Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa
File:                     1b47a838-7543-3b8a-a894-08ccad30351d.roa (raw, json)
Hash identifier:          n4tcggU3e+sRehA7NSinLUdaBY4sP++DhSVVpVWKzOY=
Subject key identifier:   39:D6:9D:17:70:A9:88:E6:93:F5:E4:59:8B:BA:90:C9:3B:86:87:78
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E3CF9C01268958F69C87D5140
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     55256
IP address blocks:        158.95.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c0:12:68:95:8f:69:c8:7d:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=ae88d176-c666-4b90-b92b-d952fff3a8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:4f:9b:86:33:df:1d:cf:bc:37:1d:6c:de:
                    0c:1c:94:3c:94:55:39:6d:32:58:67:6e:2d:f9:93:
                    5e:f2:16:fe:c6:40:cf:01:e0:4e:7e:4f:63:ed:05:
                    72:35:84:5b:a6:9c:e7:e5:6b:32:76:3e:59:3e:3f:
                    1b:12:86:ab:bd:a5:32:7b:cc:ed:3d:21:02:ef:19:
                    0a:28:cd:79:10:f3:95:05:4c:b4:51:8e:97:44:0d:
                    08:c5:9c:51:02:cd:df:a9:ea:79:7f:03:88:c8:9d:
                    33:28:7d:23:90:64:db:8a:43:af:b9:77:d0:07:ad:
                    90:10:32:61:27:eb:7d:30:5b:be:a4:16:d2:a7:5d:
                    89:a0:07:40:6b:c2:9a:0d:14:45:67:7d:62:20:8a:
                    19:48:10:6c:b0:72:d4:e9:79:7b:9c:e1:46:c7:6a:
                    1f:52:f8:50:6e:cd:f0:0f:89:f6:c0:50:ef:dd:c2:
                    77:92:d3:f6:04:ba:51:86:3e:dd:85:fa:54:d6:0f:
                    b5:6d:11:78:c4:a6:2d:26:e0:c0:c4:2f:73:3b:2e:
                    bd:28:b0:aa:41:a9:87:0d:56:9f:bd:cb:73:3c:1a:
                    52:21:06:93:dc:4f:9a:ba:ff:c4:a5:80:59:77:f8:
                    8b:49:8f:b6:d6:c1:ae:73:1f:eb:fc:d1:9c:82:de:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:9D:17:70:A9:88:E6:93:F5:E4:59:8B:BA:90:C9:3B:86:87:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:c4:ce:b2:e5:b2:f1:7b:ae:fd:d7:69:ed:2c:79:db:7c:
         24:69:33:77:7a:05:70:f1:21:0c:0f:cc:be:53:df:ee:bd:58:
         d0:6c:d3:6c:4c:c9:75:30:56:4f:31:5d:ec:7c:41:cc:f9:fb:
         4f:6c:36:7d:73:ec:03:9c:1a:c8:ae:85:95:6b:07:69:d8:5e:
         d5:79:af:66:ed:21:93:ee:9f:18:14:2c:47:87:59:3a:e8:d3:
         1a:a3:b4:40:fe:e4:99:94:da:29:4d:e4:4a:74:b8:65:f4:22:
         73:bf:70:4d:27:0e:5e:47:6c:4d:48:34:d3:f0:9d:1f:a2:43:
         34:7e:8d:3f:0e:aa:6a:f9:90:04:43:89:95:29:61:e2:e1:da:
         f3:90:52:dc:79:fb:86:11:bf:02:18:ca:9d:d8:e7:56:c1:87:
         15:25:82:68:c8:d9:bf:51:e5:99:bd:2d:fa:38:00:df:91:d5:
         35:37:fb:59:88:e7:39:ca:79:1a:a2:14:01:c2:da:3e:64:df:
         ab:f8:b6:ff:0b:72:1b:03:96:84:96:3e:b8:57:1b:88:43:5a:
         db:00:de:ba:b5:bf:d4:cd:be:1c:71:c7:27:d0:04:cf:d8:2e:
         f4:4e:47:65:82:64:6b:fd:26:9b:7f:ba:75:d2:e1:7d:d3:b5:
         d8:00:8f:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+cASaJWPach9UUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj
YWQ5MB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk
YWU4OGQxNzYtYzY2Ni00YjkwLWI5MmItZDk1MmZmZjNhOGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYRPm4Yz3x3PvDcdbN4MHJQ8lFU5bTJYZ24t
+ZNe8hb+xkDPAeBOfk9j7QVyNYRbppzn5Wsydj5ZPj8bEoarvaUye8ztPSEC7xkK
KM15EPOVBUy0UY6XRA0IxZxRAs3fqep5fwOIyJ0zKH0jkGTbikOvuXfQB62QEDJh
J+t9MFu+pBbSp12JoAdAa8KaDRRFZ31iIIoZSBBssHLU6Xl7nOFGx2ofUvhQbs3w
D4n2wFDv3cJ3ktP2BLpRhj7dhfpU1g+1bRF4xKYtJuDAxC9zOy69KLCqQamHDVaf
vctzPBpSIQaT3E+auv/EpYBZd/iLSY+21sGucx/r/NGcgt725QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnWnRdwqYjmk/XkWYu6kMk7hod4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz
MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMWI0N2E4MzgtNzU0My0z
YjhhLWE4OTQtMDhjY2FkMzAzNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz
ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy
Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3
MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItlxM6y5bLxe67912ntLHnbfCRpM3d6BXDxIQwPzL5T3+69WNBs02xM
yXUwVk8xXex8Qcz5+09sNn1z7AOcGsiuhZVrB2nYXtV5r2btIZPunxgULEeHWTro
0xqjtED+5JmU2ilN5Ep0uGX0InO/cE0nDl5HbE1INNPwnR+iQzR+jT8Oqmr5kARD
iZUpYeLh2vOQUtx5+4YRvwIYyp3Y51bBhxUlgmjI2b9R5Zm9Lfo4AN+R1TU3+1mI
5znKeRqiFAHC2j5k36v4tv8LchsDloSWPrhXG4hDWtsA3rq1v9TNvhxxxyfQBM/Y
LvROR2WCZGv9Jpt/unXS4X3TtdgAj3Y=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:41 2026 by rpki-client