Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/f6376624-1084-3a8c-bbdb-a18e0a435db6.roa
File:                     f6376624-1084-3a8c-bbdb-a18e0a435db6.roa (raw, json)
Hash identifier:          qPOVX/ie+J6Q1IrJQrk5kNUH+54rhMlRKuSCsYfVaQc=
Subject key identifier:   98:7D:4C:60:97:9A:B2:FA:52:CD:B8:11:67:BC:00:55:55:1A:2C:B3
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F4328584E7BCA2C09FFE0D80A90B21460
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/f6376624-1084-3a8c-bbdb-a18e0a435db6.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        158.116.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2c:09:ff:e0:d8:0a:90:b2:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=117ebc3a-0043-482d-80a7-c335e6563969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:b8:d3:90:c7:6e:bf:91:2a:85:36:6e:7b:
                    59:35:f3:18:b0:63:3c:ed:70:c2:60:7b:51:d2:fd:
                    98:f4:30:c1:31:d1:67:c0:a1:07:76:3b:24:bc:6e:
                    9e:05:10:23:bb:2c:0d:1e:b1:c1:5b:5d:31:a4:16:
                    f2:34:e4:ee:35:b6:2e:0f:29:a0:2c:53:75:07:c9:
                    0b:e8:5b:bd:55:0d:bf:f2:e2:46:0b:00:99:16:07:
                    68:37:93:41:5c:de:88:68:04:f9:75:22:71:c6:66:
                    2b:b3:9f:89:8d:8e:05:72:fd:d7:c5:04:aa:37:66:
                    dd:dd:01:1b:58:9f:40:f4:95:5f:3f:a3:d3:e9:53:
                    66:ce:94:ce:a9:ff:b7:9b:6d:bb:01:52:4b:91:20:
                    cd:fc:b5:18:d5:c9:45:8c:a2:67:34:ad:66:0d:5a:
                    71:fc:87:ed:fa:e1:a8:5c:de:5b:cf:5e:58:67:b9:
                    27:52:cf:59:67:6b:c6:61:a8:eb:8a:fc:be:5f:d4:
                    0c:b8:38:61:45:07:af:4c:5b:1c:28:ce:9b:e2:c6:
                    66:c5:6e:f2:ff:77:4d:b2:29:aa:ba:2f:1a:02:e7:
                    dd:2e:70:09:0b:d3:81:6b:a2:54:6a:7c:72:c8:01:
                    a1:a2:2e:bf:29:1a:9a:28:1d:9d:96:52:ff:96:cf:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:4C:60:97:9A:B2:FA:52:CD:B8:11:67:BC:00:55:55:1A:2C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/f6376624-1084-3a8c-bbdb-a18e0a435db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:fe:1b:7b:26:c5:aa:1b:22:4e:37:bb:5d:49:ff:80:45:
         38:5e:cf:02:f4:b0:3d:68:e8:1c:84:96:b1:86:cc:dc:a3:96:
         b0:f9:b4:8a:cf:41:8a:f3:97:03:67:60:65:85:28:80:40:7b:
         23:eb:ea:2b:04:b8:1e:c6:09:72:4f:1f:2a:9f:ba:7d:9e:88:
         2a:2b:42:7c:81:8d:85:eb:eb:46:d3:91:11:9d:a9:36:b0:74:
         f1:6c:12:a6:5f:ee:a8:20:43:5e:3b:7f:28:8b:87:6a:8b:ed:
         6a:09:0f:4d:37:ba:d1:17:3a:d1:c1:e2:50:87:cf:16:5a:a6:
         0c:87:58:a5:84:83:94:fe:6f:c4:d5:e5:09:6a:88:b0:cc:92:
         0a:d0:4a:a0:6c:15:90:47:3a:f7:7b:de:69:6a:f9:c2:1b:34:
         44:05:6d:bf:80:b9:7d:16:ef:d4:a3:b8:42:b4:c2:42:d3:91:
         cc:e6:ef:11:d3:bf:93:98:0c:53:35:46:18:b1:78:27:1a:05:
         f9:41:45:5c:1d:d9:9f:b0:93:0f:5d:d8:f3:26:6f:35:6f:23:
         f7:15:97:ea:21:ac:7c:ad:e3:96:dc:1b:03:4d:18:a1:b7:f7:
         7a:37:fc:45:6c:7f:82:73:c9:0b:c0:a5:b2:2b:e3:24:57:92:
         87:92:02:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yiwJ/+DYCpCyFGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2
YzI2MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
MTE3ZWJjM2EtMDA0My00ODJkLTgwYTctYzMzNWU2NTYzOTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv2405DHbr+RKoU2bntZNfMYsGM87XDCYHtR
0v2Y9DDBMdFnwKEHdjskvG6eBRAjuywNHrHBW10xpBbyNOTuNbYuDymgLFN1B8kL
6Fu9VQ2/8uJGCwCZFgdoN5NBXN6IaAT5dSJxxmYrs5+JjY4Fcv3XxQSqN2bd3QEb
WJ9A9JVfP6PT6VNmzpTOqf+3m227AVJLkSDN/LUY1clFjKJnNK1mDVpx/Ift+uGo
XN5bz15YZ7knUs9ZZ2vGYajrivy+X9QMuDhhRQevTFscKM6b4sZmxW7y/3dNsimq
ui8aAufdLnAJC9OBa6JUanxyyAGhoi6/KRqaKB2dllL/ls+stQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJh9TGCXmrL6Us24EWe8AFVVGiyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0
N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvZjYzNzY2MjQtMTA4NC0z
YThjLWJiZGItYTE4ZTBhNDM1ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll
NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5
NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3
OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEys/ht7JsWqGyJON7tdSf+ARThezwL0sD1o6ByElrGGzNyjlrD5tIrP
QYrzlwNnYGWFKIBAeyPr6isEuB7GCXJPHyqfun2eiCorQnyBjYXr60bTkRGdqTaw
dPFsEqZf7qggQ147fyiLh2qL7WoJD003utEXOtHB4lCHzxZapgyHWKWEg5T+b8TV
5QlqiLDMkgrQSqBsFZBHOvd73mlq+cIbNEQFbb+AuX0W79SjuEK0wkLTkczm7xHT
v5OYDFM1RhixeCcaBflBRVwd2Z+wkw9d2PMmbzVvI/cVl+ohrHyt45bcGwNNGKG3
93o3/EVsf4JzyQvApbIr4yRXkoeSAgU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:08:24 2026 by rpki-client