Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File:                     542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier:          n6ZWFO8X7Jttzwr/t4w2EspfWfyP3FMyslz31ht62sE=
Subject key identifier:   B6:B9:C1:FD:B1:00:D3:D1:3E:B4:A7:09:9D:26:78:3B:4C:85:B7:81
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584EA787581E44A72EEC0C8241C0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21530
IP address blocks:        170.186.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:58:1e:44:a7:2e:ec:0c:82:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=646895af-4dee-4032-b088-0206c91a238c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:f1:e0:fa:c9:9d:ec:74:a9:fa:1e:63:61:
                    4f:7f:8e:cd:b8:e8:cc:55:f7:8e:46:9c:12:be:5d:
                    19:e0:67:b3:50:26:2a:69:8c:37:88:f6:dc:26:9e:
                    0c:90:52:87:b9:fd:cf:bb:46:1b:9f:37:af:a8:3e:
                    2c:ab:96:59:d4:ee:f4:9c:94:ea:92:bb:07:f6:cb:
                    fc:a1:34:0b:45:7e:96:4c:7e:58:c0:03:66:c7:25:
                    e4:6d:9d:d9:cd:42:a9:cd:9d:9b:39:78:16:62:fe:
                    96:46:0b:a5:dd:ed:10:31:ea:80:dd:6e:89:03:3c:
                    b5:a9:cc:63:c3:79:61:2f:b3:35:40:06:2d:ea:23:
                    e3:0f:09:5e:4e:c3:ee:ee:91:ba:32:82:ab:34:e4:
                    ce:ac:ab:b5:26:60:81:a8:3b:f2:1e:69:54:95:51:
                    31:cb:35:3d:d3:21:23:d8:ff:1b:7e:d3:85:a6:f6:
                    3f:c8:c9:29:04:6a:7d:68:90:59:f7:41:b9:02:b7:
                    39:c7:72:85:db:62:1b:08:70:dc:9e:55:cf:58:2b:
                    2b:85:d2:49:98:1c:d5:f8:a9:54:31:12:ca:c1:88:
                    4c:f3:13:a4:19:71:bc:9c:b0:ff:3b:8b:8c:df:ee:
                    68:b5:27:c3:7f:dd:78:56:2e:eb:d3:71:fc:c3:e5:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:C1:FD:B1:00:D3:D1:3E:B4:A7:09:9D:26:78:3B:4C:85:B7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:be:6b:f1:44:eb:51:18:6b:4f:21:61:9e:68:bd:23:59:a1:
         04:d1:9e:d1:e6:42:46:79:c0:3c:50:b2:a5:2f:47:0a:b9:0b:
         9a:ec:dc:75:a9:0c:a7:27:41:a8:65:18:06:bc:b7:7f:a1:2d:
         2f:02:0b:d4:bf:de:ee:b5:fb:f2:00:18:2e:87:f7:f3:f2:ff:
         74:c6:31:29:10:99:bd:e5:f5:c8:41:74:05:aa:7e:7d:d5:6d:
         db:fe:93:b6:1f:6a:50:b5:fd:69:63:8f:f1:d8:19:87:8b:11:
         d6:9d:2e:4c:57:3d:53:2f:d8:45:5b:d8:ad:2d:59:82:7e:2a:
         7c:cf:44:f1:2e:bb:19:79:cb:93:bb:ff:d2:e2:25:52:a2:32:
         32:0e:4a:7a:bf:05:8e:14:91:e4:bb:b6:80:15:0e:86:ba:18:
         b5:7c:41:66:71:eb:e7:c2:66:77:4c:83:1e:bd:84:5b:0c:f7:
         01:ab:7c:61:cb:fe:2a:54:a8:f6:66:8a:e5:9a:83:cd:cb:83:
         ae:d7:a3:3a:f7:5b:9e:7d:7b:ed:98:48:18:48:7f:28:5e:91:
         7e:6d:d9:23:b3:62:b6:fc:8a:47:dd:cb:e1:a2:6a:f4:84:77:
         0f:9c:58:8f:13:0d:47:e0:69:fb:91:03:89:af:d9:ce:32:6e:
         40:20:5d:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1geRKcu7AyCQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjQ2ODk1YWYtNGRlZS00MDMyLWIwODgtMDIwNmM5MWEyMzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVnx4PrJnex0qfoeY2FPf47NuOjMVfeORpwS
vl0Z4GezUCYqaYw3iPbcJp4MkFKHuf3Pu0YbnzevqD4sq5ZZ1O70nJTqkrsH9sv8
oTQLRX6WTH5YwANmxyXkbZ3ZzUKpzZ2bOXgWYv6WRgul3e0QMeqA3W6JAzy1qcxj
w3lhL7M1QAYt6iPjDwleTsPu7pG6MoKrNOTOrKu1JmCBqDvyHmlUlVExyzU90yEj
2P8bftOFpvY/yMkpBGp9aJBZ90G5Arc5x3KF22IbCHDcnlXPWCsrhdJJmBzV+KlU
MRLKwYhM8xOkGXG8nLD/O4uM3+5otSfDf914Vi7r03H8w+XQRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLa5wf2xANPRPrSnCZ0meDtMhbeBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTQyZTg0N2MtMzcxNS0z
YjI3LTlmNzQtYWRlNzdhMGZiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC+a/FE61EYa08hYZ5ovSNZoQTRntHmQkZ5wDxQsqUvRwq5C5rs3HWp
DKcnQahlGAa8t3+hLS8CC9S/3u61+/IAGC6H9/Py/3TGMSkQmb3l9chBdAWqfn3V
bdv+k7YfalC1/Wljj/HYGYeLEdadLkxXPVMv2EVb2K0tWYJ+KnzPRPEuuxl5y5O7
/9LiJVKiMjIOSnq/BY4UkeS7toAVDoa6GLV8QWZx6+fCZndMgx69hFsM9wGrfGHL
/ipUqPZmiuWag83Lg67Xozr3W559e+2YSBhIfyhekX5t2SOzYrb8ikfdy+GiavSE
dw+cWI8TDUfgafuRA4mv2c4ybkAgXZw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:21 2026 by rpki-client