Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/296a8ac7-709c-3454-a849-825d33690254.roa
File:                     296a8ac7-709c-3454-a849-825d33690254.roa (raw, json)
Hash identifier:          VXMF/MPHTTF6hAywVrUs3b85jjcvHn3yEFzQDnNQ8V8=
Subject key identifier:   19:57:57:94:0B:E0:E7:6B:9F:DA:FD:B2:73:E6:46:75:AA:2F:B7:05
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DB07583723BCDD64D07C4C6C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/296a8ac7-709c-3454-a849-825d33690254.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     22616
IP address blocks:        205.220.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:83:72:3b:cd:d6:4d:07:c4:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=a4614bbe-b2f5-437f-8ea5-48914ad06cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:61:b7:dd:0d:62:2e:03:16:c2:ab:ee:13:
                    e2:ec:e6:b8:34:2d:68:1b:b6:30:89:1e:88:05:9a:
                    d3:35:1d:d9:cf:47:6a:58:67:42:50:92:d1:f1:ce:
                    aa:06:fa:2e:b7:0a:20:8e:93:21:dc:62:c2:6d:71:
                    37:84:1a:ce:e5:fc:3f:22:85:61:01:14:25:94:af:
                    9d:86:b1:3e:46:59:3c:98:b5:15:ed:41:6e:8d:39:
                    af:af:1d:1e:1d:9d:88:09:f6:31:cb:24:92:28:31:
                    92:47:28:7b:8f:22:18:9c:16:df:58:22:b7:3c:4c:
                    81:1a:cc:c9:24:6b:c9:e9:ff:c9:73:0c:93:29:d1:
                    f5:b5:7e:b7:74:a7:71:11:4a:9a:29:37:89:6c:f8:
                    d3:55:5e:89:39:34:9c:d9:07:0b:cf:ce:20:fd:b3:
                    2f:99:12:b0:bb:01:d1:04:ac:9f:c8:cf:96:47:3c:
                    2b:c1:af:16:e8:73:ed:c7:49:89:37:9d:b2:f2:dd:
                    0c:8c:33:9c:7b:bd:f9:92:42:b8:7a:c7:3c:a8:33:
                    a2:e4:6c:bc:1d:92:fc:81:e1:e0:de:76:fc:a1:72:
                    4a:c1:8e:67:6f:6d:e5:1a:a4:1a:58:2b:d1:02:41:
                    b9:a7:05:c9:23:1d:6f:14:ef:f3:bc:52:5e:8d:99:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:57:94:0B:E0:E7:6B:9F:DA:FD:B2:73:E6:46:75:AA:2F:B7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/296a8ac7-709c-3454-a849-825d33690254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1e:ab:be:fa:fc:d1:fb:2a:2b:c3:28:63:7d:ec:7c:26:6a:
         1f:11:8c:c9:b0:eb:71:70:5e:bf:29:ad:9f:2f:f8:aa:6d:27:
         00:6b:0a:6d:5a:5b:8d:4e:94:07:74:71:c2:39:27:fb:ab:ef:
         61:6e:d9:d0:96:84:2b:ad:2a:37:4f:1a:71:d6:4f:23:73:31:
         0b:be:80:8a:66:e0:4a:ee:9d:3e:63:21:25:a6:49:d4:b7:f9:
         4e:de:22:64:c4:40:56:4b:09:0f:21:89:92:9d:1d:02:16:13:
         dc:3b:69:69:d6:28:a5:20:1a:fa:4b:3f:73:18:ee:f6:21:e9:
         46:91:af:37:20:ef:6a:2d:b7:57:40:78:13:d7:e4:de:e3:bb:
         b2:d7:c8:95:e2:d2:20:e7:10:57:8f:a4:30:f6:df:3f:7e:f1:
         22:c2:8f:ff:4d:17:58:ff:6c:0b:bc:5c:5e:b2:10:19:9c:c8:
         a8:b2:95:a6:2b:f4:3e:79:a4:98:c4:94:1d:fc:56:1e:91:e1:
         44:ac:c7:72:ec:f2:88:6f:64:e6:72:ae:72:2d:be:a2:0b:88:
         45:03:3a:d4:f6:f9:84:26:3e:74:ee:cd:2f:8a:77:b3:7b:95:
         a8:09:24:d1:59:a9:26:84:67:47:46:45:a3:b2:ed:ca:d6:71:
         fc:08:74:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYNyO83WTQfExsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
YTQ2MTRiYmUtYjJmNS00MzdmLThlYTUtNDg5MTRhZDA2Y2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Fht90NYi4DFsKr7hPi7Oa4NC1oG7YwiR6I
BZrTNR3Zz0dqWGdCUJLR8c6qBvoutwogjpMh3GLCbXE3hBrO5fw/IoVhARQllK+d
hrE+Rlk8mLUV7UFujTmvrx0eHZ2ICfYxyySSKDGSRyh7jyIYnBbfWCK3PEyBGszJ
JGvJ6f/JcwyTKdH1tX63dKdxEUqaKTeJbPjTVV6JOTSc2QcLz84g/bMvmRKwuwHR
BKyfyM+WRzwrwa8W6HPtx0mJN52y8t0MjDOce735kkK4esc8qDOi5Gy8HZL8geHg
3nb8oXJKwY5nb23lGqQaWCvRAkG5pwXJIx1vFO/zvFJejZlaYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlXV5QL4Odrn9r9snPmRnWqL7cFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjk2YThhYzctNzA5Yy0z
NDU0LWE4NDktODI1ZDMzNjkwMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8eq776/NH7KivDKGN97Hwmah8RjMmw63FwXr8prZ8v+KptJwBrCm1a
W41OlAd0ccI5J/ur72Fu2dCWhCutKjdPGnHWTyNzMQu+gIpm4ErunT5jISWmSdS3
+U7eImTEQFZLCQ8hiZKdHQIWE9w7aWnWKKUgGvpLP3MY7vYh6UaRrzcg72ott1dA
eBPX5N7ju7LXyJXi0iDnEFePpDD23z9+8SLCj/9NF1j/bAu8XF6yEBmcyKiylaYr
9D55pJjElB38Vh6R4USsx3Ls8ohvZOZyrnItvqILiEUDOtT2+YQmPnTuzS+Kd7N7
lagJJNFZqSaEZ0dGRaOy7crWcfwIdJs=
-----END CERTIFICATE-----
Generated at Wed May 13 14:20:05 2026 by rpki-client