Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
File:                     b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (raw, json)
Hash identifier:          TFLq1mcmB4YZKz7EwzB4OMSnH99IlDHg7qKW5NAcHQk=
Subject key identifier:   FD:F7:E9:1F:81:F0:90:D7:54:D4:0A:66:04:8A:25:C7:05:BF:63:C5
Certificate issuer:       /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
Certificate serial:       010D0C9F4328584E131986458D2E4FF6AF603EC0
Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     393577
IP address blocks:        192.104.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:86:45:8d:2e:4f:f6:af:60:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=5a490dc1-5d23-4da7-b635-0a31bc972dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:7d:e8:06:8c:aa:9f:61:f6:ca:6a:ee:9e:
                    7b:95:a8:1c:b3:61:f0:e3:51:2b:a3:c0:4e:6e:e5:
                    ba:84:48:9e:74:29:c7:13:3e:65:4d:7e:3d:1a:35:
                    2b:fa:ad:11:31:8d:05:de:ad:6e:46:16:ec:f8:27:
                    6c:78:07:a0:ce:7d:c6:4f:16:01:fe:26:13:c3:6e:
                    05:92:15:9e:59:68:71:40:c3:c6:9a:6f:ba:9c:09:
                    bb:36:39:9c:c4:5d:0f:38:a1:c8:a9:fe:7f:5d:8b:
                    5d:3c:c4:90:ad:e7:fa:7d:35:90:05:ac:c3:1a:e9:
                    bd:a3:ba:5b:a3:66:05:e1:cf:5b:78:a7:73:bd:20:
                    7b:61:18:fc:88:58:f7:25:bd:17:08:d2:f5:99:7a:
                    fa:9e:54:ae:55:0f:76:e8:7a:e0:4f:87:76:9a:17:
                    95:f3:1a:5b:65:65:90:85:bb:af:9b:0c:da:a6:2e:
                    78:f0:4b:8c:b5:4b:02:2e:3d:7c:c7:dd:90:d7:09:
                    77:7b:35:7b:69:e5:6b:b6:b9:f6:b1:01:2e:d6:38:
                    13:5f:ce:d9:8f:32:1b:44:ad:43:ae:02:02:aa:ca:
                    b3:38:38:8f:65:67:f0:87:ad:7e:3d:70:4c:66:dc:
                    2d:d1:db:20:70:96:ed:94:e8:ba:1d:fa:34:33:57:
                    7d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:E9:1F:81:F0:90:D7:54:D4:0A:66:04:8A:25:C7:05:BF:63:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl

            X509v3 Authority Key Identifier:
                keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:a9:99:e2:1a:22:1f:fe:79:c1:e3:bd:06:65:32:be:d2:
         e7:24:77:4c:43:03:60:e3:e6:73:97:28:a4:db:52:e9:98:a5:
         03:aa:12:97:d1:22:c5:0c:4f:df:48:36:74:9a:1f:c6:05:6f:
         6c:66:62:3b:42:66:c5:7a:38:01:af:7c:f4:6b:66:c8:94:34:
         10:5a:aa:f1:7c:b9:5d:9c:33:97:13:7d:5e:ad:26:57:a3:14:
         30:55:38:7a:73:ab:c3:db:ba:ce:02:7b:36:3f:53:0f:d4:8e:
         e1:66:d1:97:98:a2:99:fa:af:f6:e9:87:57:46:0c:37:3b:7d:
         27:60:1f:bc:0e:f3:e8:b9:aa:cb:a8:cd:67:3f:69:b9:66:69:
         b5:fe:03:47:0c:91:76:2f:f2:f3:c1:b0:29:8e:b0:ca:53:ad:
         7f:69:b4:1e:3a:f0:46:f0:6c:77:ef:1b:20:cf:92:f6:f7:29:
         be:5d:96:fe:c1:80:c1:da:6a:90:be:40:0d:b4:1d:58:5b:58:
         bc:b6:7c:cb:5f:a8:0f:d6:02:2c:a1:a5:6b:02:cc:81:92:03:
         06:e0:35:c0:47:46:a9:e0:60:93:00:70:e2:49:93:cd:87:28:
         44:da:ab:d9:8a:aa:25:7b:62:b6:00:44:01:48:fd:cf:4d:00:
         5d:f2:e2:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGYZFjS5P9q9gPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlMWVmZjUtMTQyMy00MTAwLTg5ZjQtMzM0MGVmZDhm
MWVhMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
NWE0OTBkYzEtNWQyMy00ZGE3LWI2MzUtMGEzMWJjOTcyZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpx96AaMqp9h9spq7p57lagcs2Hw41Ero8BO
buW6hEiedCnHEz5lTX49GjUr+q0RMY0F3q1uRhbs+CdseAegzn3GTxYB/iYTw24F
khWeWWhxQMPGmm+6nAm7NjmcxF0POKHIqf5/XYtdPMSQref6fTWQBazDGum9o7pb
o2YF4c9beKdzvSB7YRj8iFj3Jb0XCNL1mXr6nlSuVQ926HrgT4d2mheV8xpbZWWQ
hbuvmwzapi548EuMtUsCLj18x92Q1wl3ezV7aeVrtrn2sQEu1jgTX87ZjzIbRK1D
rgICqsqzODiPZWfwh61+PXBMZtwt0dsgcJbtlOi6Hfo0M1d9DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP336R+B8JDXVNQKZgSKJccFv2PFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUx
ZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQwZWZkOGYxZWEvYjU2ZWEyYWQtMDkwYy0z
YTMzLTk4NmUtNDkzOWE4ZWNiNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJlMWVmZjUtMTQyMy00MTAwLTg5
ZjQtMzM0MGVmZDhmMWVhLzMyZTFlZmY1LTE0MjMtNDEwMC04OWY0LTMzNDBlZmQ4
ZjFlYS5jcmwwHwYDVR0jBBgwFoAUJUAu2vdRljOCQujdZADl1BGI5/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUxZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQw
ZWZkOGYxZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGifMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+jqZniGiIf/nnB470GZTK+0uckd0xDA2Dj5nOXKKTbUumYpQOqEpfR
IsUMT99INnSaH8YFb2xmYjtCZsV6OAGvfPRrZsiUNBBaqvF8uV2cM5cTfV6tJlej
FDBVOHpzq8Pbus4CezY/Uw/UjuFm0ZeYopn6r/bph1dGDDc7fSdgH7wO8+i5qsuo
zWc/ablmabX+A0cMkXYv8vPBsCmOsMpTrX9ptB468EbwbHfvGyDPkvb3Kb5dlv7B
gMHaapC+QA20HVhbWLy2fMtfqA/WAiyhpWsCzIGSAwbgNcBHRqngYJMAcOJJk82H
KETaq9mKqiV7YrYARAFI/c9NAF3y4rw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:33 2026 by rpki-client