Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/76f75fb1-31fb-3a55-9120-d058ef26aa98.roa
File:                     76f75fb1-31fb-3a55-9120-d058ef26aa98.roa (raw, json)
Hash identifier:          iJXMipLyVDmF5lJbBD6NPYR8rR8iOZVKs3RgoZbN2n4=
Subject key identifier:   41:B1:F7:4C:68:A7:6B:41:14:3F:7D:69:21:90:15:9E:2E:F2:09:6A
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584FA59345795CEE43770A2D8600
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/76f75fb1-31fb-3a55-9120-d058ef26aa98.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     6334
IP address blocks:        151.193.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:45:79:5c:ee:43:77:0a:2d:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=ec61de87-ce42-43fb-a71c-7fcabd6c8a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:2d:0f:0f:9e:f4:31:f2:5d:28:9a:e7:a4:
                    56:e6:17:c7:e9:51:f8:a3:32:07:b9:e4:00:f6:ae:
                    fd:06:29:bf:d5:fe:59:45:04:c5:d4:e1:78:78:12:
                    be:06:4d:aa:3d:ae:23:b2:59:91:5e:ee:df:c4:de:
                    8f:da:a2:1d:12:75:bb:75:3e:dc:c8:9b:77:f0:8c:
                    24:45:20:96:7b:58:c7:e5:57:28:96:89:ed:eb:14:
                    9c:16:cb:db:1c:8f:0d:20:57:73:d2:01:d1:9d:6b:
                    1c:bc:48:f9:a4:62:01:73:56:a1:58:1b:9e:0f:88:
                    4d:32:6c:b3:93:fe:17:31:1e:b4:a8:9e:96:d3:35:
                    59:64:d4:99:1d:2a:b4:40:f2:5a:eb:1f:26:54:73:
                    f6:f7:e8:21:a0:3b:88:6f:63:67:de:d9:c6:3f:b4:
                    de:d2:57:9f:25:50:ed:c0:ab:a5:ed:ed:06:47:ae:
                    36:b9:ec:ff:d6:13:35:42:3f:cc:23:26:0d:30:6c:
                    13:50:4a:5f:fe:48:58:aa:22:40:a4:88:eb:3a:a0:
                    49:8c:c6:c1:43:f0:6e:f4:3e:ca:94:6e:c6:09:50:
                    46:1c:29:9e:55:b7:6d:28:81:44:77:15:c1:b4:49:
                    e8:16:d1:72:cc:3b:55:89:bb:2b:57:8f:b2:b5:de:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B1:F7:4C:68:A7:6B:41:14:3F:7D:69:21:90:15:9E:2E:F2:09:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/76f75fb1-31fb-3a55-9120-d058ef26aa98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c2:a9:b0:fd:64:0d:a1:56:aa:0b:6f:4e:6c:41:00:de:85:
         bf:05:d7:35:c0:cf:09:c2:18:53:18:a2:af:8f:ce:dc:ac:df:
         4b:8e:10:dc:2b:3f:04:a6:fc:9f:d6:f7:d2:d6:12:e8:36:c1:
         fe:b6:84:bf:71:fa:02:1b:e8:48:93:80:9d:c4:d5:bc:79:c3:
         2a:c9:b6:d5:8b:a9:e4:07:af:8c:1b:3f:13:68:2c:af:2b:6f:
         2a:1a:48:73:74:78:e5:9b:b6:82:d2:79:d9:38:f2:16:07:ca:
         05:35:89:62:88:d7:76:a2:0f:5f:2b:69:d5:25:2b:15:1b:1b:
         f3:92:85:10:3e:66:27:1d:7d:2f:e7:3e:be:fd:e5:30:76:6c:
         2c:b0:fb:c5:d2:72:78:e7:c8:ed:a4:26:c7:b1:5c:14:fd:ee:
         8e:3b:9b:d1:bb:58:7e:7a:23:dc:4a:68:eb:1f:ba:15:94:8d:
         04:0c:84:5b:23:bc:33:b9:9b:6c:de:30:12:b7:65:eb:bb:80:
         1a:35:ba:9b:02:89:e3:5f:ad:d6:fe:e8:5b:6f:45:ae:55:f9:
         3a:69:f6:8c:e1:e8:1e:ab:07:5a:81:36:e6:bf:35:66:73:72:
         25:ce:f3:a7:d8:7c:37:5a:20:c9:dc:81:a8:22:a9:47:a1:c1:
         ee:bc:ad:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk0V5XO5DdwothgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk
ZWM2MWRlODctY2U0Mi00M2ZiLWE3MWMtN2ZjYWJkNmM4YTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HwtDw+e9DHyXSia56RW5hfH6VH4ozIHueQA
9q79Bim/1f5ZRQTF1OF4eBK+Bk2qPa4jslmRXu7fxN6P2qIdEnW7dT7cyJt38Iwk
RSCWe1jH5Vcolont6xScFsvbHI8NIFdz0gHRnWscvEj5pGIBc1ahWBueD4hNMmyz
k/4XMR60qJ6W0zVZZNSZHSq0QPJa6x8mVHP29+ghoDuIb2Nn3tnGP7Te0lefJVDt
wKul7e0GR642uez/1hM1Qj/MIyYNMGwTUEpf/khYqiJApIjrOqBJjMbBQ/Bu9D7K
lG7GCVBGHCmeVbdtKIFEdxXBtEnoFtFyzDtVibsrV4+ytd5tawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGx90xop2tBFD99aSGQFZ4u8glqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvNzZmNzVmYjEtMzFmYi0z
YTU1LTkxMjAtZDA1OGVmMjZhYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXCqbD9ZA2hVqoLb05sQQDehb8F1zXAzwnCGFMYoq+Pztys30uOENwr
PwSm/J/W99LWEug2wf62hL9x+gIb6EiTgJ3E1bx5wyrJttWLqeQHr4wbPxNoLK8r
byoaSHN0eOWbtoLSedk48hYHygU1iWKI13aiD18radUlKxUbG/OShRA+ZicdfS/n
Pr795TB2bCyw+8XScnjnyO2kJsexXBT97o47m9G7WH56I9xKaOsfuhWUjQQMhFsj
vDO5m2zeMBK3Zeu7gBo1upsCieNfrdb+6FtvRa5V+Tpp9ozh6B6rB1qBNua/NWZz
ciXO86fYfDdaIMncgagiqUehwe68rcs=
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:46:04 2026 by rpki-client