Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa
File:                     ed3b3dcb-62db-3e81-a090-f997d59a1187.roa (raw, json)
Hash identifier:          dm1Df4AqoyfLdpeu4qqQxiWcmRym1zFE4jqx3gPqKxI=
Subject key identifier:   FD:73:C5:1E:EE:4F:AC:88:87:33:99:59:53:5E:E2:DC:98:34:79:55
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584EA79EA85333A530229593AF08
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        207.126.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:a8:53:33:a5:30:22:95:93:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1d9c3a2f-3add-4968-960f-601818bf3f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:a9:51:c4:08:0e:de:33:95:ed:9e:30:c1:
                    44:b3:d2:c9:10:ae:75:2d:08:42:6c:98:25:73:9a:
                    36:67:a3:d5:1d:27:df:12:fe:12:e8:ac:04:da:0b:
                    54:cb:5d:07:3a:ea:c0:5c:02:8f:45:c2:d0:c1:bd:
                    64:ee:20:b8:54:09:cb:a3:73:bf:ef:c0:51:c9:f0:
                    14:3f:48:10:9f:1e:38:11:56:75:88:de:c8:60:13:
                    03:2f:20:24:44:52:61:2f:74:3f:87:09:4b:1d:17:
                    fa:2c:cb:68:2b:bf:6a:80:f1:8c:de:ab:c4:02:5b:
                    c3:76:ac:26:15:bb:c8:0d:05:21:22:3c:06:23:cb:
                    f0:aa:2e:a3:1e:23:b9:f7:a3:f5:62:8c:25:fe:a1:
                    e4:da:68:24:eb:92:4b:5e:52:8c:56:e9:1c:4a:45:
                    d2:5e:b0:21:f0:36:5b:8a:64:81:ec:ce:68:c0:36:
                    b4:c0:29:58:94:19:e3:04:22:fc:92:b7:96:e8:3f:
                    ac:a3:56:54:ea:77:3f:70:cd:6c:9b:48:79:19:ea:
                    26:f8:5b:db:81:4e:15:89:df:04:0e:c8:d3:4a:f8:
                    18:ad:ef:76:46:9a:de:9b:bd:ee:d0:64:cc:2e:a3:
                    91:38:ce:7d:6b:af:ca:b4:d3:cf:5a:a0:fe:70:48:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:C5:1E:EE:4F:AC:88:87:33:99:59:53:5E:E2:DC:98:34:79:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:0e:8b:67:c0:4d:14:aa:94:37:78:0d:9b:98:60:de:03:
         13:5b:67:20:04:9e:97:bc:7c:ae:80:e1:1a:de:cb:8e:b2:e1:
         14:ce:64:ba:7c:19:0a:fd:d8:c5:25:af:9b:05:13:3a:49:0a:
         74:c8:ec:60:48:11:0c:e6:9f:3a:67:49:6c:c4:e0:b3:d4:79:
         2f:67:1a:ec:2c:f2:f0:99:89:38:c2:31:6c:25:83:73:7b:13:
         15:d5:fe:7c:53:93:fe:61:6e:1d:1a:ba:14:26:3b:e4:8d:e1:
         1d:a8:01:1b:0f:89:83:a6:aa:87:84:9a:10:bd:8f:53:48:da:
         61:32:d1:a4:e8:71:5f:32:fe:4c:16:a6:f9:81:2f:fe:d3:5d:
         4d:c4:69:e6:b2:af:60:e4:b4:c2:3a:b9:f3:03:92:c5:6e:2b:
         bd:19:62:5c:40:d1:39:81:b6:27:54:66:ff:6e:a6:2b:d3:fa:
         59:29:e6:d0:27:42:99:4a:ca:fa:2e:38:9e:bc:ba:88:f9:16:
         26:3b:68:12:50:90:8a:ba:e5:c6:46:d9:cf:cc:4c:44:31:88:
         fe:84:02:89:10:6c:49:47:a3:36:7f:5f:43:a9:78:5a:79:c8:
         0f:7e:63:f8:2e:0d:58:2b:fa:74:3b:07:dc:1d:2e:8c:1b:83:
         82:fe:da:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnqhTM6UwIpWTrwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWQ5YzNhMmYtM2FkZC00OTY4LTk2MGYtNjAxODE4YmYzZjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+ypUcQIDt4zle2eMMFEs9LJEK51LQhCbJgl
c5o2Z6PVHSffEv4S6KwE2gtUy10HOurAXAKPRcLQwb1k7iC4VAnLo3O/78BRyfAU
P0gQnx44EVZ1iN7IYBMDLyAkRFJhL3Q/hwlLHRf6LMtoK79qgPGM3qvEAlvDdqwm
FbvIDQUhIjwGI8vwqi6jHiO596P1Yowl/qHk2mgk65JLXlKMVukcSkXSXrAh8DZb
imSB7M5owDa0wClYlBnjBCL8kreW6D+so1ZU6nc/cM1sm0h5Geom+FvbgU4Vid8E
DsjTSvgYre92Rprem73u0GTMLqOROM59a6/KtNPPWqD+cEh4ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1zxR7uT6yIhzOZWVNe4tyYNHlVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZWQzYjNkY2ItNjJkYi0z
ZTgxLWEwOTAtZjk5N2Q1OWExMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwQDotnwE0UqpQ3eA2bmGDeAxNbZyAEnpe8fK6A4Rrey46y4RTOZLp8
GQr92MUlr5sFEzpJCnTI7GBIEQzmnzpnSWzE4LPUeS9nGuws8vCZiTjCMWwlg3N7
ExXV/nxTk/5hbh0auhQmO+SN4R2oARsPiYOmqoeEmhC9j1NI2mEy0aTocV8y/kwW
pvmBL/7TXU3Eaeayr2DktMI6ufMDksVuK70ZYlxA0TmBtidUZv9upivT+lkp5tAn
QplKyvouOJ68uoj5FiY7aBJQkIq65cZG2c/MTEQxiP6EAokQbElHozZ/X0OpeFp5
yA9+Y/guDVgr+nQ7B9wdLowbg4L+2h4=
-----END CERTIFICATE-----
Generated at Fri Aug 7 18:04:55 2026 by rpki-client