Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa
File:                     a761b73b-e057-3f35-9a68-220b5a8fee8c.roa (raw, json)
Hash identifier:          wl7XZBHOIg0C2Ujjd9kPAnOOHhl0ig8PIvw/a9JsWYk=
Subject key identifier:   F3:00:A9:B1:3C:9E:1B:EA:FC:CF:D9:36:41:20:48:FF:73:BD:5D:9A
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584EB57C597BB8A9D60D2641DBE0
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     6128
IP address blocks:        148.77.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:59:7b:b8:a9:d6:0d:26:41:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=6f1d7f53-d329-42e7-888b-a3312a327f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:99:c1:98:b3:f2:eb:d9:d9:90:d6:49:e6:
                    c4:13:39:c4:7d:d5:b0:25:08:80:73:83:db:96:c4:
                    de:0b:b8:47:ee:12:ca:98:fa:48:55:e6:56:22:be:
                    93:a1:63:69:3c:63:36:ee:71:38:d3:60:2a:f3:65:
                    27:10:23:76:75:0b:b2:d3:fe:3f:a5:85:ca:03:ce:
                    d5:c0:34:89:46:fe:e9:13:a7:6c:92:d1:7c:f7:4e:
                    36:6f:b9:92:ca:70:b7:a5:10:e3:19:2c:7b:d7:14:
                    5c:a2:d1:e9:cd:de:63:b7:aa:8d:94:67:19:0c:5b:
                    57:28:07:e7:da:05:5e:ae:dc:d9:5b:1f:9a:67:e2:
                    f4:de:93:b7:2a:c7:61:12:c0:4f:4d:e1:3c:11:44:
                    c4:c3:ee:fa:06:4f:08:3c:e2:6b:eb:67:38:33:2d:
                    72:0e:f0:00:43:2c:0a:e4:61:52:b5:31:80:20:62:
                    d3:09:b4:a2:76:23:b1:9b:bf:36:f8:0e:b6:fc:3e:
                    93:c4:0e:88:db:b3:11:08:f9:4b:ee:2d:19:6c:b3:
                    6a:05:f2:e5:0e:f3:a0:00:9a:1f:d3:21:85:6f:b8:
                    9d:6c:83:8e:b8:0f:1f:fb:9a:a3:bb:fe:6c:13:4b:
                    19:83:c7:a8:87:06:d6:60:25:a6:58:f7:62:c1:b7:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:A9:B1:3C:9E:1B:EA:FC:CF:D9:36:41:20:48:FF:73:BD:5D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:ff:d2:11:82:3c:7e:e5:8c:ac:ee:ed:85:f8:74:18:cf:
         de:6a:b0:71:f3:e6:2d:92:54:4c:b5:d9:6c:5e:a8:57:65:2f:
         11:68:4f:86:94:38:41:e4:82:07:15:ee:99:48:c1:a6:22:d9:
         8f:5f:f6:a0:1f:a6:64:9f:bd:25:e0:8b:85:a6:c1:aa:b5:9d:
         c3:37:2f:85:ac:f7:84:e8:fd:c0:1d:4e:a3:9b:3a:9f:5b:6b:
         d2:66:61:cd:80:bf:28:01:e3:a0:54:42:ee:55:f1:d8:e3:02:
         fe:ec:3d:1f:63:ac:5d:93:38:ae:ee:c6:ad:33:0f:06:98:4f:
         dd:9e:76:7b:3f:92:f5:83:1c:48:4f:43:8e:04:14:50:55:2e:
         db:2e:39:46:cc:3d:eb:c6:38:e2:22:f8:f8:fb:60:35:c2:95:
         b0:8c:4d:05:e6:c1:eb:9a:e9:d7:1c:cf:33:f9:6c:2d:04:5f:
         43:69:8b:ed:f1:db:b0:38:ff:3e:ba:a8:e5:a6:4b:cd:15:24:
         ca:cb:21:d2:d8:54:01:5e:2f:20:f3:8b:8a:63:7a:77:2e:e4:
         26:5d:48:f1:51:a1:3c:92:a3:97:0c:80:f4:4c:26:fe:e6:8d:
         d8:51:46:be:64:c6:3d:b6:85:9d:33:8c:47:e7:af:e9:e5:98:
         44:65:23:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fFl7uKnWDSZB2+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw
YjI1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
NmYxZDdmNTMtZDMyOS00MmU3LTg4OGItYTMzMTJhMzI3ZjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGOZwZiz8uvZ2ZDWSebEEznEfdWwJQiAc4Pb
lsTeC7hH7hLKmPpIVeZWIr6ToWNpPGM27nE402Aq82UnECN2dQuy0/4/pYXKA87V
wDSJRv7pE6dsktF89042b7mSynC3pRDjGSx71xRcotHpzd5jt6qNlGcZDFtXKAfn
2gVertzZWx+aZ+L03pO3KsdhEsBPTeE8EUTEw+76Bk8IPOJr62c4My1yDvAAQywK
5GFStTGAIGLTCbSidiOxm782+A62/D6TxA6I27MRCPlL7i0ZbLNqBfLlDvOgAJof
0yGFb7idbIOOuA8f+5qju/5sE0sZg8eohwbWYCWmWPdiwbfgRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMAqbE8nhvq/M/ZNkEgSP9zvV2aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1
OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvYTc2MWI3M2ItZTA1Ny0z
ZjM1LTlhNjgtMjIwYjVhOGZlZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw
YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk
MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3
MWRhZDBiMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlE0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXc/9IRgjx+5Yys7u2F+HQYz95qsHHz5i2SVEy12WxeqFdlLxFoT4aU
OEHkggcV7plIwaYi2Y9f9qAfpmSfvSXgi4Wmwaq1ncM3L4Ws94To/cAdTqObOp9b
a9JmYc2AvygB46BUQu5V8djjAv7sPR9jrF2TOK7uxq0zDwaYT92edns/kvWDHEhP
Q44EFFBVLtsuOUbMPevGOOIi+Pj7YDXClbCMTQXmweua6dcczzP5bC0EX0Npi+3x
27A4/z66qOWmS80VJMrLIdLYVAFeLyDzi4pjencu5CZdSPFRoTySo5cMgPRMJv7m
jdhRRr5kxj22hZ0zjEfnr+nlmERlI2k=
-----END CERTIFICATE-----
Generated at Fri Aug 28 00:40:38 2026 by rpki-client