Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/255d6b2f-da34-37ed-9563-d868c8ec4545.roa
File:                     255d6b2f-da34-37ed-9563-d868c8ec4545.roa (raw, json)
Hash identifier:          ik797ymUUn3S5Fr2wztIYNwSgNBzhoBY9fiPqVBDZc0=
Subject key identifier:   BD:9D:7E:B7:DF:EC:62:F9:68:85:4F:1D:EB:40:A6:09:35:A1:17:66
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E074339BD24C8B40C9DA4C980
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/255d6b2f-da34-37ed-9563-d868c8ec4545.roa
Signing time:             Mon 01 Jun 2026 15:14:37 +0000
ROA not before:           Mon 01 Jun 2026 15:14:37 +0000
ROA not after:            Sun 30 Aug 2026 15:14:37 +0000
asID:                     154612
IP address blocks:        192.137.16.0/24 maxlen: 24
                          192.170.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:43:39:bd:24:c8:b4:0c:9d:a4:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  1 15:14:37 2026 GMT
            Not After : Aug 30 15:14:37 2026 GMT
        Subject: CN=a0b8723a-a48b-4b85-a9f4-5f1ebbec2d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:f9:44:20:bf:20:a2:8f:bf:6d:10:30:2f:
                    de:9e:e5:33:7b:95:ca:a0:bd:9c:f4:52:2c:eb:62:
                    9f:3f:dd:73:82:a6:3d:5a:a2:5f:05:d0:9e:fd:0d:
                    d3:0b:07:c2:56:a5:03:8a:3b:bb:aa:92:1d:59:1c:
                    1f:96:16:25:6d:60:d2:1c:c9:66:85:1b:d7:19:d1:
                    2b:9c:c3:31:2a:15:5c:f3:73:52:67:a3:fe:a5:fc:
                    92:f4:d8:4e:d7:e1:53:ed:b8:2c:0c:91:58:b6:3b:
                    71:b9:aa:d3:83:3f:73:fb:a1:c9:cc:e5:82:82:b9:
                    84:a7:9a:15:4c:dc:89:41:07:1d:a5:37:43:ba:34:
                    e0:b1:97:7e:75:ab:26:c6:03:4e:14:ee:27:32:3c:
                    e9:87:3a:b3:6b:ed:f6:c1:8c:1f:ca:20:6c:f8:d9:
                    b4:ca:2d:2c:f0:6f:fc:11:30:04:dd:a5:5c:d5:0f:
                    dc:3b:e6:bf:9d:d9:f3:f4:67:43:95:3e:5c:c0:28:
                    10:b3:f1:ac:c3:bc:db:9f:c4:d4:db:d7:71:28:33:
                    5c:eb:9b:a3:5a:5d:22:ad:b9:7a:ab:6b:5a:93:3c:
                    7b:54:02:67:85:81:07:8e:25:df:7b:f2:9a:4d:71:
                    99:71:c5:82:d6:36:40:ec:e4:d3:88:cb:39:3c:b6:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9D:7E:B7:DF:EC:62:F9:68:85:4F:1D:EB:40:A6:09:35:A1:17:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/255d6b2f-da34-37ed-9563-d868c8ec4545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.137.16.0/24
                  192.170.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:65:72:7f:3e:f8:bc:a2:5e:0a:8b:c2:eb:0d:72:78:f7:23:
         ba:9b:f2:9d:1d:49:35:d3:d8:61:03:59:f0:09:a4:90:b0:aa:
         86:36:fc:a0:ba:eb:5a:f4:60:59:e8:18:9e:d0:61:0a:77:6d:
         43:cd:8f:8d:0b:fb:a2:37:1c:b4:cc:36:5b:06:13:c9:94:06:
         d8:b9:5b:82:57:98:b0:f0:b8:e7:f0:93:e7:a3:81:e7:06:ba:
         04:da:15:21:fd:ea:68:64:8e:5a:a0:7b:12:9d:07:bb:2b:60:
         81:ab:80:db:dd:e3:c3:68:b9:3e:11:bd:db:fa:4c:3d:11:b8:
         ac:83:a0:6f:a9:10:5f:c1:75:f0:fc:db:7e:ec:5f:ce:2a:3d:
         9e:00:3f:4c:3f:df:de:04:6f:63:6b:7d:b1:83:db:d5:02:ca:
         7d:60:03:8c:a9:01:55:5a:08:e8:40:8d:82:13:3d:f4:75:10:
         43:66:36:e3:16:11:fa:d1:c2:71:e8:cb:03:0c:2e:33:7d:98:
         e0:e5:15:4e:13:83:ef:59:c2:00:0f:79:35:ac:a0:43:0c:98:
         3b:5f:0b:98:6f:a9:9e:a9:4c:38:72:37:a2:90:e0:d8:05:78:
         73:b2:67:70:16:3c:82:6e:d8:21:32:02:5c:d6:57:c6:aa:6a:
         07:28:04:7b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4HQzm9JMi0DJ2kyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDYwMTE1MTQzN1oXDTI2MDgzMDE1MTQzN1owLzEtMCsGA1UEAxMk
YTBiODcyM2EtYTQ4Yi00Yjg1LWE5ZjQtNWYxZWJiZWMyZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwz5RCC/IKKPv20QMC/enuUze5XKoL2c9FIs
62KfP91zgqY9WqJfBdCe/Q3TCwfCVqUDiju7qpIdWRwflhYlbWDSHMlmhRvXGdEr
nMMxKhVc83NSZ6P+pfyS9NhO1+FT7bgsDJFYtjtxuarTgz9z+6HJzOWCgrmEp5oV
TNyJQQcdpTdDujTgsZd+dasmxgNOFO4nMjzphzqza+32wYwfyiBs+Nm0yi0s8G/8
ETAE3aVc1Q/cO+a/ndnz9GdDlT5cwCgQs/Gsw7zbn8TU29dxKDNc65ujWl0irbl6
q2takzx7VAJnhYEHjiXfe/KaTXGZccWC1jZA7OTTiMs5PLZ+8QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL2dfrff7GL5aIVPHetApgk1oRdmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvMjU1ZDZiMmYtZGEzNC0z
N2VkLTk1NjMtZDg2OGM4ZWM0NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIkQAwQA
wKpoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAExlcn8++LyiXgqLwusNcnj3I7qb8p0dSTXT2GEDWfAJpJCw
qoY2/KC661r0YFnoGJ7QYQp3bUPNj40L+6I3HLTMNlsGE8mUBti5W4JXmLDwuOfw
k+ejgecGugTaFSH96mhkjlqgexKdB7srYIGrgNvd48NouT4Rvdv6TD0RuKyDoG+p
EF/BdfD8237sX84qPZ4AP0w/394Eb2NrfbGD29UCyn1gA4ypAVVaCOhAjYITPfR1
EENmNuMWEfrRwnHoywMMLjN9mODlFU4Tg+9ZwgAPeTWsoEMMmDtfC5hvqZ6pTDhy
N6KQ4NgFeHOyZ3AWPIJu2CEyAlzWV8aqagcoBHs=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:38 2026 by rpki-client