Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/953bcf96-4150-3d09-989e-ad99b0d37f55.roa
File:                     953bcf96-4150-3d09-989e-ad99b0d37f55.roa (raw, json)
Hash identifier:          yP2rMTtJFdZ5J7++B0vDYHO1NGEbrPOLLUdV5UPb8J8=
Subject key identifier:   28:D0:23:68:F8:77:82:46:2D:65:57:78:16:27:AB:27:7D:2D:57:6D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E973B5CCAA8D29E0E457984C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/953bcf96-4150-3d09-989e-ad99b0d37f55.roa
Signing time:             Thu 23 Jul 2026 04:55:11 +0000
ROA not before:           Thu 23 Jul 2026 04:55:11 +0000
ROA not after:            Wed 21 Oct 2026 04:55:11 +0000
asID:                     21769
IP address blocks:        174.140.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:3b:5c:ca:a8:d2:9e:0e:45:79:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 23 04:55:11 2026 GMT
            Not After : Oct 21 04:55:11 2026 GMT
        Subject: CN=7eb99d49-deeb-4787-9fda-95afe6806616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:57:c2:54:f2:0f:d8:86:49:01:62:11:da:
                    3b:c7:53:d7:07:1d:43:72:c2:a0:e3:c5:9b:68:df:
                    ad:ce:63:30:79:bb:53:5a:3b:6c:33:c4:78:01:07:
                    d1:6a:08:02:ee:6b:0f:58:54:b6:6d:3b:3d:e0:2c:
                    c3:bd:6b:79:dd:66:70:a6:5a:46:f4:ed:38:97:a2:
                    eb:69:66:56:75:d9:6d:5e:97:fe:5d:20:56:5f:76:
                    46:8a:19:92:c0:e4:15:73:d0:cb:1d:d2:92:c2:b9:
                    8b:4c:d1:c9:91:23:8d:b6:29:68:08:7f:5c:9b:6e:
                    e3:99:8a:5a:ef:e2:40:32:ae:44:7f:52:12:c4:91:
                    2b:d5:5d:42:59:c7:04:99:8a:40:53:e5:33:f4:ae:
                    94:38:bb:3f:ec:11:f9:0e:93:25:20:f3:ba:52:df:
                    96:b3:a9:71:32:fd:12:99:ff:e5:9f:a4:28:3f:ac:
                    74:6f:55:54:99:8b:2c:49:9f:c5:58:1f:bb:5c:f8:
                    39:43:e2:26:88:ce:9e:05:2e:bc:49:01:73:61:28:
                    1c:6c:55:81:f0:09:da:72:e9:93:4d:df:af:5c:5f:
                    72:25:3e:21:45:c9:2c:61:f6:54:d7:5e:39:03:ef:
                    b1:62:de:07:9a:92:96:6e:43:11:c2:1b:e7:7f:ec:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:23:68:F8:77:82:46:2D:65:57:78:16:27:AB:27:7D:2D:57:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/953bcf96-4150-3d09-989e-ad99b0d37f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:9a:58:49:91:06:96:f3:9a:c5:61:11:41:6e:bc:47:72:
         a2:34:19:14:c4:eb:b8:4d:0d:22:e7:2e:0c:a3:65:95:61:92:
         64:ff:42:a1:a1:8c:75:d6:ac:92:21:94:0a:54:83:37:ec:1f:
         2d:6e:81:19:51:2e:40:3b:16:1d:96:5c:76:e9:09:1d:ea:49:
         d4:a6:a7:fb:39:9a:e9:cd:4c:c0:9e:9c:9c:ff:36:4e:6f:96:
         8f:5a:69:e8:1d:41:f6:aa:29:ba:67:89:e0:a3:b1:fa:43:65:
         6d:f7:de:9a:2f:a7:ee:9a:c8:ed:f1:09:c6:c5:4a:1d:63:ab:
         94:b5:3f:73:f1:c1:6d:a4:83:d9:89:d2:1f:7d:b1:47:37:08:
         b7:41:46:e7:51:d5:63:fb:88:9d:fc:f9:aa:cc:8b:35:37:99:
         7c:38:42:32:58:fb:9a:84:13:92:81:69:cd:9a:12:2b:03:96:
         8f:49:7a:e3:95:b9:3b:5b:d3:ed:03:62:ef:b4:51:74:11:5f:
         96:9e:1d:58:57:71:b0:2d:3b:c8:c1:0d:9c:8d:88:3b:e8:f5:
         dc:28:37:ce:12:46:10:4a:69:08:6a:bb:01:b3:f0:24:97:6f:
         14:fd:43:bb:7e:a2:84:d7:d1:4e:d8:d3:d8:85:bf:19:c4:7d:
         0e:ed:49:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XO1zKqNKeDkV5hMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcyMzA0NTUxMVoXDTI2MTAyMTA0NTUxMVowLzEtMCsGA1UEAxMk
N2ViOTlkNDktZGVlYi00Nzg3LTlmZGEtOTVhZmU2ODA2NjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjdXwlTyD9iGSQFiEdo7x1PXBx1DcsKg48Wb
aN+tzmMwebtTWjtsM8R4AQfRaggC7msPWFS2bTs94CzDvWt53WZwplpG9O04l6Lr
aWZWddltXpf+XSBWX3ZGihmSwOQVc9DLHdKSwrmLTNHJkSONtiloCH9cm27jmYpa
7+JAMq5Ef1ISxJEr1V1CWccEmYpAU+Uz9K6UOLs/7BH5DpMlIPO6Ut+Ws6lxMv0S
mf/ln6QoP6x0b1VUmYssSZ/FWB+7XPg5Q+ImiM6eBS68SQFzYSgcbFWB8AnacumT
Td+vXF9yJT4hRcksYfZU1145A++xYt4HmpKWbkMRwhvnf+wNMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjQI2j4d4JGLWVXeBYnqyd9LVdtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTUzYmNmOTYtNDE1MC0z
ZDA5LTk4OWUtYWQ5OWIwZDM3ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroz2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7mmlhJkQaW85rFYRFBbrxHcqI0GRTE67hNDSLnLgyjZZVhkmT/QqGh
jHXWrJIhlApUgzfsHy1ugRlRLkA7Fh2WXHbpCR3qSdSmp/s5munNTMCenJz/Nk5v
lo9aaegdQfaqKbpnieCjsfpDZW333povp+6ayO3xCcbFSh1jq5S1P3PxwW2kg9mJ
0h99sUc3CLdBRudR1WP7iJ38+arMizU3mXw4QjJY+5qEE5KBac2aEisDlo9JeuOV
uTtb0+0DYu+0UXQRX5aeHVhXcbAtO8jBDZyNiDvo9dwoN84SRhBKaQhquwGz8CSX
bxT9Q7t+ooTX0U7Y09iFvxnEfQ7tSX4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 12:46:08 2026 by rpki-client