Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa
File:                     cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa (raw, json)
Hash identifier:          6llCkkPl9RW/l+VKI97Psg7//33lplK/7OIwWHV+Fhk=
Subject key identifier:   CE:4E:98:50:2B:80:04:2F:6B:16:EE:BF:5A:C0:6B:53:D2:EB:13:A8
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F3744538A3A52BCF75600
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        147.185.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:37:44:53:8a:3a:52:bc:f7:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=4363873f-2434-41b8-83c8-c63ab6d5cf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:7f:7e:96:4f:b2:8a:49:7b:bc:a0:48:1c:
                    3d:96:1e:77:25:31:08:9e:76:ed:65:63:b4:7b:0f:
                    52:46:b3:3a:a8:63:4f:97:dd:cc:c8:12:6b:1d:b9:
                    72:d0:eb:34:62:09:35:be:45:29:6f:06:e5:bd:2a:
                    44:dd:9d:e2:cd:c2:72:cb:6e:8e:5f:b0:c8:04:bc:
                    c2:6c:57:03:2e:62:8f:a7:57:cd:30:c0:3d:0f:87:
                    29:07:40:3e:96:25:99:90:1a:88:44:32:b5:29:36:
                    55:83:19:63:a6:0d:e4:ac:21:66:9c:95:d4:58:f1:
                    c5:f9:0f:62:36:ba:52:f9:aa:f5:2f:c3:41:07:38:
                    1d:0f:d8:1d:52:45:b9:94:66:02:c6:d8:4e:3f:12:
                    3f:cf:6e:bb:71:e3:26:15:c7:c0:93:c3:8f:25:97:
                    d3:ed:ea:04:6e:c7:8f:d9:a6:e3:f6:69:c5:e1:4b:
                    1f:73:e0:80:14:45:60:20:ba:ab:2d:d1:87:17:d0:
                    d8:ba:bb:33:02:ae:6d:a7:89:85:e3:d6:a6:ce:e3:
                    05:b6:fd:98:4e:d3:92:b2:90:29:59:cb:39:3c:08:
                    df:51:10:5b:e8:4a:55:33:2f:17:35:82:ba:ee:82:
                    ee:64:88:46:b0:ce:5a:2b:f8:dc:9f:55:80:28:45:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:98:50:2B:80:04:2F:6B:16:EE:BF:5A:C0:6B:53:D2:EB:13:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd7c8ea7-f6cb-3050-a9a7-20f9bb5efdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:eb:fd:f0:c9:3f:83:79:69:a3:5d:02:b9:5a:e1:7c:6c:
         29:2e:cc:dd:52:36:ee:83:a5:75:3d:bb:e6:c7:b5:68:1b:93:
         f2:18:36:85:35:d0:16:32:af:60:92:d5:6d:a9:2d:5f:3c:a6:
         33:47:02:f1:c0:2b:40:77:ae:6d:64:bb:03:ab:af:d3:dd:2a:
         41:bd:68:f7:c3:6a:34:f3:ae:c4:1d:20:4f:47:2e:da:6c:1f:
         30:2e:38:2e:f2:f8:fd:f4:23:0c:67:09:21:24:ec:22:c5:18:
         af:aa:72:1e:9c:3e:2d:2f:26:6c:78:e2:3f:8d:df:aa:7b:2b:
         5f:d8:72:c7:80:2c:d3:6b:d3:9a:3a:9e:db:d1:f2:56:34:1c:
         6e:9f:a3:4a:99:12:58:fc:a6:44:5e:bb:50:9d:a5:f5:9c:96:
         d9:e5:74:b1:e8:4d:72:cb:53:7c:c7:f7:df:e4:c7:bb:b1:2e:
         de:28:c5:22:ed:28:4d:cd:10:cd:bb:d1:31:09:07:1c:d6:92:
         8e:0d:ab:08:de:fd:30:50:e0:50:e3:e7:e1:30:25:4c:a5:3d:
         c7:c7:6b:dc:43:13:5b:47:5f:65:da:8f:b3:c9:94:ed:a6:f7:
         d7:eb:f5:56:17:b9:9c:bf:3b:e6:5c:f7:71:0a:52:74:77:db:
         09:c6:2a:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XzdEU4o6Urz3VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NDM2Mzg3M2YtMjQzNC00MWI4LTgzYzgtYzYzYWI2ZDVjZjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Z/fpZPsopJe7ygSBw9lh53JTEInnbtZWO0
ew9SRrM6qGNPl93MyBJrHbly0Os0Ygk1vkUpbwblvSpE3Z3izcJyy26OX7DIBLzC
bFcDLmKPp1fNMMA9D4cpB0A+liWZkBqIRDK1KTZVgxljpg3krCFmnJXUWPHF+Q9i
NrpS+ar1L8NBBzgdD9gdUkW5lGYCxthOPxI/z267ceMmFcfAk8OPJZfT7eoEbseP
2abj9mnF4Usfc+CAFEVgILqrLdGHF9DYurszAq5tp4mF49amzuMFtv2YTtOSspAp
Wcs5PAjfURBb6EpVMy8XNYK67oLuZIhGsM5aK/jcn1WAKEV9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5OmFArgAQvaxbuv1rAa1PS6xOoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvY2Q3YzhlYTctZjZjYi0z
MDUwLWE5YTctMjBmOWJiNWVmZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7noMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYv6/3wyT+DeWmjXQK5WuF8bCkuzN1SNu6DpXU9u+bHtWgbk/IYNoU1
0BYyr2CS1W2pLV88pjNHAvHAK0B3rm1kuwOrr9PdKkG9aPfDajTzrsQdIE9HLtps
HzAuOC7y+P30IwxnCSEk7CLFGK+qch6cPi0vJmx44j+N36p7K1/YcseALNNr05o6
ntvR8lY0HG6fo0qZElj8pkReu1CdpfWcltnldLHoTXLLU3zH99/kx7uxLt4oxSLt
KE3NEM270TEJBxzWko4Nqwje/TBQ4FDj5+EwJUylPcfHa9xDE1tHX2Xaj7PJlO2m
99fr9VYXuZy/O+Zc93EKUnR32wnGKg4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:47 2026 by rpki-client