Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
File:                     60937ba8-97a0-39b2-9125-b389bb3810bd.roa (raw, json)
Hash identifier:          82b9A8SDQ4LoZdilFdhRJwzvrvJMMYRwcH1g0nzBkjs=
Subject key identifier:   11:26:F0:2D:0C:34:57:4E:F4:93:38:89:17:7B:E8:A9:93:C8:B6:84
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584E885A3AE7CA505087DA00E4C0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     23154
IP address blocks:        148.164.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3a:e7:ca:50:50:87:da:00:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=136b03c9-efd9-4bc2-ab82-b7ca2e180f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:09:01:9f:74:93:a7:41:1b:d3:89:92:e0:
                    89:b7:d0:42:10:c9:eb:9c:7b:94:09:51:35:58:6b:
                    f0:bf:61:ba:6b:7c:d9:45:30:70:bf:61:62:6f:2a:
                    ca:71:81:a8:ba:d7:ae:1c:ef:20:d2:86:b1:00:58:
                    ba:f8:38:13:3f:a9:eb:1d:21:94:b8:2b:9b:69:6f:
                    ff:d1:97:ef:b5:28:10:fa:54:72:65:49:59:78:d1:
                    46:0c:37:4a:4a:09:20:3d:13:05:22:c0:f3:4a:0d:
                    79:27:a6:25:f0:59:22:89:09:06:7a:68:e1:c0:83:
                    5e:0c:dd:66:70:e8:34:90:6a:de:d1:e4:f0:f6:b2:
                    87:79:c6:10:3f:aa:52:b3:4b:84:69:d9:83:dd:47:
                    30:8c:7a:1e:a4:89:8a:50:3c:62:1e:a3:2e:14:ff:
                    45:f4:eb:30:92:2e:dc:e5:ee:2f:19:8c:72:6f:f6:
                    2f:6d:1c:b0:3c:f8:3f:1d:5a:b1:c2:a5:91:43:f2:
                    ed:28:15:0e:e8:20:06:b3:f1:40:0f:cf:15:7c:57:
                    1c:3e:4f:75:b2:05:a6:d6:44:9b:41:f1:a0:9e:87:
                    f6:2d:e5:47:00:4c:bb:bb:99:57:a0:25:24:dc:61:
                    f5:51:cd:5b:91:5a:df:dc:cd:ed:41:c3:b2:81:4d:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:26:F0:2D:0C:34:57:4E:F4:93:38:89:17:7B:E8:A9:93:C8:B6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:07:87:2a:81:dc:38:2b:3a:c3:d6:db:a7:60:3a:61:e2:
         d3:ec:5b:7a:96:ea:5f:53:df:68:a9:36:37:e0:b9:e4:69:d3:
         d4:2a:14:ee:64:aa:81:ad:1c:50:90:15:fe:28:e1:4a:f1:06:
         aa:0a:2b:76:6d:2f:e4:99:d3:ac:ca:e1:ca:c2:7c:ab:d2:7f:
         83:e4:a7:02:38:37:bd:f4:9b:22:60:bd:aa:8b:9e:85:cb:a2:
         9f:a8:f6:9f:06:00:ce:1a:d5:bf:e8:96:b4:b3:ba:02:6b:2b:
         5c:ca:2e:3d:0d:f5:29:f1:b0:6e:98:75:3b:99:2d:95:70:cc:
         b5:1e:e3:7f:9d:45:e3:0c:94:eb:dd:e9:19:73:c4:83:ec:8f:
         7e:c4:94:39:20:4e:f1:9f:fd:55:23:eb:81:b3:83:9f:68:5d:
         43:17:c4:ae:4c:cb:c5:eb:a8:14:7c:21:c6:4b:8e:28:59:f4:
         0d:ac:46:d9:9d:58:d3:ce:49:a9:f6:7d:68:3f:d6:55:62:29:
         81:44:6e:38:77:6b:9a:3b:e6:36:17:fb:ae:81:5e:44:f6:d8:
         92:fa:73:0c:14:48:c4:08:2c:ee:f9:02:63:66:93:37:7a:79:
         7b:fd:b3:ed:4f:57:94:0b:cc:d4:86:4d:51:c2:09:f6:10:c2:
         f3:9d:3b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWjrnylBQh9oA5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
MTM2YjAzYzktZWZkOS00YmMyLWFiODItYjdjYTJlMTgwZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAoJAZ90k6dBG9OJkuCJt9BCEMnrnHuUCVE1
WGvwv2G6a3zZRTBwv2FibyrKcYGouteuHO8g0oaxAFi6+DgTP6nrHSGUuCubaW//
0ZfvtSgQ+lRyZUlZeNFGDDdKSgkgPRMFIsDzSg15J6Yl8FkiiQkGemjhwINeDN1m
cOg0kGre0eTw9rKHecYQP6pSs0uEadmD3UcwjHoepImKUDxiHqMuFP9F9Oswki7c
5e4vGYxyb/YvbRywPPg/HVqxwqWRQ/LtKBUO6CAGs/FAD88VfFccPk91sgWm1kSb
QfGgnof2LeVHAEy7u5lXoCUk3GH1Uc1bkVrf3M3tQcOygU3KGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEm8C0MNFdO9JM4iRd76KmTyLaEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvNjA5MzdiYTgtOTdhMC0z
OWIyLTkxMjUtYjM4OWJiMzgxMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFtB4cqgdw4KzrD1tunYDph4tPsW3qW6l9T32ipNjfgueRp09QqFO5k
qoGtHFCQFf4o4UrxBqoKK3ZtL+SZ06zK4crCfKvSf4PkpwI4N730myJgvaqLnoXL
op+o9p8GAM4a1b/olrSzugJrK1zKLj0N9SnxsG6YdTuZLZVwzLUe43+dReMMlOvd
6RlzxIPsj37ElDkgTvGf/VUj64Gzg59oXUMXxK5My8XrqBR8IcZLjihZ9A2sRtmd
WNPOSan2fWg/1lViKYFEbjh3a5o75jYX+66BXkT22JL6cwwUSMQILO75AmNmkzd6
eXv9s+1PV5QLzNSGTVHCCfYQwvOdO4Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:51 2026 by rpki-client