Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
File:                     bf44ef86-5382-37ad-a8c6-7028498f62e6.roa (raw, json)
Hash identifier:          1cu7OM9YCNt16v4RNkMAEv+hDWUmi+QNppIH8kTwPY8=
Subject key identifier:   18:DB:D4:76:A8:39:F0:51:5C:5D:2D:36:50:B1:F3:05:EA:02:28:C4
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F4328584F6F22E4E079551A8E9B784000
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     15718
IP address blocks:        185.115.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e4:e0:79:55:1a:8e:9b:78:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=b7c93385-3803-4e6e-8cb2-f7da095175d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:7d:af:22:cd:9c:f6:bd:0b:77:0d:c9:9a:
                    98:f4:3a:db:03:59:ab:a1:46:e7:cc:99:b0:fc:0d:
                    35:90:90:c5:5d:3a:c8:05:5f:17:b7:3f:8f:59:b1:
                    3c:64:c5:74:7c:2f:13:be:0c:cd:64:7a:65:a7:dc:
                    af:6a:e1:85:81:34:16:d2:26:a4:83:c4:f2:c9:71:
                    86:72:a8:7a:64:de:be:dd:0a:46:92:36:de:12:6e:
                    9e:eb:fb:40:64:59:5b:c2:52:2b:51:b4:3d:0c:a4:
                    d3:6b:fb:40:0b:25:a5:fb:de:85:fc:93:c3:9c:3a:
                    a3:66:cc:65:72:48:5e:e5:23:dc:41:98:4b:74:b4:
                    95:45:fc:c4:22:e9:d8:46:af:d8:d4:2d:6b:dd:82:
                    7c:c9:71:77:4e:8e:fa:82:28:da:99:c4:ca:7e:23:
                    fe:ae:af:cd:e1:17:87:36:a2:37:2f:78:6a:1c:a3:
                    b1:7e:6a:71:93:86:11:00:ea:dc:5d:51:ff:09:91:
                    f1:d0:d5:aa:e2:f0:73:d3:1f:91:b8:96:37:6a:8d:
                    3d:d0:31:ce:58:2e:bb:51:1e:76:85:38:bf:b1:59:
                    d8:45:c1:23:da:eb:bf:dc:e2:bd:92:d6:cc:ae:3f:
                    e2:8a:72:75:03:57:9a:a5:ec:ca:81:a6:df:a5:37:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:D4:76:A8:39:F0:51:5C:5D:2D:36:50:B1:F3:05:EA:02:28:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:ab:a1:3c:fa:b6:a0:dc:2f:ea:f1:91:48:a9:fd:8a:c5:
         f2:e2:49:20:26:73:07:21:a5:20:54:60:dc:56:cf:86:02:6b:
         e9:f9:a5:e9:f5:72:00:7e:bc:33:bd:63:10:f6:78:bc:4c:3a:
         a6:e2:4c:e9:59:60:4a:84:3d:4c:10:5a:01:6c:81:be:74:a7:
         17:a2:2c:af:b7:a0:0f:7e:0a:84:53:5d:37:64:3a:c3:18:c5:
         b7:f3:46:00:e7:77:9d:97:1a:07:26:18:53:7a:86:f1:fb:c5:
         d8:ca:1b:3e:f5:29:16:a4:7a:31:97:43:d4:5c:d3:c8:f2:d4:
         bb:ac:34:16:44:4c:5b:98:42:cf:01:38:6b:47:dc:c6:3a:af:
         1c:8b:4e:df:2c:23:40:f1:16:d9:24:80:f6:5b:86:69:49:87:
         bc:1f:a5:8a:d9:d9:06:8e:16:8a:9c:25:bd:9c:7c:96:20:af:
         ac:56:9d:d7:c0:b4:62:f7:c4:ac:c7:c5:9b:37:af:df:c5:a7:
         81:d0:d7:26:88:e7:3f:0e:e8:83:e6:55:a3:f5:a1:d3:e1:87:
         62:46:16:de:56:b1:f0:4c:f0:9f:a9:d1:e5:72:76:41:c4:a5:
         f0:0f:54:87:20:86:9d:85:7e:d1:f5:b2:1e:74:e8:c5:43:58:
         38:43:e5:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuTgeVUajpt4QAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMxZWY5YzYtMjg5Zi00MTZhLTk3ZGItZjlhNjQwYTJi
MmU5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
YjdjOTMzODUtMzgwMy00ZTZlLThjYjItZjdkYTA5NTE3NWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlF9ryLNnPa9C3cNyZqY9DrbA1mroUbnzJmw
/A01kJDFXTrIBV8Xtz+PWbE8ZMV0fC8TvgzNZHplp9yvauGFgTQW0iakg8TyyXGG
cqh6ZN6+3QpGkjbeEm6e6/tAZFlbwlIrUbQ9DKTTa/tACyWl+96F/JPDnDqjZsxl
ckhe5SPcQZhLdLSVRfzEIunYRq/Y1C1r3YJ8yXF3To76gijamcTKfiP+rq/N4ReH
NqI3L3hqHKOxfmpxk4YRAOrcXVH/CZHx0NWq4vBz0x+RuJY3ao090DHOWC67UR52
hTi/sVnYRcEj2uu/3OK9ktbMrj/iinJ1A1eapezKgabfpTe9/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjb1HaoOfBRXF0tNlCx8wXqAijEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYzFl
ZjljNi0yODlmLTQxNmEtOTdkYi1mOWE2NDBhMmIyZTkvYmY0NGVmODYtNTM4Mi0z
N2FkLWE4YzYtNzAyODQ5OGY2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGMxZWY5YzYtMjg5Zi00MTZhLTk3
ZGItZjlhNjQwYTJiMmU5LzBjMWVmOWM2LTI4OWYtNDE2YS05N2RiLWY5YTY0MGEy
YjJlOS5jcmwwHwYDVR0jBBgwFoAUaTljld1dNHWiFhJazNGJTVhHn84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wYzFlZjljNi0yODlmLTQxNmEtOTdkYi1mOWE2
NDBhMmIyZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGwq6E8+rag3C/q8ZFIqf2KxfLiSSAmcwchpSBUYNxWz4YCa+n5pen1
cgB+vDO9YxD2eLxMOqbiTOlZYEqEPUwQWgFsgb50pxeiLK+3oA9+CoRTXTdkOsMY
xbfzRgDnd52XGgcmGFN6hvH7xdjKGz71KRakejGXQ9Rc08jy1LusNBZETFuYQs8B
OGtH3MY6rxyLTt8sI0DxFtkkgPZbhmlJh7wfpYrZ2QaOFoqcJb2cfJYgr6xWndfA
tGL3xKzHxZs3r9/Fp4HQ1yaI5z8O6IPmVaP1odPhh2JGFt5WsfBM8J+p0eVydkHE
pfAPVIcghp2FftH1sh506MVDWDhD5es=
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:57:10 2026 by rpki-client