Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
File:                     6b7c028f-569f-32db-a599-301f156d588d.roa (raw, json)
Hash identifier:          R0RlnMyFqLuEt1xP2cmD5pKNWBg13GKYvOmvRsM7Pe8=
Subject key identifier:   D4:11:86:FF:8D:51:E4:49:72:F0:AD:0C:BD:F4:92:DF:95:01:E9:CF
Certificate issuer:       /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Certificate serial:       010D0C9F4328584F348274FCF23660F1A4E3E5A0
Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        148.59.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:74:fc:f2:36:60:f1:a4:e3:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=0c4a678e-c231-4d81-b452-68b8ff8cdaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:b0:ca:50:21:5a:52:14:ff:00:5d:0e:30:
                    78:68:50:1c:4f:1f:4a:e2:81:dd:ca:94:9d:76:9a:
                    ce:c7:4b:93:f9:6c:81:89:9d:04:c2:2b:5e:84:00:
                    2d:5e:ba:7e:fc:5c:33:a8:17:f8:d2:be:d5:64:b0:
                    f2:4d:ed:11:7c:bc:b9:8e:5a:38:62:d5:2d:85:81:
                    18:ca:2b:62:b3:25:34:e3:89:27:88:9d:b4:41:5b:
                    d5:95:bb:d1:ff:8e:cb:09:a0:37:43:b1:29:c7:d2:
                    20:38:ec:f7:db:5b:e6:9b:fb:1c:b1:64:48:8d:82:
                    2f:b5:3e:6a:17:63:cc:c8:fc:57:ed:7c:d3:1a:de:
                    23:46:41:5a:9f:a2:6b:73:d9:9f:6d:f0:df:62:59:
                    3b:2f:00:fa:57:7b:a6:da:6e:f1:6c:db:09:2b:f5:
                    91:0a:46:d6:96:fd:cc:11:f0:9b:fc:19:fd:a3:f5:
                    d1:3e:0b:c8:80:3c:0c:ea:9a:00:83:23:6c:ab:1d:
                    f9:5d:f2:15:a4:cf:fe:a8:ed:ec:98:fb:72:5d:14:
                    64:8d:68:7b:8b:11:f8:6d:c6:e9:31:8e:2a:8a:02:
                    00:44:bc:65:82:7f:e7:44:68:f1:d7:3c:b9:66:43:
                    09:b5:b6:7b:2a:48:a8:57:8b:55:c9:ee:77:f6:73:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:11:86:FF:8D:51:E4:49:72:F0:AD:0C:BD:F4:92:DF:95:01:E9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:fd:ad:64:c3:89:9b:e6:8c:fa:62:f3:8d:42:2d:cd:56:
         e4:3a:2e:21:fb:34:af:ff:d6:ac:dd:1c:74:c5:b9:c5:69:65:
         33:88:90:87:71:ab:6b:d5:e0:26:25:5c:25:84:3d:3e:75:09:
         1c:eb:96:bc:25:7b:ee:71:5a:25:8c:d0:3a:a0:21:f5:d4:4a:
         12:b5:aa:59:e0:6c:c1:ce:19:ee:e9:e1:a2:35:9e:00:d7:d5:
         74:4f:ec:0e:7f:48:c7:fd:18:be:4e:0e:5f:79:a2:c7:37:42:
         f4:8b:24:39:3d:8e:fb:19:6d:60:22:6a:f8:e7:c3:4a:ea:ca:
         8d:c8:42:e9:11:76:96:71:a6:d3:a0:c2:b9:3b:75:be:6a:eb:
         9b:14:88:b6:0a:6d:73:60:92:90:58:5f:9d:79:a7:f7:69:c7:
         18:75:5b:0b:fe:49:9d:0f:2b:af:3a:5f:6d:34:f0:41:3f:e8:
         6b:9b:3b:72:fe:81:dd:10:98:fd:aa:70:61:2d:6f:54:e1:91:
         2b:74:bc:75:33:b4:f3:f3:e6:c6:6f:b7:be:4d:b7:49:58:be:
         a8:6f:5d:31:6f:e6:fc:a7:8d:ba:83:89:9e:67:ba:4f:c1:2e:
         17:d0:a5:c2:89:86:56:3f:0b:32:2c:97:8a:bd:3a:08:2f:a6:
         5e:9d:43:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnT88jZg8aTj5aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz
ZTIzMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
MGM0YTY3OGUtYzIzMS00ZDgxLWI0NTItNjhiOGZmOGNkYWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i2wylAhWlIU/wBdDjB4aFAcTx9K4oHdypSd
dprOx0uT+WyBiZ0EwitehAAtXrp+/FwzqBf40r7VZLDyTe0RfLy5jlo4YtUthYEY
yitisyU044kniJ20QVvVlbvR/47LCaA3Q7Epx9IgOOz321vmm/scsWRIjYIvtT5q
F2PMyPxX7XzTGt4jRkFan6Jrc9mfbfDfYlk7LwD6V3um2m7xbNsJK/WRCkbWlv3M
EfCb/Bn9o/XRPgvIgDwM6poAgyNsqx35XfIVpM/+qO3smPtyXRRkjWh7ixH4bcbp
MY4qigIARLxlgn/nRGjx1zy5ZkMJtbZ7KkioV4tVye539nOnPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQRhv+NUeRJcvCtDL30kt+VAenPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz
YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvNmI3YzAyOGYtNTY5Zi0z
MmRiLWE1OTktMzAxZjE1NmQ1ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj
YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm
M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj
ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJof/a1kw4mb5oz6YvONQi3NVuQ6LiH7NK//1qzdHHTFucVpZTOIkIdx
q2vV4CYlXCWEPT51CRzrlrwle+5xWiWM0DqgIfXUShK1qlngbMHOGe7p4aI1ngDX
1XRP7A5/SMf9GL5ODl95osc3QvSLJDk9jvsZbWAiavjnw0rqyo3IQukRdpZxptOg
wrk7db5q65sUiLYKbXNgkpBYX515p/dpxxh1Wwv+SZ0PK686X2008EE/6GubO3L+
gd0QmP2qcGEtb1ThkSt0vHUztPPz5sZvt75Nt0lYvqhvXTFv5vynjbqDiZ5nuk/B
LhfQpcKJhlY/CzIsl4q9Oggvpl6dQ8g=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:59:13 2026 by rpki-client