Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa
File:                     9f56c2de-4987-3959-8300-8633befcfe08.roa (raw, json)
Hash identifier:          CgGRaH/urxAkGZFrqcqxy8GpTSqQ+v7iT7tjvG/zjE8=
Subject key identifier:   D0:A3:CF:8D:1D:9C:DE:3E:65:88:FE:BD:25:B4:E9:E8:4B:BF:1F:C5
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584EA791AADD81030D082A994680
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11377
IP address blocks:        159.183.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:aa:dd:81:03:0d:08:2a:99:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eeb5a62a-0eb6-4d08-aa18-99c5fce28cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:4b:5d:09:78:cf:7a:5a:10:be:ab:b8:d7:
                    87:5c:40:b1:76:84:7e:ce:e2:f7:24:d5:16:82:bc:
                    43:39:ef:f0:3b:5c:b3:7c:c4:01:5d:15:b2:b5:d9:
                    d0:73:05:c8:da:b7:33:e7:3c:a0:b9:1d:2b:60:68:
                    52:1a:df:ce:84:48:b0:2b:3e:0e:ff:ad:87:17:82:
                    b6:c6:42:7f:26:46:f4:c0:a4:0f:56:ab:3b:da:98:
                    48:34:85:67:d2:3c:73:a9:3d:55:81:75:ac:b2:0a:
                    cc:e4:6e:22:be:5e:5a:d3:7a:fc:db:fa:0f:db:82:
                    3a:b7:c4:48:bb:2f:0b:4b:b4:d5:09:58:8b:1c:6d:
                    b2:5a:98:5d:14:e3:a9:01:a2:ab:4b:38:ab:10:bd:
                    cc:ac:9b:56:87:08:49:70:9d:95:4a:04:70:0a:65:
                    80:b3:30:24:ea:1f:41:0d:47:3b:7f:6b:03:ad:85:
                    b5:b6:d5:d9:87:1e:ac:a2:cb:65:66:57:d5:9e:96:
                    4c:b7:eb:eb:3c:88:f1:f4:5a:a2:e7:87:ea:33:18:
                    ed:89:bc:4f:cf:8d:8a:34:40:79:90:f5:6e:c9:e1:
                    a4:4b:e0:a2:2e:0f:20:a4:33:ae:b3:fb:aa:bd:e2:
                    1c:e5:df:7e:98:d8:06:46:5e:4b:dc:6b:58:8c:51:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:CF:8D:1D:9C:DE:3E:65:88:FE:BD:25:B4:E9:E8:4B:BF:1F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:a0:21:78:18:ed:48:e1:9b:64:32:c4:8c:dd:54:de:47:
         b5:db:51:6c:49:ca:ce:39:2b:4d:48:62:06:50:19:3a:3a:46:
         ea:ca:95:09:34:dc:e6:ba:8b:bf:38:50:fd:c1:4d:7a:0a:3d:
         9f:40:92:b5:70:de:2f:61:33:7d:79:81:6c:1b:ca:24:3f:cf:
         64:60:e3:c2:f8:bc:f6:4a:ad:5f:67:3f:6d:e7:23:6b:07:2e:
         f4:d3:c4:96:f7:1e:db:b0:19:3b:85:68:8e:d1:43:e5:7e:87:
         e1:2d:33:58:49:4f:63:f7:a4:f1:eb:66:3a:c6:a1:f0:fa:df:
         b6:fc:c9:53:53:a5:f1:5f:33:ca:02:16:f1:84:c3:3b:d4:01:
         c5:a5:14:f5:02:ba:29:6a:ab:17:b3:db:96:80:bf:25:80:2c:
         89:2f:f5:f5:2b:92:f4:eb:95:87:0a:8f:38:f9:fe:b8:cb:c0:
         96:29:4f:eb:52:e8:b1:b0:67:69:2a:8d:c5:25:11:e5:12:fb:
         af:43:a8:4a:e8:5b:a1:27:5d:f7:f0:64:64:66:c1:94:ee:e2:
         ce:90:d1:6a:bd:46:8f:7b:c8:db:87:66:8e:fd:ee:30:c5:8b:
         ff:35:b7:4a:38:a4:18:47:12:5d:d7:f9:20:ce:b7:73:92:93:
         f3:27:84:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkardgQMNCCqZRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWViNWE2MmEtMGViNi00ZDA4LWFhMTgtOTljNWZjZTI4Y2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjJLXQl4z3paEL6ruNeHXECxdoR+zuL3JNUW
grxDOe/wO1yzfMQBXRWytdnQcwXI2rcz5zyguR0rYGhSGt/OhEiwKz4O/62HF4K2
xkJ/Jkb0wKQPVqs72phINIVn0jxzqT1VgXWssgrM5G4ivl5a03r82/oP24I6t8RI
uy8LS7TVCViLHG2yWphdFOOpAaKrSzirEL3MrJtWhwhJcJ2VSgRwCmWAszAk6h9B
DUc7f2sDrYW1ttXZhx6sostlZlfVnpZMt+vrPIjx9Fqi54fqMxjtibxPz42KNEB5
kPVuyeGkS+CiLg8gpDOus/uqveIc5d9+mNgGRl5L3GtYjFH4JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCjz40dnN4+ZYj+vSW06ehLvx/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvOWY1NmMyZGUtNDk4Ny0z
OTU5LTgzMDAtODYzM2JlZmNmZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn7fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxeoCF4GO1I4ZtkMsSM3VTeR7XbUWxJys45K01IYgZQGTo6RurKlQk0
3Oa6i784UP3BTXoKPZ9AkrVw3i9hM315gWwbyiQ/z2Rg48L4vPZKrV9nP23nI2sH
LvTTxJb3HtuwGTuFaI7RQ+V+h+EtM1hJT2P3pPHrZjrGofD637b8yVNTpfFfM8oC
FvGEwzvUAcWlFPUCuilqqxez25aAvyWALIkv9fUrkvTrlYcKjzj5/rjLwJYpT+tS
6LGwZ2kqjcUlEeUS+69DqEroW6EnXffwZGRmwZTu4s6Q0Wq9Ro97yNuHZo797jDF
i/81t0o4pBhHEl3X+SDOt3OSk/MnhJU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:53 2026 by rpki-client