
                    fe:04:28:eb:b7:59:ae:b8:92:44:e7:91:64:78:4f:
                    8b:ed:46:3d:6a:1e:6a:ea:67:44:b7:3e:57:2e:2c:
                    6d:92:f9:6e:f1:e2:98:38:7c:57:82:47:7a:29:dc:
                    71:92:16:88:27:f2:b4:fa:dd:5b:63:d2:32:87:9f:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E7:38:3C:06:CC:2B:B4:2C:36:0E:04:DD:A5:98:ED:91:5B:4C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:1d:70:5e:f9:69:3c:25:fd:81:48:1e:2f:57:2f:1e:45:
         8f:b6:9b:95:df:2c:a3:4c:21:72:d4:42:ac:17:79:41:01:2e:
         10:8a:49:ec:9c:ec:66:12:fe:f2:93:7b:ed:2f:d2:55:31:34:
         65:d7:a5:7e:2b:f0:28:30:59:fe:45:d8:80:7f:4b:43:d7:41:
         f4:28:da:9b:09:81:4a:c3:1b:cd:eb:af:26:3e:a7:ee:16:01:
         d1:47:b9:f7:4d:94:07:aa:00:e2:0c:cb:d9:c3:54:48:59:eb:
         9b:cb:5e:26:c4:24:32:80:9d:53:cb:4f:ca:5f:90:b7:a5:64:
         c3:83:e9:a3:fd:20:74:61:c0:43:93:24:25:2a:4e:4a:80:d6:
         3d:17:12:d4:09:17:d5:c6:0e:39:5e:0e:3c:f0:02:61:f2:a0:
         f7:8d:b2:31:d3:fe:a5:08:fc:ba:f0:c2:4d:42:69:dd:35:59:
         eb:8f:c2:c2:32:e5:0a:08:85:47:2d:2e:7c:26:92:af:2c:0d:
         b6:5d:6b:1d:4a:7d:36:6a:a2:ca:17:83:a4:91:b2:ac:f2:a3:
         9c:59:bd:df:72:19:a2:35:a0:92:a3:57:fc:f6:3a:ed:d6:b7:
         c5:c1:06:65:ae:aa:94:1f:8f:9a:f0:55:4c:1c:0a:aa:2b:7d:
         35:b7:3f:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmlFW9y8bpCc+mwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw
YzM1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmJkNTI4Y2UtZjE2Mi00YTk4LTg3ODEtNWJjNzNhMTAxMWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUawLJPkQESmsaE0HjSBtk63L3XGbcJg1q5h
zSOykEwbpWwMgq6YVEeLi28yMzIxiZi44grZ3WSICew6x2KJBGjPcBcFoqld7uqq
LIc5OQvQbHvdhWhn3Vh3r/ZTpj8C8WIBsIk4HAGmS2bN74RH1LyQRsJ3nz6e8IUF
pRTb9a7OVAGKagEy9PWxpJ0TviGnDMpsposzxtNxOaHu5vwXHs53Ehow9F7EXpPG
KCgv/cVd68gz9mntgyUoUtcpn9Ti5Oz+BCjrt1muuJJE55FkeE+L7UY9ah5q6mdE
tz5XLixtkvlu8eKYOHxXgkd6KdxxkhaIJ/K0+t1bY9Iyh5+0lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfnODwGzCu0LDYOBN2lmO2RW0zjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5
YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvMDFhNmVkNDMtMTNkZi0z
Yzg1LTliMjEtZDliYjM2ZjViNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk
ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx
MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4
YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFa4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0aHXBe+Wk8Jf2BSB4vVy8eRY+2m5XfLKNMIXLUQqwXeUEBLhCKSeyc
7GYS/vKTe+0v0lUxNGXXpX4r8CgwWf5F2IB/S0PXQfQo2psJgUrDG83rryY+p+4W
AdFHufdNlAeqAOIMy9nDVEhZ65vLXibEJDKAnVPLT8pfkLelZMOD6aP9IHRhwEOT
JCUqTkqA1j0XEtQJF9XGDjleDjzwAmHyoPeNsjHT/qUI/Lrwwk1Cad01WeuPwsIy
5QoIhUctLnwmkq8sDbZdax1KfTZqosoXg6SRsqzyo5xZvd9yGaI1oJKjV/z2Ou3W
t8XBBmWuqpQfj5rwVUwcCqorfTW3P5g=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:38 2026 by rpki-client