Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa
File:                     d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa (raw, json)
Hash identifier:          pSB3nd8fIabJ2F5y/vR7etXxYEtBBN9yA5MwUaUkxHA=
Subject key identifier:   C8:61:C3:C0:C0:61:88:9D:DD:EC:A6:A5:E5:8E:6F:99:43:78:9A:04
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D5DEF28EB2A98B0645D67C800
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa
Signing time:             Wed 01 Apr 2026 23:33:38 +0000
ROA not before:           Wed 01 Apr 2026 23:33:38 +0000
ROA not after:            Tue 30 Jun 2026 23:33:38 +0000
asID:                     16509
IP address blocks:        107.148.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:ef:28:eb:2a:98:b0:64:5d:67:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr  1 23:33:38 2026 GMT
            Not After : Jun 30 23:33:38 2026 GMT
        Subject: CN=ae83d970-50b7-458c-a557-da760234c820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:5c:c3:a6:45:b8:2a:0b:49:5e:0e:42:e8:
                    ff:60:8f:c6:1d:79:97:aa:21:16:82:fc:62:04:5e:
                    5a:08:dc:6d:94:ef:08:ae:e1:86:0d:92:38:f3:b8:
                    86:d9:6d:04:51:23:1c:b7:38:e2:2a:94:9a:af:26:
                    91:10:8d:30:09:d0:02:75:6c:8d:72:fe:a0:29:6c:
                    f8:b1:c2:8a:2f:da:c0:98:90:ce:d0:5f:c1:0a:c9:
                    14:cc:00:07:60:1c:ad:c0:2a:78:99:9c:2c:2a:b1:
                    6a:eb:67:d8:05:c8:e5:6f:aa:10:d3:d0:1f:24:69:
                    9f:59:b5:07:b7:29:a1:2c:a0:24:05:5e:e1:52:ba:
                    77:29:78:09:45:b8:ff:17:5e:67:f8:b0:69:6c:d8:
                    46:2e:c9:82:c3:48:96:d6:6b:06:bb:a6:9a:2f:27:
                    17:42:a3:6e:d9:1c:7d:d5:e1:23:4c:ba:11:47:ff:
                    48:99:ad:de:60:dd:1f:36:b2:23:e7:47:a6:15:73:
                    e0:da:d6:4b:aa:c6:95:2a:b3:06:ce:d0:97:4d:5f:
                    d7:b7:c1:21:3f:7d:72:86:9e:fd:58:8c:1e:e0:20:
                    cf:fc:06:57:9a:6b:f4:1e:cd:c0:d0:bd:9f:1f:ed:
                    81:de:77:e6:ad:96:ab:74:f0:68:4c:5e:60:96:13:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:C3:C0:C0:61:88:9D:DD:EC:A6:A5:E5:8E:6F:99:43:78:9A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:b4:b1:12:33:2f:ab:d1:46:50:76:e9:07:25:c4:3c:48:
         c4:b4:a6:1c:03:18:a7:1d:61:7c:b6:32:4f:fd:38:ef:11:79:
         bc:9d:5a:eb:9b:04:6b:aa:34:4d:4f:31:e2:01:80:c1:3b:c6:
         69:6f:da:51:fc:fe:88:90:c3:ce:44:45:8d:2b:49:e8:1f:4b:
         d6:77:93:9c:6a:01:a4:e3:a0:95:06:63:09:5c:1a:85:33:63:
         04:b0:d4:7d:b7:ca:f0:5a:c7:98:f8:7b:f9:08:5f:26:d5:31:
         1a:ef:26:9f:b4:1f:7c:21:ec:19:26:97:3c:b0:21:ea:c8:c8:
         09:97:f3:14:b2:84:a7:e9:ba:0e:86:c2:11:97:45:dd:5a:49:
         b0:0c:5b:e3:bd:f0:4f:59:d2:99:3d:2c:1b:75:d0:47:b3:dd:
         7d:55:11:18:76:1b:0c:b8:13:47:c3:4e:05:9a:40:20:0b:03:
         b5:f4:73:52:c4:31:d4:4b:30:71:bf:d4:ef:95:bf:83:c9:9b:
         bb:03:5d:42:6f:b2:c2:50:7c:42:6e:7a:9f:7a:85:00:11:4f:
         4d:6c:e2:f6:6c:00:e2:79:48:4f:ce:84:43:6a:5f:f1:59:c9:
         e7:a7:42:0a:9d:89:06:83:e7:7e:b4:4d:80:15:fa:3f:25:88:
         45:13:76:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1d7yjrKpiwZF1nyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDQwMTIzMzMzOFoXDTI2MDYzMDIzMzMzOFowLzEtMCsGA1UEAxMk
YWU4M2Q5NzAtNTBiNy00NThjLWE1NTctZGE3NjAyMzRjODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPdcw6ZFuCoLSV4OQuj/YI/GHXmXqiEWgvxi
BF5aCNxtlO8IruGGDZI487iG2W0EUSMctzjiKpSaryaREI0wCdACdWyNcv6gKWz4
scKKL9rAmJDO0F/BCskUzAAHYBytwCp4mZwsKrFq62fYBcjlb6oQ09AfJGmfWbUH
tymhLKAkBV7hUrp3KXgJRbj/F15n+LBpbNhGLsmCw0iW1msGu6aaLycXQqNu2Rx9
1eEjTLoRR/9Ima3eYN0fNrIj50emFXPg2tZLqsaVKrMGztCXTV/Xt8EhP31yhp79
WIwe4CDP/AZXmmv0Hs3A0L2fH+2B3nfmrZardPBoTF5glhPFgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhhw8DAYYid3eympeWOb5lDeJoEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZDBjZTFkZDMtOTBhNy0z
ZTEyLThlOTUtNmFiZDNhYTk4NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5QHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfPtLESMy+r0UZQdukHJcQ8SMS0phwDGKcdYXy2Mk/9OO8RebydWuub
BGuqNE1PMeIBgME7xmlv2lH8/oiQw85ERY0rSegfS9Z3k5xqAaTjoJUGYwlcGoUz
YwSw1H23yvBax5j4e/kIXybVMRrvJp+0H3wh7BkmlzywIerIyAmX8xSyhKfpug6G
whGXRd1aSbAMW+O98E9Z0pk9LBt10Eez3X1VERh2Gwy4E0fDTgWaQCALA7X0c1LE
MdRLMHG/1O+Vv4PJm7sDXUJvssJQfEJuep96hQART01s4vZsAOJ5SE/OhENqX/FZ
yeenQgqdiQaD5360TYAV+j8liEUTdlM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:15 2026 by rpki-client