Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          tNE05M4OWUX75BUG5TVZei3FTodX31Hw12vvU2ztJwM=
Subject key identifier:   99:89:C2:64:A8:3C:71:D8:0F:BB:94:A6:1C:11:BE:47:35:28:77:DE
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584F4F0819FE95332DDB83BEDAC0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:19:fe:95:33:2d:db:83:be:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=699159c6-a470-4cc8-8908-f59da763c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:24:e4:db:55:b5:64:7a:47:7b:41:6e:17:
                    25:98:70:8a:7a:7d:bc:d0:fd:ca:4b:93:32:55:89:
                    e6:30:1c:2a:05:1e:79:5d:d7:4f:a0:c5:41:80:69:
                    d9:26:0f:82:9e:d5:e7:72:21:f5:4c:8f:15:a3:fc:
                    34:fe:11:08:75:94:7c:22:f1:2d:26:72:68:75:ad:
                    c2:ec:b9:b7:15:35:f6:58:c1:ed:27:6f:34:54:cf:
                    33:a6:4a:21:b3:0b:18:19:65:82:9e:16:e5:5a:2c:
                    99:c6:88:b1:15:44:60:2c:52:3f:32:f7:2d:0a:ec:
                    c6:e4:63:95:26:23:7f:1b:62:22:fe:40:74:62:be:
                    0b:70:0a:08:b6:50:d0:ae:5f:f4:4f:35:89:8e:10:
                    39:e5:eb:fc:eb:cd:f4:d4:c3:44:f8:b5:3e:0f:a8:
                    88:01:46:ca:bd:4b:07:be:e6:a3:4e:3a:e9:3f:2e:
                    43:e2:f0:98:1a:d3:42:1a:f9:5c:69:58:54:09:fd:
                    b1:df:68:f2:ec:b4:d0:d6:bf:50:a6:8d:3e:13:39:
                    3f:ca:3b:dc:8c:04:35:ae:de:18:a1:82:14:db:f7:
                    a3:22:1d:33:3b:b4:1f:09:61:c8:59:fd:6a:bd:8b:
                    d6:ba:11:95:ae:21:78:d6:d4:52:b9:1b:3b:84:d6:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:89:C2:64:A8:3C:71:D8:0F:BB:94:A6:1C:11:BE:47:35:28:77:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:a5:b8:9c:aa:7d:d2:cb:59:41:c3:c2:27:9c:a6:0e:00:
         ae:ea:1f:54:b0:e5:4b:89:93:2f:d2:37:21:45:37:e8:ae:0e:
         08:ee:39:a2:b8:b0:65:59:b4:56:db:24:04:9d:7b:87:c6:d5:
         46:80:6f:88:5a:3e:bc:e4:34:f0:0f:aa:ef:16:5b:5a:89:c1:
         c1:4b:ff:ff:e0:c3:d4:23:f8:26:41:6b:e0:da:85:95:8c:62:
         e9:d2:5e:d8:43:da:41:05:d3:b4:03:b7:52:12:39:7c:cf:5d:
         d6:25:b2:af:1c:88:2b:45:6e:db:8a:7b:45:e2:fd:80:28:df:
         1e:ec:4d:19:cb:59:1e:72:23:be:63:50:0b:72:7a:ca:f4:e2:
         06:89:02:61:8c:8e:52:61:c8:ff:2e:54:e1:ec:38:0a:f6:81:
         34:5b:e5:14:55:db:f2:42:a7:9a:9e:d8:3a:72:a3:b9:48:50:
         12:ff:b0:17:2e:b5:2b:75:b0:19:21:49:0c:57:29:4f:32:dd:
         12:72:a7:21:5c:02:11:43:fb:0d:74:d1:42:00:b4:73:31:16:
         ca:6d:e0:33:e1:56:88:3c:d7:b3:22:45:a1:48:82:6f:a3:12:
         43:39:f3:23:fe:02:54:f8:c0:99:27:cc:77:6c:54:47:ef:8b:
         dd:e5:f0:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBn+lTMt24O+2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5
ZjI3MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
Njk5MTU5YzYtYTQ3MC00Y2M4LTg5MDgtZjU5ZGE3NjNjMzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsk5NtVtWR6R3tBbhclmHCKen280P3KS5My
VYnmMBwqBR55XddPoMVBgGnZJg+CntXnciH1TI8Vo/w0/hEIdZR8IvEtJnJoda3C
7Lm3FTX2WMHtJ280VM8zpkohswsYGWWCnhblWiyZxoixFURgLFI/MvctCuzG5GOV
JiN/G2Ii/kB0Yr4LcAoItlDQrl/0TzWJjhA55ev868301MNE+LU+D6iIAUbKvUsH
vuajTjrpPy5D4vCYGtNCGvlcaVhUCf2x32jy7LTQ1r9Qpo0+Ezk/yjvcjAQ1rt4Y
oYIU2/ejIh0zO7QfCWHIWf1qvYvWuhGVriF41tRSuRs7hNZyyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmJwmSoPHHYD7uUphwRvkc1KHfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0
NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvMGQ5YjAwMDctMjVmNC0z
MmUzLTk1YWEtNGJjOTdkY2RlNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1
ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0
OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy
MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClDu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjIpbicqn3Sy1lBw8InnKYOAK7qH1Sw5UuJky/SNyFFN+iuDgjuOaK4
sGVZtFbbJASde4fG1UaAb4haPrzkNPAPqu8WW1qJwcFL///gw9Qj+CZBa+DahZWM
YunSXthD2kEF07QDt1ISOXzPXdYlsq8ciCtFbtuKe0Xi/YAo3x7sTRnLWR5yI75j
UAtyesr04gaJAmGMjlJhyP8uVOHsOAr2gTRb5RRV2/JCp5qe2Dpyo7lIUBL/sBcu
tSt1sBkhSQxXKU8y3RJypyFcAhFD+w100UIAtHMxFspt4DPhVog817MiRaFIgm+j
EkM58yP+AlT4wJknzHdsVEfvi93l8Iw=
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:04:49 2026 by rpki-client