Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa
File:                     f6887cc6-f116-3490-9c95-cc581861c8b5.roa (raw, json)
Hash identifier:          +paLKwbNugzp/7wml1pvPUZhZ52wODkhQ7K/erv/dg4=
Subject key identifier:   8A:5C:05:DC:E3:E8:27:5D:96:F1:AB:1C:28:84:5B:7C:BF:66:3C:28
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584D492A518EC7582E15C18BC000
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14555
IP address blocks:        198.23.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:51:8e:c7:58:2e:15:c1:8b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=252c4a06-d522-4e9b-8fef-ad75ef743236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:a2:13:6a:31:e7:87:65:c3:ef:1a:1b:5d:
                    6c:2a:18:37:07:1e:4f:ab:f1:c3:45:84:5e:92:82:
                    ae:d5:38:70:e1:ab:b8:c5:19:1a:9c:0f:15:cf:6a:
                    80:68:18:ff:af:9f:8f:26:ea:a8:e0:63:09:f0:81:
                    02:5a:6a:9b:93:d7:a8:6d:50:63:53:0b:61:9d:4a:
                    7f:71:e2:fe:7d:48:9b:50:46:36:1a:80:93:8f:63:
                    dc:2b:f5:1e:33:6c:f8:0f:e3:b9:a5:83:9c:a8:d9:
                    b4:45:57:54:3f:09:72:25:df:87:c2:52:f9:8e:ca:
                    54:6d:f1:68:ec:30:b7:7a:6a:40:5e:38:e8:65:39:
                    23:fc:e9:dc:19:aa:d0:7c:d0:a5:5a:d1:e0:a9:71:
                    7c:bc:9c:69:59:7a:83:a9:f3:f4:85:1d:8a:89:6a:
                    5d:f0:98:70:2e:17:08:59:83:34:a2:6e:db:1a:7d:
                    9e:3a:62:cb:ce:1e:83:6f:8d:35:f8:be:a3:83:01:
                    ec:6e:c8:47:03:43:ba:02:8f:83:b0:d5:d8:d0:ac:
                    80:04:98:fa:45:03:bb:68:f7:86:42:13:17:af:08:
                    47:f8:16:67:1a:0b:52:93:4b:b4:b3:ae:79:53:ef:
                    f2:57:c1:47:77:17:ea:99:bd:3b:35:6d:e6:96:ec:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:05:DC:E3:E8:27:5D:96:F1:AB:1C:28:84:5B:7C:BF:66:3C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:96:5e:64:dc:26:89:57:5a:d2:31:3d:0f:67:3d:28:b6:
         19:ff:9d:21:d3:fa:69:04:bd:8c:d6:ac:4b:5b:5e:ba:ba:64:
         1d:c1:c5:b7:b2:93:cb:22:01:29:d1:76:02:a2:be:1b:ce:28:
         b7:bc:55:5f:df:ca:e1:70:51:45:05:67:cf:f9:ad:e9:1b:ee:
         88:ac:b2:f6:ae:be:bc:70:d7:34:74:82:33:23:df:41:47:fb:
         03:32:54:3b:fd:59:00:f6:6b:a7:11:12:73:cf:c2:d0:48:88:
         77:01:d2:35:7d:55:80:68:87:b4:8c:bc:c9:c6:4f:52:1c:b3:
         1e:9b:a4:93:84:a1:c9:d8:65:8b:d1:6d:57:47:cc:96:f1:9e:
         18:79:95:cd:c4:2c:f6:55:06:83:c3:3c:a1:9a:b7:c1:99:b0:
         09:72:58:39:40:07:e6:91:dc:ce:b5:20:92:36:e5:2f:c1:2b:
         f1:48:8b:ed:a2:27:12:a1:70:03:14:a3:9a:8b:3b:fd:39:ae:
         57:67:56:44:93:89:a4:8a:c1:02:bd:b3:1d:fc:96:12:8b:e9:
         ed:78:ca:a6:4f:42:4a:71:06:d3:57:bb:2a:01:59:cc:51:33:
         55:e9:f4:56:8e:e6:8c:5a:a8:d5:6f:02:da:c7:a4:ff:a2:6b:
         50:19:fd:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlGOx1guFcGLwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
MjUyYzRhMDYtZDUyMi00ZTliLThmZWYtYWQ3NWVmNzQzMjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim6iE2ox54dlw+8aG11sKhg3Bx5Pq/HDRYRe
koKu1Thw4au4xRkanA8Vz2qAaBj/r5+PJuqo4GMJ8IECWmqbk9eobVBjUwthnUp/
ceL+fUibUEY2GoCTj2PcK/UeM2z4D+O5pYOcqNm0RVdUPwlyJd+HwlL5jspUbfFo
7DC3empAXjjoZTkj/OncGarQfNClWtHgqXF8vJxpWXqDqfP0hR2KiWpd8JhwLhcI
WYM0om7bGn2eOmLLzh6Db401+L6jgwHsbshHA0O6Ao+DsNXY0KyABJj6RQO7aPeG
QhMXrwhH+BZnGgtSk0u0s655U+/yV8FHdxfqmb07NW3mluxluwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpcBdzj6CddlvGrHCiEW3y/ZjwoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvZjY4ODdjYzYtZjExNi0z
NDkwLTljOTUtY2M1ODE4NjFjOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTJll5k3CaJV1rSMT0PZz0othn/nSHT+mkEvYzWrEtbXrq6ZB3Bxbey
k8siASnRdgKivhvOKLe8VV/fyuFwUUUFZ8/5rekb7oissvauvrxw1zR0gjMj30FH
+wMyVDv9WQD2a6cREnPPwtBIiHcB0jV9VYBoh7SMvMnGT1Icsx6bpJOEocnYZYvR
bVdHzJbxnhh5lc3ELPZVBoPDPKGat8GZsAlyWDlAB+aR3M61IJI25S/BK/FIi+2i
JxKhcAMUo5qLO/05rldnVkSTiaSKwQK9sx38lhKL6e14yqZPQkpxBtNXuyoBWcxR
M1Xp9FaO5oxaqNVvAtrHpP+ia1AZ/Tk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:30 2026 by rpki-client