Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/a44fa669-2109-3a44-9320-707a8694e12f.roa
File:                     a44fa669-2109-3a44-9320-707a8694e12f.roa (raw, json)
Hash identifier:          bjmEQD5O787Fz5iyKvlpblOX1RlAbpfBSev1pVY+pHM=
Subject key identifier:   14:2F:E2:24:BA:F3:32:A5:19:F8:89:A9:90:08:36:11:84:37:65:C7
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584DB4A5B6D57A5A94EDA0AE2B00
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/a44fa669-2109-3a44-9320-707a8694e12f.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     394434
IP address blocks:        159.183.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b6:d5:7a:5a:94:ed:a0:ae:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=6c07dd25-860b-495d-9932-64a533c3ef7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:1a:16:01:4d:19:5a:76:89:6f:bf:bc:22:
                    6b:29:b0:05:d2:4d:79:70:64:4e:b0:ec:4a:b1:0c:
                    84:4f:c1:34:23:5a:db:63:a5:8a:81:d9:cc:8e:5f:
                    8d:81:12:74:79:be:35:50:48:af:95:27:6d:7b:61:
                    cd:23:99:49:96:57:a5:a1:77:15:c4:93:a0:63:44:
                    80:4d:b1:39:13:da:74:08:21:ac:90:06:24:42:fb:
                    e4:bb:0f:2e:f1:75:fa:0e:0e:bb:67:9c:9d:0b:23:
                    f7:62:dc:c6:a1:d4:58:22:ad:1a:e1:24:19:4c:12:
                    ad:e4:fb:97:75:4c:bd:58:9c:12:cc:69:ac:1a:79:
                    05:44:a3:a1:36:bf:e7:b3:ec:eb:7d:a9:0d:94:d5:
                    bd:07:88:80:ef:0e:c5:d3:2d:fa:fb:68:ff:3e:b4:
                    46:2e:7c:1f:63:7b:86:2f:ff:b5:e5:4d:be:b6:a3:
                    1e:ba:26:50:3f:fd:e3:ee:2d:91:2e:2a:80:0b:46:
                    0c:b9:dc:6a:c5:cb:95:f8:e4:f8:6c:59:b6:74:2e:
                    9a:4d:02:55:d2:cc:cc:25:0d:c0:4b:a5:04:d0:e6:
                    35:77:32:4c:d4:7c:31:27:1e:1c:eb:ed:4d:5b:e4:
                    75:01:8e:4e:8c:af:1a:11:10:16:57:88:09:6f:a7:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2F:E2:24:BA:F3:32:A5:19:F8:89:A9:90:08:36:11:84:37:65:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/a44fa669-2109-3a44-9320-707a8694e12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bf:77:b7:55:e5:14:98:2f:07:b8:32:0e:78:2d:65:46:c3:
         d5:70:6d:4e:5e:65:e8:25:06:93:74:05:19:c9:e7:7c:43:a1:
         f5:24:5f:e7:44:74:a0:62:99:c6:fa:ae:3e:63:b6:6b:1f:71:
         33:23:a3:b2:ca:7f:95:0b:df:17:e4:86:92:fb:04:e0:8d:8e:
         83:1f:6b:55:b6:5e:f4:31:57:91:63:06:21:e3:0a:08:e3:6d:
         d6:c2:4d:08:89:8a:ad:95:5f:52:05:35:7d:d1:ee:8b:9a:47:
         47:f6:d8:30:27:0d:db:b1:ec:c7:89:c4:6b:4b:9a:b2:08:86:
         4f:14:e8:6f:47:4e:32:3b:50:a4:7d:82:df:d4:f4:f2:58:3b:
         da:53:eb:64:47:24:b3:23:e3:3b:69:a5:87:da:aa:a2:11:99:
         a0:19:39:9a:99:b5:93:29:4c:11:62:3a:29:75:91:aa:5d:a1:
         d8:96:09:2d:b2:5c:a9:d1:2e:80:84:b1:88:63:79:dd:48:c6:
         9e:88:8e:35:f3:cd:a6:1f:42:7c:15:4c:8f:cc:b7:74:56:d9:
         c7:14:2e:64:df:4c:fc:32:39:e5:bb:6c:4c:b5:ab:07:d4:a9:
         f4:1e:2e:b3:2c:6f:e8:9c:32:a1:94:83:24:db:03:cd:d9:d8:
         cc:53:ae:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pbbVelqU7aCuKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NmMwN2RkMjUtODYwYi00OTVkLTk5MzItNjRhNTMzYzNlZjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoAaFgFNGVp2iW+/vCJrKbAF0k15cGROsOxK
sQyET8E0I1rbY6WKgdnMjl+NgRJ0eb41UEivlSdte2HNI5lJlleloXcVxJOgY0SA
TbE5E9p0CCGskAYkQvvkuw8u8XX6Dg67Z5ydCyP3YtzGodRYIq0a4SQZTBKt5PuX
dUy9WJwSzGmsGnkFRKOhNr/ns+zrfakNlNW9B4iA7w7F0y36+2j/PrRGLnwfY3uG
L/+15U2+tqMeuiZQP/3j7i2RLiqAC0YMudxqxcuV+OT4bFm2dC6aTQJV0szMJQ3A
S6UE0OY1dzJM1HwxJx4c6+1NW+R1AY5OjK8aERAWV4gJb6cyFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQv4iS68zKlGfiJqZAINhGEN2XHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYTQ0ZmE2NjktMjEwOS0z
YTQ0LTkzMjAtNzA3YTg2OTRlMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7f6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAe/d7dV5RSYLwe4Mg54LWVGw9VwbU5eZeglBpN0BRnJ53xDofUkX+dE
dKBimcb6rj5jtmsfcTMjo7LKf5UL3xfkhpL7BOCNjoMfa1W2XvQxV5FjBiHjCgjj
bdbCTQiJiq2VX1IFNX3R7ouaR0f22DAnDdux7MeJxGtLmrIIhk8U6G9HTjI7UKR9
gt/U9PJYO9pT62RHJLMj4ztppYfaqqIRmaAZOZqZtZMpTBFiOil1kapdodiWCS2y
XKnRLoCEsYhjed1Ixp6IjjXzzaYfQnwVTI/Mt3RW2ccULmTfTPwyOeW7bEy1qwfU
qfQeLrMsb+icMqGUgyTbA83Z2MxTrlE=
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:56 2026 by rpki-client