Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/bc21d1b1-37bf-3c45-8e77-7501f02042f5.roa
File:                     bc21d1b1-37bf-3c45-8e77-7501f02042f5.roa (raw, json)
Hash identifier:          Zy8BU+U/9hjYKjlivIDXTGnM78S7cKQDnFY/2BP9sWk=
Subject key identifier:   8F:A3:B9:15:40:41:E9:B2:DC:2E:D0:54:F9:F0:19:31:A5:79:6E:9A
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584E4AEF6FFCC00E49E7C610A400
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/bc21d1b1-37bf-3c45-8e77-7501f02042f5.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     19205
IP address blocks:        155.103.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6f:fc:c0:0e:49:e7:c6:10:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=283c01c4-0ea8-4905-b0e7-1c641a06d53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:fa:7a:20:3d:eb:20:4e:fc:84:24:7c:64:
                    b1:fc:f4:65:97:36:e4:2d:1c:fd:bb:6f:d9:6a:58:
                    71:a8:40:0e:e4:80:f6:e8:70:42:3a:66:46:99:62:
                    06:5d:ec:be:0d:4c:49:9a:55:05:73:88:31:bc:99:
                    d5:6e:5b:bd:d6:6c:e3:60:45:62:b8:7e:b3:aa:bc:
                    12:a9:a2:90:4e:3f:13:6b:9d:9f:3f:84:89:94:ef:
                    f4:1e:fa:74:ac:9c:1e:37:2b:4f:39:d0:2e:44:a0:
                    ef:19:c8:a0:6f:aa:cd:d1:22:2d:f5:dd:33:36:cc:
                    ac:39:1f:06:52:c0:88:7c:31:b0:8c:93:37:02:4b:
                    50:f0:05:9b:3b:36:e5:1a:9d:bd:3d:47:c7:cb:b9:
                    5d:a4:1d:88:af:ee:39:0e:cb:10:62:8d:ce:e8:fb:
                    3a:6f:2f:00:2a:29:37:29:71:ec:c9:bb:cf:2b:52:
                    7e:73:86:50:64:8e:6c:cc:ab:48:ec:c3:d6:05:f5:
                    d0:79:11:6a:cc:90:5a:a2:99:1d:54:af:8f:36:68:
                    7e:a4:92:2c:77:18:15:95:8c:6e:74:ad:57:d0:2f:
                    97:ac:f7:31:56:8a:30:22:77:52:93:db:94:5c:76:
                    bd:ec:4a:32:36:ff:83:3b:15:40:59:68:4e:4b:3f:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:B9:15:40:41:E9:B2:DC:2E:D0:54:F9:F0:19:31:A5:79:6E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/bc21d1b1-37bf-3c45-8e77-7501f02042f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:6b:a0:40:36:7d:61:b8:60:c6:da:e7:69:74:5d:4a:95:
         57:58:70:fd:8f:44:87:60:f4:c9:4c:b5:83:f5:9f:07:29:1f:
         f3:95:d8:26:12:e1:0c:56:71:d8:45:1b:da:25:3a:75:94:47:
         8c:c8:f7:97:ed:9d:9a:2f:a7:6e:cf:fa:68:86:24:08:4f:f0:
         9e:91:c0:d8:d2:43:59:e9:38:eb:27:60:95:98:21:cb:58:6d:
         d8:eb:e1:38:24:33:6e:53:65:71:c7:bb:e0:6e:16:2d:da:88:
         47:ef:8e:5a:d4:47:7f:af:a5:07:d1:7a:c8:05:1a:26:67:b5:
         5e:01:b2:c2:de:b6:3f:bb:6f:70:65:64:f4:94:f0:73:2a:95:
         07:d9:3d:98:ae:50:4f:56:5b:11:a9:a3:c7:f5:90:7b:e1:74:
         b2:41:19:cd:d3:5f:c6:9f:b6:f5:a7:d6:4f:70:95:7c:9d:2d:
         53:8c:75:25:f6:fa:9d:b7:6b:b6:13:0f:d1:76:85:61:e8:79:
         c3:52:f8:2c:78:c4:42:5c:56:d7:ea:6c:c2:2e:26:d0:2e:8e:
         42:6f:4e:92:74:5d:6c:5e:d4:48:ec:01:cd:60:2b:de:15:21:
         3e:55:6f:ca:f4:00:ca:30:58:f0:ae:63:9e:73:7a:60:45:75:
         1a:59:8f:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72/8wA5J58YQpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVm
ZDU5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MjgzYzAxYzQtMGVhOC00OTA1LWIwZTctMWM2NDFhMDZkNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlD6eiA96yBO/IQkfGSx/PRllzbkLRz9u2/Z
alhxqEAO5ID26HBCOmZGmWIGXey+DUxJmlUFc4gxvJnVblu91mzjYEViuH6zqrwS
qaKQTj8Ta52fP4SJlO/0Hvp0rJweNytPOdAuRKDvGcigb6rN0SIt9d0zNsysOR8G
UsCIfDGwjJM3AktQ8AWbOzblGp29PUfHy7ldpB2Ir+45DssQYo3O6Ps6by8AKik3
KXHsybvPK1J+c4ZQZI5szKtI7MPWBfXQeRFqzJBaopkdVK+PNmh+pJIsdxgVlYxu
dK1X0C+XrPcxVoowIndSk9uUXHa97EoyNv+DOxVAWWhOSz+2PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+juRVAQemy3C7QVPnwGTGleW6aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQy
Y2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvYmMyMWQxYjEtMzdiZi0z
YzQ1LThlNzctNzUwMWYwMjA0MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzVkMmNiYTUtYWNlYy00YmE4LWFk
ZTctMGY4M2E2YWVmZDU5Lzc1ZDJjYmE1LWFjZWMtNGJhOC1hZGU3LTBmODNhNmFl
ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUC0KDrTkpponfjH/XE0dGb4/L7/UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgz
YTZhZWZkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm2fEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+ia6BANn1huGDG2udpdF1KlVdYcP2PRIdg9MlMtYP1nwcpH/OV2CYS
4QxWcdhFG9olOnWUR4zI95ftnZovp27P+miGJAhP8J6RwNjSQ1npOOsnYJWYIctY
bdjr4TgkM25TZXHHu+BuFi3aiEfvjlrUR3+vpQfResgFGiZntV4BssLetj+7b3Bl
ZPSU8HMqlQfZPZiuUE9WWxGpo8f1kHvhdLJBGc3TX8aftvWn1k9wlXydLVOMdSX2
+p23a7YTD9F2hWHoecNS+Cx4xEJcVtfqbMIuJtAujkJvTpJ0XWxe1EjsAc1gK94V
IT5Vb8r0AMowWPCuY55zemBFdRpZj2w=
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:52 2026 by rpki-client