Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa
File:                     2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa (raw, json)
Hash identifier:          OKZ0b5Jq5vC222hiIBPhcplfW5p/waaMcUZd3J5yPD0=
Subject key identifier:   6E:35:A1:22:C0:A2:15:2A:D1:D7:1E:BC:05:32:32:3B:83:CE:57:9C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F655E68FC447C3CFBB2C64400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     15169
IP address blocks:        192.178.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:68:fc:44:7c:3c:fb:b2:c6:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5135e160-912f-4330-be9a-277df337b7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:88:4d:ca:17:c3:73:9b:12:06:4c:6c:54:
                    20:05:a3:d7:53:3b:7a:2e:21:91:bc:47:f1:86:bf:
                    08:9d:99:98:d0:16:4f:4f:07:43:22:bd:3c:e2:42:
                    7f:72:c7:50:12:9f:e2:fa:ce:22:33:28:25:34:37:
                    fc:f2:96:44:a7:c9:06:5f:a9:89:89:ad:4f:43:9c:
                    7b:b2:40:a4:e2:fb:0a:52:46:f3:bb:f4:4d:be:70:
                    7b:74:ca:7b:4f:9d:7c:a5:6e:c6:de:ca:c9:0d:e6:
                    73:c0:68:60:60:ef:fa:02:ce:c3:09:61:ff:3c:7e:
                    72:1d:52:3e:30:c9:06:94:b6:9e:91:22:42:d4:fd:
                    10:69:36:04:2c:a7:a1:c3:66:9d:c6:b3:19:21:6f:
                    84:3b:35:c3:2b:64:fb:3c:56:a8:5e:23:86:26:0c:
                    c8:21:fb:26:99:75:36:13:ca:31:5f:64:15:22:57:
                    47:20:4a:cf:00:49:8e:79:17:ae:d1:25:7b:39:ed:
                    0b:97:7a:f9:1c:cb:ef:7b:ab:28:9e:ed:5f:f8:87:
                    5d:81:f9:2a:71:83:2a:a3:e7:51:de:7b:c9:6f:52:
                    ec:c6:85:a7:b2:ea:d7:9b:89:ea:51:2c:cc:49:5b:
                    7d:75:9d:8d:d3:6a:69:4c:0d:a7:90:56:28:a6:57:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:35:A1:22:C0:A2:15:2A:D1:D7:1E:BC:05:32:32:3B:83:CE:57:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:08:9f:de:21:ee:13:49:a3:21:f8:36:36:e3:9c:21:9c:
         cb:20:0d:1d:fd:77:fc:6f:1b:1a:20:b2:8d:86:d1:2a:e7:5b:
         7f:c4:e8:82:b9:43:b1:0e:f7:87:0d:fb:91:0e:c5:91:6e:a7:
         2b:c0:a1:75:49:a4:d5:2e:60:76:6e:4d:e9:74:70:50:96:2b:
         84:f0:a2:89:35:ec:13:5f:91:07:55:62:a7:01:1d:be:89:49:
         71:10:c6:f5:16:6d:81:2f:5f:0c:53:95:1b:c1:06:a5:a7:77:
         59:03:e6:94:c0:46:60:21:3b:52:0b:f0:e9:70:38:05:f8:db:
         d7:e5:26:98:48:a0:b9:01:66:a3:79:4b:d7:72:d0:1d:b1:40:
         a1:53:3e:bd:ee:2c:59:25:d4:c8:39:43:85:55:67:10:77:e6:
         0a:ef:04:c5:e5:1f:d1:f5:d6:b3:0a:6a:34:3f:35:2b:79:21:
         f9:6e:03:e9:f2:75:0d:05:85:45:52:4b:fb:23:47:f8:b4:b4:
         25:75:b1:3f:40:33:54:5b:b9:20:7b:65:f2:7f:0c:64:89:ee:
         e0:bd:3c:bf:08:b8:f2:a4:b7:de:f0:77:82:9b:92:21:a9:b0:
         f8:2f:c5:7f:fa:ea:36:07:8f:5b:ff:f8:5f:03:42:75:04:e7:
         bb:9c:a9:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmj8RHw8+7LGRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
NTEzNWUxNjAtOTEyZi00MzMwLWJlOWEtMjc3ZGYzMzdiN2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzuITcoXw3ObEgZMbFQgBaPXUzt6LiGRvEfx
hr8InZmY0BZPTwdDIr084kJ/csdQEp/i+s4iMyglNDf88pZEp8kGX6mJia1PQ5x7
skCk4vsKUkbzu/RNvnB7dMp7T518pW7G3srJDeZzwGhgYO/6As7DCWH/PH5yHVI+
MMkGlLaekSJC1P0QaTYELKehw2adxrMZIW+EOzXDK2T7PFaoXiOGJgzIIfsmmXU2
E8oxX2QVIldHIErPAEmOeReu0SV7Oe0Ll3r5HMvve6sonu1f+IddgfkqcYMqo+dR
3nvJb1LsxoWnsurXm4nqUSzMSVt9dZ2N02ppTA2nkFYoplcDEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG41oSLAohUq0dcevAUyMjuDzlecMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmQ3MmJlYzgtYTFhMC0z
YTQ4LWIyMjYtYWMxOTk2ZmJkNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQOCJ/eIe4TSaMh+DY245whnMsgDR39d/xvGxogso2G0SrnW3/E6IK5
Q7EO94cN+5EOxZFupyvAoXVJpNUuYHZuTel0cFCWK4Twook17BNfkQdVYqcBHb6J
SXEQxvUWbYEvXwxTlRvBBqWnd1kD5pTARmAhO1IL8OlwOAX429flJphIoLkBZqN5
S9dy0B2xQKFTPr3uLFkl1Mg5Q4VVZxB35grvBMXlH9H11rMKajQ/NSt5IfluA+ny
dQ0FhUVSS/sjR/i0tCV1sT9AM1RbuSB7ZfJ/DGSJ7uC9PL8IuPKkt97wd4KbkiGp
sPgvxX/66jYHj1v/+F8DQnUE57ucqSo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:18:06 2026 by rpki-client