Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa
File:                     fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa (raw, json)
Hash identifier:          zsjh8wsF5z6UehjYkbjwOpNxJT/j5QnOT0+K8CfNyS8=
Subject key identifier:   20:6C:31:21:39:69:B2:1D:24:77:46:9B:33:3B:61:F9:83:6D:DA:F6
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584DD0904BF94BBDED13DF001780
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        159.172.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4b:f9:4b:bd:ed:13:df:00:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=202e182c-3b31-4caf-bffe-700fe76aca8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:f1:ff:f4:57:a2:48:d5:dd:d6:09:99:67:
                    f1:f9:d0:45:b0:e6:2e:6f:52:78:d3:89:4b:ff:b2:
                    32:0c:5f:b5:56:cd:69:09:0f:24:fb:17:69:3f:f0:
                    e7:5c:ef:73:aa:85:2b:d8:88:41:45:7b:a7:75:49:
                    b6:ec:4f:bd:78:a1:89:37:9b:9b:63:03:c1:c7:b0:
                    98:52:7a:c5:02:dd:f1:16:85:b3:39:f3:d4:5b:7a:
                    09:9f:7d:33:e6:84:89:ed:5b:81:4e:9b:12:a0:6d:
                    ce:f8:44:7a:8d:7f:04:8b:34:a6:08:fe:5f:c2:1b:
                    00:3e:75:c3:7f:28:30:3c:2b:e4:a1:f7:c2:e3:96:
                    e8:3d:25:77:b0:33:c7:b7:3e:0b:37:2a:19:69:f4:
                    84:20:92:fd:7d:cd:9c:1b:5d:f5:a1:8d:f9:dc:27:
                    63:9c:7b:37:ab:4c:92:72:5c:fb:1d:f7:b2:84:87:
                    02:32:13:30:72:b4:45:4b:0f:87:c3:f4:1e:1f:25:
                    3e:e8:b0:49:87:ea:eb:dd:0d:16:c1:cb:fe:4d:74:
                    d5:b3:dd:27:d8:9c:f1:41:0e:cb:c3:17:cb:69:20:
                    eb:43:51:00:de:83:ea:89:cb:09:c6:da:91:0c:1e:
                    60:b8:0d:dd:aa:4c:e7:64:37:3c:07:c6:14:88:27:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:31:21:39:69:B2:1D:24:77:46:9B:33:3B:61:F9:83:6D:DA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:b0:e5:61:8e:56:fe:2e:85:df:32:60:6d:c9:e1:e0:13:
         be:7f:81:41:83:6d:e5:4b:7d:91:a5:66:20:08:98:61:53:4b:
         54:85:87:fa:e0:a1:04:31:3f:45:35:5f:b9:7c:0d:84:f3:41:
         61:4e:4c:22:48:e9:89:de:b5:6d:24:bf:2e:11:6c:23:2d:45:
         f7:b5:d0:2b:90:4a:76:bb:09:8e:cd:53:a2:62:76:40:19:cd:
         6f:30:2a:75:2d:d6:ab:f6:64:e4:87:d9:48:df:d2:0c:1d:e0:
         54:24:ab:cb:9d:e8:6b:fd:38:63:59:d6:8a:5a:e6:89:a8:47:
         0f:33:b0:81:bb:ef:90:96:96:9a:4e:44:25:63:f7:b9:ed:9a:
         50:90:1b:2e:ad:99:d8:95:31:6b:e8:b4:5e:53:3c:5d:83:db:
         d7:22:a0:cd:91:b8:57:86:fd:31:c1:9e:ba:45:c0:df:b3:2b:
         64:de:82:92:26:4c:ae:40:10:11:7f:79:e5:bf:e5:f4:76:ea:
         06:11:94:80:d5:25:85:cb:20:2f:7c:4b:c7:c2:52:a5:c5:90:
         e3:92:84:10:0c:b9:fe:6c:9a:e5:2c:bb:c8:e9:a3:75:a5:a7:
         e8:55:e6:a8:62:d6:29:3b:7d:e8:a5:a1:8b:f9:b6:d5:5e:d6:
         8a:a1:67:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkEv5S73tE98AF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2
ZDcyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
MjAyZTE4MmMtM2IzMS00Y2FmLWJmZmUtNzAwZmU3NmFjYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ3x//RXokjV3dYJmWfx+dBFsOYub1J404lL
/7IyDF+1Vs1pCQ8k+xdpP/DnXO9zqoUr2IhBRXundUm27E+9eKGJN5ubYwPBx7CY
UnrFAt3xFoWzOfPUW3oJn30z5oSJ7VuBTpsSoG3O+ER6jX8EizSmCP5fwhsAPnXD
fygwPCvkoffC45boPSV3sDPHtz4LNyoZafSEIJL9fc2cG131oY353CdjnHs3q0yS
clz7HfeyhIcCMhMwcrRFSw+Hw/QeHyU+6LBJh+rr3Q0Wwcv+TXTVs90n2JzxQQ7L
wxfLaSDrQ1EA3oPqicsJxtqRDB5guA3dqkznZDc8B8YUiCedDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBsMSE5abIdJHdGmzM7YfmDbdr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5
MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmRmOWE1OTctYWZlMS0z
NmY5LWEyOTYtNjA3MWQwYmQ5ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz
MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw
NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5
MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApasOVhjlb+LoXfMmBtyeHgE75/gUGDbeVLfZGlZiAImGFTS1SFh/rg
oQQxP0U1X7l8DYTzQWFOTCJI6YnetW0kvy4RbCMtRfe10CuQSna7CY7NU6JidkAZ
zW8wKnUt1qv2ZOSH2Ujf0gwd4FQkq8ud6Gv9OGNZ1opa5omoRw8zsIG775CWlppO
RCVj97ntmlCQGy6tmdiVMWvotF5TPF2D29cioM2RuFeG/THBnrpFwN+zK2TegpIm
TK5AEBF/eeW/5fR26gYRlIDVJYXLIC98S8fCUqXFkOOShBAMuf5smuUsu8jpo3Wl
p+hV5qhi1ik7feiloYv5ttVe1oqhZ+E=
-----END CERTIFICATE-----
Generated at Wed May 13 14:00:16 2026 by rpki-client