Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/bf933d62-3d08-3ec2-baad-00c5082c60ab.roa
File:                     bf933d62-3d08-3ec2-baad-00c5082c60ab.roa (raw, json)
Hash identifier:          Fu9VVNXnhCZNXI1P3LjDwI0UWlXLlPcB/Vh5oRD6UpM=
Subject key identifier:   C4:38:B1:7D:E6:BE:64:38:51:5F:1F:4B:60:85:8F:9B:14:2B:CF:8F
Certificate issuer:       /CN=7e041a60-3065-4ac9-8529-f74eba571c01
Certificate serial:       010D0C9F4328584E736A21B3572701E0A53A3A80
Authority key identifier: 92:4F:AC:FC:19:05:F0:CB:76:F1:B6:D0:BA:BE:F6:5B:54:6C:20:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/bf933d62-3d08-3ec2-baad-00c5082c60ab.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     398244
IP address blocks:        147.160.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/7e041a60-3065-4ac9-8529-f74eba571c01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/7e041a60-3065-4ac9-8529-f74eba571c01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:21:b3:57:27:01:e0:a5:3a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e041a60-3065-4ac9-8529-f74eba571c01
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=1c1b33bd-7093-4f01-b32b-fbc95a22afe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:95:12:2a:af:ea:7d:ae:c8:65:34:4c:54:
                    7e:6e:1a:11:f7:43:66:30:4e:bc:04:82:03:9a:71:
                    ef:a7:6a:4b:65:be:65:c3:51:74:85:0f:06:db:a4:
                    79:7f:92:17:f2:ca:4b:14:9b:30:fd:0e:26:eb:b5:
                    f8:c7:fa:7c:18:07:ee:79:52:03:92:e9:a9:bf:c7:
                    9e:10:f3:1a:98:1a:b3:c2:48:4d:95:4a:90:bf:e2:
                    77:bf:e2:71:db:52:23:e1:80:8d:57:75:47:c5:31:
                    5d:ad:b1:e7:61:fb:1c:87:07:dc:9a:61:db:c3:5a:
                    e7:1a:bb:94:52:34:d4:05:e0:c0:37:92:97:f9:af:
                    dc:72:d4:09:f6:f0:c4:eb:fc:75:a5:9f:fc:f6:0b:
                    e5:a6:d4:d1:89:0f:61:a1:36:67:b8:c8:f1:f5:bf:
                    18:f4:80:c4:b3:5c:69:38:1a:bf:da:f1:c2:d3:57:
                    f9:d1:5f:ba:c7:bb:1a:25:a7:08:26:0c:4d:cf:3f:
                    6b:8d:27:3c:05:b4:3c:05:54:06:06:19:15:7b:32:
                    5d:c5:55:37:07:fd:b7:a8:79:77:58:41:38:0e:4b:
                    39:43:27:5b:cc:2b:a9:8c:4e:81:f3:85:0b:b3:b7:
                    2b:cd:08:12:78:e3:5b:81:a4:66:66:d2:79:ed:b7:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:B1:7D:E6:BE:64:38:51:5F:1F:4B:60:85:8F:9B:14:2B:CF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/bf933d62-3d08-3ec2-baad-00c5082c60ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01/7e041a60-3065-4ac9-8529-f74eba571c01.crl

            X509v3 Authority Key Identifier:
