Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/dd798036-efe5-3e6e-b60b-172a88574c6e.roa
File:                     dd798036-efe5-3e6e-b60b-172a88574c6e.roa (raw, json)
Hash identifier:          iCrWLZ3fIZC/kQoWcJt8gwPVOIIuKZjTcAeBr0etV5I=
Subject key identifier:   DE:07:4D:5A:76:D6:7B:A5:D6:54:6B:5F:9F:7C:AC:A7:33:AF:0B:23
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584F4972E71CC830CC06E157D480
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/dd798036-efe5-3e6e-b60b-172a88574c6e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20477
IP address blocks:        137.118.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e7:1c:c8:30:cc:06:e1:57:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f81e5e3d-392b-4faa-9636-4a7e2be657bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:a9:b7:f2:e5:07:47:92:95:49:cb:09:4f:
                    20:a6:e3:d0:72:23:89:66:5b:11:2d:33:d9:08:60:
                    66:2d:8b:5f:f9:43:9f:38:5b:67:49:ef:ed:f2:85:
                    50:bb:06:04:c6:dd:0e:00:7d:5e:c8:f2:fe:fb:5e:
                    cb:eb:87:c1:27:9f:64:18:17:21:b1:06:82:23:bb:
                    3f:40:e1:98:fc:99:e5:65:31:4a:27:45:ad:f4:e7:
                    d0:87:61:f4:ba:e9:4b:16:ef:19:96:95:5a:ba:f4:
                    33:1a:c9:b4:fd:a5:da:a9:66:80:f7:2f:45:d3:d9:
                    12:1d:a5:a7:d7:50:87:94:1d:2f:7f:65:64:1a:c3:
                    f2:79:90:a3:3c:15:c5:fc:f0:23:c4:22:38:54:03:
                    d9:bc:ce:fa:51:0d:61:21:b9:be:1e:30:53:67:43:
                    ca:0d:ea:80:6a:ad:4f:40:d3:9c:cf:96:fe:b2:6c:
                    dd:bb:ce:ac:89:b1:df:79:29:39:40:5c:06:88:d9:
                    d2:22:77:09:ac:32:a7:0c:99:08:7d:9d:13:cc:f7:
                    32:c2:5c:7e:12:75:ee:cb:15:b8:9f:5d:23:f2:aa:
                    ff:31:ed:09:ff:cf:c7:2d:6a:5f:97:02:cb:b8:33:
                    b7:d4:d9:7d:48:b5:bd:f1:3a:56:09:49:a1:70:56:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:4D:5A:76:D6:7B:A5:D6:54:6B:5F:9F:7C:AC:A7:33:AF:0B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/dd798036-efe5-3e6e-b60b-172a88574c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:a0:a9:84:e3:c1:53:cf:68:4b:6d:b2:5d:8a:f0:58:98:
         78:39:e8:c8:77:94:e6:b9:4c:b8:37:fd:ab:a4:1a:7d:ad:d3:
         b1:e8:84:70:18:bb:7a:0c:05:49:9a:90:0f:60:2e:f6:06:1e:
         87:ad:a3:17:b6:cb:83:cb:99:a9:e1:48:72:01:8a:50:d9:0d:
         52:13:ae:85:0e:ea:8b:a6:8a:58:bb:22:3d:48:55:57:f3:ad:
         77:a0:89:73:71:6c:33:1a:9e:ef:40:23:ea:02:8f:df:14:30:
         22:f6:0d:8f:12:42:cc:b8:a1:0e:b5:02:5b:ed:45:4a:fb:b8:
         bd:51:11:36:54:36:6b:f4:73:f0:c7:38:eb:eb:af:cc:7e:41:
         b7:3c:0c:4d:1f:a7:6d:fd:14:ef:a7:db:90:aa:c9:6f:81:c5:
         e4:f0:ef:fa:ce:79:b8:64:c9:3c:67:f7:d0:cc:79:78:80:b9:
         e2:ed:4e:b2:6c:44:e6:1c:69:c2:33:20:63:e4:b6:f5:6d:7d:
         b5:3c:31:b5:ee:47:94:dd:ff:de:ef:6f:41:fa:ec:0e:88:19:
         f3:9f:fd:c2:06:c3:c8:7f:0d:39:75:e0:e4:88:3c:77:50:e0:
         0d:79:9d:87:66:48:01:ac:36:e4:f6:df:a6:12:1d:e2:cf:e7:
         74:07:0b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuccyDDMBuFX1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjgxZTVlM2QtMzkyYi00ZmFhLTk2MzYtNGE3ZTJiZTY1N2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvWpt/LlB0eSlUnLCU8gpuPQciOJZlsRLTPZ
CGBmLYtf+UOfOFtnSe/t8oVQuwYExt0OAH1eyPL++17L64fBJ59kGBchsQaCI7s/
QOGY/JnlZTFKJ0Wt9OfQh2H0uulLFu8ZlpVauvQzGsm0/aXaqWaA9y9F09kSHaWn
11CHlB0vf2VkGsPyeZCjPBXF/PAjxCI4VAPZvM76UQ1hIbm+HjBTZ0PKDeqAaq1P
QNOcz5b+smzdu86sibHfeSk5QFwGiNnSIncJrDKnDJkIfZ0TzPcywlx+EnXuyxW4
n10j8qr/Me0J/8/HLWpflwLLuDO31Nl9SLW98TpWCUmhcFZcQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4HTVp21nul1lRrX598rKczrwsjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZGQ3OTgwMzYtZWZlNS0z
ZTZlLWI2MGItMTcyYTg4NTc0YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiXaWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrMoKmE48FTz2hLbbJdivBYmHg56Mh3lOa5TLg3/aukGn2t07HohHAY
u3oMBUmakA9gLvYGHoetoxe2y4PLmanhSHIBilDZDVITroUO6oumili7Ij1IVVfz
rXegiXNxbDManu9AI+oCj98UMCL2DY8SQsy4oQ61AlvtRUr7uL1RETZUNmv0c/DH
OOvrr8x+Qbc8DE0fp239FO+n25CqyW+BxeTw7/rOebhkyTxn99DMeXiAueLtTrJs
ROYcacIzIGPktvVtfbU8MbXuR5Td/97vb0H67A6IGfOf/cIGw8h/DTl14OSIPHdQ
4A15nYdmSAGsNuT236YSHeLP53QHC04=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:52:27 2026 by rpki-client