Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/a14f9630-d332-36aa-80f4-ebdac82890d1.roa
File:                     a14f9630-d332-36aa-80f4-ebdac82890d1.roa (raw, json)
Hash identifier:          WSqT1EQ0c0TK/5mKNBYPs2vnagP35tbOQpo2kgHphS4=
Subject key identifier:   A5:00:49:50:A3:DA:A6:D4:ED:83:1F:84:87:73:44:5F:47:FC:D5:E7
Certificate issuer:       /CN=8c95706c-2f3b-4326-9d35-a617f24781e6
Certificate serial:       010D0C9F4328584E21613639430E06A17B9D3280
Authority key identifier: 69:FE:86:18:AB:09:49:A7:56:8C:CB:D2:CB:4E:31:E4:B4:04:B7:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/a14f9630-d332-36aa-80f4-ebdac82890d1.roa
Signing time:             Wed 10 Jun 2026 23:46:03 +0000
ROA not before:           Wed 10 Jun 2026 23:46:03 +0000
ROA not after:            Tue 08 Sep 2026 23:46:03 +0000
asID:                     402549
IP address blocks:        198.153.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/8c95706c-2f3b-4326-9d35-a617f24781e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/8c95706c-2f3b-4326-9d35-a617f24781e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:61:36:39:43:0e:06:a1:7b:9d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c95706c-2f3b-4326-9d35-a617f24781e6
        Validity
            Not Before: Jun 10 23:46:03 2026 GMT
            Not After : Sep  8 23:46:03 2026 GMT
        Subject: CN=3412e0cb-d95c-43a0-9bca-81b817f879ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:0d:40:60:13:11:7e:b4:7b:57:92:c2:c0:
                    d6:c3:97:92:6f:d4:29:8f:6a:38:cb:e0:99:29:29:
                    02:ff:51:cf:b6:6a:73:76:45:75:ab:b8:e0:25:9e:
                    68:97:d8:0c:e1:ca:c4:0d:83:75:6e:17:0f:e3:4b:
                    1b:b8:2a:fa:c2:50:46:fc:e2:b9:96:0d:f9:7c:a4:
                    ef:01:42:c8:a8:ea:ec:b6:88:3b:3d:db:b4:d7:4c:
                    ea:e3:03:3e:51:82:0d:20:44:be:38:ef:09:db:01:
                    79:0d:3b:76:9c:61:79:88:08:39:92:5e:5a:a5:7b:
                    f4:c9:96:f6:a0:73:d6:44:eb:06:df:bf:77:09:43:
                    83:50:de:a2:f1:a5:f7:2f:e4:49:c9:b7:29:45:2f:
                    93:c9:11:fe:14:c6:3d:3c:66:95:f0:0b:1f:19:b1:
                    02:39:27:ee:64:c8:f3:d9:ef:dd:88:0b:a5:48:bb:
                    2f:58:8e:d1:da:fc:85:5b:fe:ce:68:fd:48:21:71:
                    ee:de:65:c4:74:9e:bc:8b:ff:5c:0f:54:f9:37:38:
                    0b:80:d2:a6:19:34:a8:e6:cd:90:17:63:68:2f:d4:
                    4b:46:6f:ea:72:72:05:db:7a:cf:88:70:fa:b1:bf:
                    f0:74:05:47:13:b9:de:e9:80:eb:ed:e4:80:64:d6:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:49:50:A3:DA:A6:D4:ED:83:1F:84:87:73:44:5F:47:FC:D5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/a14f9630-d332-36aa-80f4-ebdac82890d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6/8c95706c-2f3b-4326-9d35-a617f24781e6.crl

            X509v3 Authority Key Identifier:
