Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/cef52a7c-1b7b-3738-8353-7b58053c28bb.roa
File:                     cef52a7c-1b7b-3738-8353-7b58053c28bb.roa (raw, json)
Hash identifier:          60h9nOGeQalSWvzYo4wzj1aZvpL66dguLsX3Bd7pcMk=
Subject key identifier:   F1:DE:F4:33:C7:DA:E5:C6:39:6B:9C:52:76:08:64:A3:32:DA:A7:C3
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F99526823E54B19EA016EEC00
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/cef52a7c-1b7b-3738-8353-7b58053c28bb.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     46499
IP address blocks:        143.203.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:68:23:e5:4b:19:ea:01:6e:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=3c442b96-fb98-4a15-b722-5397e440b7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:d5:e8:b4:be:db:4e:bd:11:71:c9:b3:e4:
                    b5:ae:85:fd:7b:03:97:e5:79:54:89:da:8b:ff:25:
                    66:4d:e6:ab:87:31:2a:ef:17:7a:0a:1f:68:4a:81:
                    50:1f:85:6d:21:3b:ce:31:87:a5:e9:bd:36:1a:e7:
                    23:ae:07:88:43:e5:9b:1d:22:86:e0:c4:30:5f:fa:
                    cd:d3:91:91:cb:49:dc:bd:b9:ff:ca:c3:73:ec:15:
                    1b:ef:56:a4:2d:1d:b1:b1:8f:6c:de:17:47:a9:7a:
                    1b:db:f3:6a:20:15:12:53:15:14:ac:51:cd:56:0c:
                    78:fc:cb:79:bd:3c:87:f6:f9:a1:c5:59:51:24:a3:
                    63:a1:3d:9b:20:40:e5:d5:b0:e3:c0:31:b3:35:c6:
                    46:e2:ae:17:aa:6b:38:38:33:00:13:d4:80:a2:a0:
                    bf:ec:24:15:d3:66:be:8e:b7:43:de:1f:3f:de:a2:
                    08:fa:97:2d:05:a6:71:82:89:8d:5a:69:08:f8:c5:
                    0e:6c:fa:f9:5b:e7:45:cd:9f:94:0d:35:58:34:00:
                    88:69:f2:7a:b1:f7:4f:52:83:7d:a9:6a:24:8f:06:
                    69:0b:80:ab:c1:57:9f:e9:ef:d0:44:8c:29:5c:90:
                    5d:ae:12:c6:21:40:90:e9:cb:6e:7a:77:da:63:60:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:F4:33:C7:DA:E5:C6:39:6B:9C:52:76:08:64:A3:32:DA:A7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/cef52a7c-1b7b-3738-8353-7b58053c28bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:8a:5f:f9:51:1c:1f:6a:ac:ba:63:08:f1:57:29:6b:19:1a:
         05:ec:b8:72:54:73:91:5a:3c:71:6f:d9:e1:1e:13:02:49:19:
         d5:15:23:0d:81:6f:e8:7f:3b:2a:79:17:6b:90:bf:2d:8e:ad:
         ae:97:db:06:ed:fe:79:6b:b2:ae:48:46:f3:33:a5:93:2f:62:
         aa:f6:f7:92:24:a9:bb:ce:e0:f9:ac:e0:37:43:12:0c:7d:64:
         2e:f6:62:5d:2a:18:72:81:f1:ac:9d:e3:b8:39:51:81:dd:e9:
         ba:b6:db:26:71:d4:61:1d:95:39:81:71:5e:fa:9e:32:28:36:
         2b:5d:a4:24:d1:61:f7:f5:83:6b:51:40:54:a4:79:44:a4:41:
         01:8a:8a:bf:64:31:44:90:c8:3d:91:f8:3d:1b:66:61:51:4a:
         cb:8a:a6:73:2d:38:06:20:65:ea:38:99:c2:56:99:22:8f:3e:
         22:10:19:9a:d4:e1:d9:f5:4d:4f:7e:14:aa:48:ce:0f:ec:31:
         65:3e:25:d0:07:f0:55:cb:69:50:49:14:48:0e:e9:53:f5:03:
         2f:6d:eb:74:0a:29:f2:db:14:d4:3d:53:c0:a1:d6:14:45:dc:
         70:66:2a:c6:5a:55:6c:b3:d9:c7:49:98:db:98:78:2b:5c:f8:
         3a:6b:7b:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZUmgj5UsZ6gFu7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI2MTAyMzE1NDAxMFoXDTI3MDEyMTE2NDAxMFowLzEtMCsGA1UEAxMk
M2M0NDJiOTYtZmI5OC00YTE1LWI3MjItNTM5N2U0NDBiN2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmrV6LS+2069EXHJs+S1roX9ewOX5XlUidqL
/yVmTearhzEq7xd6Ch9oSoFQH4VtITvOMYel6b02GucjrgeIQ+WbHSKG4MQwX/rN
05GRy0ncvbn/ysNz7BUb71akLR2xsY9s3hdHqXob2/NqIBUSUxUUrFHNVgx4/Mt5
vTyH9vmhxVlRJKNjoT2bIEDl1bDjwDGzNcZG4q4Xqms4ODMAE9SAoqC/7CQV02a+
jrdD3h8/3qII+pctBaZxgomNWmkI+MUObPr5W+dFzZ+UDTVYNACIafJ6sfdPUoN9
qWokjwZpC4CrwVef6e/QRIwpXJBdrhLGIUCQ6ctuenfaY2BnCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHe9DPH2uXGOWucUnYIZKMy2qfDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvY2VmNTJhN2MtMWI3Yi0z
NzM4LTgzNTMtN2I1ODA1M2MyOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8ubMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMSKX/lRHB9qrLpjCPFXKWsZGgXsuHJUc5FaPHFv2eEeEwJJGdUVIw2B
b+h/Oyp5F2uQvy2Ora6X2wbt/nlrsq5IRvMzpZMvYqr295IkqbvO4Pms4DdDEgx9
ZC72Yl0qGHKB8ayd47g5UYHd6bq22yZx1GEdlTmBcV76njIoNitdpCTRYff1g2tR
QFSkeUSkQQGKir9kMUSQyD2R+D0bZmFRSsuKpnMtOAYgZeo4mcJWmSKPPiIQGZrU
4dn1TU9+FKpIzg/sMWU+JdAH8FXLaVBJFEgO6VP1Ay9t63QKKfLbFNQ9U8Ch1hRF
3HBmKsZaVWyz2cdJmNuYeCtc+Dpre3g=
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:41:27 2026 by rpki-client