Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c01e2f5e-7cb8-30c5-9cc6-5725ee82be6a.roa
File:                     c01e2f5e-7cb8-30c5-9cc6-5725ee82be6a.roa (raw, json)
Hash identifier:          EwM58S2u4AgIlEFOfUK21DJcvFOWCAW74D7myCtdym0=
Subject key identifier:   6B:A2:66:46:FE:D5:89:3A:D5:62:9F:5C:B3:7C:17:48:B8:5B:A1:1D
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584DEC7B266EBC9FAD24D111DFD8
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c01e2f5e-7cb8-30c5-9cc6-5725ee82be6a.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        150.9.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:26:6e:bc:9f:ad:24:d1:11:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=ba815e8e-cbe0-43c1-b7ae-179251d74e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:bc:12:de:a8:d8:3c:05:10:0b:52:3f:30:
                    58:ea:26:9b:c3:4b:91:ae:fe:f0:eb:59:32:70:8c:
                    2d:0a:a1:51:63:0a:08:6e:6e:0c:6f:d6:6c:52:0a:
                    83:ba:36:a9:77:5a:43:98:76:10:96:19:b3:12:c8:
                    ff:57:75:1b:53:92:cd:15:46:88:46:9d:a1:27:fb:
                    b2:c5:c4:bc:fd:90:2d:a0:b1:9d:3e:e3:4c:1f:b6:
                    0a:36:65:b0:71:26:52:c6:72:e6:10:18:ee:2c:29:
                    27:bc:4e:ff:e1:c2:28:ef:c0:87:f8:eb:25:ad:7b:
                    33:16:4e:24:13:aa:92:37:c7:dd:44:6e:69:ef:14:
                    1f:aa:9f:d6:be:3d:12:a0:22:46:87:7f:ee:55:56:
                    2f:11:e6:a9:3a:a4:36:3a:55:d5:59:3e:97:63:0b:
                    ab:08:53:ad:42:43:ba:2d:8f:1f:46:b8:8d:31:9f:
                    c2:3d:76:fa:19:7b:03:4e:2d:0b:39:6b:bb:7f:17:
                    66:3a:81:7e:39:cf:af:34:04:a0:e2:e4:cb:89:df:
                    c8:17:a8:bf:26:a4:21:9f:ed:3b:ba:5c:ea:01:59:
                    53:61:5c:6e:53:28:16:53:d0:57:80:08:42:a1:1b:
                    79:ae:3f:c0:a2:d7:f8:7f:5c:38:65:8a:d6:59:ee:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:66:46:FE:D5:89:3A:D5:62:9F:5C:B3:7C:17:48:B8:5B:A1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c01e2f5e-7cb8-30c5-9cc6-5725ee82be6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:76:2b:67:74:2a:c7:0a:27:f4:c6:7f:c4:29:3e:dc:eb:0b:
         b8:a4:f2:9c:35:00:9b:8d:ac:bc:c0:a3:0c:88:a7:55:93:15:
         51:bf:5d:95:9d:05:08:7c:71:2a:f7:76:75:e5:a2:bd:4a:15:
         f7:bd:f2:01:12:b5:fb:93:8d:f8:ef:24:0d:1f:12:f4:5f:6c:
         d7:f4:c0:45:cb:6a:f2:49:69:25:e1:fd:5d:93:17:06:03:17:
         46:30:09:ac:11:6e:6c:89:9a:64:0d:d9:85:7a:0b:d6:78:40:
         af:f1:a5:62:9b:95:33:10:06:1c:ca:e5:04:54:e4:b3:6c:0f:
         4a:ac:84:a6:fc:53:a6:55:a0:d2:84:d5:33:9f:ae:cf:85:69:
         ff:64:2d:f4:f2:ab:05:1d:5a:67:13:02:9e:5f:38:c1:ce:f1:
         bb:e7:d4:bf:07:51:18:e7:04:da:8b:ea:a6:00:47:5c:70:63:
         f4:f0:36:38:81:e3:76:97:53:b9:b6:5a:b5:92:20:f9:bf:5a:
         95:37:ed:e6:9d:7c:11:dc:df:91:0d:c6:34:e4:8b:0d:7d:54:
         fb:ec:2d:f7:94:14:17:14:57:49:16:04:ad:02:7f:76:74:76:
         9d:68:7c:d6:06:c5:04:6d:da:94:b6:5f:87:db:d9:6e:4b:88:
         9e:49:f0:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyZuvJ+tJNER39gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk
MTA1MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
YmE4MTVlOGUtY2JlMC00M2MxLWI3YWUtMTc5MjUxZDc0ZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo28Et6o2DwFEAtSPzBY6iabw0uRrv7w61ky
cIwtCqFRYwoIbm4Mb9ZsUgqDujapd1pDmHYQlhmzEsj/V3UbU5LNFUaIRp2hJ/uy
xcS8/ZAtoLGdPuNMH7YKNmWwcSZSxnLmEBjuLCknvE7/4cIo78CH+OslrXszFk4k
E6qSN8fdRG5p7xQfqp/Wvj0SoCJGh3/uVVYvEeapOqQ2OlXVWT6XYwurCFOtQkO6
LY8fRriNMZ/CPXb6GXsDTi0LOWu7fxdmOoF+Oc+vNASg4uTLid/IF6i/JqQhn+07
ulzqAVlTYVxuUygWU9BXgAhCoRt5rj/Aotf4f1w4ZYrWWe6pXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuiZkb+1Yk61WKfXLN8F0i4W6EdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi
ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvYzAxZTJmNWUtN2NiOC0z
MGM1LTljYzYtNTcyNWVlODJiZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx
MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0
ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0
MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd2K2d0KscKJ/TGf8QpPtzrC7ik8pw1AJuNrLzAowyIp1WTFVG/XZWd
BQh8cSr3dnXlor1KFfe98gEStfuTjfjvJA0fEvRfbNf0wEXLavJJaSXh/V2TFwYD
F0YwCawRbmyJmmQN2YV6C9Z4QK/xpWKblTMQBhzK5QRU5LNsD0qshKb8U6ZVoNKE
1TOfrs+Faf9kLfTyqwUdWmcTAp5fOMHO8bvn1L8HURjnBNqL6qYAR1xwY/TwNjiB
43aXU7m2WrWSIPm/WpU37eadfBHc35ENxjTkiw19VPvsLfeUFBcUV0kWBK0Cf3Z0
dp1ofNYGxQRt2pS2X4fb2W5LiJ5J8MU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:42 2026 by rpki-client