Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa
File:                     815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa (raw, json)
Hash identifier:          vgzTp9WhGds/Ej4zlyvRlb+LC4cVeWgwDV+9EZ3/Frw=
Subject key identifier:   48:9B:2D:E8:4A:C1:D1:CB:B8:DA:95:CD:BE:41:A8:DF:E3:AC:B8:74
Certificate issuer:       /CN=423661c1-1874-440d-9de8-948e2ed69ebe
Certificate serial:       010D0C9F4328584EB66CE91ADD328B5A2F45FB80
Authority key identifier: 30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa
Signing time:             Mon 03 Aug 2026 09:05:04 +0000
ROA not before:           Mon 03 Aug 2026 09:05:04 +0000
ROA not after:            Wed 30 Sep 2026 14:17:25 +0000
asID:                     402056
IP address blocks:        198.252.150.0/24 maxlen: 24
                          2602:f3c3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:6c:e9:1a:dd:32:8b:5a:2f:45:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423661c1-1874-440d-9de8-948e2ed69ebe
        Validity
            Not Before: Aug  3 09:05:04 2026 GMT
            Not After : Sep 30 14:17:25 2026 GMT
        Subject: CN=65afdc6f-42dc-4423-9d25-3fba3df90a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:e1:c6:13:e5:fc:3f:c9:5b:f3:dc:d8:c5:
                    82:61:07:3a:52:cb:af:d3:dc:62:3e:e9:6a:1c:b7:
                    2b:e3:e3:44:af:f0:69:51:29:bb:44:9f:d5:57:41:
                    13:41:e8:b9:5e:12:af:01:5e:fd:8b:a5:89:36:38:
                    e6:96:d9:ff:ee:e1:1f:08:4e:ac:c2:7e:77:47:76:
                    c1:b2:f5:83:80:13:13:23:9e:7f:8a:01:f0:f6:c9:
                    4d:7c:7a:43:68:43:db:f5:64:3e:85:6d:a7:92:08:
                    bd:f9:f6:9e:38:f4:e5:94:9d:c1:77:6a:00:0a:b9:
                    ae:4f:65:0f:08:11:fc:a3:3b:72:bb:21:73:a8:e9:
                    c6:7d:3c:0e:61:41:a1:db:88:ec:55:b4:65:9d:29:
                    ff:ef:4f:cd:05:8d:1d:d8:c4:32:23:40:9d:a9:d2:
                    fa:9b:f1:49:66:40:ac:cf:a8:e4:5b:26:34:26:b5:
                    bc:8d:19:47:4b:b6:e6:17:43:54:25:3d:af:c8:9a:
                    0b:f0:5c:0b:8c:11:43:38:e4:1e:8b:71:66:8f:cb:
                    d0:9b:2f:3f:77:61:b3:23:17:de:89:b1:09:11:14:
                    32:16:60:09:44:fb:49:6b:58:28:48:c3:b4:2f:3a:
                    49:d5:46:06:7f:bd:32:6b:66:a8:24:1e:69:a3:59:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:2D:E8:4A:C1:D1:CB:B8:DA:95:CD:BE:41:A8:DF:E3:AC:B8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl

            X509v3 Authority Key Identifier:
                keyid:30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.150.0/24
                IPv6:
                  2602:f3c3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:31:f1:d9:a0:95:30:8f:66:8d:70:3b:3b:01:c9:f0:5f:dd:
