Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa
File:                     5d2bf38a-7b44-39e5-8cea-3a266b191399.roa (raw, json)
Hash identifier:          HytV5+CJtTXQl0jcgJX2HXHupE3Vk3uubRhYKEfGIfE=
Subject key identifier:   EA:F0:38:AB:04:8F:2A:FA:37:19:37:CD:BC:44:05:41:C6:0C:78:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05CB9EDE2BD1C968CF43C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        151.203.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:cb:9e:de:2b:d1:c9:68:cf:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=9da4b71b-f447-4791-8e0e-b308130dffcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:e6:fd:0c:08:ae:f5:ad:d1:ea:da:08:9c:
                    95:24:c7:f0:be:bb:80:ff:86:8a:8b:76:65:b7:34:
                    a8:ec:a8:85:27:7e:bd:ba:d8:6d:67:f5:c7:b7:0d:
                    e7:9a:6a:cf:38:23:ae:f4:ea:92:d3:2c:6f:9b:a0:
                    cf:be:77:a5:27:6b:64:c6:3c:56:b1:ca:e5:7a:32:
                    95:21:98:6e:ec:63:66:c0:cd:ef:64:2f:5e:ee:23:
                    79:62:89:d1:11:2e:ff:89:91:3c:18:39:03:19:61:
                    d9:c0:96:08:f6:7f:43:f5:02:fb:fb:53:3b:93:2b:
                    32:e0:d2:7a:1b:c7:00:c9:96:70:26:35:e8:77:3a:
                    df:53:ec:71:48:2f:cb:3a:f5:05:dc:86:00:25:24:
                    49:7e:b6:fc:63:ce:76:a1:09:1d:56:80:b8:87:81:
                    57:79:1c:b2:a2:98:ed:c9:97:14:d5:09:26:b2:f3:
                    62:15:64:dc:0e:4b:c2:50:df:f2:fe:06:bf:cf:30:
                    23:31:37:8d:8c:f8:cb:89:b2:c4:e5:c3:5e:dd:42:
                    2c:7a:16:ec:cf:72:8d:b5:c3:13:2c:da:00:81:78:
                    f4:7e:04:ca:ad:9b:dc:09:4b:39:8a:24:51:74:55:
                    92:5c:f1:21:75:dc:c7:fe:6f:52:3d:c4:47:f1:57:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:38:AB:04:8F:2A:FA:37:19:37:CD:BC:44:05:41:C6:0C:78:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d2bf38a-7b44-39e5-8cea-3a266b191399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.203.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:28:8a:68:58:fd:66:85:94:b2:c5:b0:ab:d7:4a:0f:ad:98:
         1a:ba:de:26:7b:b5:e9:c5:90:1a:ba:d9:ba:20:f5:64:09:05:
         33:7b:2e:27:b4:d1:05:16:ea:ca:82:2f:de:58:7d:0b:a6:56:
         75:d3:94:1e:c0:d4:e2:31:94:51:f5:79:56:18:28:9d:3e:55:
         ea:28:af:0c:60:73:00:97:3d:a5:5a:d3:74:71:c6:7a:54:1a:
         3f:f6:af:6d:27:1a:ad:ff:eb:bc:9f:3e:c2:fe:67:1d:ef:ca:
         5b:09:29:1b:86:cf:2e:f8:78:5b:b1:0e:ad:70:ec:d8:7e:3a:
         e5:b2:50:d5:05:00:00:d4:61:ff:e3:b9:9f:42:e5:44:bb:97:
         dd:60:9f:94:51:e5:6f:6c:1e:5f:11:b0:46:3d:4e:32:03:e0:
         5a:12:0f:17:a3:55:64:5f:31:2c:b2:f1:49:2a:06:65:8b:15:
         7f:88:83:77:00:f1:5e:69:51:25:37:89:f7:e4:7f:bb:79:b8:
         75:e9:42:ea:91:ff:ab:4f:e8:c5:d6:5b:b8:dd:8d:51:f7:06:
         32:8b:f8:73:f4:92:28:54:53:de:92:03:d3:32:78:66:ad:3a:
         0d:fa:06:05:78:a8:1b:8f:73:33:8f:da:9b:ce:c4:92:89:0c:
         52:7f:f1:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29Bcue3ivRyWjPQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
OWRhNGI3MWItZjQ0Ny00NzkxLThlMGUtYjMwODEzMGRmZmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h7m/QwIrvWt0eraCJyVJMfwvruA/4aKi3Zl
tzSo7KiFJ369uthtZ/XHtw3nmmrPOCOu9OqS0yxvm6DPvnelJ2tkxjxWscrlejKV
IZhu7GNmwM3vZC9e7iN5YonRES7/iZE8GDkDGWHZwJYI9n9D9QL7+1M7kysy4NJ6
G8cAyZZwJjXodzrfU+xxSC/LOvUF3IYAJSRJfrb8Y852oQkdVoC4h4FXeRyyopjt
yZcU1QkmsvNiFWTcDkvCUN/y/ga/zzAjMTeNjPjLibLE5cNe3UIsehbsz3KNtcMT
LNoAgXj0fgTKrZvcCUs5iiRRdFWSXPEhddzH/m9SPcRH8VfowwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrwOKsEjyr6Nxk3zbxEBUHGDHhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQyYmYzOGEtN2I0NC0z
OWU1LThjZWEtM2EyNjZiMTkxMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEoimhY/WaFlLLFsKvXSg+tmBq63iZ7tenFkBq62bog9WQJBTN7Lie0
0QUW6sqCL95YfQumVnXTlB7A1OIxlFH1eVYYKJ0+VeoorwxgcwCXPaVa03RxxnpU
Gj/2r20nGq3/67yfPsL+Zx3vylsJKRuGzy74eFuxDq1w7Nh+OuWyUNUFAADUYf/j
uZ9C5US7l91gn5RR5W9sHl8RsEY9TjID4FoSDxejVWRfMSyy8UkqBmWLFX+Ig3cA
8V5pUSU3iffkf7t5uHXpQuqR/6tP6MXWW7jdjVH3BjKL+HP0kihUU96SA9MyeGat
Og36BgV4qBuPczOP2pvOxJKJDFJ/8eU=
-----END CERTIFICATE-----
Generated at Wed May 13 13:59:39 2026 by rpki-client