Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa
File:                     1bdc5168-92a8-3f2b-b629-64a845dc5598.roa (raw, json)
Hash identifier:          NrrHOAjAu6JEYtXQV7+242TD/GglrxXeYo20QGVpdi8=
Subject key identifier:   0D:82:5A:E9:98:7B:80:FD:F7:9B:E0:C5:A8:A7:82:6D:B9:95:94:10
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DCDC5A2D87B9447579F6626C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     398478
IP address blocks:        107.148.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a2:d8:7b:94:47:57:9f:66:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=ac153c04-b87c-4aae-9338-c03cbfb46d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:e3:28:11:23:41:98:fe:90:35:0d:10:25:
                    d9:ab:0f:28:df:ae:a8:89:33:ca:87:69:58:28:6d:
                    7f:ba:9c:b8:f1:e1:55:bc:1a:d9:c4:51:b8:ef:32:
                    d5:4c:ff:3f:84:ff:ed:02:76:4d:26:bd:97:dc:61:
                    8c:75:98:38:3f:d6:ab:f5:d0:56:6b:40:f0:82:18:
                    01:88:65:52:1d:03:45:fa:64:42:71:f8:c1:5a:59:
                    ee:d5:c0:4d:d7:3c:37:25:91:10:cc:0e:ed:03:c4:
                    77:97:c4:ee:a2:d4:78:92:73:cc:f6:02:2f:7c:00:
                    04:4d:55:6d:58:29:e6:9a:8c:ff:b8:35:75:2f:de:
                    ad:63:88:81:1a:41:f3:fb:88:95:78:4c:c2:01:94:
                    6b:dc:15:8b:90:57:37:f4:6e:0a:b8:52:55:a9:f0:
                    d6:ba:96:54:fa:12:56:13:f3:5a:52:42:02:cd:1d:
                    e9:a5:e7:ad:e5:b3:70:f0:33:dc:d4:19:c0:31:04:
                    d9:cb:0d:0f:50:2d:66:cf:53:a5:cc:98:3e:1f:8a:
                    88:fd:6a:78:90:5b:0a:32:d9:90:2e:ff:25:05:4e:
                    01:42:91:b9:be:1d:c4:b4:52:8f:0c:b7:d0:4a:fe:
                    77:b4:4e:b4:d9:97:9f:4b:ba:5e:01:6d:9b:41:d7:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:82:5A:E9:98:7B:80:FD:F7:9B:E0:C5:A8:A7:82:6D:B9:95:94:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:6f:df:83:00:53:22:01:b4:fe:90:c8:a5:f8:fd:0d:79:
         b4:d8:29:7a:56:c7:13:1c:d8:eb:c7:88:21:54:23:af:04:1b:
         97:19:b7:d6:fe:02:60:79:cb:f5:d7:f3:d6:14:1e:af:49:0a:
         99:fc:d0:b7:4a:49:0f:53:3c:82:cd:8d:1e:54:31:1e:eb:c5:
         3c:39:eb:20:77:17:c9:71:f5:ec:36:d0:b2:59:f5:08:58:0a:
         e9:e5:30:c8:e2:ad:f7:a2:68:c4:20:ec:0f:62:1f:1b:9d:e4:
         b0:e1:87:40:9e:1b:99:e7:cc:d2:5e:f9:8b:8c:33:9a:89:92:
         91:de:f5:69:d4:aa:6d:bf:a2:79:c4:ea:f7:e0:8c:23:1d:b6:
         5b:08:29:a9:85:06:1c:6e:6a:6a:6d:3b:95:ec:fc:5d:4a:d6:
         f6:cb:83:42:51:d9:fb:c2:56:80:a6:0e:8e:52:79:0a:7d:53:
         5e:03:52:89:6f:7c:7f:be:0b:e7:35:e4:1e:4a:20:de:8a:a0:
         86:0a:56:a1:b8:c8:d3:b1:39:45:64:03:55:7e:14:23:bf:96:
         c0:7d:7f:5f:c1:ab:1c:56:f5:54:a3:7e:4e:18:02:e0:3f:81:
         a1:2f:72:5f:7e:c3:aa:3e:6f:33:cb:2e:bf:8f:48:d9:16:c5:
         19:ec:9a:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaLYe5RHV59mJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
YWMxNTNjMDQtYjg3Yy00YWFlLTkzMzgtYzAzY2JmYjQ2ZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheLjKBEjQZj+kDUNECXZqw8o366oiTPKh2lY
KG1/upy48eFVvBrZxFG47zLVTP8/hP/tAnZNJr2X3GGMdZg4P9ar9dBWa0DwghgB
iGVSHQNF+mRCcfjBWlnu1cBN1zw3JZEQzA7tA8R3l8TuotR4knPM9gIvfAAETVVt
WCnmmoz/uDV1L96tY4iBGkHz+4iVeEzCAZRr3BWLkFc39G4KuFJVqfDWupZU+hJW
E/NaUkICzR3ppeet5bNw8DPc1BnAMQTZyw0PUC1mz1OlzJg+H4qI/Wp4kFsKMtmQ
Lv8lBU4BQpG5vh3EtFKPDLfQSv53tE602ZefS7peAW2bQddgyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2CWumYe4D995vgxaingm25lZQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMWJkYzUxNjgtOTJhOC0z
ZjJiLWI2MjktNjRhODQ1ZGM1NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxMb9+DAFMiAbT+kMil+P0NebTYKXpWxxMc2OvHiCFUI68EG5cZt9b+
AmB5y/XX89YUHq9JCpn80LdKSQ9TPILNjR5UMR7rxTw56yB3F8lx9ew20LJZ9QhY
CunlMMjirfeiaMQg7A9iHxud5LDhh0CeG5nnzNJe+YuMM5qJkpHe9WnUqm2/onnE
6vfgjCMdtlsIKamFBhxuamptO5Xs/F1K1vbLg0JR2fvCVoCmDo5SeQp9U14DUolv
fH++C+c15B5KIN6KoIYKVqG4yNOxOUVkA1V+FCO/lsB9f1/BqxxW9VSjfk4YAuA/
gaEvcl9+w6o+bzPLLr+PSNkWxRnsmoE=
-----END CERTIFICATE-----
Generated at Wed May 13 13:49:35 2026 by rpki-client