Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa
File:                     6637cda3-387b-3290-92eb-9a008e4897f9.roa (raw, json)
Hash identifier:          k9AHLIelbDtMBB8b5kgve4LmtOOHyJgo+IpwyNGpCcc=
Subject key identifier:   17:5D:D8:9A:91:95:DD:AF:C0:4A:1C:9B:08:C1:D5:55:11:C3:42:0F
Certificate issuer:       /CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
Certificate serial:       010D0C9F4328584F71ED95AC39E0AD0D30C0D780
Authority key identifier: D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6597
IP address blocks:        147.160.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:95:ac:39:e0:ad:0d:30:c0:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=c3e8007a-d6e2-40f7-98c4-c09c6362d5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:46:1b:f2:4f:60:ac:5d:ad:f8:bf:8e:ea:
                    d2:76:33:8b:a1:75:30:81:ca:b3:d0:69:ff:d1:da:
                    a1:7d:a3:16:38:d0:db:0a:94:2a:21:c8:ec:64:7a:
                    a4:62:5a:43:36:9e:30:70:23:d0:d9:5d:1f:83:26:
                    a2:cc:6f:fb:1b:c1:f3:00:da:8a:00:c7:1f:44:a4:
                    e4:fc:ab:4c:ca:f7:8d:ab:9f:91:5f:36:60:ce:1f:
                    39:c6:aa:81:82:d9:3f:3e:59:70:62:02:4b:ee:74:
                    40:8b:48:92:6d:b8:3a:a9:b1:9a:36:69:54:d0:f1:
                    2d:ff:ae:40:c8:b6:37:78:3a:ac:81:82:b1:b3:8c:
                    dd:70:90:35:8a:54:54:50:73:57:d3:5f:a8:28:91:
                    e3:fd:39:26:53:22:38:29:e7:6b:3e:a9:a8:61:b1:
                    93:61:c6:c4:fa:53:5e:46:07:f5:17:9d:ed:05:f0:
                    f8:b3:be:6a:b9:51:30:30:04:7c:24:ed:56:81:3e:
                    34:08:bf:e9:36:fa:4a:26:35:af:c2:e4:d1:99:e5:
                    fe:f8:9f:43:6d:ac:f6:39:1e:7e:ba:f2:1e:ec:e6:
                    7d:53:ab:31:0a:7e:20:04:82:00:72:6d:b1:98:ee:
                    3c:e5:9e:6c:54:d0:3f:51:63:78:b3:19:30:58:d5:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:D8:9A:91:95:DD:AF:C0:4A:1C:9B:08:C1:D5:55:11:C3:42:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:77:ba:e5:e4:39:aa:8b:a8:ff:3e:9e:f8:7b:46:e0:1b:
         2a:df:e0:39:fd:45:5a:b1:9a:e3:a9:f0:a0:5a:07:27:f1:a6:
         ab:07:5a:c1:e8:21:48:b9:fe:c5:0d:79:da:a0:5d:c9:56:b1:
         d0:d4:86:cb:ab:18:fe:85:0d:ff:ff:4e:d7:ca:e9:c6:f9:97:
         f5:fc:6f:9c:0b:98:9f:93:65:e6:63:aa:ad:85:9a:fd:86:cd:
         4e:36:31:37:48:49:ac:18:ca:9c:a1:53:8b:3c:04:75:18:fb:
         e4:be:cb:f7:4f:65:f3:d4:bc:49:53:c1:56:ba:02:78:49:2b:
         1d:45:71:dc:c1:ac:a4:8a:51:a1:8c:57:fd:bd:eb:b8:55:b2:
         9a:a1:23:1e:c7:da:32:c8:ed:5c:3d:95:de:30:e4:52:20:b0:
         1b:bb:cf:08:4f:11:f1:ec:f4:f6:3f:cd:cd:cc:50:9e:f7:ac:
         20:ee:e2:8d:b7:cc:3f:2f:fd:d2:31:3e:44:dc:6e:77:c6:0b:
         3b:b7:d3:46:a9:e8:d4:50:d5:5e:5f:00:46:2f:00:40:8c:5d:
         72:0d:b9:be:c4:5a:7f:bf:57:9e:e5:03:9f:58:61:da:6c:bf:
         7c:d8:80:7a:39:59:46:b0:ff:ca:97:f9:20:52:0f:ce:20:14:
         05:b9:2c:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZWsOeCtDTDA14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EzODhiMTgtNWNiYy00ODJjLWJhYzMtZjcyOWQ1YzJl
NGRkMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
YzNlODAwN2EtZDZlMi00MGY3LTk4YzQtYzA5YzYzNjJkNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD1GG/JPYKxdrfi/jurSdjOLoXUwgcqz0Gn/
0dqhfaMWONDbCpQqIcjsZHqkYlpDNp4wcCPQ2V0fgyaizG/7G8HzANqKAMcfRKTk
/KtMyveNq5+RXzZgzh85xqqBgtk/PllwYgJL7nRAi0iSbbg6qbGaNmlU0PEt/65A
yLY3eDqsgYKxs4zdcJA1ilRUUHNX01+oKJHj/TkmUyI4KedrPqmoYbGTYcbE+lNe
Rgf1F53tBfD4s75quVEwMAR8JO1WgT40CL/pNvpKJjWvwuTRmeX++J9Dbaz2OR5+
uvIe7OZ9U6sxCn4gBIIAcm2xmO485Z5sVNA/UWN4sxkwWNWlTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdd2JqRld2vwEocmwjB1VURw0IPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYTM4
OGIxOC01Y2JjLTQ4MmMtYmFjMy1mNzI5ZDVjMmU0ZGQvNjYzN2NkYTMtMzg3Yi0z
MjkwLTkyZWItOWEwMDhlNDg5N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2EzODhiMTgtNWNiYy00ODJjLWJh
YzMtZjcyOWQ1YzJlNGRkL2NhMzg4YjE4LTVjYmMtNDgyYy1iYWMzLWY3MjlkNWMy
ZTRkZC5jcmwwHwYDVR0jBBgwFoAU2SuKOJkUKypzT35aMBTNu/sK1j4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYTM4OGIxOC01Y2JjLTQ4MmMtYmFjMy1mNzI5
ZDVjMmU0ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6D2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhrd7rl5Dmqi6j/Pp74e0bgGyrf4Dn9RVqxmuOp8KBaByfxpqsHWsHo
IUi5/sUNedqgXclWsdDUhsurGP6FDf//TtfK6cb5l/X8b5wLmJ+TZeZjqq2Fmv2G
zU42MTdISawYypyhU4s8BHUY++S+y/dPZfPUvElTwVa6AnhJKx1FcdzBrKSKUaGM
V/2967hVspqhIx7H2jLI7Vw9ld4w5FIgsBu7zwhPEfHs9PY/zc3MUJ73rCDu4o23
zD8v/dIxPkTcbnfGCzu300ap6NRQ1V5fAEYvAECMXXINub7EWn+/V57lA59YYdps
v3zYgHo5WUaw/8qX+SBSD84gFAW5LBY=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:12:18 2026 by rpki-client