Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3332203d3e203532303235.roa
File:                     3135352e3130332e35312e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          P3a4H26q1PNZw9WfZbBOz95U1tCfah/Sc2z86WLH3ZQ=
Subject key identifier:   15:7F:2A:3B:9D:DF:B5:87:42:E4:E7:81:5E:F0:74:DB:51:7E:8C:DC
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       73A387A51C9998A107C9F00AEBDA2763A26A2EAD
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3332203d3e203532303235.roa
Signing time:             Fri 22 May 2026 23:14:59 +0000
ROA not before:           Fri 22 May 2026 23:09:59 +0000
ROA not after:            Fri 21 May 2027 23:14:59 +0000
asID:                     52025
IP address blocks:        155.103.51.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:87:a5:1c:99:98:a1:07:c9:f0:0a:eb:da:27:63:a2:6a:2e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May 22 23:09:59 2026 GMT
            Not After : May 21 23:14:59 2027 GMT
        Subject: CN=157F2A3B9DDFB58742E4E7815EF074DB517E8CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:61:a5:da:62:0b:50:4e:9e:6e:4e:90:37:
                    31:18:8d:35:ed:cc:58:cb:1f:03:4e:96:4b:48:01:
                    fb:51:62:47:c4:61:34:04:29:68:41:29:a4:bf:d8:
                    9b:34:c3:cc:70:4e:ef:60:82:a3:64:fa:48:3f:4c:
                    5c:26:8d:af:5f:ed:59:1c:2d:48:2b:a8:8e:83:23:
                    e1:b1:2c:06:43:36:06:49:06:47:a2:7e:25:87:cb:
                    39:18:bc:13:2f:b3:96:e7:06:d4:04:44:e4:cd:22:
                    46:2d:c0:5c:92:56:87:0d:b3:cc:80:22:d0:79:fa:
                    ec:20:92:52:b6:0a:1a:02:e3:86:54:6a:8b:58:7d:
                    5c:18:ba:f5:4d:eb:f2:0c:1f:2c:93:ff:65:a0:68:
                    70:1a:35:fc:6d:10:13:a7:a3:cc:eb:a0:f5:14:65:
                    8e:7a:eb:4c:f7:08:a9:d6:24:24:d8:58:e2:48:48:
                    7d:f6:1a:05:3a:5e:1f:84:d4:e3:d0:3e:2a:b2:2a:
                    a4:0a:47:71:43:7a:15:95:86:9d:cd:8a:0e:50:47:
                    e5:a5:f6:29:f9:91:eb:63:6b:2c:95:6d:1c:08:fe:
                    f3:5f:f9:3e:84:9d:d9:aa:32:2c:8d:10:a7:58:f5:
                    17:ab:17:de:62:6a:fc:03:cf:cd:77:12:75:1e:f1:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7F:2A:3B:9D:DF:B5:87:42:E4:E7:81:5E:F0:74:DB:51:7E:8C:DC
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:90:81:93:d9:cd:7d:da:c9:9d:c5:6c:7b:3d:f5:6a:43:
         67:e2:ef:7d:14:d5:3b:c7:a1:37:31:31:f8:21:01:2f:20:39:
         20:a0:ce:34:45:47:b6:83:bf:17:8e:7e:89:38:36:af:83:5a:
         b4:36:9d:5e:73:ac:f5:49:a0:fe:a3:b4:d2:10:5b:4a:b8:67:
         92:17:c6:6d:75:44:2b:18:f4:67:bc:5f:d5:64:f3:4d:93:85:
         fc:70:ea:33:15:df:9a:ed:9b:63:6b:0d:7b:c1:d6:33:a7:36:
         63:ff:ac:15:57:42:04:79:21:a5:06:3b:66:e3:c2:1c:a8:39:
         35:6d:3e:8d:ec:1b:fd:9f:ae:a6:bb:6b:51:3b:36:b6:e4:5d:
         f3:73:b6:d3:8d:1d:e1:8e:52:05:3b:eb:f2:9a:8b:44:39:58:
         6b:1b:ec:22:31:ac:30:4b:b4:e1:c0:2c:cd:f8:5d:91:af:fb:
         f7:be:51:5f:98:b3:68:68:78:15:9b:77:33:55:01:4e:5e:49:
         2e:74:e7:67:8f:e2:cc:76:df:5e:f3:35:be:80:02:2d:02:2d:
         e1:e1:c0:01:e6:76:0e:dc:c7:00:e5:a4:d8:ff:21:f4:09:bf:
         cd:6a:4a:34:50:62:70:31:11:a1:43:c0:1c:04:78:93:46:c8:
         70:b3:b2:e2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUc6OHpRyZmKEHyfAK69onY6JqLq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwNTIyMjMwOTU5WhcNMjcwNTIxMjMxNDU5
WjAzMTEwLwYDVQQDEygxNTdGMkEzQjlEREZCNTg3NDJFNEU3ODE1RUYwNzREQjUx
N0U4Q0RDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tNhpdpiC1BO
nm5OkDcxGI017cxYyx8DTpZLSAH7UWJHxGE0BCloQSmkv9ibNMPMcE7vYIKjZPpI
P0xcJo2vX+1ZHC1IK6iOgyPhsSwGQzYGSQZHon4lh8s5GLwTL7OW5wbUBETkzSJG
LcBcklaHDbPMgCLQefrsIJJStgoaAuOGVGqLWH1cGLr1TevyDB8sk/9loGhwGjX8
bRATp6PM66D1FGWOeutM9wip1iQk2FjiSEh99hoFOl4fhNTj0D4qsiqkCkdxQ3oV
lYadzYoOUEflpfYp+ZHrY2sslW0cCP7zX/k+hJ3ZqjIsjRCnWPUXqxfeYmr8A8/N
dxJ1HvF1rwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBV/Kjud37WHQuTngV7wdNtR
fozcMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzUzNTJlMzEzMDMzMmUzNTMxMmUzMDJmMzIzNDJkMzMz
MjIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJtnMzANBgkqhkiG9w0BAQsF
AAOCAQEAfbSQgZPZzX3ayZ3FbHs99WpDZ+LvfRTVO8ehNzEx+CEBLyA5IKDONEVH
toO/F45+iTg2r4NatDadXnOs9Umg/qO00hBbSrhnkhfGbXVEKxj0Z7xf1WTzTZOF
/HDqMxXfmu2bY2sNe8HWM6c2Y/+sFVdCBHkhpQY7ZuPCHKg5NW0+jewb/Z+uprtr
UTs2tuRd83O2040d4Y5SBTvr8pqLRDlYaxvsIjGsMEu04cAszfhdka/7975RX5iz
aGh4FZt3M1UBTl5JLnTnZ4/izHbfXvM1voACLQIt4eHAAeZ2DtzHAOWk2P8h9Am/
zWpKNFBicDERoUPAHAR4k0bIcLOy4g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:49:23 2026 by rpki-client