Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/9c1a00b9-88ae-3ce2-b9e0-34f59869158d.roa
File:                     9c1a00b9-88ae-3ce2-b9e0-34f59869158d.roa (raw, json)
Hash identifier:          RLGlONY42YgRoGVpA+T5hvq8plBx/Lwx9IPO7NALNQQ=
Subject key identifier:   E2:87:32:B0:B1:E9:96:33:B4:06:EA:04:94:C2:C1:53:13:AB:1F:8C
Certificate issuer:       /CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
Certificate serial:       010D0C9F4328584D285C04AC57E21C565CEAC080
Authority key identifier: 8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/9c1a00b9-88ae-3ce2-b9e0-34f59869158d.roa
Signing time:             Fri 13 Mar 2026 18:59:19 +0000
ROA not before:           Fri 13 Mar 2026 18:59:19 +0000
ROA not after:            Thu 11 Jun 2026 18:59:19 +0000
asID:                     8075
IP address blocks:        159.14.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:28:5c:04:ac:57:e2:1c:56:5c:ea:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
        Validity
            Not Before: Mar 13 18:59:19 2026 GMT
            Not After : Jun 11 18:59:19 2026 GMT
        Subject: CN=be5c5082-9a1b-4159-b5fd-2e1d2103872c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:5a:64:ac:7d:76:e8:08:5d:53:e0:24:4b:
                    0d:f7:e9:d0:2b:48:c5:01:1f:28:55:7b:0a:63:9f:
                    ed:b5:c1:8b:53:2b:ee:e1:fe:7e:0f:5b:ac:fe:a3:
                    80:16:ce:71:cf:80:27:51:b3:2d:f0:2f:85:96:7b:
                    38:a5:e9:eb:5f:6f:e5:e6:9d:77:c2:6c:67:ac:db:
                    eb:e9:21:b0:00:b6:f1:8e:15:ff:64:fc:ce:d2:e8:
                    28:06:a9:95:77:2b:7f:8b:66:2a:72:5a:ab:f8:08:
                    ab:e7:1f:33:19:50:ab:c2:43:d1:c0:e3:d5:75:f0:
                    1f:7b:5c:1c:84:58:59:c2:9c:45:25:7e:9e:5f:56:
                    dc:b2:8b:ae:9b:0e:0b:6c:3a:2a:47:fe:3c:6c:d2:
                    a7:9b:83:95:aa:d2:dc:cf:53:51:b8:0d:73:db:85:
                    46:2d:68:40:da:65:26:e6:50:2d:2e:b1:f4:7e:b4:
                    a9:a5:f3:11:c6:92:e4:b9:ac:48:15:1c:80:e5:e4:
                    17:d3:7f:26:82:4b:ca:66:24:bd:9a:c9:d4:45:b3:
                    5e:db:7d:8f:8c:53:82:5d:ef:ef:9a:4f:43:1c:16:
                    84:ab:e6:39:ed:c2:14:bb:40:95:22:7d:17:bb:01:
                    c3:12:c3:40:b8:47:aa:55:25:ef:e4:3e:58:d9:ed:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:32:B0:B1:E9:96:33:B4:06:EA:04:94:C2:C1:53:13:AB:1F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/9c1a00b9-88ae-3ce2-b9e0-34f59869158d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl

            X509v3 Authority Key Identifier:
