Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa
File:                     95fc225f-49cd-3f09-8262-4c80ae5414b9.roa (raw, json)
Hash identifier:          bMpVVemTySQ0tFWURV+Hnl9cPMEEG5Pjo1R4oz2bOJE=
Subject key identifier:   33:DB:3F:7C:D4:D5:7D:B1:4E:8C:20:70:A9:81:76:C9:B5:F9:DB:BE
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584F497581A149EA1198499DC600
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6507
IP address blocks:        151.106.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:81:a1:49:ea:11:98:49:9d:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=384b2d27-a229-451f-92ba-8cd01569cd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:1f:72:bb:07:d8:27:74:83:ba:80:a4:e9:
                    8e:8a:9e:70:f8:d1:5e:19:ea:e4:04:f1:6a:b8:15:
                    85:89:fe:8f:d0:13:33:b4:76:9e:db:ef:69:46:ac:
                    13:1c:06:23:5c:53:1d:bf:b4:3e:f6:4a:18:23:f0:
                    28:af:98:4a:2f:fc:87:0f:59:3c:42:96:7c:2e:95:
                    c4:04:39:72:9c:81:7e:f2:18:28:c9:01:05:d6:3c:
                    7d:9c:3e:3d:d5:44:72:04:84:e2:2b:a5:2c:01:6c:
                    ed:47:75:b9:78:51:51:40:ba:de:77:97:be:b2:87:
                    b3:ca:64:fd:6d:50:aa:8c:a4:c8:ca:c0:75:e9:a7:
                    79:0b:17:47:90:3a:47:1c:63:d2:89:51:3e:3b:a9:
                    ad:e2:6b:5e:c1:b9:6f:f0:f2:82:b9:31:d7:9a:10:
                    d7:4d:45:63:18:1c:66:8b:1c:dc:0d:31:51:30:64:
                    1e:07:df:88:80:9d:60:d7:e5:a1:1f:8a:d6:74:c0:
                    e0:9f:d7:ac:84:51:53:06:c1:5c:1d:2f:92:07:0f:
                    87:d2:8c:fb:f5:ac:75:67:6d:65:62:fe:d3:bc:4c:
                    09:80:3d:9b:e0:6b:35:e9:38:9e:70:52:57:a9:f1:
                    6a:cb:7c:f0:ba:6e:10:ff:09:a2:24:f2:ab:e8:6a:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:3F:7C:D4:D5:7D:B1:4E:8C:20:70:A9:81:76:C9:B5:F9:DB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:6b:56:5c:58:f0:e0:b4:8f:19:1b:35:cc:9a:6a:07:85:
         13:75:b2:5d:29:87:96:2c:2f:3d:f5:a7:08:27:1c:81:f5:a9:
         d7:4c:6e:a5:1a:1d:db:44:e6:a7:0e:f3:a9:76:f8:be:4e:bd:
         1a:95:7e:aa:f5:cd:d9:b2:6d:06:46:ae:c5:26:eb:06:72:67:
         be:0f:71:98:a1:43:7f:50:83:5b:ee:22:93:5e:13:39:70:03:
         ab:06:94:9f:a9:13:2d:4c:82:e5:5a:65:89:f6:4c:1a:4c:4f:
         9e:fd:a4:a1:46:b8:d9:ac:41:43:2c:c5:03:9a:d6:a2:67:c5:
         50:bc:83:e1:de:bd:83:42:fc:30:31:cc:a0:0d:d1:bc:f4:0a:
         df:a7:90:0e:50:54:22:99:1d:d7:19:49:b2:bb:84:e9:4f:2c:
         61:8f:e7:6d:7c:36:d1:f6:b0:c4:3c:0b:87:63:8e:d8:68:6e:
         25:4a:24:ee:60:26:a4:eb:1e:13:9f:c3:ba:36:a9:27:56:0f:
         a6:11:05:4e:d3:5c:1f:d5:2c:fa:77:d0:9a:78:0d:87:2e:2c:
         de:0a:b0:45:33:c1:98:bd:b3:b0:a0:e3:f2:92:55:47:b6:4c:
         e4:a4:1c:b6:00:ee:57:d4:50:92:7d:ac:c8:a2:83:29:e0:04:
         5d:a2:9e:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdYGhSeoRmEmdxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy
NjkyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mzg0YjJkMjctYTIyOS00NTFmLTkyYmEtOGNkMDE1NjljZDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxIfcrsH2Cd0g7qApOmOip5w+NFeGerkBPFq
uBWFif6P0BMztHae2+9pRqwTHAYjXFMdv7Q+9koYI/Aor5hKL/yHD1k8QpZ8LpXE
BDlynIF+8hgoyQEF1jx9nD491URyBITiK6UsAWztR3W5eFFRQLred5e+soezymT9
bVCqjKTIysB16ad5CxdHkDpHHGPSiVE+O6mt4mtewblv8PKCuTHXmhDXTUVjGBxm
ixzcDTFRMGQeB9+IgJ1g1+WhH4rWdMDgn9eshFFTBsFcHS+SBw+H0oz79ax1Z21l
Yv7TvEwJgD2b4Gs16TiecFJXqfFqy3zwum4Q/wmiJPKr6GqvBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPbP3zU1X2xTowgcKmBdsm1+du+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2
YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvOTVmYzIyNWYtNDljZC0z
ZjA5LTgyNjItNGM4MGFlNTQxNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx
ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl
MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4
MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl2r2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJb1a1ZcWPDgtI8ZGzXMmmoHhRN1sl0ph5YsLz31pwgnHIH1qddMbqUa
HdtE5qcO86l2+L5OvRqVfqr1zdmybQZGrsUm6wZyZ74PcZihQ39Qg1vuIpNeEzlw
A6sGlJ+pEy1MguVaZYn2TBpMT579pKFGuNmsQUMsxQOa1qJnxVC8g+HevYNC/DAx
zKAN0bz0Ct+nkA5QVCKZHdcZSbK7hOlPLGGP5218NtH2sMQ8C4djjthobiVKJO5g
JqTrHhOfw7o2qSdWD6YRBU7TXB/VLPp30Jp4DYcuLN4KsEUzwZi9s7Cg4/KSVUe2
TOSkHLYA7lfUUJJ9rMiigyngBF2inmA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:36:14 2026 by rpki-client