Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa
File:                     518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa (raw, json)
Hash identifier:          zl+iFWYT8s5JQ9yu1jh69ldn6OOiQYm7apKzg34VfDk=
Subject key identifier:   9D:94:86:1A:D5:79:9D:1E:0F:57:55:C1:20:4F:D9:46:E7:D5:94:22
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584E95502C10BF735B04E8E682E0
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa
Signing time:             Wed 22 Jul 2026 12:25:30 +0000
ROA not before:           Wed 22 Jul 2026 12:25:30 +0000
ROA not after:            Tue 20 Oct 2026 12:25:30 +0000
asID:                     64267
IP address blocks:        199.189.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:50:2c:10:bf:73:5b:04:e8:e6:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Jul 22 12:25:30 2026 GMT
            Not After : Oct 20 12:25:30 2026 GMT
        Subject: CN=848cd3a5-8045-472d-834d-27d77478e745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:58:56:c5:7c:69:80:cf:f3:5f:85:ba:eb:
                    d6:fa:10:76:b7:c5:af:1a:f0:dd:b9:39:5e:e9:13:
                    7e:40:f1:bc:f2:89:5e:51:9b:31:31:50:4a:56:25:
                    a0:10:7f:39:64:4f:cc:10:59:98:2f:11:a2:42:cb:
                    44:cb:0e:04:2a:f0:20:3b:58:30:fe:fc:10:1a:c3:
                    02:79:67:b3:c1:a8:90:20:76:61:b6:5e:51:a6:41:
                    42:79:dc:9f:37:cf:a5:f7:31:8f:a9:72:83:22:57:
                    5a:f0:65:e8:4e:ef:5e:dd:98:95:a0:73:4e:2d:6d:
                    40:c7:2f:9c:33:75:5f:f3:f9:4a:ee:fc:33:34:80:
                    80:04:77:2a:0a:8a:27:72:42:89:ac:d1:88:ac:dd:
                    cd:dc:bd:aa:e2:aa:21:da:9f:a9:dc:65:37:24:51:
                    81:40:d4:a1:38:5f:4f:fb:0a:a9:f1:4c:2c:02:ca:
                    39:cb:9e:93:f7:54:46:6c:59:ee:1b:b7:c7:51:43:
                    01:41:19:f4:ea:84:4c:3c:f8:70:5c:22:f0:ee:93:
                    b3:dd:e3:71:c7:08:af:5a:65:cf:cc:b4:a1:21:62:
                    64:85:db:05:01:63:1b:c9:6a:5f:7c:88:d3:c5:d4:
                    68:79:ab:b7:9d:89:54:14:c6:1a:07:57:99:a2:09:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:86:1A:D5:79:9D:1E:0F:57:55:C1:20:4F:D9:46:E7:D5:94:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:aa:da:23:67:e6:8b:32:c3:36:e3:5c:af:f2:5e:e3:19:
         90:d4:fd:31:17:cc:a3:7f:e9:0b:67:5a:fa:fe:eb:d1:27:25:
         b6:b0:c9:9c:c0:d8:a7:73:fa:7f:fd:29:1d:7b:23:e3:ff:38:
         ce:99:0d:b7:6c:d0:33:cd:ef:0f:bd:6c:f3:25:cd:3f:94:b6:
         cd:c9:ea:cc:91:36:9b:0f:5b:52:15:df:8e:4d:9c:a2:3a:b7:
         cd:4a:98:51:d5:55:3f:24:10:bb:43:20:5e:3b:09:d1:07:46:
         06:b6:59:fb:c7:cf:5d:ce:11:75:17:52:5f:de:31:dc:65:49:
         76:8d:ed:78:ab:36:c3:b5:15:ef:55:96:d3:a2:a8:e4:f6:45:
         71:b0:9f:16:8c:50:a1:bd:8b:b5:99:e9:ad:2f:1b:0f:32:54:
         da:e7:fb:f8:53:98:b1:bd:83:97:a7:da:e1:bb:c6:c3:24:df:
         bf:57:20:0e:a3:04:ad:cf:0a:9f:d3:7a:09:a0:11:08:73:71:
         75:3c:61:53:fe:4d:ea:7c:07:87:c1:61:a4:47:38:d9:63:a6:
         85:58:dd:b1:fa:c0:80:c5:16:19:75:75:0e:02:f8:58:18:46:
         60:2e:cc:69:80:6f:55:4d:f1:ce:1a:49:5c:76:68:32:a4:7a:
         3a:9e:35:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6VUCwQv3NbBOjmguAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl
MDlmMB4XDTI2MDcyMjEyMjUzMFoXDTI2MTAyMDEyMjUzMFowLzEtMCsGA1UEAxMk
ODQ4Y2QzYTUtODA0NS00NzJkLTgzNGQtMjdkNzc0NzhlNzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtYVsV8aYDP81+FuuvW+hB2t8WvGvDduTle
6RN+QPG88oleUZsxMVBKViWgEH85ZE/MEFmYLxGiQstEyw4EKvAgO1gw/vwQGsMC
eWezwaiQIHZhtl5RpkFCedyfN8+l9zGPqXKDIlda8GXoTu9e3ZiVoHNOLW1Axy+c
M3Vf8/lK7vwzNICABHcqCoonckKJrNGIrN3N3L2q4qoh2p+p3GU3JFGBQNShOF9P
+wqp8UwsAso5y56T91RGbFnuG7fHUUMBQRn06oRMPPhwXCLw7pOz3eNxxwivWmXP
zLShIWJkhdsFAWMbyWpffIjTxdRoeau3nYlUFMYaB1eZogkOHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2UhhrVeZ0eD1dVwSBP2Ubn1ZQiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5
N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvNTE4MzIzYjItNTJmOS0z
ZDU2LWE5ZWYtMTY2ZGM0Y2ZlMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj
MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi
ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk
Yjk2YmUwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx72UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABX0qtojZ+aLMsM241yv8l7jGZDU/TEXzKN/6QtnWvr+69EnJbawyZzA
2Kdz+n/9KR17I+P/OM6ZDbds0DPN7w+9bPMlzT+Uts3J6syRNpsPW1IV345NnKI6
t81KmFHVVT8kELtDIF47CdEHRga2WfvHz13OEXUXUl/eMdxlSXaN7XirNsO1Fe9V
ltOiqOT2RXGwnxaMUKG9i7WZ6a0vGw8yVNrn+/hTmLG9g5en2uG7xsMk379XIA6j
BK3PCp/TegmgEQhzcXU8YVP+Tep8B4fBYaRHONljpoVY3bH6wIDFFhl1dQ4C+FgY
RmAuzGmAb1VN8c4aSVx2aDKkejqeNX0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:27 2026 by rpki-client