Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa
File:                     f0581163-8650-3d3c-b68c-97fa9d353ba7.roa (raw, json)
Hash identifier:          YDO1SHLY2ceC8ogKavm3+sImQDTKBkuFoX4zI5Sm8m8=
Subject key identifier:   31:98:DA:51:AC:4F:0B:C2:4E:7C:57:79:65:0C:7C:94:DB:70:54:8E
Certificate issuer:       /CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
Certificate serial:       010D0C9F4328584E885A4A6DF0F3E687032F6B00
Authority key identifier: 65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     46156
IP address blocks:        159.208.48.0/24 maxlen: 24
                          159.208.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4a:6d:f0:f3:e6:87:03:2f:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=acab7116-8d79-4166-8750-df6912a20b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:d3:b0:d7:08:95:0b:63:2b:40:e9:ac:c5:
                    36:92:89:a8:7c:36:8c:ae:7c:f8:d2:42:46:1a:fa:
                    9d:89:84:45:55:97:fa:11:8c:80:b9:68:5e:a1:5d:
                    e8:fa:44:b5:af:15:30:9a:f6:f9:71:4c:7b:29:50:
                    bb:74:60:b6:36:dc:08:3a:e4:20:b8:c6:a2:4d:c5:
                    47:70:1e:61:3e:a3:1b:3d:69:1e:98:2f:29:5b:52:
                    51:dc:3b:11:f2:83:28:e7:a0:64:46:c0:e6:c3:99:
                    15:9a:cc:2a:8c:23:06:2e:87:3c:5b:57:c1:bd:b1:
                    38:cc:2b:e4:f3:88:f1:87:bb:48:0f:22:a1:0a:85:
                    a2:e9:d7:8d:f1:42:e7:95:3b:35:84:54:86:e4:21:
                    93:61:a9:d8:8f:f7:71:40:1e:59:df:db:19:c6:38:
                    01:49:35:5d:bf:8a:6f:76:66:57:6b:f9:37:c2:63:
                    2b:db:fd:bf:3a:b7:2a:4a:b1:fb:bc:22:2e:db:b5:
                    16:4c:37:12:01:6a:72:72:e6:b2:70:43:23:c8:fd:
                    95:d6:05:f6:12:60:44:f4:ba:75:3f:a7:91:03:1b:
                    d1:38:4b:f9:0e:39:bd:50:4e:73:a9:b8:6b:00:af:
                    9e:61:b7:36:ad:45:38:42:f3:9a:84:4d:fb:d8:e2:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:98:DA:51:AC:4F:0B:C2:4E:7C:57:79:65:0C:7C:94:DB:70:54:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl

            X509v3 Authority Key Identifier:
                keyid:65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:fa:d6:0b:7f:4f:4b:0f:22:84:3b:75:bd:00:a8:6d:06:
         d5:95:45:2d:ec:0a:3e:c6:7a:fc:3d:ca:a8:44:3f:0d:ca:20:
         c8:d6:bf:07:a4:ad:e5:d5:1f:d3:8e:4f:35:45:ef:24:0c:c8:
         88:96:79:11:bf:56:56:b1:95:3f:ea:39:ab:41:52:6f:5f:fc:
         8b:47:19:b7:8f:9d:24:50:b8:0a:81:f8:96:90:ee:14:ef:87:
         b1:6d:8f:1a:58:c1:70:b5:42:33:97:72:55:dd:71:ea:7d:ae:
         4e:dc:22:90:be:e1:86:b0:5b:98:01:78:51:89:6f:4a:95:8e:
         14:6e:c2:88:8f:94:73:16:1a:72:ad:a0:4c:99:6b:f4:f8:d4:
         dc:0a:42:11:87:97:1e:30:03:b4:9a:f5:93:96:61:a0:5b:42:
         98:ff:76:01:4a:ea:ae:2e:ae:c5:7f:c4:5d:e0:97:58:7b:5e:
         71:26:48:fa:5e:21:11:20:99:39:53:03:27:2a:9a:61:d5:27:
         a9:54:7d:71:bd:54:4c:f6:8f:da:9b:78:e0:96:7f:38:58:cc:
         24:f9:74:34:7e:33:d8:1c:13:76:f1:56:a6:0b:e0:20:ec:48:
         3f:d8:36:4d:74:59:51:8c:77:e0:42:b4:2a:28:a8:33:c7:df:
         4a:26:90:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkpt8PPmhwMvawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjMTNkNTItODllNC00MDkzLWIzZDEtMzdhOTg3MDJk
YzdhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWNhYjcxMTYtOGQ3OS00MTY2LTg3NTAtZGY2OTEyYTIwYjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6TTsNcIlQtjK0DprMU2komofDaMrnz40kJG
GvqdiYRFVZf6EYyAuWheoV3o+kS1rxUwmvb5cUx7KVC7dGC2NtwIOuQguMaiTcVH
cB5hPqMbPWkemC8pW1JR3DsR8oMo56BkRsDmw5kVmswqjCMGLoc8W1fBvbE4zCvk
84jxh7tIDyKhCoWi6deN8ULnlTs1hFSG5CGTYanYj/dxQB5Z39sZxjgBSTVdv4pv
dmZXa/k3wmMr2/2/OrcqSrH7vCIu27UWTDcSAWpycuaycEMjyP2V1gX2EmBE9Lp1
P6eRAxvROEv5Djm9UE5zqbhrAK+eYbc2rUU4QvOahE372OLWsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGY2lGsTwvCTnxXeWUMfJTbcFSOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZGMx
M2Q1Mi04OWU0LTQwOTMtYjNkMS0zN2E5ODcwMmRjN2EvZjA1ODExNjMtODY1MC0z
ZDNjLWI2OGMtOTdmYTlkMzUzYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWRjMTNkNTItODllNC00MDkzLWIz
ZDEtMzdhOTg3MDJkYzdhL2FkYzEzZDUyLTg5ZTQtNDA5My1iM2QxLTM3YTk4NzAy
ZGM3YS5jcmwwHwYDVR0jBBgwFoAUZaQCxoJ4yZvoIsfUQWhWTRG7rrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZGMxM2Q1Mi04OWU0LTQwOTMtYjNkMS0zN2E5
ODcwMmRjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn9AwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGny+tYLf09LDyKEO3W9AKhtBtWVRS3sCj7Gevw9yqhEPw3KIMjWvwek
reXVH9OOTzVF7yQMyIiWeRG/VlaxlT/qOatBUm9f/ItHGbePnSRQuAqB+JaQ7hTv
h7FtjxpYwXC1QjOXclXdcep9rk7cIpC+4YawW5gBeFGJb0qVjhRuwoiPlHMWGnKt
oEyZa/T41NwKQhGHlx4wA7Sa9ZOWYaBbQpj/dgFK6q4ursV/xF3gl1h7XnEmSPpe
IREgmTlTAycqmmHVJ6lUfXG9VEz2j9qbeOCWfzhYzCT5dDR+M9gcE3bxVqYL4CDs
SD/YNk10WVGMd+BCtCooqDPH30omkLg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:14 2026 by rpki-client