         5d:26:bd:df:44:81:6a:dc:1b:23:b0:32:8c:a8:6c:da:e3:86:
         e4:8f:75:bc:04:49:32:d5:cc:7e:ac:cd:a5:b8:06:be:9c:e9:
         2d:bd:2f:3e:a6:16:5d:f7:d7:e1:da:70:d4:d4:0a:3b:4c:6d:
         8d:fa:d0:92:f0:c1:d1:a9:07:b9:f7:42:bd:bb:47:fe:2f:db:
         95:7e:7d:e0:d6:63:7a:c0:0b:93:95:8a:33:b6:1d:36:c3:bc:
         98:f9:ce:6f:e8:3d:ab:15:be:56:15:73:93:9e:0f:2b:00:37:
         61:f1:0a:e4:99:7d:e4:0b:00:92:4b:f7:3b:26:a3:98:72:11:
         1b:fb:af:69:bc:29:6e:eb:ef:5f:40:9a:d9:3a:4b:97:c4:b7:
         5a:b4:23:bf:59:a9:6a:98:3e:bf:19:60:4b:14:20:ca:ea:16:
         95:9e:40:64:65:4c:e7:97:fa:01:0f:69:fa:9b:e7:db:a4:b9:
         91:fe:89:b3:47:72:ec:41:15:0e:4e:d4:3f:29:31:c2:fe:56:
         36:58:1f:ae:49:cf:f4:19:52:da:ac:88:d2:c3:7b:5f:99:45:
         e8:91:a3:e9:40:17:bc:fc:ab:e5:bc:10:e7:0e:4f:8c:e3:e0:
         24:99:64:dd
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE62bOka3TKLWi9F+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzNjYxYzEtMTg3NC00NDBkLTlkZTgtOTQ4ZTJlZDY5
ZWJlMB4XDTI2MDgwMzA5MDUwNFoXDTI2MDkzMDE0MTcyNVowLzEtMCsGA1UEAxMk
NjVhZmRjNmYtNDJkYy00NDIzLTlkMjUtM2ZiYTNkZjkwYTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3rhxhPl/D/JW/Pc2MWCYQc6Usuv09xiPulq
HLcr4+NEr/BpUSm7RJ/VV0ETQei5XhKvAV79i6WJNjjmltn/7uEfCE6swn53R3bB
svWDgBMTI55/igHw9slNfHpDaEPb9WQ+hW2nkgi9+faeOPTllJ3Bd2oACrmuT2UP
CBH8oztyuyFzqOnGfTwOYUGh24jsVbRlnSn/70/NBY0d2MQyI0CdqdL6m/FJZkCs
z6jkWyY0JrW8jRlHS7bmF0NUJT2vyJoL8FwLjBFDOOQei3Fmj8vQmy8/d2GzIxfe
ibEJERQyFmAJRPtJa1goSMO0LzpJ1UYGf70ya2aoJB5po1nZYwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEibLehKwdHLuNqVzb5BqN/jrLh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MjM2
NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhlMmVkNjllYmUvODE1YzNhZmQtOTJjNS0z
OWE3LThmYmEtMDI5N2IxZTFjYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDIzNjYxYzEtMTg3NC00NDBkLTlk
ZTgtOTQ4ZTJlZDY5ZWJlLzQyMzY2MWMxLTE4NzQtNDQwZC05ZGU4LTk0OGUyZWQ2
OWViZS5jcmwwHwYDVR0jBBgwFoAUMGVf3lIV21tleIOlxHXF++nNTG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80MjM2NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhl
MmVkNjllYmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxvyWMA4E
AgACMAgDBgAmAvPDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAMfHZoJUwj2aNcDs7AcnwX91dJr3fRIFq
3BsjsDKMqGza44bkj3W8BEky1cx+rM2luAa+nOktvS8+phZd99fh2nDU1Ao7TG2N
+tCS8MHRqQe590K9u0f+L9uVfn3g1mN6wAuTlYozth02w7yY+c5v6D2rFb5WFXOT
ng8rADdh8QrkmX3kCwCSS/c7JqOYchEb+69pvClu6+9fQJrZOkuXxLdatCO/Walq
mD6/GWBLFCDK6haVnkBkZUznl/oBD2n6m+fbpLmR/omzR3LsQRUOTtQ/KTHC/lY2
WB+uSc/0GVLarIjSw3tfmUXokaPpQBe8/KvlvBDnDk+M4+AkmWTd
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:47 2026 by rpki-client