Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa
File:                     f221a3f9-effe-3336-98c9-6079ba80b70b.roa (raw, json)
Hash identifier:          fSI4kijLHA1FSXgetxUpyzHtX4vsAcAKL5dMcLLIKa4=
Subject key identifier:   C1:C0:EC:DC:CC:2D:58:26:86:31:47:03:87:8B:92:8E:4A:43:E4:26
Certificate issuer:       /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
Certificate serial:       010D0C9F4328584BB88D5A7A3F04BB945BC7C980
Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        144.77.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:5a:7a:3f:04:bb:94:5b:c7:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=a19090f1-ada6-44ab-ae24-40da1183efae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:3b:7c:e7:1d:82:36:e3:a7:81:5e:08:ba:
                    ed:3a:08:7f:2f:db:57:b4:2d:84:bb:44:cc:0d:dc:
                    76:f6:72:c1:89:97:17:be:06:ac:da:b5:3b:ff:cc:
                    16:93:09:13:38:16:1a:47:96:d3:cf:c8:0f:23:46:
                    a0:52:85:2d:8e:e3:f2:47:e4:fe:e2:57:b3:26:31:
                    06:10:47:4c:f8:58:ca:13:a0:b8:30:4c:86:14:61:
                    14:54:e4:30:a3:45:58:18:9b:f9:ff:77:ef:37:f2:
                    da:de:35:72:47:27:15:84:5d:01:ec:c2:47:d2:b4:
                    80:94:a5:b4:84:bd:b8:99:e0:a8:a0:18:11:d3:9f:
                    93:81:56:cb:77:5b:5a:ad:97:6c:e7:87:97:02:b0:
                    a6:90:cb:6f:39:1a:98:d0:8b:c1:e4:ef:43:83:70:
                    32:20:54:c3:a2:9e:ac:16:1a:7f:a0:18:aa:bc:42:
                    b2:ae:49:81:54:71:b6:6e:af:5a:be:13:4d:b0:07:
                    bb:88:4e:12:a0:ad:ae:0d:fe:f5:f6:84:85:84:8b:
                    51:b4:c7:4c:8c:bc:fd:5e:15:80:6d:2b:e1:15:f7:
                    c7:f9:02:64:e8:d5:1e:63:9d:12:7e:52:1c:05:e1:
                    4a:f6:0a:43:15:c4:85:08:3c:68:07:81:49:d3:f1:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:EC:DC:CC:2D:58:26:86:31:47:03:87:8B:92:8E:4A:43:E4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl

            X509v3 Authority Key Identifier:
                keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:1a:99:ef:8d:f6:01:bd:92:e4:51:86:af:a9:0f:96:96:
         d2:18:af:5a:1d:de:12:83:ed:af:8d:f5:32:e5:49:86:e8:f6:
         be:1f:b9:b9:19:30:c1:5a:4a:5a:df:1a:f0:dc:f7:ce:41:63:
         c4:65:a6:9b:01:ad:52:22:e8:c3:81:77:d8:61:8a:ca:a6:00:
         54:f2:3e:d7:7e:68:28:c3:22:3e:11:67:70:7e:ba:49:a0:2b:
         74:4f:e2:c6:1c:e6:c2:46:f7:f3:a6:9a:d1:03:27:3a:e1:5e:
         8d:05:8d:90:cb:dd:f2:33:03:33:7e:c2:51:ec:f3:b4:b8:45:
         1b:a2:67:08:a4:09:7a:b0:6c:b4:30:d1:3d:56:aa:cc:7c:6f:
         10:72:c5:9e:d9:b5:04:35:49:f6:f6:1c:b1:7d:3c:71:88:2f:
         ee:e2:a1:be:f5:84:18:96:10:f4:fa:83:fd:f2:e0:35:3c:4c:
         78:5a:b0:24:c8:82:4e:ca:b3:8a:5d:a9:05:52:52:c1:e7:be:
         fd:7e:95:b5:6e:43:d4:90:7b:55:c3:3f:93:40:87:e2:48:b3:
         9e:e2:f0:ae:17:68:5b:4f:57:67:a2:7a:02:d5:6e:f0:d6:56:
         0f:18:4b:f1:fc:7b:7f:db:97:44:e4:46:0e:a7:6d:b3:ed:5e:
         a6:58:7c:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVp6PwS7lFvHyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTVhNWM4NTAtYjVmNy00Y2ZkLWIzMWYtMTlkNTFiZjNj
YzA4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
YTE5MDkwZjEtYWRhNi00NGFiLWFlMjQtNDBkYTExODNlZmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiag7fOcdgjbjp4FeCLrtOgh/L9tXtC2Eu0TM
Ddx29nLBiZcXvgas2rU7/8wWkwkTOBYaR5bTz8gPI0agUoUtjuPyR+T+4lezJjEG
EEdM+FjKE6C4MEyGFGEUVOQwo0VYGJv5/3fvN/La3jVyRycVhF0B7MJH0rSAlKW0
hL24meCooBgR05+TgVbLd1tarZds54eXArCmkMtvORqY0IvB5O9Dg3AyIFTDop6s
Fhp/oBiqvEKyrkmBVHG2bq9avhNNsAe7iE4SoK2uDf719oSFhItRtMdMjLz9XhWA
bSvhFffH+QJk6NUeY50SflIcBeFK9gpDFcSFCDxoB4FJ0/EGuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHA7NzMLVgmhjFHA4eLko5KQ+QmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNWE1
Yzg1MC1iNWY3LTRjZmQtYjMxZi0xOWQ1MWJmM2NjMDgvZjIyMWEzZjktZWZmZS0z
MzM2LTk4YzktNjA3OWJhODBiNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTVhNWM4NTAtYjVmNy00Y2ZkLWIz
MWYtMTlkNTFiZjNjYzA4LzE1YTVjODUwLWI1ZjctNGNmZC1iMzFmLTE5ZDUxYmYz
Y2MwOC5jcmwwHwYDVR0jBBgwFoAUJk9Ofnmn3AeOCyVNDzrFA1/GwsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNWE1Yzg1MC1iNWY3LTRjZmQtYjMxZi0xOWQ1
MWJmM2NjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkE2cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+zGpnvjfYBvZLkUYavqQ+WltIYr1od3hKD7a+N9TLlSYbo9r4fubkZ
MMFaSlrfGvDc985BY8RlppsBrVIi6MOBd9hhisqmAFTyPtd+aCjDIj4RZ3B+ukmg
K3RP4sYc5sJG9/OmmtEDJzrhXo0FjZDL3fIzAzN+wlHs87S4RRuiZwikCXqwbLQw
0T1Wqsx8bxByxZ7ZtQQ1Sfb2HLF9PHGIL+7iob71hBiWEPT6g/3y4DU8THhasCTI
gk7Ks4pdqQVSUsHnvv1+lbVuQ9SQe1XDP5NAh+JIs57i8K4XaFtPV2eiegLVbvDW
Vg8YS/H8e3/bl0TkRg6nbbPtXqZYfNY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:36 2025 by rpki-client