Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
File:                     bdd55083-6ce6-3837-add9-5ff3851a5c95.roa (raw, json)
Hash identifier:          yE8COo6SbNK7WGTWBWQMB3DMyEucaBw/cICo30EwBlk=
Subject key identifier:   C8:49:95:F8:63:B4:E2:A7:73:22:8E:19:5E:ED:F9:6B:8C:E7:27:61
Certificate issuer:       /CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
Certificate serial:       010D0C9F4328584EB6E1AEE24073949C09EA62E0
Authority key identifier: 7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     16668
IP address blocks:        192.41.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:ae:e2:40:73:94:9c:09:ea:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=cd2c27b9-a163-49d4-9fa5-d4ce69921f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:49:4a:51:1f:02:45:e9:c7:43:58:10:b0:
                    11:fc:0f:ab:69:a3:0a:68:61:8b:e1:bb:aa:aa:e0:
                    a3:14:02:f2:01:73:f7:b8:66:dd:b5:89:e5:dd:21:
                    e6:00:a0:d6:99:e8:9c:98:af:79:54:40:8b:d4:18:
                    5e:78:06:58:25:72:34:5b:61:c9:ed:fa:34:fa:fb:
                    75:a3:c2:af:d9:6e:ed:e4:5d:22:18:9f:48:a7:9a:
                    65:e2:9d:ec:41:6a:40:a8:a6:4c:f5:22:93:26:20:
                    5e:e6:4a:ca:16:52:c2:67:9f:b1:5b:45:a3:d0:cc:
                    e8:c2:c6:56:fd:bd:b5:1e:e2:5b:65:34:3f:c3:49:
                    e8:f2:b7:5d:db:27:c1:8b:1c:a5:f3:53:3c:e1:cd:
                    77:ee:4a:fc:a1:1e:11:5d:3e:e5:78:c2:45:30:53:
                    47:d1:f0:c9:37:0e:2d:a3:a6:52:fb:1e:b8:97:ed:
                    a1:fe:0b:a0:52:d4:68:28:9c:a1:a3:41:3e:e1:36:
                    b2:c8:40:33:14:0f:07:20:7b:44:b8:4e:c3:4a:ce:
                    3f:11:56:e5:96:a0:06:b5:b9:9a:31:1d:8c:ea:e2:
                    5c:57:cd:ef:54:2d:5f:09:20:2e:52:aa:46:89:b6:
                    b0:3e:f8:35:97:77:78:02:d3:8c:d3:47:26:22:50:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:95:F8:63:B4:E2:A7:73:22:8E:19:5E:ED:F9:6B:8C:E7:27:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:7b:3d:e2:3f:9c:d5:2f:46:43:cc:86:fb:20:7c:d4:61:
         13:9e:87:d3:60:53:0d:ec:d1:a4:14:c7:aa:ed:d9:07:c8:51:
         46:bf:39:0b:77:8f:23:f5:6e:2a:90:21:44:e7:c1:2e:53:fb:
         66:7d:b6:39:dc:5a:0f:3e:df:83:05:bb:01:9b:ad:65:d4:07:
         5d:ed:a9:ba:df:ba:a1:44:f3:9f:79:a5:d9:cf:23:ab:60:69:
         f0:36:3d:90:ba:86:9a:78:70:47:e4:de:eb:b4:41:7f:68:c0:
         a7:e1:27:ea:4b:92:e9:75:a8:c9:e1:b4:bc:d8:d2:38:c8:d7:
         b8:62:18:f3:24:ba:9c:4b:8d:60:cf:8c:c3:d0:ea:12:1e:cc:
         bb:c6:f3:a2:de:f9:b7:cb:89:f4:48:e5:94:08:c6:8f:5f:e5:
         2e:81:c6:02:f3:29:4e:b1:94:2f:cc:09:7a:3f:ca:09:e7:59:
         40:d9:20:93:2b:50:9c:2e:48:ff:09:23:c5:47:71:a5:21:fb:
         d4:8b:da:51:a8:ff:c5:bb:36:68:a9:5b:24:f9:d3:60:f9:3a:
         a2:84:7c:42:7c:c3:2d:ff:e3:5c:e0:9a:ae:ea:69:8f:f6:f5:
         a5:87:50:a2:3c:49:cd:71:a4:71:33:f2:e5:63:32:7c:ae:2b:
         e4:bd:41:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624a7iQHOUnAnqYuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUwYjI0MjYtYzQxOS00ZTRiLWI3M2QtYzQ5NWNjZThj
ZmRkMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
Y2QyYzI3YjktYTE2My00OWQ0LTlmYTUtZDRjZTY5OTIxZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbdJSlEfAkXpx0NYELAR/A+raaMKaGGL4buq
quCjFALyAXP3uGbdtYnl3SHmAKDWmeicmK95VECL1BheeAZYJXI0W2HJ7fo0+vt1
o8Kv2W7t5F0iGJ9Ip5pl4p3sQWpAqKZM9SKTJiBe5krKFlLCZ5+xW0Wj0MzowsZW
/b21HuJbZTQ/w0no8rdd2yfBixyl81M84c137kr8oR4RXT7leMJFMFNH0fDJNw4t
o6ZS+x64l+2h/gugUtRoKJyho0E+4TayyEAzFA8HIHtEuE7DSs4/EVbllqAGtbma
MR2M6uJcV83vVC1fCSAuUqpGibawPvg1l3d4AtOM00cmIlDUwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhJlfhjtOKncyKOGV7t+WuM5ydhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTBi
MjQyNi1jNDE5LTRlNGItYjczZC1jNDk1Y2NlOGNmZGQvYmRkNTUwODMtNmNlNi0z
ODM3LWFkZDktNWZmMzg1MWE1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTUwYjI0MjYtYzQxOS00ZTRiLWI3
M2QtYzQ5NWNjZThjZmRkLzE1MGIyNDI2LWM0MTktNGU0Yi1iNzNkLWM0OTVjY2U4
Y2ZkZC5jcmwwHwYDVR0jBBgwFoAUe7De+Nhz0jxiZZw0GP+rGSMsJsEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTBiMjQyNi1jNDE5LTRlNGItYjczZC1jNDk1
Y2NlOGNmZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb/ez3iP5zVL0ZDzIb7IHzUYROeh9NgUw3s0aQUx6rt2QfIUUa/OQt3
jyP1biqQIUTnwS5T+2Z9tjncWg8+34MFuwGbrWXUB13tqbrfuqFE8595pdnPI6tg
afA2PZC6hpp4cEfk3uu0QX9owKfhJ+pLkul1qMnhtLzY0jjI17hiGPMkupxLjWDP
jMPQ6hIezLvG86Le+bfLifRI5ZQIxo9f5S6BxgLzKU6xlC/MCXo/ygnnWUDZIJMr
UJwuSP8JI8VHcaUh+9SL2lGo/8W7NmipWyT502D5OqKEfEJ8wy3/41zgmq7qaY/2
9aWHUKI8Sc1xpHEz8uVjMnyuK+S9QXc=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:38:20 2026 by rpki-client