                keyid:8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.14.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:28:7a:b5:d5:f0:7c:ed:0f:db:0a:10:4b:96:4e:c8:19:8f:
         1f:21:f0:eb:af:7a:20:eb:67:ad:f1:95:e4:d1:b1:64:8c:64:
         ca:2e:e6:8d:7e:78:f5:a2:03:55:e8:e5:e9:10:c4:ff:33:54:
         e3:24:9f:e7:dd:9e:13:e6:78:41:2b:d2:ae:ae:4a:27:85:2c:
         86:36:66:fb:23:9e:15:ec:19:30:d0:b7:8f:23:4c:88:a2:59:
         b5:1c:c3:7b:9b:89:06:49:42:d3:eb:fa:46:7b:69:23:a1:6e:
         c2:a9:5a:c6:ae:7b:9e:9c:5a:dc:7e:5b:a3:4c:b5:1f:cb:3e:
         bb:ea:fa:73:83:38:91:82:26:9e:8c:2e:b4:95:4d:67:21:78:
         e5:e5:55:28:59:65:5b:39:11:d3:67:da:85:d3:40:8f:64:dd:
         3b:60:d5:30:54:8c:48:a0:85:15:72:d7:ff:e8:2c:16:b4:cd:
         96:0c:0b:2d:25:c2:b5:3b:34:06:93:da:4a:69:a0:d6:cd:da:
         cc:fa:9c:e1:8f:41:9c:c5:d2:dd:2f:49:9f:28:d9:47:b1:2b:
         00:94:22:c8:e9:62:38:1d:9d:ff:37:b3:6d:85:a6:18:5a:35:
         2a:c3:c2:7b:3a:4b:b5:df:38:f4:2c:9c:30:6c:ea:fa:29:83:
         a5:97:3c:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oXASsV+IcVlzqwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJiY2JlMGMtYTE0ZC00YjdkLWI1NTEtMjg0ZThmYTFh
NjU1MB4XDTI2MDMxMzE4NTkxOVoXDTI2MDYxMTE4NTkxOVowLzEtMCsGA1UEAxMk
YmU1YzUwODItOWExYi00MTU5LWI1ZmQtMmUxZDIxMDM4NzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd5aZKx9dugIXVPgJEsN9+nQK0jFAR8oVXsK
Y5/ttcGLUyvu4f5+D1us/qOAFs5xz4AnUbMt8C+Flns4penrX2/l5p13wmxnrNvr
6SGwALbxjhX/ZPzO0ugoBqmVdyt/i2Yqclqr+Air5x8zGVCrwkPRwOPVdfAfe1wc
hFhZwpxFJX6eX1bcsouumw4LbDoqR/48bNKnm4OVqtLcz1NRuA1z24VGLWhA2mUm
5lAtLrH0frSppfMRxpLkuaxIFRyA5eQX038mgkvKZiS9msnURbNe232PjFOCXe/v
mk9DHBaEq+Y57cIUu0CVIn0XuwHDEsNAuEeqVSXv5D5Y2e3XcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKHMrCx6ZYztAbqBJTCwVMTqx+MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmJj
YmUwYy1hMTRkLTRiN2QtYjU1MS0yODRlOGZhMWE2NTUvOWMxYTAwYjktODhhZS0z
Y2UyLWI5ZTAtMzRmNTk4NjkxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTJiY2JlMGMtYTE0ZC00YjdkLWI1
NTEtMjg0ZThmYTFhNjU1LzUyYmNiZTBjLWExNGQtNGI3ZC1iNTUxLTI4NGU4ZmEx
YTY1NS5jcmwwHwYDVR0jBBgwFoAUi3pmE9x3pzeQQGSjrdPSxZvKw5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmJjYmUwYy1hMTRkLTRiN2QtYjU1MS0yODRl
OGZhMWE2NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnw6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcoerXV8HztD9sKEEuWTsgZjx8h8OuveiDrZ63xleTRsWSMZMou5o1+
ePWiA1Xo5ekQxP8zVOMkn+fdnhPmeEEr0q6uSieFLIY2ZvsjnhXsGTDQt48jTIii
WbUcw3ubiQZJQtPr+kZ7aSOhbsKpWsaue56cWtx+W6NMtR/LPrvq+nODOJGCJp6M
LrSVTWcheOXlVShZZVs5EdNn2oXTQI9k3Ttg1TBUjEighRVy1//oLBa0zZYMCy0l
wrU7NAaT2kppoNbN2sz6nOGPQZzF0t0vSZ8o2UexKwCUIsjpYjgdnf83s22Fphha
NSrDwns6S7XfOPQsnDBs6vopg6WXPOg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:40 2026 by rpki-client