Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/a5d9f451-fa03-35c1-bdb7-6dd5beae1d30.roa
File:                     a5d9f451-fa03-35c1-bdb7-6dd5beae1d30.roa (raw, json)
Hash identifier:          4Yj0s8fJAvQO5h5QNJxivSBOX6//IHp39NDSihG6Bg4=
Subject key identifier:   AD:8A:58:5B:C2:9F:70:48:85:D5:C0:9A:C9:DD:52:4F:D2:CA:89:CD
Certificate issuer:       /CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Certificate serial:       010D0C9F4328584E5FDF5DD5B0A1DD7AE14C4B80
Authority key identifier: 90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/a5d9f451-fa03-35c1-bdb7-6dd5beae1d30.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        199.188.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5d:d5:b0:a1:dd:7a:e1:4c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=8c4a14dc-d558-4b7f-942a-20f24da25fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:ce:07:5f:87:cb:44:6c:be:e1:49:98:b1:
                    46:f0:c1:92:aa:4c:2f:e4:80:45:ff:e3:eb:49:fc:
                    61:3d:3a:00:a5:87:2d:1b:8d:12:3b:01:6d:70:c2:
                    ae:94:47:ae:c7:41:bb:40:b9:1f:d7:ea:8f:ff:51:
                    30:9d:81:e1:a9:e7:14:bb:5c:d7:24:3e:e9:0c:8c:
                    7a:e7:58:63:da:57:61:68:a6:ad:63:a1:e1:f8:9d:
                    40:bc:12:81:3d:3e:ee:09:53:f1:37:de:c3:33:04:
                    9d:e6:86:83:5e:ab:f6:5d:61:32:3b:bd:2a:38:46:
                    41:35:e4:e4:fe:b8:03:89:91:0a:b8:78:61:35:17:
                    6e:7f:4e:cd:b7:b8:23:aa:c5:06:fe:f3:d4:07:62:
                    23:c5:20:76:4d:8d:34:e1:bc:39:39:a8:64:c4:e1:
                    51:cf:57:18:0c:8b:ee:28:48:f5:45:f3:05:a9:52:
                    c8:15:cd:a2:7e:a5:a8:1c:1b:36:0c:36:36:d4:9b:
                    80:c3:13:2c:44:af:48:6c:c1:29:f5:12:49:3c:26:
                    f5:63:72:25:fe:39:ab:f0:1d:54:45:78:ed:81:5a:
                    c7:6d:ab:66:9a:37:0b:f3:5f:b2:93:48:c9:3c:5f:
                    e4:2f:d6:6c:cc:3d:48:6e:ac:02:7c:ab:c9:26:38:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8A:58:5B:C2:9F:70:48:85:D5:C0:9A:C9:DD:52:4F:D2:CA:89:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/a5d9f451-fa03-35c1-bdb7-6dd5beae1d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl

            X509v3 Authority Key Identifier:
                keyid:90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:76:56:2d:5a:93:48:2c:39:c2:70:77:db:d7:b7:47:4b:
         58:e5:76:24:4d:94:9c:0b:e1:48:f7:c1:cf:78:8e:71:b2:21:
         b1:3c:40:d1:11:02:f1:dc:24:7a:77:3b:37:08:ff:75:85:6b:
         a8:20:41:f5:17:6d:6f:c5:dc:82:c5:a8:92:aa:40:eb:69:44:
         29:61:ea:24:10:81:78:87:f2:63:45:46:c9:65:e6:96:e6:f4:
         0d:d7:b3:2f:e9:1a:81:70:91:24:1a:34:8c:95:fa:a7:1c:e4:
         5e:8f:0f:27:bc:d7:a5:93:f8:5c:ce:ba:75:31:3b:07:d9:d7:
         cb:4e:5d:d0:a3:7a:97:5c:a7:35:f7:17:b4:27:6d:62:cc:a9:
         50:79:31:fc:e8:c0:f0:07:53:a3:4c:12:a8:0a:b6:d3:e6:35:
         e4:fe:ed:5a:b3:87:17:6e:88:a3:42:4d:57:7d:02:67:5f:27:
         fd:de:b0:bd:ff:0b:90:31:14:67:d5:35:c0:3d:b1:f3:cd:fb:
         ea:3b:da:29:8a:07:a0:e3:56:a2:04:49:04:c0:5e:0b:a4:b6:
         1e:2a:f2:c4:37:58:17:33:ad:85:7c:7c:6f:c7:de:00:88:07:
         30:24:06:39:db:b9:39:55:60:56:56:96:a7:03:22:1a:36:8c:
         d1:27:21:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f313VsKHdeuFMS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY1NWE5YmMtNDU5Yy00OWRkLTg5NDAtZWRlNGE4Njcx
MmE1MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
OGM0YTE0ZGMtZDU1OC00YjdmLTk0MmEtMjBmMjRkYTI1ZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnojOB1+Hy0RsvuFJmLFG8MGSqkwv5IBF/+Pr
SfxhPToApYctG40SOwFtcMKulEeux0G7QLkf1+qP/1EwnYHhqecUu1zXJD7pDIx6
51hj2ldhaKatY6Hh+J1AvBKBPT7uCVPxN97DMwSd5oaDXqv2XWEyO70qOEZBNeTk
/rgDiZEKuHhhNRduf07Nt7gjqsUG/vPUB2IjxSB2TY004bw5OahkxOFRz1cYDIvu
KEj1RfMFqVLIFc2ifqWoHBs2DDY21JuAwxMsRK9IbMEp9RJJPCb1Y3Il/jmr8B1U
RXjtgVrHbatmmjcL81+yk0jJPF/kL9ZszD1IbqwCfKvJJjji+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2KWFvCn3BIhdXAmsndUk/SyonNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjU1
YTliYy00NTljLTQ5ZGQtODk0MC1lZGU0YTg2NzEyYTUvYTVkOWY0NTEtZmEwMy0z
NWMxLWJkYjctNmRkNWJlYWUxZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY1NWE5YmMtNDU5Yy00OWRkLTg5
NDAtZWRlNGE4NjcxMmE1LzVmNTVhOWJjLTQ1OWMtNDlkZC04OTQwLWVkZTRhODY3
MTJhNS5jcmwwHwYDVR0jBBgwFoAUkKXLdQ7nJLS3PauRwrV4e5anE+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZjU1YTliYy00NTljLTQ5ZGQtODk0MC1lZGU0
YTg2NzEyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItMdlYtWpNILDnCcHfb17dHS1jldiRNlJwL4Uj3wc94jnGyIbE8QNER
AvHcJHp3OzcI/3WFa6ggQfUXbW/F3ILFqJKqQOtpRClh6iQQgXiH8mNFRsll5pbm
9A3Xsy/pGoFwkSQaNIyV+qcc5F6PDye816WT+FzOunUxOwfZ18tOXdCjepdcpzX3
F7QnbWLMqVB5MfzowPAHU6NMEqgKttPmNeT+7VqzhxduiKNCTVd9AmdfJ/3esL3/
C5AxFGfVNcA9sfPN++o72imKB6DjVqIESQTAXgukth4q8sQ3WBczrYV8fG/H3gCI
BzAkBjnbuTlVYFZWlqcDIho2jNEnIb4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:38 2026 by rpki-client