Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/49fbdb63-a4f5-338d-bccc-91c05a389315.roa
File:                     49fbdb63-a4f5-338d-bccc-91c05a389315.roa (raw, json)
Hash identifier:          bBgvFiQWWaMe8q9zRr5KqRsiehGS+EJb3YMOqhyeEhM=
Subject key identifier:   F5:A4:75:5A:5E:40:20:E4:E5:6A:01:DF:C8:EE:00:95:C1:ED:70:A8
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F9F3834CDDBEADC498D3C8460
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/49fbdb63-a4f5-338d-bccc-91c05a389315.roa
Signing time:             Sun 25 Oct 2026 18:22:14 +0000
ROA not before:           Sun 25 Oct 2026 18:22:14 +0000
ROA not after:            Sat 23 Jan 2027 19:22:14 +0000
asID:                     63129
IP address blocks:        143.203.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:38:34:cd:db:ea:dc:49:8d:3c:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 25 18:22:14 2026 GMT
            Not After : Jan 23 19:22:14 2027 GMT
        Subject: CN=778ab105-4374-41fa-b710-a61948983770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:a9:00:da:5a:26:98:a8:3c:f5:e0:22:34:
                    34:e0:04:d7:80:b7:6a:9c:a0:c6:b9:a2:e5:5a:1a:
                    d9:66:1e:eb:ae:db:b7:d3:29:8c:b4:c8:fb:76:c8:
                    47:1a:ef:24:38:a5:b0:71:8e:c7:43:7e:4f:87:91:
                    8a:55:4c:f9:39:98:0f:f8:91:b2:ed:e5:f3:66:27:
                    19:f7:fe:66:cc:e4:7a:c2:0a:ce:e7:06:8d:bf:1e:
                    b1:71:97:d7:08:7d:d6:59:06:24:76:3b:49:c9:be:
                    b1:72:48:e7:c0:14:c2:0e:15:2f:90:cc:94:71:ad:
                    a2:ba:fa:86:83:b1:8a:ed:7a:14:75:b0:67:dd:5e:
                    12:3a:2c:fc:c0:65:f2:bd:13:8e:66:01:9c:d1:d5:
                    58:b2:89:1e:fc:e4:81:51:83:a8:f2:f8:ef:39:43:
                    db:63:7b:ce:27:05:93:3a:0f:41:cd:00:9e:2e:ae:
                    02:1c:6e:f2:a4:71:fb:30:e1:e1:ad:3c:bc:27:e5:
                    78:f0:11:98:de:47:dc:88:9d:e6:5a:99:4c:ca:da:
                    26:ff:08:24:02:c8:51:98:ae:95:e0:44:8b:f2:23:
                    c8:48:cd:1e:d8:95:86:1e:6f:cd:cf:68:ca:ce:e1:
                    84:ff:94:66:1a:96:b0:58:8b:33:9f:ae:fb:89:e9:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:75:5A:5E:40:20:E4:E5:6A:01:DF:C8:EE:00:95:C1:ED:70:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/49fbdb63-a4f5-338d-bccc-91c05a389315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:42:b5:78:3e:86:3b:89:96:28:8e:67:ab:6c:9b:48:b4:
         30:f2:b6:b5:0b:78:9b:14:f3:82:5e:e3:87:79:a3:1c:f3:4f:
         c3:1b:16:a4:8c:3f:05:bd:bc:18:3e:14:61:bf:20:4c:39:af:
         35:b0:9d:13:95:6c:97:3a:5b:c0:16:ae:10:a2:ed:07:e9:cc:
         15:4f:52:5d:69:04:de:4d:6f:0f:4d:91:f0:54:70:a2:d7:4e:
         52:a9:96:cc:ab:87:e3:4f:7f:ca:a0:ee:1a:4c:3f:b4:68:6d:
         dc:ae:ad:a9:29:b5:19:de:c2:a5:8a:b8:4a:33:61:f8:a6:e4:
         5e:e6:fd:b8:0e:e2:48:9e:60:fa:fd:4d:3c:e3:d1:aa:43:22:
         4c:83:67:aa:1b:93:63:94:22:b4:57:e7:74:63:d0:87:43:3b:
         e5:cd:a7:cc:c0:b1:a2:27:e2:10:83:31:d5:47:73:fe:8d:ff:
         af:3c:00:c7:a7:bb:8e:0e:d1:c4:b5:6d:63:7b:e6:51:52:68:
         7e:1f:dd:4c:71:ac:e0:5e:e1:ab:82:fa:dc:9d:44:ab:2a:01:
         cf:3f:98:2e:78:cc:f4:74:c9:62:cb:c5:b3:7c:18:ec:95:1c:
         6a:5c:26:f0:43:a0:55:f3:ba:32:bd:66:d0:91:36:d6:6d:f5:
         f7:88:fe:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+fODTN2+rcSY08hGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI2MTAyNTE4MjIxNFoXDTI3MDEyMzE5MjIxNFowLzEtMCsGA1UEAxMk
Nzc4YWIxMDUtNDM3NC00MWZhLWI3MTAtYTYxOTQ4OTgzNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk+pANpaJpioPPXgIjQ04ATXgLdqnKDGuaLl
WhrZZh7rrtu30ymMtMj7dshHGu8kOKWwcY7HQ35Ph5GKVUz5OZgP+JGy7eXzZicZ
9/5mzOR6wgrO5waNvx6xcZfXCH3WWQYkdjtJyb6xckjnwBTCDhUvkMyUca2iuvqG
g7GK7XoUdbBn3V4SOiz8wGXyvROOZgGc0dVYsoke/OSBUYOo8vjvOUPbY3vOJwWT
Og9BzQCeLq4CHG7ypHH7MOHhrTy8J+V48BGY3kfciJ3mWplMytom/wgkAshRmK6V
4ESL8iPISM0e2JWGHm/Nz2jKzuGE/5RmGpawWIszn677ienz6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWkdVpeQCDk5WoB38juAJXB7XCoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvNDlmYmRiNjMtYTRmNS0z
MzhkLWJjY2MtOTFjMDVhMzg5MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8ubMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0gQrV4PoY7iZYojmerbJtItDDytrULeJsU84Je44d5oxzzT8MbFqSM
PwW9vBg+FGG/IEw5rzWwnROVbJc6W8AWrhCi7QfpzBVPUl1pBN5Nbw9NkfBUcKLX
TlKplsyrh+NPf8qg7hpMP7RobdyurakptRnewqWKuEozYfim5F7m/bgO4kieYPr9
TTzj0apDIkyDZ6obk2OUIrRX53Rj0IdDO+XNp8zAsaIn4hCDMdVHc/6N/688AMen
u44O0cS1bWN75lFSaH4f3UxxrOBe4auC+tydRKsqAc8/mC54zPR0yWLLxbN8GOyV
HGpcJvBDoFXzujK9ZtCRNtZt9feI/jA=
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:39:13 2026 by rpki-client