Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa
File:                     f98fe691-4c80-3d79-bb25-0bda65bc4464.roa (raw, json)
Hash identifier:          SMB6CtDn8QgEbGzp+It1M1KwqeOEXb09997Px512G+w=
Subject key identifier:   54:17:F4:B5:86:CF:91:C0:5F:52:79:4B:AE:65:6B:3E:82:2E:EC:A6
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F4328584E0435EB9AF83DEAE713C00C40
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     400541
IP address blocks:        147.185.88.0/24 maxlen: 24
                          147.185.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:eb:9a:f8:3d:ea:e7:13:c0:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e7cb9f06-714f-4896-a959-f9dbed22416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:a7:bb:db:d7:18:6b:75:e5:1e:d5:31:30:
                    f8:fb:84:59:30:4b:c6:81:20:1d:9a:e5:72:5a:99:
                    dc:95:9f:ab:91:21:2c:94:77:4c:34:63:f7:62:68:
                    3c:5a:64:23:0f:de:5e:6c:2b:9f:cb:f3:6c:13:b5:
                    cb:5b:08:00:d8:d1:df:c3:76:83:4c:b4:e7:e0:ea:
                    a8:ba:0a:e8:8c:a9:c8:be:6a:b9:b7:72:23:c1:c3:
                    b4:b9:76:f1:2c:67:9b:e8:32:e9:22:08:7c:94:6f:
                    0c:44:4a:4b:06:b8:05:98:a8:e1:0e:a4:54:72:19:
                    9a:82:bb:16:fc:8f:0e:ac:aa:8a:eb:51:0a:11:3d:
                    18:f1:50:1c:46:a8:f2:ff:2e:13:9c:d8:64:9a:0f:
                    21:22:18:96:63:92:2e:65:5c:4e:80:84:5a:85:e9:
                    18:c0:cb:26:dc:e9:51:56:cd:6f:ee:e6:d4:98:28:
                    3b:f2:94:c2:18:f4:a5:11:2c:38:37:64:41:5d:4d:
                    95:44:e4:88:fe:ce:bf:d9:2b:25:93:d8:c8:bb:30:
                    5f:c7:51:ba:9f:41:4a:0f:d9:07:59:d9:65:fe:19:
                    79:75:be:26:8f:da:a4:e3:f8:3b:d5:91:9f:c9:fd:
                    7b:d0:cb:b7:53:6f:fd:eb:9a:bb:4a:23:44:25:40:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:17:F4:B5:86:CF:91:C0:5F:52:79:4B:AE:65:6B:3E:82:2E:EC:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:1a:26:26:9f:e7:59:3d:1e:29:41:00:f5:b1:a6:b3:6b:
         67:0c:8c:f1:c2:11:6a:27:1d:35:f8:f6:3d:a1:7f:c1:0a:ae:
         eb:4e:89:05:5b:dc:ef:96:88:49:f5:39:7d:fb:75:88:47:51:
         57:1d:84:bd:bd:89:7c:08:07:59:31:98:18:f6:ef:44:f1:d0:
         95:42:34:83:b7:45:fc:c1:03:be:3d:e5:e7:15:7c:12:4a:98:
         d2:d6:29:1d:93:75:66:a2:a7:3c:06:60:99:46:7b:6d:fe:72:
         c7:ac:31:3e:8b:f6:56:4f:0b:94:9a:4b:2b:4e:ff:7a:f9:c8:
         00:70:e3:6b:b6:3c:14:b7:d9:53:dc:62:67:2d:2c:51:f6:37:
         5f:6a:1b:9a:fa:3c:69:13:4a:dd:33:17:42:71:86:f2:b6:59:
         00:65:8d:87:1a:74:a4:2c:fd:64:41:06:36:79:e1:44:f4:37:
         f4:15:10:13:69:df:ca:8f:36:21:32:2b:58:40:b5:08:fb:37:
         fc:14:cd:80:8e:2c:ef:9a:ac:ac:d7:c2:15:a0:62:7d:f8:3f:
         be:ac:f8:cb:3f:fb:8c:87:60:9f:8e:30:7b:f9:5b:97:9b:8b:
         70:e6:4b:2c:a7:b8:65:9e:fc:e1:d4:55:42:88:0f:28:5d:6d:
         29:b8:94:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENeua+D3q5xPADEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc4OGE5NDEtNDBhNi00OWUzLWFiYzYtMWY1MWYxMWU2
ZjNhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
ZTdjYjlmMDYtNzE0Zi00ODk2LWE5NTktZjlkYmVkMjI0MTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6nu9vXGGt15R7VMTD4+4RZMEvGgSAdmuVy
WpnclZ+rkSEslHdMNGP3Ymg8WmQjD95ebCufy/NsE7XLWwgA2NHfw3aDTLTn4Oqo
ugrojKnIvmq5t3IjwcO0uXbxLGeb6DLpIgh8lG8MREpLBrgFmKjhDqRUchmagrsW
/I8OrKqK61EKET0Y8VAcRqjy/y4TnNhkmg8hIhiWY5IuZVxOgIRahekYwMsm3OlR
Vs1v7ubUmCg78pTCGPSlESw4N2RBXU2VROSI/s6/2Sslk9jIuzBfx1G6n0FKD9kH
Wdll/hl5db4mj9qk4/g71ZGfyf170Mu3U2/965q7SiNEJUBG/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQX9LWGz5HAX1J5S65laz6CLuymMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4
YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUxZjExZTZmM2EvZjk4ZmU2OTEtNGM4MC0z
ZDc5LWJiMjUtMGJkYTY1YmM0NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc4OGE5NDEtNDBhNi00OWUzLWFi
YzYtMWY1MWYxMWU2ZjNhLzE3ODhhOTQxLTQwYTYtNDllMy1hYmM2LTFmNTFmMTFl
NmYzYS5jcmwwHwYDVR0jBBgwFoAUxOcZn90XJU7Mz/mhIfJhVKKx44kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUx
ZjExZTZmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7lYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwhGiYmn+dZPR4pQQD1saaza2cMjPHCEWonHTX49j2hf8EKrutOiQVb
3O+WiEn1OX37dYhHUVcdhL29iXwIB1kxmBj270Tx0JVCNIO3RfzBA7495ecVfBJK
mNLWKR2TdWaipzwGYJlGe23+csesMT6L9lZPC5SaSytO/3r5yABw42u2PBS32VPc
YmctLFH2N19qG5r6PGkTSt0zF0JxhvK2WQBljYcadKQs/WRBBjZ54UT0N/QVEBNp
38qPNiEyK1hAtQj7N/wUzYCOLO+arKzXwhWgYn34P76s+Ms/+4yHYJ+OMHv5W5eb
i3DmSyynuGWe/OHUVUKIDyhdbSm4lIw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:52 2026 by rpki-client