Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa
File:                     e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa (raw, json)
Hash identifier:          c7Hz59iuS8c/uuNiT9+TIk0ifwIUY9HSOv29LK/vrB4=
Subject key identifier:   14:72:50:04:18:71:83:A3:A6:77:6D:FE:36:E0:32:E2:74:EE:77:7E
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584F82ADA357386FFB561E19D200
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     18526
IP address blocks:        158.51.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a3:57:38:6f:fb:56:1e:19:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=cea9d123-ae58-4237-87df-94396e67ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:08:e3:63:25:2b:d0:5f:6a:70:e4:37:05:
                    7b:03:b0:c4:17:42:b3:db:ba:c8:29:28:fb:b0:5b:
                    46:99:3f:57:d2:c4:98:4a:ee:80:1e:7b:47:78:83:
                    1a:ee:16:c7:b5:a5:26:08:ba:9d:00:d6:fc:66:5f:
                    94:0c:6f:1b:30:3a:06:05:38:a6:e4:a5:54:a9:d8:
                    88:85:82:5e:65:b1:44:60:4b:d7:6f:7a:0a:6c:db:
                    dc:81:1d:bb:6e:fc:c4:ba:8f:78:12:de:4d:f6:74:
                    29:f6:53:41:46:cc:50:d4:96:66:95:ed:37:a2:81:
                    b0:fb:40:3c:37:b2:79:90:70:db:59:ce:d6:a0:de:
                    8d:fe:1e:f0:ef:ec:30:30:5d:96:9f:42:30:0a:99:
                    0d:78:59:9c:c7:2d:54:b5:eb:f6:98:99:17:e3:3f:
                    44:44:6f:13:9e:9e:13:7a:f8:b3:65:3e:89:04:54:
                    22:3c:6e:58:6a:2a:20:ad:f0:c9:41:ae:08:71:f7:
                    50:9f:45:85:6c:be:1a:9c:c4:f4:a6:c5:13:eb:63:
                    b4:bc:21:fd:f6:6d:56:ab:33:f5:78:d6:8c:81:a2:
                    67:23:7b:34:bb:37:ac:5e:82:72:34:9b:46:db:90:
                    30:53:75:f3:1b:66:a9:ca:9d:1c:11:d3:5b:ab:e9:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:72:50:04:18:71:83:A3:A6:77:6D:FE:36:E0:32:E2:74:EE:77:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:03:fd:65:c9:82:09:4d:29:53:b2:67:a9:f0:c5:47:55:
         42:7c:07:87:50:19:b8:c2:60:b8:b5:43:d1:18:10:eb:6f:e1:
         bf:5b:03:e7:50:06:b7:5f:58:eb:95:1a:e1:74:58:13:46:01:
         67:c0:bc:10:71:32:ab:c0:0c:4e:01:8f:77:49:c1:8e:98:0e:
         8d:bf:10:01:1c:b0:f5:f5:c7:d5:77:c3:d9:c0:34:b6:10:e1:
         02:e7:90:49:db:8f:d1:66:bf:10:09:b7:06:31:6e:09:04:6b:
         e2:0a:27:f2:c5:d5:3c:85:8f:1e:83:92:05:9b:0c:14:47:da:
         26:b9:c2:83:71:36:a5:23:e9:c6:e0:ad:28:8b:da:b0:db:45:
         91:ac:e1:19:f0:66:75:5d:90:35:ee:89:0a:0e:ba:2a:48:6d:
         41:2c:3a:2c:13:50:2b:f7:ec:4a:40:4e:7f:ec:16:a4:62:37:
         9a:a9:79:3c:8d:9d:dc:53:0f:0d:12:0f:04:9d:d1:c8:28:70:
         91:bb:ce:2b:77:88:50:53:ea:64:7c:6b:34:7f:da:bd:2a:b2:
         fc:f4:14:05:2c:3b:c0:ee:03:0d:48:2d:ef:e7:6f:23:ab:26:
         2c:23:9f:99:be:6c:3c:f3:ae:76:dd:29:ad:6c:3e:cb:60:59:
         2e:71:30:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CraNXOG/7Vh4Z0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
Y2VhOWQxMjMtYWU1OC00MjM3LTg3ZGYtOTQzOTZlNjdlZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJwI42MlK9BfanDkNwV7A7DEF0Kz27rIKSj7
sFtGmT9X0sSYSu6AHntHeIMa7hbHtaUmCLqdANb8Zl+UDG8bMDoGBTim5KVUqdiI
hYJeZbFEYEvXb3oKbNvcgR27bvzEuo94Et5N9nQp9lNBRsxQ1JZmle03ooGw+0A8
N7J5kHDbWc7WoN6N/h7w7+wwMF2Wn0IwCpkNeFmcxy1Utev2mJkX4z9ERG8Tnp4T
evizZT6JBFQiPG5YaiogrfDJQa4IcfdQn0WFbL4anMT0psUT62O0vCH99m1WqzP1
eNaMgaJnI3s0uzesXoJyNJtG25AwU3XzG2apyp0cEdNbq+l+SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRyUAQYcYOjpndt/jbgMuJ07nd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZTFiNGRlZWYtYTVjNy0z
NTdlLTk1OTgtYmE4ZGJmNDBlMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8fA/1lyYIJTSlTsmep8MVHVUJ8B4dQGbjCYLi1Q9EYEOtv4b9bA+dQ
BrdfWOuVGuF0WBNGAWfAvBBxMqvADE4Bj3dJwY6YDo2/EAEcsPX1x9V3w9nANLYQ
4QLnkEnbj9FmvxAJtwYxbgkEa+IKJ/LF1TyFjx6DkgWbDBRH2ia5woNxNqUj6cbg
rSiL2rDbRZGs4RnwZnVdkDXuiQoOuipIbUEsOiwTUCv37EpATn/sFqRiN5qpeTyN
ndxTDw0SDwSd0cgocJG7zit3iFBT6mR8azR/2r0qsvz0FAUsO8DuAw1ILe/nbyOr
Jiwjn5m+bDzzrnbdKa1sPstgWS5xMGc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:52 2026 by rpki-client