Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
File:                     a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa (raw, json)
Hash identifier:          lkeQQv+jpyDXZCoJTG6tGejYLeYvKKNApA2UcPaFMbY=
Subject key identifier:   A3:0C:CF:2E:88:94:FC:8D:32:CD:24:B8:59:3A:F1:82:8E:88:BA:8E
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584DCAFB0C484D0E49215CA83080
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     63199
IP address blocks:        148.153.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0c:48:4d:0e:49:21:5c:a8:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=869fafe4-0b4e-4f35-8b41-4f695168e792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:56:83:90:7b:a2:c9:0a:a3:7e:e0:21:f1:
                    06:61:9a:3d:7f:6e:70:5e:e0:60:15:25:31:0a:60:
                    f8:53:51:03:e9:9f:43:5a:1e:58:e7:56:ff:d7:7d:
                    ed:c3:ba:ce:7b:37:5a:23:5f:97:05:e4:df:d6:13:
                    57:95:3f:4d:e3:1f:21:ca:fc:89:d7:5a:21:b8:57:
                    75:97:ce:c3:58:d9:90:ac:7a:d6:62:e4:eb:88:7b:
                    8a:76:12:23:a6:d6:20:d9:4d:0b:58:9c:20:9c:35:
                    f4:27:d7:2e:ed:16:37:f1:c1:8f:dd:a4:e9:31:1e:
                    2e:f5:16:a1:3e:4e:ba:c3:de:42:40:e8:14:f3:50:
                    23:2a:a0:0b:af:b8:08:92:32:42:c5:01:57:55:b0:
                    51:f8:fb:63:cf:bf:34:fb:c1:9e:be:0d:74:85:d9:
                    a9:00:09:f0:93:29:d6:12:c7:b4:ba:00:b2:38:c4:
                    29:2a:10:e7:8d:fb:ca:88:43:9c:bf:51:04:ab:cb:
                    a2:48:0d:c3:e8:a8:ec:c1:75:9c:4e:ab:e4:59:5e:
                    ee:57:19:ce:e0:ac:16:48:c5:34:83:0d:7b:08:55:
                    63:49:e2:3f:9c:18:a9:66:f0:0a:69:c6:44:59:c1:
                    ae:f1:7b:5f:4f:34:34:02:40:3c:51:5c:f0:26:27:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:CF:2E:88:94:FC:8D:32:CD:24:B8:59:3A:F1:82:8E:88:BA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:49:80:5d:1b:1b:2c:7c:60:e2:ee:23:5c:7d:24:d1:b4:
         79:f5:97:81:db:72:90:2f:14:b8:5b:92:77:d1:59:0b:bd:e8:
         42:42:a8:a1:d6:9c:e7:c4:e2:00:78:66:bf:02:a3:25:96:e6:
         9b:36:8c:f0:45:c5:19:64:a9:65:6b:2f:4e:65:36:98:11:fb:
         27:47:a9:73:77:5c:e6:01:7c:59:fa:b3:85:79:f4:7c:50:f5:
         c3:44:2a:a6:b0:d7:ff:e9:a8:e1:db:cd:58:f2:65:00:34:ae:
         70:57:55:d0:77:83:ac:9b:73:3c:2b:dd:e2:a8:e6:67:a6:98:
         cb:cf:18:77:2e:0b:44:be:d2:86:1e:79:1b:67:ac:a9:5f:72:
         44:da:fd:87:0a:26:2a:66:2f:e5:5c:8d:8b:c2:4c:ea:13:74:
         63:8e:b3:8d:36:e8:7c:60:aa:a9:90:78:ba:2a:06:04:03:f5:
         58:49:fe:44:75:05:64:16:4f:a0:d5:0f:aa:1f:59:2f:15:0e:
         dd:00:25:fa:4e:70:8d:7e:da:a4:b6:4d:bb:47:3e:4c:7a:a1:
         43:58:60:04:b3:d6:a2:97:05:b7:9a:13:27:d3:8e:66:78:bb:
         9d:fc:71:55:e2:08:7f:40:56:27:7a:a6:2e:aa:d0:5a:a8:07:
         34:18:c6:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wxITQ5JIVyoMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ODY5ZmFmZTQtMGI0ZS00ZjM1LThiNDEtNGY2OTUxNjhlNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRWg5B7oskKo37gIfEGYZo9f25wXuBgFSUx
CmD4U1ED6Z9DWh5Y51b/133tw7rOezdaI1+XBeTf1hNXlT9N4x8hyvyJ11ohuFd1
l87DWNmQrHrWYuTriHuKdhIjptYg2U0LWJwgnDX0J9cu7RY38cGP3aTpMR4u9Rah
Pk66w95CQOgU81AjKqALr7gIkjJCxQFXVbBR+Ptjz780+8Gevg10hdmpAAnwkynW
Ese0ugCyOMQpKhDnjfvKiEOcv1EEq8uiSA3D6KjswXWcTqvkWV7uVxnO4KwWSMU0
gw17CFVjSeI/nBipZvAKacZEWcGu8XtfTzQ0AkA8UVzwJida9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMMzy6IlPyNMs0kuFk68YKOiLqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTc5M2VjOWQtODZkMS0z
MDAyLWE5ZDQtNWE5OTQwZWRjZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR+SYBdGxssfGDi7iNcfSTRtHn1l4HbcpAvFLhbknfRWQu96EJCqKHW
nOfE4gB4Zr8CoyWW5ps2jPBFxRlkqWVrL05lNpgR+ydHqXN3XOYBfFn6s4V59HxQ
9cNEKqaw1//pqOHbzVjyZQA0rnBXVdB3g6ybczwr3eKo5memmMvPGHcuC0S+0oYe
eRtnrKlfckTa/YcKJipmL+VcjYvCTOoTdGOOs4026HxgqqmQeLoqBgQD9VhJ/kR1
BWQWT6DVD6ofWS8VDt0AJfpOcI1+2qS2TbtHPkx6oUNYYASz1qKXBbeaEyfTjmZ4
u538cVXiCH9AVid6pi6q0FqoBzQYxuA=
-----END CERTIFICATE-----
Generated at Wed May 13 11:01:30 2026 by rpki-client