Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa
File:                     4ef7f997-54f7-343d-8405-0a1c2d65bada.roa (raw, json)
Hash identifier:          VqiGU0gGrkjnR/a/qjuoNp8I0cUMKKNp4dY/flD3YCc=
Subject key identifier:   C5:07:4B:1E:48:9F:B3:39:28:2B:F4:9E:65:DB:6E:9F:E7:89:27:0C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E66D9FF7D700C64E87D3C1256
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     2763
IP address blocks:        156.151.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:d9:ff:7d:70:0c:64:e8:7d:3c:12:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=7d2a8142-c7ab-47a2-9048-4adbfc24e282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:20:a5:fa:f5:3a:bb:56:d2:46:c1:54:b5:
                    d0:5f:d3:78:78:62:dd:42:62:aa:1b:2f:e4:49:f7:
                    6a:38:db:20:e4:39:11:37:35:06:43:63:45:f5:29:
                    ca:59:3f:d1:bb:8d:a9:9d:8c:47:92:46:38:0f:73:
                    c6:21:72:f1:eb:5a:09:79:83:65:27:c3:42:f9:55:
                    17:7f:24:ef:53:a0:f8:da:0c:36:63:95:b9:fe:1b:
                    d9:b2:ff:7d:1e:04:bd:88:f1:20:f0:10:28:e8:87:
                    16:48:6e:6a:e3:2c:cb:cf:f2:ae:ae:2f:ad:df:0d:
                    52:99:63:35:ea:37:9c:24:d7:eb:a1:48:3e:f8:cf:
                    88:5f:ad:28:a4:e8:51:b7:f8:10:b0:3d:7e:cb:58:
                    0f:7f:53:d1:06:68:f3:30:32:02:38:4f:0f:88:3b:
                    7f:b4:9d:8c:df:19:0d:8a:18:ce:db:92:15:62:38:
                    70:a6:ac:41:1d:df:07:24:df:18:ac:b9:29:c2:98:
                    93:41:d0:63:eb:8f:23:29:90:a6:d9:83:fe:d6:68:
                    7c:11:d3:8b:75:bf:55:d0:7a:32:7f:5e:df:3c:80:
                    d6:1a:f3:dd:c8:c5:64:62:f6:82:55:70:03:f7:60:
                    fa:81:6e:6e:03:1d:d0:d7:6a:e5:16:9e:1b:71:6b:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:07:4B:1E:48:9F:B3:39:28:2B:F4:9E:65:DB:6E:9F:E7:89:27:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.151.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:5a:70:f5:a8:bc:4e:3f:ac:f9:11:65:61:a1:8f:1e:98:
         1c:35:9e:9d:5c:a2:c1:c1:a5:2e:8c:dd:20:70:18:e4:eb:67:
         f4:e9:05:92:6b:35:bd:81:6c:43:68:c7:a8:fa:fc:ed:f7:fe:
         9e:3c:58:77:f7:b7:0d:44:4a:0f:27:a4:bc:ee:8c:19:f7:97:
         59:fe:0d:9f:14:17:9a:bf:53:28:f2:16:be:0d:84:cb:8d:fa:
         ae:6e:09:e3:b0:5a:5f:b1:1d:d8:a5:1a:7a:35:8c:18:2b:d4:
         62:58:28:85:d6:a2:8c:d9:e2:9c:44:57:77:1f:c1:c2:39:e5:
         24:e4:ab:2d:30:4f:22:4b:e2:a1:09:2b:77:a6:0b:37:96:65:
         fa:37:dd:09:0b:0c:49:c8:f3:e9:31:31:27:ff:fe:bd:02:8f:
         a9:a8:82:27:c1:18:7f:ee:da:35:37:31:d7:9e:1f:f4:30:ea:
         c4:9d:c9:e2:3b:cd:ba:95:73:c9:10:2c:4c:f9:f7:50:0d:30:
         27:32:2f:a0:21:19:e3:79:04:43:8f:80:3f:82:f5:d1:dd:33:
         6f:22:40:db:54:77:48:0f:4f:aa:70:cd:d1:e3:2b:5b:ec:fc:
         ad:dc:f6:79:5a:e6:5f:14:88:0f:a0:0b:ca:17:e6:b8:96:8f:
         4d:9c:f6:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2f99cAxk6H08ElYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
N2QyYTgxNDItYzdhYi00N2EyLTkwNDgtNGFkYmZjMjRlMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSIgpfr1OrtW0kbBVLXQX9N4eGLdQmKqGy/k
SfdqONsg5DkRNzUGQ2NF9SnKWT/Ru42pnYxHkkY4D3PGIXLx61oJeYNlJ8NC+VUX
fyTvU6D42gw2Y5W5/hvZsv99HgS9iPEg8BAo6IcWSG5q4yzLz/Kuri+t3w1SmWM1
6jecJNfroUg++M+IX60opOhRt/gQsD1+y1gPf1PRBmjzMDICOE8PiDt/tJ2M3xkN
ihjO25IVYjhwpqxBHd8HJN8YrLkpwpiTQdBj648jKZCm2YP+1mh8EdOLdb9V0Hoy
f17fPIDWGvPdyMVkYvaCVXAD92D6gW5uAx3Q12rlFp4bcWvodwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUHSx5In7M5KCv0nmXbbp/niScMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVmN2Y5OTctNTRmNy0z
NDNkLTg0MDUtMGExYzJkNjViYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsLWnD1qLxOP6z5EWVhoY8emBw1np1cosHBpS6M3SBwGOTrZ/TpBZJr
Nb2BbENox6j6/O33/p48WHf3tw1ESg8npLzujBn3l1n+DZ8UF5q/UyjyFr4NhMuN
+q5uCeOwWl+xHdilGno1jBgr1GJYKIXWoozZ4pxEV3cfwcI55STkqy0wTyJL4qEJ
K3emCzeWZfo33QkLDEnI8+kxMSf//r0Cj6mogifBGH/u2jU3MdeeH/Qw6sSdyeI7
zbqVc8kQLEz591ANMCcyL6AhGeN5BEOPgD+C9dHdM28iQNtUd0gPT6pwzdHjK1vs
/K3c9nla5l8UiA+gC8oX5riWj02c9rA=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:37:25 2026 by rpki-client