Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a1cdd877-e0be-312a-b7de-a6bebac1bf34.roa
File:                     a1cdd877-e0be-312a-b7de-a6bebac1bf34.roa (raw, json)
Hash identifier:          OpladdAdPw38N7/Gtei0g9S6KK7+1uen9tsQcQWRzEM=
Subject key identifier:   FD:5E:D8:3F:E2:B8:FA:4F:59:3B:12:8B:EB:2B:C0:8F:5C:CE:FC:75
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584F497381EEE3E04B7AF4C161C0
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a1cdd877-e0be-312a-b7de-a6bebac1bf34.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63201
IP address blocks:        147.185.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:81:ee:e3:e0:4b:7a:f4:c1:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=92f133fa-dd38-44b1-b6c8-88971e0ab28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:76:18:08:fb:8c:f7:df:51:69:55:97:7c:
                    14:6c:b5:73:7d:ac:c4:67:01:bc:16:b8:9b:4f:c5:
                    d1:66:bb:6f:37:74:8c:14:0f:c9:ca:ee:e8:c6:a7:
                    ed:3d:14:da:87:d4:7b:82:b6:b3:0f:48:7e:14:81:
                    54:3e:56:a3:a3:cb:ec:49:7d:69:6c:4a:11:93:16:
                    f2:8a:96:cd:d8:18:ac:4d:dc:07:7f:5d:a3:94:b7:
                    8c:4d:a3:1f:90:5a:bd:eb:3e:35:3c:8f:4e:8d:f5:
                    ab:59:75:47:e8:d9:75:f6:39:25:04:19:64:1f:7d:
                    87:11:53:4c:df:20:65:70:86:53:4e:38:03:45:8b:
                    4e:24:d2:0d:7e:7b:e7:55:cb:d8:fd:36:e1:1a:54:
                    47:7e:21:da:b2:a0:f1:21:8a:13:48:e3:0c:d4:e1:
                    51:a4:4c:64:a8:73:59:77:75:54:72:50:ea:61:5a:
                    c8:bd:f1:e1:b1:cc:fa:f9:eb:e6:8b:f6:36:1c:72:
                    c1:2f:42:dc:3d:97:5d:c4:8a:46:f9:d4:4a:31:94:
                    b1:61:36:38:4d:92:c7:8d:de:5b:00:7b:04:de:0c:
                    57:8f:a7:55:8c:b0:4f:aa:6a:5d:42:f8:26:07:c4:
                    52:31:0d:5a:86:99:77:20:36:4a:d4:f2:37:f2:4a:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:D8:3F:E2:B8:FA:4F:59:3B:12:8B:EB:2B:C0:8F:5C:CE:FC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a1cdd877-e0be-312a-b7de-a6bebac1bf34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:04:31:06:0a:42:34:05:dd:6b:5a:32:56:59:d3:d6:c2:
         60:66:ad:57:45:fe:29:c3:a5:84:38:8c:94:52:e1:73:fd:8b:
         bc:96:4f:f2:99:45:e2:70:e0:7a:b9:2a:fb:3a:c7:33:a2:4f:
         4f:2e:ef:ae:92:96:34:78:a9:da:05:97:28:23:ca:44:d9:78:
         7e:9c:90:88:a3:49:52:0f:87:23:19:56:5c:a7:ef:f9:28:d3:
         10:8b:29:8d:32:9c:4b:b4:5d:ef:ab:1d:a0:c9:8a:3e:ac:3f:
         d5:cd:ee:34:f2:4a:45:71:c4:ec:23:45:f9:72:35:e9:b4:07:
         78:62:63:b7:4e:d4:84:22:1d:5c:05:07:7e:2a:c7:1c:cf:ea:
         56:df:a2:ab:f2:21:42:dd:62:57:b5:f3:bd:b8:f9:f7:cb:22:
         c4:10:9f:ec:79:03:cb:12:1b:eb:c3:8f:01:b6:4a:73:70:d2:
         9e:68:d2:97:75:15:47:7c:2d:25:8d:a7:16:1b:1b:58:11:fe:
         21:ef:ca:47:d8:0a:63:12:62:34:82:13:c5:bb:e6:64:ad:47:
         ee:67:3c:b6:f4:22:c9:37:67:46:5a:48:86:b3:bb:c0:c9:89:
         10:c7:d4:40:aa:45:98:6e:94:9f:43:c3:93:4a:6c:98:6f:80:
         30:4f:d2:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4Hu4+BLevTBYcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez
ODYxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTJmMTMzZmEtZGQzOC00NGIxLWI2YzgtODg5NzFlMGFiMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT52GAj7jPffUWlVl3wUbLVzfazEZwG8Frib
T8XRZrtvN3SMFA/Jyu7oxqftPRTah9R7grazD0h+FIFUPlajo8vsSX1pbEoRkxby
ipbN2BisTdwHf12jlLeMTaMfkFq96z41PI9OjfWrWXVH6Nl19jklBBlkH32HEVNM
3yBlcIZTTjgDRYtOJNINfnvnVcvY/TbhGlRHfiHasqDxIYoTSOMM1OFRpExkqHNZ
d3VUclDqYVrIvfHhscz6+evmi/Y2HHLBL0LcPZddxIpG+dRKMZSxYTY4TZLHjd5b
AHsE3gxXj6dVjLBPqmpdQvgmB8RSMQ1ahpl3IDZK1PI38krHbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1e2D/iuPpPWTsSi+srwI9czvx1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw
ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvYTFjZGQ4NzctZTBiZS0z
MTJhLWI3ZGUtYTZiZWJhYzFiZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk
NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh
Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz
YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXMBDEGCkI0Bd1rWjJWWdPWwmBmrVdF/inDpYQ4jJRS4XP9i7yWT/KZ
ReJw4Hq5Kvs6xzOiT08u766SljR4qdoFlygjykTZeH6ckIijSVIPhyMZVlyn7/ko
0xCLKY0ynEu0Xe+rHaDJij6sP9XN7jTySkVxxOwjRflyNem0B3hiY7dO1IQiHVwF
B34qxxzP6lbfoqvyIULdYle18724+ffLIsQQn+x5A8sSG+vDjwG2SnNw0p5o0pd1
FUd8LSWNpxYbG1gR/iHvykfYCmMSYjSCE8W75mStR+5nPLb0Isk3Z0ZaSIazu8DJ
iRDH1ECqRZhulJ9Dw5NKbJhvgDBP0sI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:23 2026 by rpki-client