Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a7915d78-c0e2-31fa-b2cf-b8af5982cbfd.roa
File:                     a7915d78-c0e2-31fa-b2cf-b8af5982cbfd.roa (raw, json)
Hash identifier:          Ys1gZf2R31tGuZzOpkiMNp0ikVvWmS4JHNymQmmcVSA=
Subject key identifier:   16:9D:70:52:00:68:23:50:45:79:CE:7B:C1:FC:E4:10:20:D9:93:D6
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584DA11AEBD125094EA7EF3C5380
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a7915d78-c0e2-31fa-b2cf-b8af5982cbfd.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     2675
IP address blocks:        198.103.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:eb:d1:25:09:4e:a7:ef:3c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=f25ea656-954b-4f46-9a72-9ecf872b9425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:d5:b1:14:10:5e:00:d4:1e:ff:ca:34:c0:
                    42:b0:bc:6e:f3:17:98:ea:5c:53:f4:08:42:ea:88:
                    11:27:33:98:50:8d:cf:5e:d0:32:e8:26:88:d8:41:
                    65:51:cb:95:f1:f6:e9:57:29:bb:f5:11:18:63:18:
                    5c:2d:8b:e1:ed:ad:03:d0:a0:e8:f6:62:c1:8a:5a:
                    26:ce:12:32:d4:1e:71:1d:27:42:cf:6c:eb:94:20:
                    34:59:83:fa:24:bc:e3:0e:3e:99:34:2b:20:3f:be:
                    a9:2b:64:25:49:81:89:99:ad:35:5c:ee:81:60:ed:
                    df:54:27:e8:54:72:80:a2:05:e8:47:12:2d:a4:30:
                    5e:f3:1a:55:ff:2b:c6:1b:7c:08:8f:13:f3:d6:a2:
                    0b:35:47:eb:7f:4d:be:33:44:46:82:16:17:85:6c:
                    ef:43:f7:72:9f:1f:f2:9d:23:79:6a:13:82:3e:e1:
                    3c:bc:18:57:8c:ac:f1:68:20:4f:ae:5d:60:40:7e:
                    ba:c2:ee:3e:3b:a7:0e:85:73:68:67:19:00:71:da:
                    df:19:c1:84:89:f6:c0:a0:1d:d5:0f:38:21:a5:1d:
                    c1:e1:6e:8d:65:3f:92:43:34:c1:4f:35:5f:4d:96:
                    b9:1a:ad:ff:34:e1:b8:03:1a:e4:67:db:64:38:f9:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:70:52:00:68:23:50:45:79:CE:7B:C1:FC:E4:10:20:D9:93:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a7915d78-c0e2-31fa-b2cf-b8af5982cbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.103.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:98:69:38:eb:12:75:49:40:0f:ff:86:b6:04:8e:e4:ea:ff:
         11:88:48:ec:e5:39:54:72:41:b7:46:e2:33:63:4b:f1:b8:73:
         ae:2a:96:8c:35:d1:a8:62:73:43:76:7a:d0:5d:78:66:c6:78:
         b4:54:28:37:98:12:d3:c5:6f:e4:68:be:e6:93:fa:83:cc:c3:
         41:6f:15:2c:bf:d1:76:9d:15:01:30:3a:2e:1b:8d:63:db:ff:
         34:8a:4c:aa:43:55:0e:f5:74:41:06:65:68:8f:83:b9:87:36:
         a0:b5:f4:76:d8:3b:76:3e:4e:b4:22:fd:63:26:ec:19:25:ff:
         b0:ba:f7:b1:82:d9:c5:bc:72:72:e3:13:4c:3e:fa:77:5f:72:
         d6:91:8d:72:35:b6:98:0a:3b:51:1d:1a:b1:94:83:16:91:33:
         e4:dd:80:54:a1:cd:82:75:32:f7:a2:7e:b4:98:4d:e4:87:d4:
         e6:f2:9e:f6:8b:c9:60:2f:31:c8:68:54:3d:67:93:91:f5:89:
         50:67:ba:cd:a2:ca:0c:c3:c7:1b:9e:5b:aa:d7:ce:a9:db:6f:
         e1:01:85:f9:da:35:ac:23:e5:c0:cd:a0:c5:4e:9f:d1:c4:93:
         78:81:e6:d3:10:76:a5:26:f9:13:ba:a3:7e:2a:71:52:ff:5c:
         b0:d7:88:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGuvRJQlOp+88U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVhOTVjOWYtYzVjMS00YTM2LWE3M2YtZGY1NDgxMTZi
YTU2MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjI1ZWE2NTYtOTU0Yi00ZjQ2LTlhNzItOWVjZjg3MmI5NDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAPVsRQQXgDUHv/KNMBCsLxu8xeY6lxT9AhC
6ogRJzOYUI3PXtAy6CaI2EFlUcuV8fbpVym79REYYxhcLYvh7a0D0KDo9mLBilom
zhIy1B5xHSdCz2zrlCA0WYP6JLzjDj6ZNCsgP76pK2QlSYGJma01XO6BYO3fVCfo
VHKAogXoRxItpDBe8xpV/yvGG3wIjxPz1qILNUfrf02+M0RGghYXhWzvQ/dynx/y
nSN5ahOCPuE8vBhXjKzxaCBPrl1gQH66wu4+O6cOhXNoZxkAcdrfGcGEifbAoB3V
DzghpR3B4W6NZT+SQzTBTzVfTZa5Gq3/NOG4AxrkZ9tkOPkgQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBadcFIAaCNQRXnOe8H85BAg2ZPWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZWE5
NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0ODExNmJhNTYvYTc5MTVkNzgtYzBlMi0z
MWZhLWIyY2YtYjhhZjU5ODJjYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmVhOTVjOWYtYzVjMS00YTM2LWE3
M2YtZGY1NDgxMTZiYTU2L2ZlYTk1YzlmLWM1YzEtNGEzNi1hNzNmLWRmNTQ4MTE2
YmE1Ni5jcmwwHwYDVR0jBBgwFoAU7IJWyVHSiOh9/fmHlJdcdXrLZicwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZWE5NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0
ODExNmJhNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmdzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGYaTjrEnVJQA//hrYEjuTq/xGISOzlOVRyQbdG4jNjS/G4c64qlow1
0ahic0N2etBdeGbGeLRUKDeYEtPFb+RovuaT+oPMw0FvFSy/0XadFQEwOi4bjWPb
/zSKTKpDVQ71dEEGZWiPg7mHNqC19HbYO3Y+TrQi/WMm7Bkl/7C697GC2cW8cnLj
E0w++ndfctaRjXI1tpgKO1EdGrGUgxaRM+TdgFShzYJ1MveifrSYTeSH1ObynvaL
yWAvMchoVD1nk5H1iVBnus2iygzDxxueW6rXzqnbb+EBhfnaNawj5cDNoMVOn9HE
k3iB5tMQdqUm+RO6o34qcVL/XLDXiAU=
-----END CERTIFICATE-----
Generated at Wed May 13 06:09:47 2026 by rpki-client