                keyid:92:4F:AC:FC:19:05:F0:CB:76:F1:B6:D0:BA:BE:F6:5B:54:6C:20:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7e041a60-3065-4ac9-8529-f74eba571c01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cf:1a:e2:99:c3:f1:31:c0:71:e7:42:be:0b:96:58:bb:47:
         76:e7:4e:1b:e7:7f:d4:94:10:ab:b9:3d:52:5f:44:c9:ba:34:
         a9:5f:80:3e:0c:23:60:a4:fb:a7:91:af:79:3e:85:4e:0d:7d:
         76:99:df:8c:8e:86:b4:9e:0b:3c:2b:28:4e:42:af:1f:cd:7f:
         d8:4e:46:89:f8:31:83:33:89:a9:b8:da:49:d0:eb:58:4e:da:
         98:80:ff:ee:59:41:14:b1:88:de:89:1b:d5:bc:d7:27:2e:ba:
         d0:e9:42:95:67:4b:39:7b:ba:ae:3e:7b:64:b7:d5:88:8b:3e:
         80:ce:2f:b4:79:ac:34:8e:7c:d6:10:2d:6a:04:1d:d1:d9:fc:
         3d:9e:a0:50:2a:75:8c:b5:f9:49:35:6a:35:1c:8c:52:f6:95:
         12:36:9c:28:1b:26:7b:06:68:9e:cd:0b:59:5e:08:2c:1d:e1:
         63:5a:e5:31:d0:de:54:4e:dd:c7:cc:36:38:ee:89:ed:38:ca:
         ac:38:7e:eb:b2:23:8a:a2:28:f2:69:2a:81:67:8b:01:2a:1c:
         94:c1:54:ca:90:9b:5f:29:87:48:d2:a7:ba:ca:70:dc:61:8a:
         59:09:7d:8b:8b:c4:8e:8d:ff:c4:38:93:b8:0a:47:77:e2:39:
         2e:6d:49:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiGzVycB4KU6OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2UwNDFhNjAtMzA2NS00YWM5LTg1MjktZjc0ZWJhNTcx
YzAxMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
MWMxYjMzYmQtNzA5My00ZjAxLWIzMmItZmJjOTVhMjJhZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRqVEiqv6n2uyGU0TFR+bhoR90NmME68BIID
mnHvp2pLZb5lw1F0hQ8G26R5f5IX8spLFJsw/Q4m67X4x/p8GAfueVIDkumpv8ee
EPMamBqzwkhNlUqQv+J3v+Jx21Ij4YCNV3VHxTFdrbHnYfschwfcmmHbw1rnGruU
UjTUBeDAN5KX+a/cctQJ9vDE6/x1pZ/89gvlptTRiQ9hoTZnuMjx9b8Y9IDEs1xp
OBq/2vHC01f50V+6x7saJacIJgxNzz9rjSc8BbQ8BVQGBhkVezJdxVU3B/23qHl3
WEE4Dks5QydbzCupjE6B84ULs7crzQgSeONbgaRmZtJ57bf/zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQ4sX3mvmQ4UV8fS2CFj5sUK8+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83ZTA0
MWE2MC0zMDY1LTRhYzktODUyOS1mNzRlYmE1NzFjMDEvYmY5MzNkNjItM2QwOC0z
ZWMyLWJhYWQtMDBjNTA4MmM2MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvN2UwNDFhNjAtMzA2NS00YWM5LTg1
MjktZjc0ZWJhNTcxYzAxLzdlMDQxYTYwLTMwNjUtNGFjOS04NTI5LWY3NGViYTU3
MWMwMS5jcmwwHwYDVR0jBBgwFoAUkk+s/BkF8Mt28bbQur72W1RsIFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83ZTA0MWE2MC0zMDY1LTRhYzktODUyOS1mNzRl
YmE1NzFjMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6AFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXPGuKZw/ExwHHnQr4Llli7R3bnThvnf9SUEKu5PVJfRMm6NKlfgD4M
I2Ck+6eRr3k+hU4NfXaZ34yOhrSeCzwrKE5Crx/Nf9hORon4MYMziam42knQ61hO
2piA/+5ZQRSxiN6JG9W81ycuutDpQpVnSzl7uq4+e2S31YiLPoDOL7R5rDSOfNYQ
LWoEHdHZ/D2eoFAqdYy1+Uk1ajUcjFL2lRI2nCgbJnsGaJ7NC1leCCwd4WNa5THQ
3lRO3cfMNjjuie04yqw4fuuyI4qiKPJpKoFniwEqHJTBVMqQm18ph0jSp7rKcNxh
ilkJfYuLxI6N/8Q4k7gKR3fiOS5tSYU=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:25:18 2026 by rpki-client