Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa
File:                     5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa (raw, json)
Hash identifier:          PSTRNOIB6TErsyJD5SFq7wkpLypKPwXPieL49Rwl17w=
Subject key identifier:   99:7D:58:59:42:08:CB:07:32:8C:A4:7C:95:20:C0:9F:C9:79:41:E0
Certificate issuer:       /CN=44a262a0-ec38-457a-a9b1-90c85c56209d
Certificate serial:       010D0C9F4328584DB77030C4752A422F4D6A0EC0
Authority key identifier: 04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     30614
IP address blocks:        132.237.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:30:c4:75:2a:42:2f:4d:6a:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a262a0-ec38-457a-a9b1-90c85c56209d
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=77d556e2-6d58-4f75-855e-c396c716b0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:79:7e:11:02:af:73:e0:5e:e6:b8:09:e3:
                    8c:4e:30:cc:0e:8c:07:3c:24:96:f0:cb:14:44:ae:
                    14:78:54:7f:d5:e7:88:9c:a9:cf:d2:77:ae:30:d2:
                    68:3a:19:52:84:41:e2:bc:2e:11:57:14:db:24:83:
                    0d:c6:d8:ca:69:c3:54:c4:6c:42:74:12:c8:41:76:
                    3c:ee:45:15:21:f2:16:c8:9b:ab:64:96:a8:0a:19:
                    23:9d:e0:25:d1:8a:4d:a4:92:e8:06:4a:0b:35:6f:
                    79:d8:05:65:bf:73:e2:d5:ed:4d:bd:cd:05:64:44:
                    bd:24:3f:51:60:89:8a:ad:49:9e:28:d7:e5:3b:f2:
                    bd:d9:34:fe:4d:71:ac:c1:7a:71:e8:6a:5c:ec:bc:
                    e4:62:49:b5:11:99:52:77:bf:22:3a:30:2c:d2:48:
                    76:25:00:e1:9c:00:75:14:e1:35:0e:74:af:98:42:
                    44:8f:db:b1:bb:a5:ab:14:9c:78:ba:d2:b1:39:81:
                    9c:55:49:de:3b:12:7b:0c:1e:9e:c3:45:a0:2b:a5:
                    16:7d:ef:cc:74:bc:62:2c:fa:53:ac:20:6b:fb:1e:
                    c4:ac:0c:d3:0b:d9:ab:61:c0:ca:49:33:ad:1c:5a:
                    08:89:80:05:e2:16:3c:0d:19:c9:3a:10:b4:72:4a:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:58:59:42:08:CB:07:32:8C:A4:7C:95:20:C0:9F:C9:79:41:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.crl

            X509v3 Authority Key Identifier:
                keyid:04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.237.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:14:a5:e1:35:07:35:79:ed:39:6a:8d:f0:ff:6d:ef:62:3d:
         c3:4e:5f:b3:72:fc:3f:2f:f0:66:a1:46:53:37:24:6a:4b:95:
         ea:3f:7f:1a:85:1f:d8:48:e9:98:e8:6e:56:0c:cb:70:21:ad:
         9c:0d:99:fe:29:0e:26:15:31:08:4b:3b:7a:91:da:81:2a:d8:
         2b:b2:71:f8:5d:e3:52:c6:f0:e1:10:e6:bf:d9:e1:cd:da:fa:
         b1:d4:bf:5e:64:c7:a4:96:a9:d5:5a:57:62:7b:45:62:be:dd:
         c8:d0:e5:cc:aa:a8:7d:f6:eb:a3:61:ef:d7:20:31:31:e4:56:
         2c:a6:7b:dd:ea:ba:1e:f4:7d:b8:7a:70:fb:1e:d7:cf:d7:b2:
         d7:bd:1e:fa:0e:d9:8b:57:57:cd:36:a3:cc:4a:c3:18:a1:09:
         ae:92:14:dc:81:94:53:79:c1:b1:bb:a5:99:5e:5f:f3:11:70:
         c5:09:27:7b:f3:1a:06:73:3c:19:ca:81:4b:75:07:92:f8:6e:
         41:ac:9c:cd:b2:6d:dc:c2:a8:c9:45:24:f7:c3:ff:3d:38:a9:
         cb:e8:58:ec:e0:78:15:7b:04:74:a1:19:91:9a:1a:93:71:07:
         ef:d2:3e:50:88:60:27:78:59:f6:4e:1a:4d:de:fc:ae:a0:81:
         19:58:4c:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDDEdSpCL01qDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRhMjYyYTAtZWMzOC00NTdhLWE5YjEtOTBjODVjNTYy
MDlkMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
NzdkNTU2ZTItNmQ1OC00Zjc1LTg1NWUtYzM5NmM3MTZiMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZ5fhECr3PgXua4CeOMTjDMDowHPCSW8MsU
RK4UeFR/1eeInKnP0neuMNJoOhlShEHivC4RVxTbJIMNxtjKacNUxGxCdBLIQXY8
7kUVIfIWyJurZJaoChkjneAl0YpNpJLoBkoLNW952AVlv3Pi1e1Nvc0FZES9JD9R
YImKrUmeKNflO/K92TT+TXGswXpx6Gpc7LzkYkm1EZlSd78iOjAs0kh2JQDhnAB1
FOE1DnSvmEJEj9uxu6WrFJx4utKxOYGcVUneOxJ7DB6ew0WgK6UWfe/MdLxiLPpT
rCBr+x7ErAzTC9mrYcDKSTOtHFoIiYAF4hY8DRnJOhC0ckoISQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJl9WFlCCMsHMoykfJUgwJ/JeUHgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NGEy
NjJhMC1lYzM4LTQ1N2EtYTliMS05MGM4NWM1NjIwOWQvNWM2Y2ZjYTQtNTM5YS0z
ZTcxLWFjOWUtNWE0YjNjMGJiNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDRhMjYyYTAtZWMzOC00NTdhLWE5
YjEtOTBjODVjNTYyMDlkLzQ0YTI2MmEwLWVjMzgtNDU3YS1hOWIxLTkwYzg1YzU2
MjA5ZC5jcmwwHwYDVR0jBBgwFoAUBFkLgIRKdBktocISMol8bMylLjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NGEyNjJhMC1lYzM4LTQ1N2EtYTliMS05MGM4
NWM1NjIwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhO2hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL4UpeE1BzV57TlqjfD/be9iPcNOX7Ny/D8v8GahRlM3JGpLleo/fxqF
H9hI6ZjoblYMy3AhrZwNmf4pDiYVMQhLO3qR2oEq2Cuycfhd41LG8OEQ5r/Z4c3a
+rHUv15kx6SWqdVaV2J7RWK+3cjQ5cyqqH3266Nh79cgMTHkViyme93quh70fbh6
cPse18/Xste9HvoO2YtXV802o8xKwxihCa6SFNyBlFN5wbG7pZleX/MRcMUJJ3vz
GgZzPBnKgUt1B5L4bkGsnM2ybdzCqMlFJPfD/z04qcvoWOzgeBV7BHShGZGaGpNx
B+/SPlCIYCd4WfZOGk3e/K6ggRlYTOQ=
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:35 2026 by rpki-client