Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/22ea9d4b-9652-3ec6-8442-9dd2b3ae3200.roa
File:                     22ea9d4b-9652-3ec6-8442-9dd2b3ae3200.roa (raw, json)
Hash identifier:          Y7Jaad3yVSEZsWkFttAy8q1rJZBpZTlQsmocP4FL+zA=
Subject key identifier:   4B:D6:A7:2A:D0:38:46:A7:EC:78:B1:33:48:E8:01:C3:EB:E6:73:CC
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EA2DFB52B1A3A9D5C222DD6C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/22ea9d4b-9652-3ec6-8442-9dd2b3ae3200.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        108.186.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b5:2b:1a:3a:9d:5c:22:2d:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=d53d586a-d710-4de6-a0a4-fd05f0c71e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:b3:c2:64:76:6a:68:a0:cc:bd:3e:82:08:
                    00:4f:ba:d6:02:96:a4:43:8e:bf:a1:28:7c:4d:ad:
                    6c:ae:db:e0:a4:f5:50:d2:c6:8e:7f:c4:41:0f:66:
                    ff:11:70:ca:e5:b7:5f:25:33:3c:bd:7c:b3:90:0d:
                    2f:e2:10:9a:9d:33:a7:87:38:3c:89:fb:98:5d:81:
                    6a:52:6b:9a:68:19:3f:27:82:a6:23:bf:d5:c7:4d:
                    81:10:a7:b1:41:b0:1b:4c:8e:df:49:97:a0:42:bf:
                    d5:29:3c:37:95:28:5f:d6:2b:c4:4a:02:d8:66:04:
                    5b:10:40:79:7f:be:30:20:fc:bc:50:60:6d:40:6a:
                    de:d7:2c:92:f9:42:6c:96:fa:e4:6e:14:be:24:8f:
                    f8:63:d4:61:69:45:45:3b:d5:19:22:08:de:43:80:
                    f6:e6:3b:aa:48:d7:e0:e8:99:5c:d9:02:3f:56:c3:
                    f8:9e:d9:b5:95:90:cb:60:f5:dc:c3:cc:d5:5a:ce:
                    b7:0d:dc:3e:06:d1:90:28:c1:6b:c2:ed:78:08:16:
                    11:93:86:7c:28:06:88:35:2c:38:0f:fd:dc:63:c5:
                    ef:e1:eb:a2:5e:0d:50:24:52:29:74:c3:61:51:0b:
                    60:4c:26:4d:9e:8a:0c:ce:db:77:24:b1:e6:07:4c:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:A7:2A:D0:38:46:A7:EC:78:B1:33:48:E8:01:C3:EB:E6:73:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/22ea9d4b-9652-3ec6-8442-9dd2b3ae3200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:28:26:47:76:99:0a:c6:8f:97:41:a5:5e:0d:18:02:d0:
         63:f6:4f:ba:6b:ae:56:40:57:fa:3a:36:22:02:60:3e:30:7a:
         a0:9a:64:fd:5c:fb:8a:59:c1:cd:0d:ee:85:1d:ef:5e:4e:74:
         c4:33:55:e2:49:98:ac:05:a9:42:3d:01:7a:00:3a:d5:1b:51:
         27:81:a3:e4:e4:05:52:68:13:a9:02:49:50:91:62:95:0b:16:
         a4:47:09:ce:8f:a0:b3:a8:1e:93:29:99:f4:93:a9:5d:22:64:
         6f:dd:04:4b:85:f3:30:40:c9:d6:13:0d:2b:cc:de:e8:da:c5:
         aa:b2:28:d1:61:68:cc:ca:65:d1:3e:a0:00:3a:d9:d2:22:c6:
         51:ee:9f:e5:29:9c:a3:01:ff:88:0b:aa:e3:e4:13:d5:4e:0f:
         c7:58:75:93:11:ed:84:19:49:9b:9e:a8:29:19:43:21:bd:ee:
         4f:ac:3c:93:c7:ea:ba:f7:16:bb:19:ea:e2:13:01:36:d4:bf:
         98:8f:dd:8d:01:c8:5e:19:c9:f1:56:73:49:59:b4:f3:b8:5b:
         48:2f:3c:b3:47:3c:cf:57:27:93:c5:2f:26:8c:32:f3:be:e8:
         ee:36:98:47:50:13:52:19:e6:54:92:68:98:60:a6:2e:23:55:
         13:05:cb:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i37UrGjqdXCIt1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZDUzZDU4NmEtZDcxMC00ZGU2LWEwYTQtZmQwNWYwYzcxZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx76zwmR2amigzL0+gggAT7rWApakQ46/oSh8
Ta1srtvgpPVQ0saOf8RBD2b/EXDK5bdfJTM8vXyzkA0v4hCanTOnhzg8ifuYXYFq
UmuaaBk/J4KmI7/Vx02BEKexQbAbTI7fSZegQr/VKTw3lShf1ivESgLYZgRbEEB5
f74wIPy8UGBtQGre1yyS+UJslvrkbhS+JI/4Y9RhaUVFO9UZIgjeQ4D25juqSNfg
6Jlc2QI/VsP4ntm1lZDLYPXcw8zVWs63Ddw+BtGQKMFrwu14CBYRk4Z8KAaINSw4
D/3cY8Xv4euiXg1QJFIpdMNhUQtgTCZNnooMztt3JLHmB0wSEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvWpyrQOEan7HixM0joAcPr5nPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjJlYTlkNGItOTY1Mi0z
ZWM2LTg0NDItOWRkMmIzYWUzMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLr/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoMKCZHdpkKxo+XQaVeDRgC0GP2T7prrlZAV/o6NiICYD4weqCaZP1c
+4pZwc0N7oUd715OdMQzVeJJmKwFqUI9AXoAOtUbUSeBo+TkBVJoE6kCSVCRYpUL
FqRHCc6PoLOoHpMpmfSTqV0iZG/dBEuF8zBAydYTDSvM3ujaxaqyKNFhaMzKZdE+
oAA62dIixlHun+UpnKMB/4gLquPkE9VOD8dYdZMR7YQZSZueqCkZQyG97k+sPJPH
6rr3FrsZ6uITATbUv5iP3Y0ByF4ZyfFWc0lZtPO4W0gvPLNHPM9XJ5PFLyaMMvO+
6O42mEdQE1IZ5lSSaJhgpi4jVRMFy8o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:50 2026 by rpki-client