Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ede14508-50e3-3c04-86b0-98e6f480e78f.roa
File:                     ede14508-50e3-3c04-86b0-98e6f480e78f.roa (raw, json)
Hash identifier:          fMcpYtCNy8SnYTDu6a2Tg0bvrXBuR/s8KhmTltoHalw=
Subject key identifier:   3E:93:93:79:E6:D1:ED:C2:03:1A:68:86:98:81:D9:2F:AD:B5:24:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E61EC4C3FC4EAADF6C8658D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ede14508-50e3-3c04-86b0-98e6f480e78f.roa
Signing time:             Sat 04 Jul 2026 02:38:02 +0000
ROA not before:           Sat 04 Jul 2026 02:38:02 +0000
ROA not after:            Fri 02 Oct 2026 02:38:02 +0000
asID:                     396982
IP address blocks:        146.148.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:ec:4c:3f:c4:ea:ad:f6:c8:65:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  4 02:38:02 2026 GMT
            Not After : Oct  2 02:38:02 2026 GMT
        Subject: CN=db83481a-d880-4176-a836-9c958dad591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:1b:d9:87:f2:fd:18:64:71:e7:2f:1e:83:
                    63:4e:ce:8e:e7:dc:47:44:49:e4:e9:ee:b2:3a:b3:
                    e2:b5:5c:92:03:2e:d9:3f:a8:0e:60:e4:a5:8b:e1:
                    78:e7:76:ab:01:09:4a:e9:47:35:df:82:e9:52:3d:
                    ed:9c:27:a3:30:1f:fd:b7:ed:a4:7c:0e:89:94:4b:
                    49:44:a1:87:ea:5b:87:f7:49:60:54:4e:4e:7f:81:
                    67:3c:90:86:26:03:87:93:7e:2d:40:16:ae:7b:fe:
                    22:0c:bc:76:dd:9a:37:4e:60:c2:07:31:df:c6:9f:
                    14:03:46:0e:b2:90:c7:33:86:1d:cf:a6:62:d1:85:
                    1a:bb:1b:fc:2f:bc:80:58:30:64:33:96:72:a0:08:
                    45:7d:06:b7:ec:1b:3a:8b:47:17:56:f2:a6:45:7a:
                    2f:c4:3d:d3:41:e1:1d:73:fc:44:49:29:d7:67:e9:
                    b4:bf:0b:90:ee:92:0d:84:ac:f0:51:7f:5e:05:f4:
                    59:8e:7d:4d:1d:e7:9c:6f:da:c0:df:25:60:df:f7:
                    12:3b:e1:0d:82:bb:92:fe:6f:35:0f:34:db:24:89:
                    98:95:bf:d8:66:40:3c:07:13:9b:f7:0f:e9:c1:f2:
                    03:3f:66:f7:f9:08:4a:7c:50:91:2d:0b:f7:20:c1:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:93:93:79:E6:D1:ED:C2:03:1A:68:86:98:81:D9:2F:AD:B5:24:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ede14508-50e3-3c04-86b0-98e6f480e78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:65:b3:ea:8d:31:b8:63:11:11:c1:5e:99:7a:bd:5a:cb:
         a4:f3:72:85:14:c8:f2:d9:e5:27:3a:96:b2:0e:70:4f:30:d9:
         7f:43:a9:97:6b:71:55:b3:04:32:2c:c3:09:de:ae:b0:5d:04:
         4f:df:bf:f3:45:3e:70:ac:2a:17:4d:f6:72:e5:b1:20:86:99:
         57:9e:da:4d:ac:a1:64:f9:15:c3:22:ef:51:35:dd:15:60:d9:
         35:59:53:30:37:84:ef:74:9f:a8:15:c2:82:6f:c6:e3:5d:44:
         bb:12:a9:e5:1b:80:7b:b1:07:76:6b:c5:68:22:a8:3c:1e:02:
         e7:ae:82:a3:08:fa:ff:d8:22:2f:d2:13:fc:25:62:7d:59:49:
         9c:c5:6f:8a:30:42:21:72:c7:f2:27:ec:2e:9e:55:77:7f:64:
         9f:e4:26:15:f6:d3:90:74:ea:c6:e3:c8:43:dc:ae:da:7e:d7:
         70:17:50:57:61:41:5b:3c:66:7e:bf:1d:3a:4c:4f:87:1d:8c:
         f5:d7:bf:1a:f1:3e:5f:2e:f7:9a:30:3f:83:36:02:62:8c:cc:
         8d:67:fb:fe:d1:b9:c7:c6:78:05:2f:5d:eb:98:ac:40:b6:57:
         34:d2:6c:51:f4:76:74:e7:3e:10:4b:6b:ff:37:19:21:5e:3f:
         5b:b8:36:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5h7Ew/xOqt9shljUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcwNDAyMzgwMloXDTI2MTAwMjAyMzgwMlowLzEtMCsGA1UEAxMk
ZGI4MzQ4MWEtZDg4MC00MTc2LWE4MzYtOWM5NThkYWQ1OTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Mb2Yfy/RhkcecvHoNjTs6O59xHREnk6e6y
OrPitVySAy7ZP6gOYOSli+F453arAQlK6Uc134LpUj3tnCejMB/9t+2kfA6JlEtJ
RKGH6luH90lgVE5Of4FnPJCGJgOHk34tQBaue/4iDLx23Zo3TmDCBzHfxp8UA0YO
spDHM4Ydz6Zi0YUauxv8L7yAWDBkM5ZyoAhFfQa37Bs6i0cXVvKmRXovxD3TQeEd
c/xESSnXZ+m0vwuQ7pINhKzwUX9eBfRZjn1NHeecb9rA3yVg3/cSO+ENgruS/m81
DzTbJImYlb/YZkA8BxOb9w/pwfIDP2b3+QhKfFCRLQv3IMFnaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6Tk3nm0e3CAxpohpiB2S+ttSS+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWRlMTQ1MDgtNTBlMy0z
YzA0LTg2YjAtOThlNmY0ODBlNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkpR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNOZbPqjTG4YxERwV6Zer1ay6TzcoUUyPLZ5Sc6lrIOcE8w2X9DqZdr
cVWzBDIswwnerrBdBE/fv/NFPnCsKhdN9nLlsSCGmVee2k2soWT5FcMi71E13RVg
2TVZUzA3hO90n6gVwoJvxuNdRLsSqeUbgHuxB3ZrxWgiqDweAueugqMI+v/YIi/S
E/wlYn1ZSZzFb4owQiFyx/In7C6eVXd/ZJ/kJhX205B06sbjyEPcrtp+13AXUFdh
QVs8Zn6/HTpMT4cdjPXXvxrxPl8u95owP4M2AmKMzI1n+/7RucfGeAUvXeuYrEC2
VzTSbFH0dnTnPhBLa/83GSFeP1u4Nv4=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:34 2026 by rpki-client