Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c5ec198-f5cc-3bc3-9129-bb4fbb23d628.roa
File:                     0c5ec198-f5cc-3bc3-9129-bb4fbb23d628.roa (raw, json)
Hash identifier:          YYxvHI4zFRMl8m4sFk7s1l3EQfUbS3PFCASs+gq9k4A=
Subject key identifier:   40:B2:DB:45:2E:94:4C:E9:80:17:EB:D5:D3:2A:FF:4E:64:FF:CA:71
Certificate issuer:       /CN=0c1c37d6-16cf-4992-8d04-6ec63e386a7a
Certificate serial:       010D0C9F4328584EE12C5EA84392D6EFB07A6500
Authority key identifier: 8B:66:53:EE:59:09:0D:92:9D:FA:07:92:4E:31:0F:8F:27:97:15:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c5ec198-f5cc-3bc3-9129-bb4fbb23d628.roa
Signing time:             Tue 18 Aug 2026 16:34:47 +0000
ROA not before:           Tue 18 Aug 2026 16:34:47 +0000
ROA not after:            Mon 16 Nov 2026 17:34:47 +0000
asID:                     40156
IP address blocks:        139.64.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e1:2c:5e:a8:43:92:d6:ef:b0:7a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1c37d6-16cf-4992-8d04-6ec63e386a7a
        Validity
            Not Before: Aug 18 16:34:47 2026 GMT
            Not After : Nov 16 17:34:47 2026 GMT
        Subject: CN=90f3a30f-7375-453a-a287-6bdc6f9c34c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:64:19:a0:35:77:78:03:15:45:fe:63:27:
                    b2:a6:d3:f4:52:4e:1b:cb:3a:fc:a6:7b:94:d9:c7:
                    33:26:69:0e:8a:55:47:46:4f:87:8c:58:32:fe:ad:
                    bb:66:7a:53:be:53:3e:8b:d4:f8:f6:96:14:36:d9:
                    af:04:e3:91:8c:97:b6:ed:d6:fd:7d:4d:a5:cc:c4:
                    7e:6d:e5:72:c8:de:f0:55:c7:6c:8a:79:13:73:6c:
                    56:ac:a1:e0:13:f9:18:a5:23:48:79:be:a4:49:35:
                    fc:01:20:40:a7:1a:df:e0:50:6a:88:b7:4f:c1:03:
                    3d:0f:86:7f:b6:fb:93:4e:ee:5b:8e:ea:81:34:16:
                    1d:73:4e:dc:d9:ae:de:38:ff:2b:69:a2:59:f5:53:
                    a9:17:cb:f5:ec:75:53:7e:7c:07:8c:8b:10:23:cd:
                    b1:9c:bb:bc:44:48:7d:93:58:17:32:5d:90:68:b8:
                    ed:11:1a:78:f4:0d:fe:44:56:5a:f8:6e:b9:42:3c:
                    74:47:42:46:16:ea:69:65:4b:a2:5e:1c:d4:15:fb:
                    2b:ea:b0:a5:f4:b8:9d:7f:c9:40:2c:de:4d:81:02:
                    c9:b4:f7:19:71:d9:5f:a8:65:f5:39:9b:a7:a0:b0:
                    67:43:6a:81:bb:ec:5f:03:71:1b:83:e1:02:0f:5f:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:DB:45:2E:94:4C:E9:80:17:EB:D5:D3:2A:FF:4E:64:FF:CA:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c5ec198-f5cc-3bc3-9129-bb4fbb23d628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.crl

            X509v3 Authority Key Identifier:
