Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b794a4bc-edae-3d2e-beaa-9e68358f596d.roa
File:                     b794a4bc-edae-3d2e-beaa-9e68358f596d.roa (raw, json)
Hash identifier:          pQs5SfCqAsVfIeH2nkTyIFU8gcQjg6L7k419UQJ79XI=
Subject key identifier:   FB:E7:06:2A:15:D9:D8:87:CF:DC:8D:E1:05:30:4A:A7:73:CA:F9:21
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584B3D17A60F22FB9F27F1E74080
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b794a4bc-edae-3d2e-beaa-9e68358f596d.roa
Signing time:             Thu 18 Sep 2025 19:39:39 +0000
ROA not before:           Thu 18 Sep 2025 19:39:39 +0000
ROA not after:            Wed 17 Dec 2025 20:39:39 +0000
asID:                     11377
IP address blocks:        159.26.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:17:a6:0f:22:fb:9f:27:f1:e7:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 18 19:39:39 2025 GMT
            Not After : Dec 17 20:39:39 2025 GMT
        Subject: CN=e42ccbc2-7361-4e4f-bd09-04b6b5de6d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:95:08:df:4e:f3:25:30:53:d0:8d:b5:db:
                    13:c9:1f:1e:d3:ee:be:81:98:70:53:82:3a:af:62:
                    f1:46:ff:0d:13:ae:ac:3e:5a:cc:80:b2:c3:2c:14:
                    d8:4d:7a:3e:85:64:42:67:85:83:9d:30:1a:f0:8e:
                    9a:17:5c:a0:9c:10:4f:7d:1a:d1:df:c2:bb:7e:f1:
                    19:fb:80:65:7f:c0:e5:af:ac:c1:61:0c:2d:ec:5a:
                    20:5a:c6:60:9b:f8:fa:ba:b3:33:65:cb:37:6f:a9:
                    43:11:3d:a6:17:46:ab:c8:55:06:a1:5a:3d:98:c1:
                    2f:96:5e:a6:cb:53:df:f0:5f:1d:e8:eb:d2:93:5d:
                    f3:b0:db:e3:c6:ee:10:1f:aa:36:3e:44:42:4a:e3:
                    3a:ce:0b:f3:f4:66:f9:9e:9e:87:b3:33:bc:aa:66:
                    c8:8e:55:76:ce:35:da:70:dd:89:e6:06:7c:43:b0:
                    f2:94:3e:c5:f3:94:90:4f:7f:22:77:0f:93:d2:a4:
                    e5:85:9e:b3:98:db:2a:c2:96:f0:7c:19:df:8b:19:
                    18:fc:5d:9e:41:e3:88:88:45:9e:93:51:37:8c:13:
                    be:6c:63:c0:c5:f2:b0:8b:6d:71:99:9b:91:97:e4:
                    65:87:55:95:44:9c:cc:8f:cd:4f:24:59:34:f6:1a:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E7:06:2A:15:D9:D8:87:CF:DC:8D:E1:05:30:4A:A7:73:CA:F9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b794a4bc-edae-3d2e-beaa-9e68358f596d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:19:5b:2e:36:04:26:e6:27:62:20:f7:12:79:f6:42:3c:b6:
         3c:c3:ed:f4:06:b0:a1:73:fc:df:51:6c:a7:ac:cf:92:ec:9c:
         20:c3:b3:1c:a2:be:8e:11:41:87:ed:18:b1:f9:e8:36:a1:4b:
         f4:a0:16:97:86:f0:c8:93:1f:56:8c:a8:cf:31:db:fe:21:35:
         a9:2a:aa:f1:b8:d0:64:bc:98:ee:42:17:e9:85:1b:c2:4f:f0:
         b1:69:da:a4:50:27:d4:bc:1b:29:95:53:58:be:1d:e2:cd:ac:
         63:f7:a1:2d:2e:a8:5d:96:de:fd:43:90:e3:22:80:0c:7b:c1:
         ff:33:bb:1c:6e:ae:72:06:4f:ce:42:4b:c9:3c:8b:bb:7e:ce:
         dc:fe:c6:0c:26:2d:36:8e:e8:90:0d:2b:ab:58:98:65:d8:5b:
         b2:aa:4c:52:ac:0c:67:66:46:71:b9:12:04:35:45:e6:5d:15:
         f0:94:b8:fd:6e:95:25:29:01:a6:81:b6:ed:ae:42:2c:15:d0:
         f7:c5:13:33:84:5e:d5:da:28:dc:22:7b:9d:f5:82:dc:1d:5d:
         31:49:fa:66:73:e9:8c:b1:77:d5:d6:ae:51:2a:85:82:62:1d:
         0e:01:92:0c:6c:c8:da:dc:71:87:15:28:7f:ee:6f:17:67:99:
         ff:6d:a2:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F6YPIvufJ/HnQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI1MDkxODE5MzkzOVoXDTI1MTIxNzIwMzkzOVowLzEtMCsGA1UEAxMk
ZTQyY2NiYzItNzM2MS00ZTRmLWJkMDktMDRiNmI1ZGU2ZDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIOVCN9O8yUwU9CNtdsTyR8e0+6+gZhwU4I6
r2LxRv8NE66sPlrMgLLDLBTYTXo+hWRCZ4WDnTAa8I6aF1ygnBBPfRrR38K7fvEZ
+4Blf8Dlr6zBYQwt7FogWsZgm/j6urMzZcs3b6lDET2mF0aryFUGoVo9mMEvll6m
y1Pf8F8d6OvSk13zsNvjxu4QH6o2PkRCSuM6zgvz9Gb5np6HszO8qmbIjlV2zjXa
cN2J5gZ8Q7DylD7F85SQT38idw+T0qTlhZ6zmNsqwpbwfBnfixkY/F2eQeOIiEWe
k1E3jBO+bGPAxfKwi21xmZuRl+Rlh1WVRJzMj81PJFk09hqYowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvnBioV2diHz9yN4QUwSqdzyvkhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYjc5NGE0YmMtZWRhZS0z
ZDJlLWJlYWEtOWU2ODM1OGY1OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnxq0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAZWy42BCbmJ2Ig9xJ59kI8tjzD7fQGsKFz/N9RbKesz5LsnCDDsxyi
vo4RQYftGLH56DahS/SgFpeG8MiTH1aMqM8x2/4hNakqqvG40GS8mO5CF+mFG8JP
8LFp2qRQJ9S8GymVU1i+HeLNrGP3oS0uqF2W3v1DkOMigAx7wf8zuxxurnIGT85C
S8k8i7t+ztz+xgwmLTaO6JANK6tYmGXYW7KqTFKsDGdmRnG5EgQ1ReZdFfCUuP1u
lSUpAaaBtu2uQiwV0PfFEzOEXtXaKNwie531gtwdXTFJ+mZz6Yyxd9XWrlEqhYJi
HQ4BkgxsyNrccYcVKH/ubxdnmf9totI=
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:32:13 2025 by rpki-client