Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/0bdf6862-cff3-371e-9890-53ac67fba8da.roa
File:                     0bdf6862-cff3-371e-9890-53ac67fba8da.roa (raw, json)
Hash identifier:          t5dgJrE8t7D8rREpZEUEFhnPdBMpzWp6vNglou1d76w=
Subject key identifier:   0B:D8:1A:60:E6:96:E1:04:4E:01:96:83:53:BF:DA:2E:2B:91:BB:68
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584E7FA663E0B44EF0546D3A9580
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/0bdf6862-cff3-371e-9890-53ac67fba8da.roa
Signing time:             Tue 14 Jul 2026 18:11:26 +0000
ROA not before:           Tue 14 Jul 2026 18:11:26 +0000
ROA not after:            Mon 12 Oct 2026 18:11:26 +0000
asID:                     40545
IP address blocks:        152.55.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:a6:63:e0:b4:4e:f0:54:6d:3a:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Jul 14 18:11:26 2026 GMT
            Not After : Oct 12 18:11:26 2026 GMT
        Subject: CN=d4217a47-7c29-47c0-906b-2d68660f97d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:23:fd:cc:d3:67:6a:8a:7c:e0:09:41:b2:6a:
                    10:dc:69:4e:f9:55:e2:da:79:54:aa:a3:79:94:3d:
                    57:52:61:cc:ca:aa:bf:43:3e:0c:f1:c9:d6:a9:40:
                    99:ba:31:ff:15:2f:5d:39:72:0b:66:38:d7:ab:64:
                    73:62:f8:0c:d5:7d:9a:b5:fa:e8:bb:23:f8:eb:d4:
                    d5:33:0d:2d:7e:d8:c0:70:b2:d0:08:c2:be:6c:ba:
                    90:b8:62:3a:89:62:dd:ea:9e:24:21:e7:47:f1:72:
                    28:b4:65:29:7f:21:30:ac:d6:4d:a2:22:d6:1f:3c:
                    fa:ee:b0:ed:dc:c9:5a:8c:35:d5:1e:9d:2f:a1:a2:
                    50:53:38:22:d6:a5:c5:23:e3:43:5d:22:b4:ed:14:
                    ab:81:46:e1:8e:d2:57:11:69:7c:30:53:b7:5a:2f:
                    99:49:20:bb:14:2a:53:47:a8:98:2d:27:6b:3d:dd:
                    bb:53:be:4c:f7:69:d6:71:d8:da:cd:e5:bb:09:5d:
                    b0:6f:11:55:24:ae:3f:31:e1:26:be:76:e8:b6:15:
                    cd:e3:70:87:00:6d:c3:f5:7a:11:1f:a4:d6:ff:a1:
                    07:02:b9:eb:9a:08:6a:80:2f:0e:c5:74:10:83:cc:
                    e7:b5:14:a0:c6:0a:16:56:90:1c:b8:5b:5a:4e:35:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:1A:60:E6:96:E1:04:4E:01:96:83:53:BF:DA:2E:2B:91:BB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/0bdf6862-cff3-371e-9890-53ac67fba8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:38:74:80:2f:7e:b3:0a:ca:1e:72:db:ca:43:85:c4:83:
         3d:be:8d:0d:8f:15:15:65:63:86:4e:35:4d:6e:4d:59:77:41:
         fc:1b:59:54:ce:e3:ce:73:b0:97:cd:70:38:16:fc:bd:af:82:
         11:a2:c8:11:b0:c8:53:e1:22:e1:49:0f:c4:dd:20:50:90:9a:
         de:7f:36:c9:e1:4d:86:eb:cb:30:0b:2b:37:67:39:d3:37:c2:
         e3:88:a2:3e:9a:77:d6:9e:fd:a1:e2:06:8a:62:f1:bb:6c:e1:
         78:2b:33:fb:9a:20:c6:cd:6c:f8:9c:0f:58:63:25:19:b2:b4:
         1c:4f:e8:a5:93:88:94:58:0c:5f:74:42:27:1e:9d:3a:8e:3f:
         3a:df:74:c7:f2:c7:8d:03:4e:66:f9:9a:10:e0:4c:fa:9a:6e:
         ee:68:33:ec:d5:bb:2d:79:d0:bc:c4:51:68:32:39:c7:ce:c0:
         44:ea:f9:21:c1:4d:78:e4:a2:d0:8b:1b:f4:ba:b2:2f:c9:aa:
         79:38:7b:9e:40:2a:87:b0:43:02:ab:e0:da:f7:8d:7c:16:99:
         af:55:40:78:dd:4b:0e:d1:de:e2:d7:0a:00:45:0e:2e:83:4f:
         2d:c7:84:cf:88:7f:41:37:67:04:70:ff:0e:f6:e8:68:17:e6:
         7e:26:6e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/pmPgtE7wVG06lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm
YWIwMB4XDTI2MDcxNDE4MTEyNloXDTI2MTAxMjE4MTEyNlowLzEtMCsGA1UEAxMk
ZDQyMTdhNDctN2MyOS00N2MwLTkwNmItMmQ2ODY2MGY5N2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SP9zNNnaop84AlBsmoQ3GlO+VXi2nlUqqN5
lD1XUmHMyqq/Qz4M8cnWqUCZujH/FS9dOXILZjjXq2RzYvgM1X2atfrouyP469TV
Mw0tftjAcLLQCMK+bLqQuGI6iWLd6p4kIedH8XIotGUpfyEwrNZNoiLWHzz67rDt
3MlajDXVHp0voaJQUzgi1qXFI+NDXSK07RSrgUbhjtJXEWl8MFO3Wi+ZSSC7FCpT
R6iYLSdrPd27U75M92nWcdjazeW7CV2wbxFVJK4/MeEmvnbothXN43CHAG3D9XoR
H6TW/6EHArnrmghqgC8OxXQQg8zntRSgxgoWVpAcuFtaTjVhUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvYGmDmluEETgGWg1O/2i4rkbtoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz
N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvMGJkZjY4NjItY2ZmMy0z
NzFlLTk4OTAtNTNhYzY3ZmJhOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz
NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh
ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2
NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmDdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdeOHSAL36zCsoectvKQ4XEgz2+jQ2PFRVlY4ZONU1uTVl3QfwbWVTO
485zsJfNcDgW/L2vghGiyBGwyFPhIuFJD8TdIFCQmt5/NsnhTYbryzALKzdnOdM3
wuOIoj6ad9ae/aHiBopi8bts4XgrM/uaIMbNbPicD1hjJRmytBxP6KWTiJRYDF90
QicenTqOPzrfdMfyx40DTmb5mhDgTPqabu5oM+zVuy150LzEUWgyOcfOwETq+SHB
TXjkotCLG/S6si/Jqnk4e55AKoewQwKr4Nr3jXwWma9VQHjdSw7R3uLXCgBFDi6D
Ty3HhM+If0E3ZwRw/w726GgX5n4mbqU=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:26 2026 by rpki-client