Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7cad8db-fd0c-3728-b01f-e83a65dac5d5.roa
File:                     e7cad8db-fd0c-3728-b01f-e83a65dac5d5.roa (raw, json)
Hash identifier:          aSkOwJ9aE/KHJ9seZk9c8rr9WAURKb0Dq4LC3jn9NM4=
Subject key identifier:   E5:4C:AB:DB:03:70:C0:0C:DC:B4:C5:B9:93:70:99:A1:0B:2E:F3:0E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EAA518C2821F9221724A5FB00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7cad8db-fd0c-3728-b01f-e83a65dac5d5.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        148.116.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8c:28:21:f9:22:17:24:a5:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=78ba04e1-cb77-4508-b5b6-600fc633edb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:cd:c7:3e:34:40:8f:47:cb:83:59:7d:08:
                    da:8e:de:c0:f0:a0:b0:c5:dd:a5:68:cc:b0:ea:61:
                    3f:bd:1f:b5:ce:32:57:96:a5:a8:68:df:7f:08:8f:
                    d0:a6:0f:53:80:79:c7:fb:41:c4:0c:65:75:60:db:
                    f2:f9:d1:c4:42:65:6d:71:bc:da:11:d0:dc:1a:32:
                    29:f4:3b:5f:31:34:9c:97:a5:b3:3b:1e:aa:26:da:
                    8e:8c:41:c2:bb:77:c4:7b:6b:f3:18:cb:5b:15:55:
                    0e:b6:7c:cf:e8:cb:c5:8c:6a:0d:a8:77:65:31:31:
                    7d:79:04:df:e1:7f:67:37:56:b3:70:84:d7:a3:9c:
                    dd:9d:5b:26:f6:13:c6:1f:c4:de:c3:9f:9d:f8:ea:
                    36:44:9e:b5:b2:41:b1:31:00:36:39:6b:d2:4d:58:
                    83:cd:98:50:a9:52:f1:06:2c:fd:6d:a8:42:18:06:
                    6c:7c:28:b8:54:9a:12:0c:46:72:4d:4e:76:0e:b4:
                    21:71:2c:06:4b:ec:42:28:0e:5c:a6:8c:9b:a6:0c:
                    77:50:c7:94:54:23:29:9e:2a:a3:d3:25:77:e2:26:
                    87:15:31:c7:93:dc:20:04:d9:8d:ab:55:3d:a6:2d:
                    f1:bf:a3:46:e6:31:8a:ca:e7:23:1f:f8:fd:47:f9:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:AB:DB:03:70:C0:0C:DC:B4:C5:B9:93:70:99:A1:0B:2E:F3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7cad8db-fd0c-3728-b01f-e83a65dac5d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.116.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:5a:43:67:79:6a:9c:02:8e:d8:c6:07:f2:44:10:d5:bb:
         a5:6f:a9:ff:2b:32:ac:c0:0f:0e:5d:32:0e:4a:6a:25:a2:31:
         0a:bf:0e:e6:14:c1:f9:2d:42:b3:cf:1a:f6:5b:a9:a8:b8:a4:
         3a:51:b7:a7:3e:75:95:85:e3:d4:8d:cb:16:30:7f:bd:ce:ce:
         c0:7f:29:ec:d6:be:f4:0d:eb:53:2b:01:b3:a5:75:a1:1e:e4:
         02:74:30:6b:12:52:11:4b:4b:f7:5e:b7:f4:b6:0e:d1:c5:85:
         c1:d7:44:80:06:26:e3:e4:89:be:8f:45:63:ca:7c:f5:73:03:
         0b:f8:63:cf:e1:53:0c:84:e2:c5:b3:20:98:89:20:4f:a2:fb:
         3f:c2:f0:01:f3:be:a6:e9:0b:af:ab:85:39:39:79:38:19:7b:
         6d:5a:16:f7:bd:89:29:22:3d:2a:08:82:ea:53:b3:68:11:c5:
         9d:67:44:7c:bd:ce:5a:b4:c4:b6:83:27:9a:3d:cc:c5:18:88:
         7f:c5:e6:9c:aa:d5:75:df:17:82:aa:bf:c6:72:2d:cd:f2:f2:
         a1:02:ee:5e:a8:29:dc:e0:66:34:ad:3b:42:2f:43:d2:d9:20:
         f1:66:57:55:a3:57:ff:bc:58:dc:a4:11:ea:71:d1:7c:fb:ea:
         28:78:90:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUYwoIfkiFySl+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
NzhiYTA0ZTEtY2I3Ny00NTA4LWI1YjYtNjAwZmM2MzNlZGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOHNxz40QI9Hy4NZfQjajt7A8KCwxd2laMyw
6mE/vR+1zjJXlqWoaN9/CI/Qpg9TgHnH+0HEDGV1YNvy+dHEQmVtcbzaEdDcGjIp
9DtfMTScl6WzOx6qJtqOjEHCu3fEe2vzGMtbFVUOtnzP6MvFjGoNqHdlMTF9eQTf
4X9nN1azcITXo5zdnVsm9hPGH8Tew5+d+Oo2RJ61skGxMQA2OWvSTViDzZhQqVLx
Biz9bahCGAZsfCi4VJoSDEZyTU52DrQhcSwGS+xCKA5cpoybpgx3UMeUVCMpniqj
0yV34iaHFTHHk9wgBNmNq1U9pi3xv6NG5jGKyucjH/j9R/mvFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVMq9sDcMAM3LTFuZNwmaELLvMOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTdjYWQ4ZGItZmQwYy0z
NzI4LWIwMWYtZTgzYTY1ZGFjNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlHQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQEWkNneWqcAo7YxgfyRBDVu6Vvqf8rMqzADw5dMg5KaiWiMQq/DuYU
wfktQrPPGvZbqai4pDpRt6c+dZWF49SNyxYwf73OzsB/KezWvvQN61MrAbOldaEe
5AJ0MGsSUhFLS/det/S2DtHFhcHXRIAGJuPkib6PRWPKfPVzAwv4Y8/hUwyE4sWz
IJiJIE+i+z/C8AHzvqbpC6+rhTk5eTgZe21aFve9iSkiPSoIgupTs2gRxZ1nRHy9
zlq0xLaDJ5o9zMUYiH/F5pyq1XXfF4Kqv8ZyLc3y8qEC7l6oKdzgZjStO0IvQ9LZ
IPFmV1WjV/+8WNykEepx0Xz76ih4kJ4=
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:49 2026 by rpki-client