                keyid:69:FE:86:18:AB:09:49:A7:56:8C:CB:D2:CB:4E:31:E4:B4:04:B7:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c95706c-2f3b-4326-9d35-a617f24781e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:09:12:79:05:6e:08:59:8b:f7:d7:99:3e:a0:cb:f5:5b:
         a0:67:57:fd:0e:be:11:6d:96:40:cd:c6:f9:40:07:d8:3e:45:
         f9:de:ed:08:20:05:79:fd:c4:c9:ff:5d:53:3b:a0:09:e1:85:
         06:12:c8:01:cd:b3:0b:97:6c:f4:69:a0:d8:a5:ec:12:0f:a1:
         f1:36:9f:d1:02:b8:45:1a:c7:c7:5d:72:1e:94:ea:97:73:58:
         51:ef:84:d8:48:17:7f:2c:69:39:97:eb:8c:7d:48:91:b4:56:
         c9:2c:16:57:57:68:86:4d:c5:cb:40:da:e8:56:31:8a:24:c9:
         bb:f1:67:fb:f9:6c:ee:ef:42:55:df:a2:17:25:e5:92:7c:ad:
         69:ba:6c:96:02:a3:cb:b6:b4:37:68:7a:d1:bc:fb:0a:64:5d:
         3b:b5:3d:10:70:88:57:29:80:ca:e5:63:5e:56:88:1f:bc:4f:
         5d:7b:f2:67:5d:b1:36:9f:82:c6:d9:d7:c7:0e:3d:c2:12:c1:
         1e:4d:f0:02:86:29:87:6e:31:5b:99:93:ec:aa:16:e2:b8:15:
         ee:76:87:01:e2:d5:51:97:08:9b:52:39:e5:9a:82:8d:2f:38:
         7a:3c:50:69:96:1b:06:99:21:77:dc:15:f1:bb:b0:92:5b:f6:
         6b:5e:01:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hYTY5Qw4GoXudMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5NTcwNmMtMmYzYi00MzI2LTlkMzUtYTYxN2YyNDc4
MWU2MB4XDTI2MDYxMDIzNDYwM1oXDTI2MDkwODIzNDYwM1owLzEtMCsGA1UEAxMk
MzQxMmUwY2ItZDk1Yy00M2EwLTliY2EtODFiODE3Zjg3OWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kYNQGATEX60e1eSwsDWw5eSb9Qpj2o4y+CZ
KSkC/1HPtmpzdkV1q7jgJZ5ol9gM4crEDYN1bhcP40sbuCr6wlBG/OK5lg35fKTv
AULIqOrstog7Pdu010zq4wM+UYINIES+OO8J2wF5DTt2nGF5iAg5kl5apXv0yZb2
oHPWROsG3793CUODUN6i8aX3L+RJybcpRS+TyRH+FMY9PGaV8AsfGbECOSfuZMjz
2e/diAulSLsvWI7R2vyFW/7OaP1IIXHu3mXEdJ68i/9cD1T5NzgLgNKmGTSo5s2Q
F2NoL9RLRm/qcnIF23rPiHD6sb/wdAVHE7ne6YDr7eSAZNZ+4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUASVCj2qbU7YMfhIdzRF9H/NXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzk1
NzA2Yy0yZjNiLTQzMjYtOWQzNS1hNjE3ZjI0NzgxZTYvYTE0Zjk2MzAtZDMzMi0z
NmFhLTgwZjQtZWJkYWM4Mjg5MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM5NTcwNmMtMmYzYi00MzI2LTlk
MzUtYTYxN2YyNDc4MWU2LzhjOTU3MDZjLTJmM2ItNDMyNi05ZDM1LWE2MTdmMjQ3
ODFlNi5jcmwwHwYDVR0jBBgwFoAUaf6GGKsJSadWjMvSy04x5LQEt6MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84Yzk1NzA2Yy0yZjNiLTQzMjYtOWQzNS1hNjE3
ZjI0NzgxZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpmUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPgCRJ5BW4IWYv315k+oMv1W6BnV/0OvhFtlkDNxvlAB9g+Rfne7Qgg
BXn9xMn/XVM7oAnhhQYSyAHNswuXbPRpoNil7BIPofE2n9ECuEUax8ddch6U6pdz
WFHvhNhIF38saTmX64x9SJG0VsksFldXaIZNxctA2uhWMYokybvxZ/v5bO7vQlXf
ohcl5ZJ8rWm6bJYCo8u2tDdoetG8+wpkXTu1PRBwiFcpgMrlY15WiB+8T1178mdd
sTafgsbZ18cOPcISwR5N8AKGKYduMVuZk+yqFuK4Fe52hwHi1VGXCJtSOeWago0v
OHo8UGmWGwaZIXfcFfG7sJJb9mteAfQ=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:42 2026 by rpki-client