Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
File:                     f851c2c2-de47-3e35-85ca-156d6c109859.roa (raw, json)
Hash identifier:          2eXM+alpoGUJgO9H6QefQCCj4rU6ljDyTJVZpaNa8o8=
Subject key identifier:   F2:F0:07:29:F6:9C:08:CA:64:D7:E6:FB:3F:BD:A9:E2:AA:EB:9C:0D
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584E7A64D82F36AF323E18333F80
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     26523
IP address blocks:        162.252.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d8:2f:36:af:32:3e:18:33:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=029bfc9c-a3d3-48b0-83ec-5aff4145fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:86:c5:40:31:e0:57:14:53:da:b9:1a:12:
                    b0:03:93:e4:d9:01:d2:9c:1c:fb:ff:65:c3:ea:a0:
                    4c:cc:38:4e:db:fb:d7:3c:47:5a:32:c3:0b:a4:3f:
                    0d:c8:e1:c6:62:6f:d5:2a:53:38:0c:8c:18:a1:07:
                    84:53:84:e2:6c:25:bf:68:78:7d:09:e1:96:78:54:
                    7a:b5:6b:1f:49:0a:e9:e4:cc:a8:53:72:08:c2:96:
                    af:30:20:8e:3e:b5:5e:38:ee:a7:ce:94:48:61:0b:
                    49:18:a8:e9:cc:d0:e6:a8:07:9f:7d:db:ff:2f:3e:
                    c1:da:89:fa:e2:4d:3e:b5:e8:21:87:59:62:be:40:
                    6a:95:8a:9e:02:7d:96:21:c4:b8:41:3b:ff:d0:8b:
                    83:51:85:7a:97:44:c6:25:a0:9f:03:f7:f3:69:fc:
                    ce:d6:68:03:a3:83:50:74:31:65:99:5b:b1:00:8c:
                    ad:31:8a:b9:a4:a6:22:2d:4d:82:fe:ee:0f:6b:bb:
                    be:dd:40:50:8b:c1:2f:24:9e:a4:1a:37:6e:8e:94:
                    3a:93:53:0a:a3:88:ab:fc:41:18:a9:76:24:39:af:
                    d5:45:0e:e5:7b:fd:26:51:a0:12:43:fd:2c:04:51:
                    17:99:3f:43:ca:58:b2:fc:b4:41:a4:ac:54:1f:3e:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:07:29:F6:9C:08:CA:64:D7:E6:FB:3F:BD:A9:E2:AA:EB:9C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:bb:74:b8:7c:55:a3:1a:5f:68:e1:9a:25:55:6c:07:d7:
         3d:ed:86:e4:28:5f:90:a8:a1:f2:78:77:09:95:1a:c5:72:10:
         9e:66:3c:6f:9d:74:b0:25:37:ae:7d:19:86:93:00:64:6b:9c:
         cd:95:fa:d2:96:2f:64:1e:21:72:31:3b:59:c1:c4:99:f5:de:
         98:78:e6:35:83:3e:f2:53:a4:aa:c0:7a:8f:70:12:47:70:61:
         af:78:cf:5c:79:b1:ba:ec:6c:75:50:46:8e:ab:7a:e4:0a:6d:
         e6:5f:41:0a:e0:8d:3a:48:28:ac:e8:e5:e7:0a:fc:05:04:15:
         09:26:47:33:f7:1e:85:dd:bd:98:54:26:93:b8:56:85:15:e9:
         d3:e1:b3:b2:8d:8d:19:15:61:93:73:c6:96:6f:61:37:85:3f:
         3c:b1:31:7a:1f:fb:29:3e:4d:5f:53:d0:55:2d:ba:72:5d:91:
         1c:1b:b8:ab:a0:5a:7a:1f:5d:8e:38:5b:62:e8:4a:e2:6a:24:
         61:44:7c:73:d7:e0:29:4c:cf:75:41:29:ee:5a:ad:9a:de:fc:
         f2:8e:c5:2c:d6:20:cc:98:09:02:d5:04:2a:4a:01:02:da:e7:
         e1:48:30:ae:13:9d:ad:dc:a4:9a:6b:9a:02:24:a7:e1:27:08:
         45:14:4b:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNgvNq8yPhgzP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZjNTIyZWEtMzcwMy00YWFhLTlmYTAtZDhmOTlhNzIw
NTM2MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
MDI5YmZjOWMtYTNkMy00OGIwLTgzZWMtNWFmZjQxNDVmYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypCGxUAx4FcUU9q5GhKwA5Pk2QHSnBz7/2XD
6qBMzDhO2/vXPEdaMsMLpD8NyOHGYm/VKlM4DIwYoQeEU4TibCW/aHh9CeGWeFR6
tWsfSQrp5MyoU3IIwpavMCCOPrVeOO6nzpRIYQtJGKjpzNDmqAeffdv/Lz7B2on6
4k0+teghh1livkBqlYqeAn2WIcS4QTv/0IuDUYV6l0TGJaCfA/fzafzO1mgDo4NQ
dDFlmVuxAIytMYq5pKYiLU2C/u4Pa7u+3UBQi8EvJJ6kGjdujpQ6k1MKo4ir/EEY
qXYkOa/VRQ7le/0mUaASQ/0sBFEXmT9Dyliy/LRBpKxUHz5LiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLwByn2nAjKZNfm+z+9qeKq65wNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1
MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5OWE3MjA1MzYvZjg1MWMyYzItZGU0Ny0z
ZTM1LTg1Y2EtMTU2ZDZjMTA5ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWZjNTIyZWEtMzcwMy00YWFhLTlm
YTAtZDhmOTlhNzIwNTM2LzVmYzUyMmVhLTM3MDMtNGFhYS05ZmEwLWQ4Zjk5YTcy
MDUzNi5jcmwwHwYDVR0jBBgwFoAUrBif0ZYBC/QZzdVzfG79ydGolaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5
OWE3MjA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLKu3S4fFWjGl9o4ZolVWwH1z3thuQoX5CoofJ4dwmVGsVyEJ5mPG+d
dLAlN659GYaTAGRrnM2V+tKWL2QeIXIxO1nBxJn13ph45jWDPvJTpKrAeo9wEkdw
Ya94z1x5sbrsbHVQRo6reuQKbeZfQQrgjTpIKKzo5ecK/AUEFQkmRzP3HoXdvZhU
JpO4VoUV6dPhs7KNjRkVYZNzxpZvYTeFPzyxMXof+yk+TV9T0FUtunJdkRwbuKug
WnofXY44W2LoSuJqJGFEfHPX4ClMz3VBKe5arZre/PKOxSzWIMyYCQLVBCpKAQLa
5+FIMK4Tna3cpJprmgIkp+EnCEUUS9s=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:18 2026 by rpki-client