Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/55cd43da-3581-358b-b4c9-ebc7cff82998.roa
File:                     55cd43da-3581-358b-b4c9-ebc7cff82998.roa (raw, json)
Hash identifier:          WSDHA+UplZokiXkGJZdbAjvVm3/Uveo56nYY/YWk1Zg=
Subject key identifier:   30:86:CA:AE:43:8C:64:43:0D:C9:F3:D1:D1:A4:C6:02:FB:6F:D7:24
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EB6E1A75408F2BC65B103D5C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/55cd43da-3581-358b-b4c9-ebc7cff82998.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     55246
IP address blocks:        69.1.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a7:54:08:f2:bc:65:b1:03:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=92e5707d-ed57-4383-b6ea-72765e6c3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:f7:45:08:ce:0e:99:a6:92:fb:b3:bb:3c:
                    74:50:3e:17:6f:c5:67:f5:af:02:4b:06:75:98:70:
                    3b:8f:6a:96:78:ac:43:b4:c3:ae:60:bb:a5:56:04:
                    84:70:80:b9:ce:42:9d:62:0e:2c:50:aa:ed:1a:e3:
                    bd:c3:2c:c4:25:b1:ae:1a:b7:5b:d0:50:8c:f2:8e:
                    da:b9:3b:0e:c1:48:80:8c:6b:25:d3:ab:38:84:36:
                    28:1a:58:76:e1:90:63:a1:84:af:ee:5e:1c:1f:3d:
                    b4:a6:84:d0:a0:0e:3b:81:cc:26:5d:ec:7a:e6:c8:
                    ca:60:a8:5b:07:69:10:03:e5:2a:dc:86:f1:1a:3c:
                    7b:82:a1:26:61:e3:17:43:f1:26:9a:e3:20:31:9d:
                    df:4a:58:e9:ca:36:85:d3:8e:18:21:b9:ac:8a:56:
                    82:f4:e8:4c:e7:67:30:72:74:74:95:a0:6f:e4:1d:
                    17:da:00:18:25:cc:d7:d5:a0:99:7e:a9:0b:9d:91:
                    66:9c:2a:7f:5f:7e:51:d8:c1:88:1a:9b:e3:c5:4e:
                    81:78:b4:8e:47:17:17:00:57:24:aa:fc:18:62:76:
                    10:3a:a2:2a:b4:05:5f:7b:e2:ef:9c:49:d1:0c:83:
                    a7:30:92:aa:28:a0:47:bc:6a:1a:b1:8f:31:a5:c0:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:CA:AE:43:8C:64:43:0D:C9:F3:D1:D1:A4:C6:02:FB:6F:D7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/55cd43da-3581-358b-b4c9-ebc7cff82998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:56:50:7a:ca:4d:97:87:b4:55:26:5b:ab:6d:e3:32:fa:
         34:7f:e6:ee:84:79:97:2f:f0:84:9c:2b:6e:08:cd:b4:25:51:
         3e:c1:4b:4d:33:cd:59:de:e5:48:a0:35:02:60:a2:bc:34:78:
         a6:42:f1:f1:74:45:ef:72:45:86:11:ea:5d:32:13:8e:63:27:
         5f:4a:20:fa:57:a0:01:42:2a:26:69:2a:c4:ab:bb:7d:ea:2a:
         21:db:99:2d:de:7c:da:21:18:c7:c4:88:04:fa:45:db:9d:6c:
         3e:81:01:9d:b2:60:75:77:1e:4b:4a:43:43:92:4d:c4:36:70:
         89:39:29:55:1d:52:18:94:be:fc:64:42:a8:84:b8:c2:39:73:
         30:23:a4:5c:ea:4d:ef:ee:6e:3c:3c:25:57:37:6e:25:d5:7d:
         bc:73:9c:ec:68:34:ea:58:00:0d:4f:f4:ec:13:f5:5f:41:c2:
         92:68:45:7b:e0:92:f9:14:12:01:64:d5:b4:e4:69:cf:ee:f9:
         28:22:a6:05:2b:7d:07:65:6f:93:c3:9d:32:bb:50:79:7a:0d:
         24:77:c7:60:11:a4:f7:40:6b:a4:a0:8d:89:12:0e:ec:57:bb:
         45:33:0f:48:80:79:40:74:f6:ee:d0:04:ca:39:ec:0a:f8:35:
         a1:a2:1f:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624adUCPK8ZbED1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
OTJlNTcwN2QtZWQ1Ny00MzgzLWI2ZWEtNzI3NjVlNmMzNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzf3RQjODpmmkvuzuzx0UD4Xb8Vn9a8CSwZ1
mHA7j2qWeKxDtMOuYLulVgSEcIC5zkKdYg4sUKrtGuO9wyzEJbGuGrdb0FCM8o7a
uTsOwUiAjGsl06s4hDYoGlh24ZBjoYSv7l4cHz20poTQoA47gcwmXex65sjKYKhb
B2kQA+Uq3IbxGjx7gqEmYeMXQ/EmmuMgMZ3fSljpyjaF044YIbmsilaC9OhM52cw
cnR0laBv5B0X2gAYJczX1aCZfqkLnZFmnCp/X35R2MGIGpvjxU6BeLSORxcXAFck
qvwYYnYQOqIqtAVfe+LvnEnRDIOnMJKqKKBHvGoasY8xpcBuAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCGyq5DjGRDDcnz0dGkxgL7b9ckMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNTVjZDQzZGEtMzU4MS0z
NThiLWI0YzktZWJjN2NmZjgyOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnTVlB6yk2Xh7RVJlurbeMy+jR/5u6EeZcv8IScK24IzbQlUT7BS00z
zVne5UigNQJgorw0eKZC8fF0Re9yRYYR6l0yE45jJ19KIPpXoAFCKiZpKsSru33q
KiHbmS3efNohGMfEiAT6RdudbD6BAZ2yYHV3HktKQ0OSTcQ2cIk5KVUdUhiUvvxk
QqiEuMI5czAjpFzqTe/ubjw8JVc3biXVfbxznOxoNOpYAA1P9OwT9V9BwpJoRXvg
kvkUEgFk1bTkac/u+SgipgUrfQdlb5PDnTK7UHl6DSR3x2ARpPdAa6SgjYkSDuxX
u0UzD0iAeUB09u7QBMo57Ar4NaGiHx8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:31:35 2026 by rpki-client