Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53754e25-a56d-31ce-8331-d7e315bb0aac.roa
File:                     53754e25-a56d-31ce-8331-d7e315bb0aac.roa (raw, json)
Hash identifier:          GJIrash12qY1Uk+muts0WZ5e2BCFhob2uC05YygrhvA=
Subject key identifier:   E0:86:72:91:F6:E2:65:A3:7E:EB:BE:6F:99:13:0E:A5:6B:58:B0:D4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2349F8A85373F05FB45340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53754e25-a56d-31ce-8331-d7e315bb0aac.roa
Signing time:             Fri 31 Jul 2026 18:26:05 +0000
ROA not before:           Fri 31 Jul 2026 18:26:05 +0000
ROA not after:            Thu 29 Oct 2026 18:26:05 +0000
asID:                     81
IP address blocks:        192.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:49:f8:a8:53:73:f0:5f:b4:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:05 2026 GMT
            Not After : Oct 29 18:26:05 2026 GMT
        Subject: CN=0f131f54-8059-4ddc-b3d9-259e6f951193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:c1:6d:68:0a:eb:23:31:23:eb:9c:53:dc:
                    5b:08:60:0d:e4:a0:3b:4d:52:23:b4:00:e2:b1:77:
                    85:d4:42:b6:02:b4:2a:f4:d9:cd:9d:5a:1a:57:a7:
                    64:7c:28:e4:2d:38:d5:84:98:3c:a4:d3:e5:a9:95:
                    da:3c:d2:92:85:37:fb:a0:da:77:6c:16:e9:bf:98:
                    d2:cc:7c:fe:da:e3:db:f4:cb:f8:61:5e:6c:52:28:
                    ff:e9:05:01:76:1d:58:c2:41:0f:98:85:e3:35:9e:
                    ad:24:1f:1c:a7:9b:ac:e8:5b:3b:41:78:f8:f6:5f:
                    df:a5:b7:7b:ad:58:cd:28:9b:e7:b7:85:7f:c2:3d:
                    73:fe:e3:f3:0a:c5:f9:b9:8e:c6:8b:6e:ea:32:08:
                    a2:29:bb:68:86:16:fe:f5:21:e9:20:19:d4:1e:16:
                    94:4d:d3:ec:d7:c4:be:3e:5d:1b:5e:c4:06:4f:5c:
                    3d:a3:0e:50:5b:db:28:c6:84:23:06:5e:a6:b4:e7:
                    12:79:33:ac:2c:a2:07:3a:86:07:12:f3:e3:25:41:
                    86:1b:6a:85:c9:67:0a:bf:48:b3:f7:57:8f:b5:fb:
                    70:28:71:71:0f:ec:be:f1:20:ee:9f:fa:2e:ed:42:
                    76:02:ec:f4:41:01:08:00:ca:a7:28:40:c1:2d:5b:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:86:72:91:F6:E2:65:A3:7E:EB:BE:6F:99:13:0E:A5:6B:58:B0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53754e25-a56d-31ce-8331-d7e315bb0aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:52:62:82:d3:84:68:f9:55:6f:b6:b1:c6:4c:c5:e6:bb:90:
         0d:a2:7c:e9:9c:0f:4e:ff:84:38:85:e0:81:59:65:d8:0f:4a:
         ef:54:dd:f4:b5:e2:d9:e8:a0:3b:67:3a:0f:4e:71:fd:b8:ba:
         ac:12:a4:49:43:a0:30:69:6a:c3:3f:17:44:dd:77:42:62:15:
         b5:fe:c3:6a:49:39:c8:04:7c:4c:19:7b:1a:45:c3:0f:7b:ee:
         3f:7e:a5:7e:5b:cb:69:67:78:09:6a:f1:97:c2:2d:0b:e6:c6:
         f5:95:d5:2d:48:e9:8a:12:25:94:3a:b6:2c:3b:d7:5c:ed:05:
         3b:a1:8d:90:f0:55:b6:08:93:12:f5:79:09:90:7e:1b:bf:71:
         42:d0:83:16:e7:57:6d:11:66:5d:31:85:52:96:41:6c:25:5f:
         63:ca:20:1b:39:98:b6:e2:81:7c:13:a7:f7:89:74:e5:fa:a1:
         dd:16:5d:48:a1:a3:f2:53:21:d1:6e:35:b6:01:50:98:c2:d5:
         9c:28:fb:a3:41:39:e0:3c:2a:a2:64:c4:94:f0:20:de:31:0f:
         7a:98:c8:57:9b:bd:33:b8:1e:7f:5b:9f:99:fa:98:5c:9f:67:
         10:9f:91:b8:4a:b0:7e:c6:d7:06:28:77:32:1f:4a:19:4b:a7:
         a4:1d:5d:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI0n4qFNz8F+0U0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDczMTE4MjYwNVoXDTI2MTAyOTE4MjYwNVowLzEtMCsGA1UEAxMk
MGYxMzFmNTQtODA1OS00ZGRjLWIzZDktMjU5ZTZmOTUxMTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2jBbWgK6yMxI+ucU9xbCGAN5KA7TVIjtADi
sXeF1EK2ArQq9NnNnVoaV6dkfCjkLTjVhJg8pNPlqZXaPNKShTf7oNp3bBbpv5jS
zHz+2uPb9Mv4YV5sUij/6QUBdh1YwkEPmIXjNZ6tJB8cp5us6Fs7QXj49l/fpbd7
rVjNKJvnt4V/wj1z/uPzCsX5uY7Gi27qMgiiKbtohhb+9SHpIBnUHhaUTdPs18S+
Pl0bXsQGT1w9ow5QW9soxoQjBl6mtOcSeTOsLKIHOoYHEvPjJUGGG2qFyWcKv0iz
91ePtftwKHFxD+y+8SDun/ou7UJ2Auz0QQEIAMqnKEDBLVvFYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCGcpH24mWjfuu+b5kTDqVrWLDUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTM3NTRlMjUtYTU2ZC0z
MWNlLTgzMzEtZDdlMzE1YmIwYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNSYoLThGj5VW+2scZMxea7kA2ifOmcD07/hDiF4IFZZdgPSu9U3fS1
4tnooDtnOg9Ocf24uqwSpElDoDBpasM/F0Tdd0JiFbX+w2pJOcgEfEwZexpFww97
7j9+pX5by2lneAlq8ZfCLQvmxvWV1S1I6YoSJZQ6tiw711ztBTuhjZDwVbYIkxL1
eQmQfhu/cULQgxbnV20RZl0xhVKWQWwlX2PKIBs5mLbigXwTp/eJdOX6od0WXUih
o/JTIdFuNbYBUJjC1Zwo+6NBOeA8KqJkxJTwIN4xD3qYyFebvTO4Hn9bn5n6mFyf
ZxCfkbhKsH7G1wYodzIfShlLp6QdXYc=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:58 2026 by rpki-client