Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa
File:                     70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa (raw, json)
Hash identifier:          oUO2KtR1+zhtgGhYwFxkNEgsnfRNnw+G6nF6EVrSg1o=
Subject key identifier:   77:A6:35:F4:D8:B3:61:EF:E6:90:30:7A:84:AD:77:7E:41:EA:9A:54
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584E8F54F01B31832F52AF46E280
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     18434
IP address blocks:        156.55.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f0:1b:31:83:2f:52:af:46:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=85858bb7-8b20-4381-bf6f-b340a50405b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:a0:8b:54:c7:fe:cc:11:e1:e7:2e:d7:8c:
                    9a:80:08:a6:85:8b:7a:59:72:a7:82:28:b6:7c:ec:
                    0e:5d:0b:4b:1f:a4:e0:c9:28:df:d0:2b:1b:40:5e:
                    3a:fd:ee:4f:c0:cc:28:40:f5:b0:f2:85:53:60:19:
                    44:a2:23:08:0b:be:0d:66:97:53:61:aa:3c:c1:fa:
                    73:26:aa:c9:ef:ed:29:5d:7a:ab:a8:f2:98:2d:b7:
                    75:2f:49:ce:df:72:fe:92:09:ba:f2:fa:63:1f:5a:
                    6c:b1:2f:36:6e:bc:5a:88:4e:a0:ac:c1:5b:e8:71:
                    d2:f1:f9:4c:1d:c3:2d:3c:f8:12:45:70:42:cf:0b:
                    e4:0e:1f:ae:c2:74:ae:05:5c:31:6f:e1:28:0b:6d:
                    eb:54:b2:f6:f6:cc:74:8f:7b:c2:b8:4e:b1:1a:38:
                    0a:f9:ba:12:2c:1c:f1:07:ba:50:45:41:ee:8d:c3:
                    43:fe:47:b9:a6:39:97:2f:75:61:cd:ec:1f:38:05:
                    ca:5b:fc:01:e6:29:b1:ff:91:09:e4:d9:f6:c1:9b:
                    75:e8:0f:cf:d4:69:59:bc:e3:18:cc:82:d1:80:90:
                    88:96:12:36:22:b0:6f:2c:da:ca:b8:ed:d1:fa:e3:
                    66:c5:19:ee:56:03:18:e6:7b:52:f7:a2:5a:d7:36:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:35:F4:D8:B3:61:EF:E6:90:30:7A:84:AD:77:7E:41:EA:9A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:dc:b5:61:23:f1:a7:36:b0:4b:80:a5:59:b2:21:c6:9c:
         25:92:f2:88:f0:00:ee:53:2a:ea:d9:e0:91:d9:a3:08:ef:df:
         0f:4c:21:69:3d:08:23:4b:f8:bd:1d:01:2e:09:d5:28:e3:83:
         cb:35:44:7d:17:c7:64:af:ee:f8:3f:84:59:00:97:95:3f:47:
         6e:d1:f8:4d:56:48:46:4b:b5:d4:04:41:c0:e2:f4:8a:1a:7a:
         0c:cc:f4:cd:1a:bd:66:de:f7:33:91:31:d7:1f:99:83:b9:3e:
         69:8d:5b:e5:52:c3:9d:39:00:94:f2:fa:eb:51:86:6e:d4:fe:
         ec:eb:00:cb:ed:97:db:a0:cc:41:93:e8:b7:8b:ce:07:da:78:
         d7:89:79:c6:38:b0:c9:56:ac:0a:c7:f3:73:05:95:80:00:ee:
         0d:28:3e:d2:5d:fa:50:dd:23:c6:ac:28:8e:93:3d:69:37:39:
         49:59:c1:22:44:7b:1f:81:70:fc:e8:f1:f7:9c:22:b8:26:0f:
         4b:a8:7f:5e:54:6b:ce:98:86:c8:85:ec:3c:c8:60:b3:ac:06:
         4e:62:37:89:d7:9c:3b:ca:7a:40:3d:d3:f1:09:d7:bb:d1:d1:
         70:95:90:10:0b:05:f3:c3:ca:3b:17:b4:f4:92:b8:de:bc:f1:
         8c:7d:14:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPAbMYMvUq9G4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk
ODU4NThiYjctOGIyMC00MzgxLWJmNmYtYjM0MGE1MDQwNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooOgi1TH/swR4ecu14yagAimhYt6WXKngii2
fOwOXQtLH6TgySjf0CsbQF46/e5PwMwoQPWw8oVTYBlEoiMIC74NZpdTYao8wfpz
JqrJ7+0pXXqrqPKYLbd1L0nO33L+kgm68vpjH1pssS82brxaiE6grMFb6HHS8flM
HcMtPPgSRXBCzwvkDh+uwnSuBVwxb+EoC23rVLL29sx0j3vCuE6xGjgK+boSLBzx
B7pQRUHujcND/ke5pjmXL3VhzewfOAXKW/wB5imx/5EJ5Nn2wZt16A/P1GlZvOMY
zILRgJCIlhI2IrBvLNrKuO3R+uNmxRnuVgMY5ntS96Ja1zaAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHemNfTYs2Hv5pAweoStd35B6ppUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNzA1NjliNjYtOGEyZS0z
NzE1LTg1YmQtY2E0OTM0ZGM1YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnDfaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUs3LVhI/GnNrBLgKVZsiHGnCWS8ojwAO5TKurZ4JHZowjv3w9MIWk9
CCNL+L0dAS4J1Sjjg8s1RH0Xx2Sv7vg/hFkAl5U/R27R+E1WSEZLtdQEQcDi9Ioa
egzM9M0avWbe9zORMdcfmYO5PmmNW+VSw505AJTy+utRhm7U/uzrAMvtl9ugzEGT
6LeLzgfaeNeJecY4sMlWrArH83MFlYAA7g0oPtJd+lDdI8asKI6TPWk3OUlZwSJE
ex+BcPzo8fecIrgmD0uof15Ua86YhsiF7DzIYLOsBk5iN4nXnDvKekA90/EJ17vR
0XCVkBALBfPDyjsXtPSSuN688Yx9FGM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:55 2026 by rpki-client