Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
File:                     c0540611-3f02-385f-ae3f-b838ce9aef5d.roa (raw, json)
Hash identifier:          fyWHitjTpvMvpbh/CCxsRVaM5mkg5hNnPURj9vjFNZ8=
Subject key identifier:   36:69:10:7D:B9:B4:CE:FC:BA:15:E7:D5:3D:C6:74:8D:0E:5C:14:C9
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B24F5283B32B171EC8C40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        198.187.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:24:f5:28:3b:32:b1:71:ec:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=e3c733c2-9945-4749-9afc-b59cdd6517ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:12:ca:7d:14:4b:37:67:ba:81:5f:78:27:
                    ef:5d:61:60:00:df:f7:aa:12:82:70:b8:df:7e:4c:
                    dc:0c:d9:88:99:99:d7:1c:25:55:af:ab:fa:36:f5:
                    34:04:c5:24:40:49:c2:db:24:08:db:b7:c8:e1:28:
                    81:91:08:d9:48:53:03:f3:5c:83:6e:a6:5a:af:5d:
                    1a:4c:2e:c1:34:13:85:f8:44:6d:8a:8a:f9:79:13:
                    aa:fb:b1:17:76:4f:d4:a9:2d:be:da:55:d1:33:91:
                    5e:f9:a2:54:f1:5d:6e:dd:71:1b:54:ce:1b:7d:2f:
                    81:f8:f3:90:79:31:12:12:1b:43:1b:52:30:1e:8d:
                    1f:de:8a:e1:1e:38:f5:d5:00:e8:83:ea:57:e3:d8:
                    d8:a9:ee:5a:91:78:a8:96:14:52:a0:9d:bb:17:53:
                    fc:15:d4:a4:d6:42:e2:ce:25:b6:0b:f2:dd:a7:98:
                    3d:43:6e:71:81:e4:1c:82:bb:34:ea:69:c6:c3:56:
                    ab:a6:8a:a3:1a:e5:4a:0f:c1:e2:b3:31:c9:3b:6b:
                    29:f9:bf:b0:2c:77:6e:b5:0a:03:b7:ad:1b:0b:9a:
                    80:89:66:7b:79:73:6c:b0:39:0a:cf:f0:cd:95:d0:
                    88:0c:10:56:31:b9:0c:00:04:8c:eb:71:c5:a6:36:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:10:7D:B9:B4:CE:FC:BA:15:E7:D5:3D:C6:74:8D:0E:5C:14:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:dd:14:61:11:8a:16:8d:83:42:49:c4:9d:c6:5f:e5:68:
         cc:44:a2:ab:03:b7:58:bf:b1:88:5e:3c:14:30:b7:f3:c9:ad:
         57:18:53:ba:0d:3c:34:f8:fd:10:97:75:74:8c:dd:1d:10:82:
         3b:04:74:bb:98:83:26:f7:ba:9c:71:9e:97:0a:f3:76:ed:7f:
         d5:68:fa:8f:84:b8:03:97:dc:29:26:0f:ad:5a:c3:5e:a8:cb:
         e6:ae:02:5a:db:31:e0:82:4d:69:1a:1e:32:21:37:ff:4e:e5:
         9e:71:5a:5c:20:14:44:89:51:de:36:2c:be:e2:0b:b5:83:a1:
         8b:ef:58:e1:11:6a:15:02:02:37:55:ac:8a:82:eb:1e:6e:88:
         e3:48:1f:ce:07:10:04:d9:50:42:68:d4:24:40:41:89:ae:93:
         12:a2:ae:fd:81:05:a0:e8:ad:6c:68:e8:5f:42:e8:8d:1b:12:
         9d:40:34:e9:c1:46:12:20:6b:b3:f9:29:5e:bd:0e:3f:3b:ff:
         f4:06:92:45:f3:ca:b0:8f:b4:dd:68:3d:9b:9e:dc:85:25:5a:
         3b:35:87:93:a0:08:a5:ad:19:b9:fd:50:f7:ca:f7:38:ba:de:
         f2:75:4b:70:fd:14:d5:76:0a:e6:e3:63:90:52:84:11:01:f6:
         0f:d3:b6:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayT1KDsysXHsjEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZTNjNzMzYzItOTk0NS00NzQ5LTlhZmMtYjU5Y2RkNjUxN2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydsSyn0USzdnuoFfeCfvXWFgAN/3qhKCcLjf
fkzcDNmImZnXHCVVr6v6NvU0BMUkQEnC2yQI27fI4SiBkQjZSFMD81yDbqZar10a
TC7BNBOF+ERtior5eROq+7EXdk/UqS2+2lXRM5Fe+aJU8V1u3XEbVM4bfS+B+POQ
eTESEhtDG1IwHo0f3orhHjj11QDog+pX49jYqe5akXiolhRSoJ27F1P8FdSk1kLi
ziW2C/Ldp5g9Q25xgeQcgrs06mnGw1arpoqjGuVKD8HiszHJO2sp+b+wLHdutQoD
t60bC5qAiWZ7eXNssDkKz/DNldCIDBBWMbkMAASM63HFpjZF0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZpEH25tM78uhXn1T3GdI0OXBTJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYzA1NDA2MTEtM2YwMi0z
ODVmLWFlM2YtYjgzOGNlOWFlZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrueMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfV3RRhEYoWjYNCScSdxl/laMxEoqsDt1i/sYhePBQwt/PJrVcYU7oN
PDT4/RCXdXSM3R0QgjsEdLuYgyb3upxxnpcK83btf9Vo+o+EuAOX3CkmD61aw16o
y+auAlrbMeCCTWkaHjIhN/9O5Z5xWlwgFESJUd42LL7iC7WDoYvvWOERahUCAjdV
rIqC6x5uiONIH84HEATZUEJo1CRAQYmukxKirv2BBaDorWxo6F9C6I0bEp1ANOnB
RhIga7P5KV69Dj87//QGkkXzyrCPtN1oPZue3IUlWjs1h5OgCKWtGbn9UPfK9zi6
3vJ1S3D9FNV2CubjY5BShBEB9g/TtvA=
-----END CERTIFICATE-----
Generated at Wed May 13 11:23:10 2026 by rpki-client