                keyid:8B:66:53:EE:59:09:0D:92:9D:FA:07:92:4E:31:0F:8F:27:97:15:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0c1c37d6-16cf-4992-8d04-6ec63e386a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:54:ca:33:bd:cf:b6:f8:3f:b7:7d:2f:ed:cc:bb:97:fb:0a:
         9d:cb:a3:c5:63:0d:c0:5e:19:ba:13:0d:0e:b1:67:0a:f0:6c:
         c9:99:c2:d4:9b:57:12:9f:09:8c:34:18:cd:10:a5:88:30:2e:
         91:78:37:4c:2a:84:0f:97:a6:63:44:f5:7f:c6:0a:89:e2:2e:
         fb:97:23:35:2d:27:e2:0e:d1:d1:1f:7d:c8:c4:69:6e:f2:48:
         47:6e:1e:0b:75:21:37:c4:ac:65:53:c8:ff:3b:85:80:ee:f5:
         0c:07:9e:91:66:41:b0:57:98:3e:3e:39:02:ea:99:7f:4b:d7:
         58:22:6e:6f:ff:07:56:db:dc:cb:75:be:bd:06:2c:79:88:96:
         f3:6a:27:bd:66:de:02:49:6e:f2:62:39:8c:57:43:f3:68:ea:
         3a:9d:0a:52:0f:f7:cd:d3:f5:bb:06:79:0f:af:70:ae:83:49:
         cf:b4:04:2e:83:7c:30:37:28:10:43:b9:ed:f9:aa:70:91:39:
         b2:6e:13:08:3e:fa:2f:9f:09:f9:c3:cd:97:b2:e2:4a:31:51:
         b5:19:2d:50:f4:de:7d:fc:42:61:9e:fd:56:4a:85:c5:9f:40:
         c5:6a:81:a4:db:d5:d6:52:98:6a:1d:39:1a:f5:e5:57:67:a1:
         17:ff:53:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7hLF6oQ5LW77B6ZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMxYzM3ZDYtMTZjZi00OTkyLThkMDQtNmVjNjNlMzg2
YTdhMB4XDTI2MDgxODE2MzQ0N1oXDTI2MTExNjE3MzQ0N1owLzEtMCsGA1UEAxMk
OTBmM2EzMGYtNzM3NS00NTNhLWEyODctNmJkYzZmOWMzNGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnVkGaA1d3gDFUX+YyeyptP0Uk4byzr8pnuU
2cczJmkOilVHRk+HjFgy/q27ZnpTvlM+i9T49pYUNtmvBOORjJe27db9fU2lzMR+
beVyyN7wVcdsinkTc2xWrKHgE/kYpSNIeb6kSTX8ASBApxrf4FBqiLdPwQM9D4Z/
tvuTTu5bjuqBNBYdc07c2a7eOP8raaJZ9VOpF8v17HVTfnwHjIsQI82xnLu8REh9
k1gXMl2QaLjtERp49A3+RFZa+G65Qjx0R0JGFuppZUuiXhzUFfsr6rCl9Lidf8lA
LN5NgQLJtPcZcdlfqGX1OZunoLBnQ2qBu+xfA3Ebg+ECD18YqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECy20UulEzpgBfr1dMq/05k/8pxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8wYzFj
MzdkNi0xNmNmLTQ5OTItOGQwNC02ZWM2M2UzODZhN2EvMGM1ZWMxOTgtZjVjYy0z
YmMzLTkxMjktYmI0ZmJiMjNkNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMGMxYzM3ZDYtMTZjZi00OTkyLThk
MDQtNmVjNjNlMzg2YTdhLzBjMWMzN2Q2LTE2Y2YtNDk5Mi04ZDA0LTZlYzYzZTM4
NmE3YS5jcmwwHwYDVR0jBBgwFoAUi2ZT7lkJDZKd+geSTjEPjyeXFZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi8wYzFjMzdkNi0xNmNmLTQ5OTItOGQwNC02ZWM2
M2UzODZhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0CbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxUyjO9z7b4P7d9L+3Mu5f7Cp3Lo8VjDcBeGboTDQ6xZwrwbMmZwtSb
VxKfCYw0GM0QpYgwLpF4N0wqhA+XpmNE9X/GConiLvuXIzUtJ+IO0dEffcjEaW7y
SEduHgt1ITfErGVTyP87hYDu9QwHnpFmQbBXmD4+OQLqmX9L11gibm//B1bb3Mt1
vr0GLHmIlvNqJ71m3gJJbvJiOYxXQ/No6jqdClIP983T9bsGeQ+vcK6DSc+0BC6D
fDA3KBBDue35qnCRObJuEwg++i+fCfnDzZey4koxUbUZLVD03n38QmGe/VZKhcWf
QMVqgaTb1dZSmGodORr15VdnoRf/U3E=
-----END CERTIFICATE-----
Generated at Wed Aug 26 05:37:02 2026 by rpki-client