Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa
File:                     177f1d70-475f-3d07-b1ef-c54a858042bc.roa (raw, json)
Hash identifier:          3eZFqnpC9bOyekqMCmG+zX+apupValnCYyKFh12oL1A=
Subject key identifier:   BA:B3:83:42:B1:3A:1D:53:0F:6B:4E:55:C0:5D:3F:7D:C8:EC:B6:C7
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584F3A17D9C2A9C8075088C58060
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     12213
IP address blocks:        149.137.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d9:c2:a9:c8:07:50:88:c5:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=90921295-3c16-4bc2-b165-690631c5710c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:39:e5:09:d2:14:c7:c1:1b:ef:46:64:eb:
                    83:d1:e7:d2:96:29:6d:68:81:c8:34:d3:d6:f6:b7:
                    b7:9c:d7:08:01:36:8d:20:9a:37:4e:fe:d1:88:88:
                    6a:35:35:1c:67:ad:1c:35:da:10:0d:76:b9:f4:9b:
                    8a:b9:7a:15:bd:47:85:95:16:74:9e:92:83:a1:8e:
                    7e:5d:67:34:be:d4:71:37:2a:73:a0:c3:53:bc:6c:
                    ee:01:82:39:19:b4:3c:05:ad:17:55:74:08:0d:2e:
                    62:ae:3a:08:a0:a5:8a:7b:dd:00:fc:4e:4a:ce:3d:
                    96:15:a0:0b:5f:01:48:06:95:b2:74:b8:8a:ef:1f:
                    43:c6:56:43:85:ed:b6:3e:01:61:95:89:10:4e:11:
                    9d:8b:03:ff:c4:06:31:64:b5:b7:50:7c:3c:99:47:
                    df:06:b4:d1:50:90:87:2c:b7:c9:9a:a3:16:a6:d3:
                    d7:e8:03:34:6d:30:a5:a0:db:b2:68:1a:5c:f8:53:
                    9d:2f:5a:46:47:2f:4e:b0:fe:ff:63:ca:07:61:fc:
                    06:3c:71:7e:6b:ee:9a:83:91:78:40:c2:9a:e4:4c:
                    85:20:66:be:c0:4a:39:3e:ed:36:05:58:5c:5d:32:
                    1f:55:d1:1d:28:d5:3a:ad:0b:14:40:00:66:e0:ff:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:83:42:B1:3A:1D:53:0F:6B:4E:55:C0:5D:3F:7D:C8:EC:B6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:3b:e8:d8:85:f3:22:60:6f:8f:58:12:6d:16:93:46:dc:
         ff:a9:23:42:f5:c6:8f:8c:bc:31:a5:a5:66:78:e8:39:cf:61:
         5b:b3:ed:ae:86:07:dd:b8:7a:53:06:80:1a:f3:6b:64:37:53:
         3f:e1:f3:7c:69:44:0b:0a:a7:41:66:e9:e3:f7:4c:af:4e:3a:
         5d:61:fa:8d:ae:3b:31:e3:44:10:48:bc:3b:b4:45:17:a8:93:
         3b:37:57:43:7e:de:e2:98:08:ea:36:f5:de:2c:0b:b4:1a:ff:
         15:f0:67:c4:01:37:85:8d:d3:6d:7c:78:e0:f3:7a:6d:bd:a1:
         d9:03:65:36:aa:da:63:0e:ab:bd:65:96:dd:2a:ed:2e:4c:1d:
         04:c2:5d:19:9e:f1:d9:35:13:29:a8:41:44:47:82:56:b5:ec:
         4c:a1:1b:f9:b7:64:0b:59:7c:69:ee:2a:76:c8:db:b8:33:78:
         6e:48:e8:a2:df:da:77:e5:28:0c:ac:a0:3b:88:6b:73:34:91:
         27:f9:bb:10:40:65:6c:b9:83:a8:35:9e:75:a4:ca:70:55:01:
         0d:d8:7e:57:be:50:90:a0:20:06:ca:ca:55:be:40:60:50:8d:
         a1:08:98:7f:50:7c:33:29:f0:3f:1f:96:1f:36:d2:95:24:22:
         2e:a4:94:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9nCqcgHUIjFgGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi
NzA3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
OTA5MjEyOTUtM2MxNi00YmMyLWIxNjUtNjkwNjMxYzU3MTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVY55QnSFMfBG+9GZOuD0efSliltaIHINNPW
9re3nNcIATaNIJo3Tv7RiIhqNTUcZ60cNdoQDXa59JuKuXoVvUeFlRZ0npKDoY5+
XWc0vtRxNypzoMNTvGzuAYI5GbQ8Ba0XVXQIDS5irjoIoKWKe90A/E5Kzj2WFaAL
XwFIBpWydLiK7x9DxlZDhe22PgFhlYkQThGdiwP/xAYxZLW3UHw8mUffBrTRUJCH
LLfJmqMWptPX6AM0bTCloNuyaBpc+FOdL1pGRy9OsP7/Y8oHYfwGPHF+a+6ag5F4
QMKa5EyFIGa+wEo5Pu02BVhcXTIfVdEdKNU6rQsUQABm4P8eYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqzg0KxOh1TD2tOVcBdP33I7LbHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0
MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMTc3ZjFkNzAtNDc1Zi0z
ZDA3LWIxZWYtYzU0YTg1ODA0MmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj
NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw
YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk
ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9bO+jYhfMiYG+PWBJtFpNG3P+pI0L1xo+MvDGlpWZ46DnPYVuz7a6G
B924elMGgBrza2Q3Uz/h83xpRAsKp0Fm6eP3TK9OOl1h+o2uOzHjRBBIvDu0RReo
kzs3V0N+3uKYCOo29d4sC7Qa/xXwZ8QBN4WN0218eODzem29odkDZTaq2mMOq71l
lt0q7S5MHQTCXRme8dk1EymoQURHgla17EyhG/m3ZAtZfGnuKnbI27gzeG5I6KLf
2nflKAysoDuIa3M0kSf5uxBAZWy5g6g1nnWkynBVAQ3Yfle+UJCgIAbKylW+QGBQ
jaEImH9QfDMp8D8flh820pUkIi6klGo=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:25:40 2026 by rpki-client