Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa
File:                     2d4daaa5-1869-3597-b300-e5a36ea1666d.roa (raw, json)
Hash identifier:          n98gpeiVOz5yBM5Q+5RnHIa1y71m0N9HD5U36cIlQds=
Subject key identifier:   86:66:C3:29:83:B3:6E:45:DB:A2:67:4E:ED:F5:1D:02:80:00:8E:D9
Certificate issuer:       /CN=7482621e-c6dd-432b-9b07-f4defcbe44ca
Certificate serial:       010D0C9F4328584E4AEF2D9E3487E7AFCB788B00
Authority key identifier: DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     20452
IP address blocks:        147.226.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2d:9e:34:87:e7:af:cb:78:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482621e-c6dd-432b-9b07-f4defcbe44ca
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=8d11747f-fcdd-4729-a41c-2614315eaa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:67:b2:30:25:be:ac:3d:6d:9d:7d:01:8d:
                    d8:26:51:41:01:d7:21:3a:54:d6:15:34:d1:1f:54:
                    5b:02:3c:cc:85:35:38:ad:ce:76:53:af:7b:a0:11:
                    06:6a:90:c3:cf:fa:34:5a:2e:4a:8f:ee:fa:fd:73:
                    ca:01:4b:27:a6:5e:ae:86:fd:39:fe:a5:a6:16:0b:
                    cc:06:f8:20:95:b4:06:6f:80:a4:bf:aa:d0:ae:9f:
                    69:cc:6b:8a:7b:15:1c:5d:4a:90:8e:b9:bc:35:15:
                    a6:6f:7b:d6:48:07:ae:a8:f5:79:6e:6a:47:1e:34:
                    ae:d8:6c:42:85:6e:6a:cb:32:7f:70:78:cb:83:1f:
                    70:1b:f1:0a:21:34:33:33:ba:3f:62:8c:da:c1:e1:
                    1f:b3:d9:21:b7:bc:65:d6:d1:58:65:32:2f:72:3c:
                    ed:1e:fc:b2:31:a4:73:e8:51:86:c8:6c:a4:c3:e6:
                    43:80:83:33:4f:23:7a:a1:78:93:53:14:55:e0:fa:
                    71:00:d3:d0:99:51:34:68:6d:55:35:8d:44:65:b5:
                    7f:80:13:ef:8c:47:4a:2b:e9:67:8d:63:f2:e2:ad:
                    b5:68:b9:31:8e:b3:df:33:fa:7d:77:16:bf:bf:66:
                    02:aa:9d:86:c4:90:a1:44:05:30:a5:84:61:81:59:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:66:C3:29:83:B3:6E:45:DB:A2:67:4E:ED:F5:1D:02:80:00:8E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl

            X509v3 Authority Key Identifier:
                keyid:DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.226.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:bf:a0:56:fd:00:5d:41:cb:af:9b:da:cc:a0:31:fa:84:
         21:b3:4f:12:28:5b:6c:7e:28:06:b4:d1:8d:dd:cd:f1:2f:d2:
         f2:77:fe:b3:56:e1:b4:c4:bf:f7:d0:93:ca:e1:cd:1a:1c:32:
         48:27:47:c1:0d:de:5f:02:4f:87:a9:7f:2a:89:67:90:bc:d5:
         b6:44:e3:2e:2c:81:b7:7e:34:6a:08:9b:78:d2:45:4f:fa:d0:
         0d:c4:09:96:e1:19:c2:c6:af:46:d4:26:5a:09:f3:08:fb:f4:
         91:86:ff:ae:c4:24:e5:21:2f:7c:00:62:94:fa:ba:9b:79:c9:
         4c:7d:4a:70:38:d4:ac:3d:f9:9e:4e:11:01:c0:19:12:ce:4f:
         b6:f0:df:d9:8e:3f:9d:da:01:ae:04:4d:2a:99:d0:ae:31:eb:
         35:06:d2:b1:6a:56:b6:92:b9:6b:11:cf:76:10:e4:f2:16:6f:
         14:3e:b5:7e:46:dd:8e:ec:47:ba:4f:03:04:c1:6a:b6:bc:0d:
         4f:b8:11:6a:25:17:cc:c4:fc:f8:e4:a4:85:08:28:0d:39:2e:
         ab:0b:5f:70:9a:fe:2d:37:bb:bd:f8:6b:8d:a8:d9:a0:7e:f0:
         bb:88:18:1b:4c:e6:1b:5a:6e:00:11:9f:80:8b:1f:55:76:7e:
         77:c8:80:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5K7y2eNIfnr8t4iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ4MjYyMWUtYzZkZC00MzJiLTliMDctZjRkZWZjYmU0
NGNhMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
OGQxMTc0N2YtZmNkZC00NzI5LWE0MWMtMjYxNDMxNWVhYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/RnsjAlvqw9bZ19AY3YJlFBAdchOlTWFTTR
H1RbAjzMhTU4rc52U697oBEGapDDz/o0Wi5Kj+76/XPKAUsnpl6uhv05/qWmFgvM
BvgglbQGb4Ckv6rQrp9pzGuKexUcXUqQjrm8NRWmb3vWSAeuqPV5bmpHHjSu2GxC
hW5qyzJ/cHjLgx9wG/EKITQzM7o/YozaweEfs9kht7xl1tFYZTIvcjztHvyyMaRz
6FGGyGykw+ZDgIMzTyN6oXiTUxRV4PpxANPQmVE0aG1VNY1EZbV/gBPvjEdKK+ln
jWPy4q21aLkxjrPfM/p9dxa/v2YCqp2GxJChRAUwpYRhgVmjjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIZmwymDs25F26JnTu31HQKAAI7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDgy
NjIxZS1jNmRkLTQzMmItOWIwNy1mNGRlZmNiZTQ0Y2EvMmQ0ZGFhYTUtMTg2OS0z
NTk3LWIzMDAtZTVhMzZlYTE2NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQ4MjYyMWUtYzZkZC00MzJiLTli
MDctZjRkZWZjYmU0NGNhLzc0ODI2MjFlLWM2ZGQtNDMyYi05YjA3LWY0ZGVmY2Jl
NDRjYS5jcmwwHwYDVR0jBBgwFoAU3Dv+UWcdEyp2mDMOv1oQMn0RK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83NDgyNjIxZS1jNmRkLTQzMmItOWIwNy1mNGRl
ZmNiZTQ0Y2EuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVw+/oFb9AF1By6+b2sygMfqEIbNPEihbbH4oBrTRjd3N8S/S8nf+s1bh
tMS/99CTyuHNGhwySCdHwQ3eXwJPh6l/KolnkLzVtkTjLiyBt340agibeNJFT/rQ
DcQJluEZwsavRtQmWgnzCPv0kYb/rsQk5SEvfABilPq6m3nJTH1KcDjUrD35nk4R
AcAZEs5PtvDf2Y4/ndoBrgRNKpnQrjHrNQbSsWpWtpK5axHPdhDk8hZvFD61fkbd
juxHuk8DBMFqtrwNT7gRaiUXzMT8+OSkhQgoDTkuqwtfcJr+LTe7vfhrjajZoH7w
u4gYG0zmG1puABGfgIsfVXZ+d8iAUw==
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:23:21 2026 by rpki-client