Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa
File:                     ab0d241b-d46d-31ea-bd3e-fc9037069799.roa (raw, json)
Hash identifier:          fDHcArKRcNhWhG8XeZx8QoW0uwhCl4j2qD209hnlOyo=
Subject key identifier:   D1:4B:E7:F7:9A:70:93:04:69:FE:0A:AD:65:B6:D2:2D:F5:A7:55:80
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E9D4A55CC4BC7438B910244C0
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     55256
IP address blocks:        158.95.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:55:cc:4b:c7:43:8b:91:02:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=89b4bcc8-2913-44e3-8a0f-7d3d4b51c062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:41:94:f5:f7:6c:89:59:76:5d:c4:7f:9b:
                    fe:6c:c5:89:fb:75:d7:33:f6:af:f0:28:9c:c4:32:
                    72:11:df:a4:09:e7:6e:2a:f1:af:71:25:2e:09:92:
                    3e:59:58:7a:7a:f8:40:2e:03:e5:a4:3e:0f:f3:9c:
                    6c:d6:85:e0:89:b9:a7:bf:a6:8a:75:3f:91:13:75:
                    c4:23:49:06:1c:17:43:f2:e0:c4:5b:1a:a7:63:c1:
                    a9:2a:96:11:7a:9b:05:6e:ae:2f:40:b4:24:b2:20:
                    39:cf:61:25:e6:97:57:14:57:27:3d:ab:d6:92:a8:
                    bf:19:48:e8:60:60:c6:48:68:f5:9a:d1:a6:42:6c:
                    b4:a5:a2:bb:66:21:ff:a8:ea:d9:8f:da:aa:6a:f9:
                    7d:8f:a4:de:99:5d:86:4c:db:8d:1b:2e:04:37:a1:
                    de:0c:0a:34:29:3b:90:d9:2b:87:0d:27:aa:12:e3:
                    27:02:86:de:61:b0:25:8a:ac:77:8d:e8:53:b1:e5:
                    b8:a2:b4:bb:ad:af:aa:8d:44:80:0e:b2:29:91:3f:
                    1e:81:42:f6:8f:29:ff:fc:ca:68:29:62:3e:68:7f:
                    35:ff:08:5c:da:bc:49:11:eb:b6:b0:81:f6:6a:c6:
                    3e:fa:db:5a:39:9d:57:db:b2:c7:1a:af:ea:ad:09:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:E7:F7:9A:70:93:04:69:FE:0A:AD:65:B6:D2:2D:F5:A7:55:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:05:f1:53:70:27:eb:54:6e:a1:ee:cb:63:d5:86:00:f0:76:
         43:a8:77:7d:5f:e9:3d:4f:28:e2:25:a8:5c:f8:1d:74:93:19:
         55:69:65:09:d9:60:1c:51:66:6d:c9:97:62:8e:73:de:48:4c:
         7f:20:58:9a:37:36:8c:82:65:6f:07:58:31:0c:7a:8e:ed:06:
         99:b4:db:1b:ce:a6:0d:9b:35:b9:e5:2a:ec:f5:3b:86:61:c6:
         0d:1b:af:5a:7d:aa:c0:ad:4d:95:27:9e:32:07:f5:38:41:5e:
         6d:53:8d:6f:bc:6f:ff:61:96:d7:0f:5a:a8:3b:38:e1:85:a2:
         c9:3b:c5:f2:ce:78:57:48:3f:40:95:28:da:fe:5b:b2:4c:81:
         5b:63:05:5c:2a:f0:2f:f6:11:7b:64:53:50:15:24:66:8f:21:
         d5:fc:ec:8b:8a:2b:ba:3d:2e:68:84:77:7f:7f:72:c7:92:93:
         9f:36:44:d3:b6:05:f0:b9:e5:c5:e5:f9:ed:46:d0:0f:7c:60:
         4a:6f:25:e7:7d:74:55:2e:72:46:25:96:c2:ac:9a:2a:85:eb:
         1c:21:70:eb:be:0c:7b:98:19:41:a9:49:c9:44:d4:ec:50:91:
         b7:0e:e3:c3:e9:48:47:ea:c0:63:07:70:46:8d:e4:11:14:db:
         95:fe:bf:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSlXMS8dDi5ECRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj
YWQ5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
ODliNGJjYzgtMjkxMy00NGUzLThhMGYtN2QzZDRiNTFjMDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4dBlPX3bIlZdl3Ef5v+bMWJ+3XXM/av8Cic
xDJyEd+kCeduKvGvcSUuCZI+WVh6evhALgPlpD4P85xs1oXgibmnv6aKdT+RE3XE
I0kGHBdD8uDEWxqnY8GpKpYRepsFbq4vQLQksiA5z2El5pdXFFcnPavWkqi/GUjo
YGDGSGj1mtGmQmy0paK7ZiH/qOrZj9qqavl9j6TemV2GTNuNGy4EN6HeDAo0KTuQ
2SuHDSeqEuMnAobeYbAliqx3jehTseW4orS7ra+qjUSADrIpkT8egUL2jyn//Mpo
KWI+aH81/whc2rxJEeu2sIH2asY++ttaOZ1X27LHGq/qrQkyuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFL5/eacJMEaf4KrWW20i31p1WAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz
MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYWIwZDI0MWItZDQ2ZC0z
MWVhLWJkM2UtZmM5MDM3MDY5Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz
ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy
Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3
MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgF8VNwJ+tUbqHuy2PVhgDwdkOod31f6T1PKOIlqFz4HXSTGVVpZQnZ
YBxRZm3Jl2KOc95ITH8gWJo3NoyCZW8HWDEMeo7tBpm02xvOpg2bNbnlKuz1O4Zh
xg0br1p9qsCtTZUnnjIH9ThBXm1TjW+8b/9hltcPWqg7OOGFosk7xfLOeFdIP0CV
KNr+W7JMgVtjBVwq8C/2EXtkU1AVJGaPIdX87IuKK7o9LmiEd39/cseSk582RNO2
BfC55cXl+e1G0A98YEpvJed9dFUuckYllsKsmiqF6xwhcOu+DHuYGUGpSclE1OxQ
kbcO48PpSEfqwGMHcEaN5BEU25X+v8o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:24 2026 by rpki-client