Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
File:                     167e52c7-fbe4-3f43-bddb-624de95626ec.roa (raw, json)
Hash identifier:          rQtHCQf9ltV8faOc8U/UeY40k7yUy8rNk3/knDs418A=
Subject key identifier:   A1:BF:85:86:07:92:C1:97:4B:93:D5:68:BF:7E:50:22:03:38:5D:5F
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584F51D2B068DD582DF4C43D6780
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     7862
IP address blocks:        146.23.192.0/22 maxlen: 22
                          146.23.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b0:68:dd:58:2d:f4:c4:3d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=f04bc0c0-4c39-4b9b-ab01-966f88531168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:78:af:fd:e9:43:67:f5:0b:7a:33:24:19:19:
                    da:86:32:b0:4a:13:5e:d8:4b:06:67:1a:84:b3:5d:
                    b8:76:f2:a8:9b:38:c4:16:48:01:cd:7c:b1:14:36:
                    55:f7:7a:85:5b:f4:8c:81:eb:f8:b4:13:5b:db:8b:
                    ca:cf:8d:c1:49:b1:37:fe:92:1a:69:95:c4:81:c1:
                    0e:84:64:d4:60:af:ac:98:54:58:1b:41:a2:bf:1b:
                    4b:12:bc:8d:03:bb:b9:70:9d:03:98:71:51:28:7f:
                    c0:af:56:ad:c7:cf:ce:16:78:9c:82:2c:0f:1e:4e:
                    b7:c7:46:1f:83:16:4a:6c:1a:7d:0f:30:50:1f:76:
                    16:70:37:17:58:60:07:74:4f:5a:f4:d8:cf:c0:c7:
                    c3:27:79:7e:e9:cb:68:84:80:b5:80:b1:ea:f3:95:
                    68:b4:2d:91:27:ee:ab:6e:c0:15:f3:eb:6b:83:98:
                    c2:05:2d:84:2f:62:51:db:f3:46:f6:fb:6e:bb:eb:
                    0c:e6:37:a2:6a:61:f1:e8:5c:3a:ac:a6:7e:bc:0a:
                    20:07:a9:f2:10:17:9b:bb:a2:12:7a:e6:77:fd:78:
                    46:97:79:5e:35:ba:09:71:4e:20:33:b4:22:62:4e:
                    a1:e3:79:00:83:c4:8a:1b:96:26:43:cc:36:54:fb:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:85:86:07:92:C1:97:4B:93:D5:68:BF:7E:50:22:03:38:5D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:29:68:34:04:ef:ac:44:20:0d:c8:41:27:8d:aa:ea:ad:
         28:78:cb:cf:a5:3c:a5:7f:ef:40:29:1d:cc:e4:38:81:b5:22:
         de:48:f7:37:59:c2:29:43:1f:40:cd:52:ff:ac:91:df:38:d6:
         3e:ca:31:3e:fc:73:60:26:8e:e4:77:35:1d:1e:61:b5:39:e2:
         3d:f7:b9:d4:13:da:d4:d1:cd:fd:5f:66:83:cf:18:29:24:ec:
         7a:b1:e6:99:66:e3:bf:d6:32:d0:2e:94:87:02:13:1c:f5:fb:
         32:a2:a3:9e:6d:b2:76:94:de:bd:9d:21:ec:9a:8f:61:66:8e:
         0e:96:53:33:04:55:c4:1a:17:07:95:4c:66:31:3d:8e:a8:fc:
         85:a2:09:f7:9f:d7:c6:f3:c5:1b:60:7a:cd:1d:de:40:0c:21:
         6e:e1:1f:ea:4d:19:4e:d2:68:43:7e:c3:32:89:fa:d0:2a:0d:
         be:2a:9f:40:70:ce:03:6d:b9:08:f8:6a:f8:b9:85:08:cd:0d:
         f8:36:8c:2b:6b:07:0f:c5:92:85:b6:ee:96:7d:49:b9:7d:f1:
         c6:39:02:5e:43:70:4e:cc:db:74:36:2f:69:a9:f0:c8:c6:fe:
         57:f7:56:07:35:c1:e0:4f:78:0f:28:94:35:b5:f0:7b:ea:df:
         72:8c:fb:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rBo3Vgt9MQ9Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZjA0YmMwYzAtNGMzOS00YjliLWFiMDEtOTY2Zjg4NTMxMTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXiv/elDZ/ULejMkGRnahjKwShNe2EsGZxqE
s124dvKomzjEFkgBzXyxFDZV93qFW/SMgev4tBNb24vKz43BSbE3/pIaaZXEgcEO
hGTUYK+smFRYG0GivxtLEryNA7u5cJ0DmHFRKH/Ar1atx8/OFnicgiwPHk63x0Yf
gxZKbBp9DzBQH3YWcDcXWGAHdE9a9NjPwMfDJ3l+6ctohIC1gLHq85VotC2RJ+6r
bsAV8+trg5jCBS2EL2JR2/NG9vtuu+sM5jeiamHx6Fw6rKZ+vAogB6nyEBebu6IS
euZ3/XhGl3leNboJcU4gM7QiYk6h43kAg8SKG5YmQ8w2VPtzUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKG/hYYHksGXS5PVaL9+UCIDOF1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMTY3ZTUyYzctZmJlNC0z
ZjQzLWJkZGItNjI0ZGU5NTYyNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkhfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErtKWg0BO+sRCANyEEnjarqrSh4y8+lPKV/70ApHczkOIG1It5I9zdZ
wilDH0DNUv+skd841j7KMT78c2AmjuR3NR0eYbU54j33udQT2tTRzf1fZoPPGCkk
7Hqx5plm47/WMtAulIcCExz1+zKio55tsnaU3r2dIeyaj2Fmjg6WUzMEVcQaFweV
TGYxPY6o/IWiCfef18bzxRtges0d3kAMIW7hH+pNGU7SaEN+wzKJ+tAqDb4qn0Bw
zgNtuQj4avi5hQjNDfg2jCtrBw/FkoW27pZ9Sbl98cY5Al5DcE7M23Q2L2mp8MjG
/lf3Vgc1weBPeA8olDW18Hvq33KM+zs=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:41 2026 by rpki-client