Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
File:                     8916b605-f1b7-343c-b58f-f1991f2406cb.roa (raw, json)
Hash identifier:          qJsVdaElF4KRppm8py+cTKa90VB+sDk8kLQpB40cJts=
Subject key identifier:   7A:67:62:FE:AF:5A:1B:B0:28:52:14:BB:C2:B0:BA:00:05:F2:7C:01
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F4328584E6144B89617054BB7A05F2940
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     22828
IP address blocks:        150.148.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b8:96:17:05:4b:b7:a0:5f:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=843bd783-baae-433e-b27e-31b3eba6e92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:4b:7b:28:0a:d1:3d:f8:7f:68:8c:03:79:
                    7a:d1:8f:08:a5:93:ad:60:1d:1c:38:01:b4:69:69:
                    0e:43:01:16:c6:b6:c6:6b:38:7a:a6:1d:22:e9:3e:
                    19:af:8f:51:0a:96:3c:9f:9d:e6:f6:48:c1:4b:a5:
                    a7:04:23:75:4d:c0:43:6a:4f:e9:68:da:86:41:de:
                    a0:d6:b1:e2:5d:fa:8d:a1:7f:eb:43:42:14:54:54:
                    7f:45:69:84:66:4c:4d:40:9c:3a:58:0a:94:97:cf:
                    0d:2f:b1:72:c1:f0:25:43:4c:15:8f:f5:9e:2d:43:
                    ee:f1:99:e2:ed:4e:b5:f0:ee:1e:f8:33:f8:cd:73:
                    68:d3:7a:15:fa:fe:ed:1f:ba:fd:96:6c:f4:a3:8d:
                    53:e1:6c:a3:7f:ba:a9:a1:9f:2d:f9:6c:f8:b5:8a:
                    1d:7d:a0:35:10:e1:e4:04:10:69:c4:bf:0a:2a:de:
                    cb:9b:e5:02:a0:b6:5a:d5:6f:8f:95:fc:10:17:13:
                    97:25:a6:af:fc:28:6b:9c:e2:ec:b0:31:70:97:6a:
                    79:79:40:05:54:f4:10:3d:fc:c5:4f:41:8e:46:d7:
                    b7:e2:c0:fa:38:ba:07:f7:81:25:5e:84:98:35:de:
                    2e:3d:18:ec:b6:dd:62:e1:0d:b8:d0:31:cf:3a:54:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:62:FE:AF:5A:1B:B0:28:52:14:BB:C2:B0:BA:00:05:F2:7C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:80:96:3a:9d:bd:30:70:61:da:1c:d3:93:d0:a0:79:b9:
         58:db:3d:3b:18:59:ed:56:b7:4d:07:67:06:7b:d5:59:d8:0a:
         8a:4a:0e:97:80:2f:bc:f8:c7:96:e7:5e:4a:83:bb:7e:f9:a0:
         d5:86:0f:72:43:05:ac:84:d1:e9:c0:05:20:22:e7:1d:c0:4d:
         2e:d7:87:c8:ac:93:c6:e0:62:89:6a:75:90:ed:3d:00:75:62:
         6a:34:59:f6:72:6b:b7:39:cc:93:84:e3:9c:d3:a6:ac:01:2a:
         2f:82:49:9b:88:2c:3e:3e:b9:93:e2:75:70:d3:99:60:d6:52:
         16:75:aa:73:d9:bd:bd:c4:d1:55:6d:72:77:e4:88:dc:6d:2e:
         47:d4:05:3c:e5:a7:46:60:1b:2d:62:64:d1:b6:a4:78:21:55:
         b0:c3:90:ce:73:c9:87:5e:e6:90:b9:b2:51:6d:23:dd:ec:b5:
         1d:07:53:e1:0b:c1:98:dd:90:3c:cb:e5:8e:2f:ef:7e:32:79:
         d5:b9:04:de:85:f8:13:90:67:88:e9:4d:1e:72:98:d3:1a:b9:
         c6:b9:b0:17:78:69:22:c5:73:83:ae:8e:f7:f8:11:60:dd:08:
         61:7f:55:e4:a1:5a:a7:ae:6b:59:16:8e:48:9b:da:62:2b:e5:
         a8:35:47:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5hRLiWFwVLt6BfKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA0NzU4YTUtOGJmYS00NjNmLWE2NmMtZDUwYWE3MjM3
ZmZmMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ODQzYmQ3ODMtYmFhZS00MzNlLWIyN2UtMzFiM2ViYTZlOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5alLeygK0T34f2iMA3l60Y8IpZOtYB0cOAG0
aWkOQwEWxrbGazh6ph0i6T4Zr49RCpY8n53m9kjBS6WnBCN1TcBDak/paNqGQd6g
1rHiXfqNoX/rQ0IUVFR/RWmEZkxNQJw6WAqUl88NL7FywfAlQ0wVj/WeLUPu8Zni
7U618O4e+DP4zXNo03oV+v7tH7r9lmz0o41T4Wyjf7qpoZ8t+Wz4tYodfaA1EOHk
BBBpxL8KKt7Lm+UCoLZa1W+PlfwQFxOXJaav/ChrnOLssDFwl2p5eUAFVPQQPfzF
T0GORte34sD6OLoH94ElXoSYNd4uPRjstt1i4Q240DHPOlQk4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHpnYv6vWhuwKFIUu8KwugAF8nwBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDQ3
NThhNS04YmZhLTQ2M2YtYTY2Yy1kNTBhYTcyMzdmZmYvODkxNmI2MDUtZjFiNy0z
NDNjLWI1OGYtZjE5OTFmMjQwNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODA0NzU4YTUtOGJmYS00NjNmLWE2
NmMtZDUwYWE3MjM3ZmZmLzgwNDc1OGE1LThiZmEtNDYzZi1hNjZjLWQ1MGFhNzIz
N2ZmZi5jcmwwHwYDVR0jBBgwFoAUxaz1IQQiYxDLqnafTdkdb0m5k48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MDQ3NThhNS04YmZhLTQ2M2YtYTY2Yy1kNTBh
YTcyMzdmZmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlpQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkhqAljqdvTBwYdoc05PQoHm5WNs9OxhZ7Va3TQdnBnvVWdgKikoOl4Av
vPjHludeSoO7fvmg1YYPckMFrITR6cAFICLnHcBNLteHyKyTxuBiiWp1kO09AHVi
ajRZ9nJrtznMk4TjnNOmrAEqL4JJm4gsPj65k+J1cNOZYNZSFnWqc9m9vcTRVW1y
d+SI3G0uR9QFPOWnRmAbLWJk0bakeCFVsMOQznPJh17mkLmyUW0j3ey1HQdT4QvB
mN2QPMvlji/vfjJ51bkE3oX4E5BniOlNHnKY0xq5xrmwF3hpIsVzg66O9/gRYN0I
YX9V5KFap65rWRaOSJvaYivlqDVHqA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:18:37 2026 by rpki-client