Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/9edd4944-c88d-3a29-be2e-5bb8e357c0f8.roa
File:                     9edd4944-c88d-3a29-be2e-5bb8e357c0f8.roa (raw, json)
Hash identifier:          QRcjY+mxtZdp0C8blB4ecQEbLv1K9Ar462TCTTccbU8=
Subject key identifier:   03:FA:18:01:5C:6B:9D:02:FB:33:E4:B9:A4:4A:23:8C:F1:78:74:83
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D6EDA5AD432AF93C5971964D0
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/9edd4944-c88d-3a29-be2e-5bb8e357c0f8.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     55256
IP address blocks:        158.95.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5a:d4:32:af:93:c5:97:19:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=1cda3289-f259-42e9-bbaf-f33bee9f8dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:b3:a0:6e:b4:14:60:2e:05:28:db:67:74:
                    c8:21:c7:53:ba:6c:49:b7:b5:97:78:7d:25:ab:8b:
                    ed:ed:64:06:10:e9:80:6d:c0:d6:a6:77:fc:be:55:
                    a2:b4:5f:86:09:ad:e9:af:5a:74:b2:7d:ab:eb:fb:
                    68:6f:96:14:8c:69:7b:72:b5:58:ae:60:3a:b8:88:
                    d2:07:f3:97:97:d4:bf:f1:03:c6:57:72:87:18:81:
                    06:cb:02:be:56:c8:7c:39:49:a3:0c:74:52:3d:20:
                    96:1a:05:fd:89:f1:ac:75:c6:84:09:9a:98:c2:ff:
                    ad:b1:28:5d:0a:e3:f0:39:26:18:12:47:fa:ec:f7:
                    78:b4:f8:85:74:3c:9f:36:dc:5e:69:7b:59:bc:8c:
                    d3:3d:d8:4e:f3:0a:77:3a:dc:27:d3:58:d0:c8:84:
                    29:9f:3d:24:60:20:72:90:57:b4:d4:07:da:fa:b0:
                    20:b7:21:83:a9:07:3e:4a:1e:28:6e:82:4b:f6:b7:
                    2d:84:f6:05:e5:58:b9:85:5f:b7:20:ec:7a:c4:c4:
                    a4:b5:b3:69:66:cb:a6:ba:ec:f0:09:5f:11:10:b6:
                    ff:3f:d0:ca:6f:85:09:d2:01:f2:f0:ed:6d:8f:7c:
                    55:16:b1:26:54:53:bd:ca:fc:9c:d9:63:4d:f9:21:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FA:18:01:5C:6B:9D:02:FB:33:E4:B9:A4:4A:23:8C:F1:78:74:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/9edd4944-c88d-3a29-be2e-5bb8e357c0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:54:c2:78:55:fb:43:77:8d:ce:22:9e:10:fd:33:ba:75:
         a8:40:66:e9:ce:ba:36:3b:38:f8:26:68:3f:90:9e:cd:f5:fa:
         3d:a7:c2:e1:c4:94:ea:6f:2d:0a:49:e0:27:52:ee:a7:9b:0e:
         69:50:0e:9d:ad:22:6a:9c:c4:c0:53:a3:f4:7a:bb:4d:63:85:
         7f:cf:c8:d0:bb:dc:86:d4:e3:6e:e9:a3:f7:2f:42:c3:8e:03:
         0b:88:d4:03:c4:f6:17:0d:c1:20:5d:d6:b0:86:3b:10:2d:45:
         d8:2a:48:79:fa:5a:09:c0:8c:23:0c:fb:b4:08:42:63:ab:5c:
         12:30:b2:0d:71:e9:82:2a:88:d8:76:be:c2:a4:96:84:1f:b2:
         26:a3:a6:35:64:26:9d:ab:a1:68:06:c0:6d:e3:41:b3:41:68:
         85:1e:27:81:34:d7:db:1a:c7:4d:1d:16:5f:5c:f3:4b:db:07:
         64:95:1e:dc:8a:3b:11:70:f4:33:2d:f1:be:b2:2f:5a:81:eb:
         87:be:e0:57:a8:f9:fc:80:1c:a4:e3:01:58:5e:5d:0f:a7:e8:
         7e:3d:a8:6d:5f:4a:fc:7a:19:ee:e6:00:88:a2:cd:1c:7b:6e:
         a5:04:6a:7b:49:0a:24:ea:f6:75:71:18:e6:e1:92:08:c2:7c:
         04:f9:2d:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2lrUMq+TxZcZZNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj
YWQ5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
MWNkYTMyODktZjI1OS00MmU5LWJiYWYtZjMzYmVlOWY4ZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpOzoG60FGAuBSjbZ3TIIcdTumxJt7WXeH0l
q4vt7WQGEOmAbcDWpnf8vlWitF+GCa3pr1p0sn2r6/tob5YUjGl7crVYrmA6uIjS
B/OXl9S/8QPGV3KHGIEGywK+Vsh8OUmjDHRSPSCWGgX9ifGsdcaECZqYwv+tsShd
CuPwOSYYEkf67Pd4tPiFdDyfNtxeaXtZvIzTPdhO8wp3Otwn01jQyIQpnz0kYCBy
kFe01Afa+rAgtyGDqQc+Sh4oboJL9rcthPYF5Vi5hV+3IOx6xMSktbNpZsumuuzw
CV8RELb/P9DKb4UJ0gHy8O1tj3xVFrEmVFO9yvyc2WNN+SFHnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAP6GAFca50C+zPkuaRKI4zxeHSDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz
MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvOWVkZDQ5NDQtYzg4ZC0z
YTI5LWJlMmUtNWJiOGUzNTdjMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz
ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy
Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3
MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnPVMJ4VftDd43OIp4Q/TO6dahAZunOujY7OPgmaD+Qns31+j2nwuHE
lOpvLQpJ4CdS7qebDmlQDp2tImqcxMBTo/R6u01jhX/PyNC73IbU427po/cvQsOO
AwuI1APE9hcNwSBd1rCGOxAtRdgqSHn6WgnAjCMM+7QIQmOrXBIwsg1x6YIqiNh2
vsKkloQfsiajpjVkJp2roWgGwG3jQbNBaIUeJ4E019sax00dFl9c80vbB2SVHtyK
OxFw9DMt8b6yL1qB64e+4Feo+fyAHKTjAVheXQ+n6H49qG1fSvx6Ge7mAIiizRx7
bqUEantJCiTq9nVxGObhkgjCfAT5LeE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:29 2026 by rpki-client