Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b51dd9c0-ea67-3b52-8002-2d067541fcb7.roa
File:                     b51dd9c0-ea67-3b52-8002-2d067541fcb7.roa (raw, json)
Hash identifier:          Fo7uqvi7arFfGT/RtlgboPreEViZlfcnOhv08+6ePRE=
Subject key identifier:   57:92:C0:48:2E:23:76:D6:39:0A:EC:F8:A0:6E:10:38:FC:BE:CF:DD
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584DAD0648E821A33115C95852C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b51dd9c0-ea67-3b52-8002-2d067541fcb7.roa
Signing time:             Thu 30 Apr 2026 07:29:05 +0000
ROA not before:           Thu 30 Apr 2026 07:29:05 +0000
ROA not after:            Wed 29 Jul 2026 07:29:05 +0000
asID:                     402298
IP address blocks:        158.62.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:06:48:e8:21:a3:31:15:c9:58:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Apr 30 07:29:05 2026 GMT
            Not After : Jul 29 07:29:05 2026 GMT
        Subject: CN=53e593f6-7449-4ef5-a857-33e7571acb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:20:68:24:ec:3d:1b:6b:97:7b:5d:eb:ee:
                    aa:dc:8c:ee:4d:b0:fd:9d:48:3d:83:61:40:e0:cb:
                    3e:fb:28:0b:ba:e1:cb:b0:a4:5b:e4:a0:5d:ad:7f:
                    9f:06:7c:90:c4:81:78:f5:42:57:38:8f:89:f0:66:
                    ba:14:8c:7c:d4:be:8a:76:48:99:23:5c:ee:13:f5:
                    08:8f:2c:dc:5b:be:17:34:5d:b7:bf:7e:c0:09:ea:
                    01:6e:99:bb:8b:dc:12:af:48:c6:ca:7a:71:cb:a0:
                    11:6d:85:93:26:de:43:05:72:72:bf:22:b8:b2:b8:
                    8f:c0:5b:44:a6:1c:4c:86:50:76:f1:b6:ad:0e:4e:
                    ea:a8:2d:14:79:8c:cc:02:b2:67:0e:be:62:c6:6f:
                    e1:ec:cd:f2:be:50:22:a8:96:55:e3:e4:39:2a:dd:
                    73:23:e8:55:92:e3:16:5d:b4:da:c1:61:e9:6f:1d:
                    c8:31:77:57:df:73:90:ce:c7:8c:f5:f3:b5:25:25:
                    7b:30:45:c8:2a:98:40:13:5b:c2:7c:bc:ed:21:d8:
                    3b:0e:93:59:cf:56:9c:fb:c7:70:07:92:41:00:bd:
                    a9:4d:2c:90:f3:9c:33:71:c8:db:69:76:33:c0:2f:
                    68:9c:ba:dc:1b:40:5d:06:e6:16:ea:d5:87:cd:67:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:92:C0:48:2E:23:76:D6:39:0A:EC:F8:A0:6E:10:38:FC:BE:CF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b51dd9c0-ea67-3b52-8002-2d067541fcb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:a3:1f:f5:f4:3d:7a:d8:24:f3:dd:95:e7:56:e7:00:c4:
         bf:75:12:3c:cc:f7:e4:48:96:a5:6d:2c:65:da:e0:cc:f9:49:
         93:4e:97:cc:48:6a:cf:ad:72:30:18:dd:c8:d4:08:69:70:49:
         3d:f0:5b:5f:df:92:b3:ed:62:47:9c:2d:17:16:80:65:df:b4:
         eb:c0:65:97:e7:27:46:0a:f8:fc:78:49:09:42:3f:69:1d:94:
         a8:b4:f7:51:e3:28:b2:79:f6:d9:b5:00:33:f1:f9:1b:6e:91:
         d8:f2:ae:4a:8a:09:f4:ff:81:e6:ca:67:93:54:79:cf:f3:69:
         a4:a2:e1:52:2a:0b:f4:bd:d4:39:86:f9:f2:24:f9:d2:3d:35:
         dd:e2:b0:58:3f:db:20:ed:2e:68:66:ee:37:c9:3a:f5:2a:5f:
         f0:47:75:77:bd:23:27:a7:a6:ad:9e:66:d0:54:86:06:cf:1e:
         2f:b2:8d:2a:ff:b8:72:cc:2b:72:c0:ce:28:2e:15:57:65:d1:
         6c:8e:e2:f9:a2:c3:33:7e:14:cc:77:12:0f:2a:a0:e6:af:d8:
         b4:b3:3c:58:cd:3d:a2:fe:a1:47:33:60:32:02:4a:01:fc:9c:
         71:37:00:54:30:d6:79:01:9e:0c:62:5e:1b:5d:26:c0:77:31:
         3a:86:d6:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tBkjoIaMxFclYUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDQzMDA3MjkwNVoXDTI2MDcyOTA3MjkwNVowLzEtMCsGA1UEAxMk
NTNlNTkzZjYtNzQ0OS00ZWY1LWE4NTctMzNlNzU3MWFjYjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQAgaCTsPRtrl3td6+6q3IzuTbD9nUg9g2FA
4Ms++ygLuuHLsKRb5KBdrX+fBnyQxIF49UJXOI+J8Ga6FIx81L6KdkiZI1zuE/UI
jyzcW74XNF23v37ACeoBbpm7i9wSr0jGynpxy6ARbYWTJt5DBXJyvyK4sriPwFtE
phxMhlB28batDk7qqC0UeYzMArJnDr5ixm/h7M3yvlAiqJZV4+Q5Kt1zI+hVkuMW
XbTawWHpbx3IMXdX33OQzseM9fO1JSV7MEXIKphAE1vCfLztIdg7DpNZz1ac+8dw
B5JBAL2pTSyQ85wzccjbaXYzwC9onLrcG0BdBuYW6tWHzWfkeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeSwEguI3bWOQrs+KBuEDj8vs/dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjUxZGQ5YzAtZWE2Ny0z
YjUyLTgwMDItMmQwNjc1NDFmY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvUox/19D162CTz3ZXnVucAxL91EjzM9+RIlqVtLGXa4Mz5SZNOl8xI
as+tcjAY3cjUCGlwST3wW1/fkrPtYkecLRcWgGXftOvAZZfnJ0YK+Px4SQlCP2kd
lKi091HjKLJ59tm1ADPx+RtukdjyrkqKCfT/gebKZ5NUec/zaaSi4VIqC/S91DmG
+fIk+dI9Nd3isFg/2yDtLmhm7jfJOvUqX/BHdXe9Iyenpq2eZtBUhgbPHi+yjSr/
uHLMK3LAziguFVdl0WyO4vmiwzN+FMx3Eg8qoOav2LSzPFjNPaL+oUczYDICSgH8
nHE3AFQw1nkBngxiXhtdJsB3MTqG1vw=
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:37 2026 by rpki-client