Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa
File:                     5cb689e4-762a-3450-8fba-de1a24f96946.roa (raw, json)
Hash identifier:          qyTB325wX670S68bjh2TAydorHvczitNODknomi25xc=
Subject key identifier:   87:BB:67:4C:26:BA:AC:23:86:43:1C:99:34:C8:9A:35:3E:75:98:9D
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E466EE5F7E8E14ACAE3A35F00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa
Signing time:             Wed 24 Jun 2026 06:18:33 +0000
ROA not before:           Wed 24 Jun 2026 06:18:33 +0000
ROA not after:            Tue 22 Sep 2026 06:18:33 +0000
asID:                     54994
IP address blocks:        153.43.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:6e:e5:f7:e8:e1:4a:ca:e3:a3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun 24 06:18:33 2026 GMT
            Not After : Sep 22 06:18:33 2026 GMT
        Subject: CN=c290cfbf-ddbb-4dd1-a8f6-e8f6d2e0add6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:84:ee:fc:ff:10:da:32:7d:17:3e:9e:57:
                    61:4e:e1:18:d5:23:73:f8:7c:1f:c3:bd:31:1e:28:
                    9a:f0:7c:11:f2:83:f7:1e:b2:42:ae:bb:b9:99:92:
                    89:95:ef:f0:ee:0a:80:58:53:02:6d:29:27:17:59:
                    e3:8b:19:bd:75:e7:3b:0d:8b:1b:b8:cb:38:73:33:
                    79:ef:ff:66:79:78:20:ab:a7:a2:3c:38:54:36:20:
                    35:51:a8:15:8b:7e:13:a0:e4:96:9c:33:52:1d:42:
                    d2:61:7d:1a:b3:04:8a:72:88:8e:10:68:d4:5b:0b:
                    97:85:03:68:00:c5:c6:b0:17:1b:5c:dc:47:aa:2f:
                    21:f1:c2:5f:08:bd:0f:48:f4:ef:02:80:9a:3f:b4:
                    6c:b8:5e:38:8b:ca:59:39:9c:c5:22:be:e2:db:50:
                    fb:3a:48:d5:c8:9a:db:2c:06:a4:43:e6:24:ea:79:
                    4c:78:0d:ef:01:81:57:93:d9:6f:50:b5:bf:b4:b8:
                    ce:eb:83:73:a9:ab:68:fb:a2:5b:73:d0:38:a1:af:
                    56:24:a3:50:f1:d9:e7:6a:62:0b:d9:8c:07:19:ad:
                    27:01:31:2b:db:59:d6:8f:a5:97:ea:17:05:f8:d9:
                    50:d8:b6:e2:11:d5:78:cb:fd:49:94:23:fc:af:18:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BB:67:4C:26:BA:AC:23:86:43:1C:99:34:C8:9A:35:3E:75:98:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:78:da:b4:47:c3:ad:fe:a9:23:00:c8:cb:48:12:18:b2:
         ca:fe:12:5e:91:f1:48:f1:2a:ed:50:22:cc:9d:d5:26:29:da:
         69:10:c3:9f:fe:cf:d3:03:ee:d1:f8:e8:02:e2:3d:bd:3b:b9:
         72:49:0c:e7:6c:ac:03:02:71:38:6a:92:c3:db:9a:61:77:09:
         6d:2f:4e:aa:ea:0a:01:f0:3c:97:4e:44:6a:71:bc:a7:27:52:
         83:24:59:b4:f9:cc:b2:8f:8d:6e:78:bd:54:8a:8a:2c:74:29:
         6b:dc:0f:82:63:5d:91:c7:2f:5b:57:0f:8f:1c:d2:6d:ef:e9:
         a4:52:d6:cc:7e:c6:50:51:2d:67:c0:ae:fc:0f:c5:73:e8:5f:
         9f:81:ee:4c:e1:1e:9f:6b:f8:85:79:5f:b7:b5:d4:3e:13:2a:
         1f:7f:86:fd:24:e3:37:e4:98:b5:00:a1:eb:a3:56:54:0f:40:
         de:50:4e:41:4b:24:ac:c1:f2:81:95:47:e7:f2:df:f9:f9:50:
         21:d2:7c:70:0f:aa:90:a1:f3:fe:b8:2e:9b:54:9f:17:d4:91:
         cf:49:18:08:27:17:b6:e2:8b:09:ea:68:9f:c9:a6:01:2b:00:
         0f:15:10:77:81:e1:2e:79:5c:2e:de:da:10:6c:48:2d:2b:d3:
         d1:b3:0d:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GbuX36OFKyuOjXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDYyNDA2MTgzM1oXDTI2MDkyMjA2MTgzM1owLzEtMCsGA1UEAxMk
YzI5MGNmYmYtZGRiYi00ZGQxLWE4ZjYtZThmNmQyZTBhZGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzeE7vz/ENoyfRc+nldhTuEY1SNz+Hwfw70x
Hiia8HwR8oP3HrJCrru5mZKJle/w7gqAWFMCbSknF1njixm9dec7DYsbuMs4czN5
7/9meXggq6eiPDhUNiA1UagVi34ToOSWnDNSHULSYX0aswSKcoiOEGjUWwuXhQNo
AMXGsBcbXNxHqi8h8cJfCL0PSPTvAoCaP7RsuF44i8pZOZzFIr7i21D7OkjVyJrb
LAakQ+Yk6nlMeA3vAYFXk9lvULW/tLjO64Nzqato+6Jbc9A4oa9WJKNQ8dnnamIL
2YwHGa0nATEr21nWj6WX6hcF+NlQ2LbiEdV4y/1JlCP8rxgBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIe7Z0wmuqwjhkMcmTTImjU+dZidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWNiNjg5ZTQtNzYyYS0z
NDUwLThmYmEtZGUxYTI0Zjk2OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH07eNq0R8Ot/qkjAMjLSBIYssr+El6R8UjxKu1QIsyd1SYp2mkQw5/+
z9MD7tH46ALiPb07uXJJDOdsrAMCcThqksPbmmF3CW0vTqrqCgHwPJdORGpxvKcn
UoMkWbT5zLKPjW54vVSKiix0KWvcD4JjXZHHL1tXD48c0m3v6aRS1sx+xlBRLWfA
rvwPxXPoX5+B7kzhHp9r+IV5X7e11D4TKh9/hv0k4zfkmLUAoeujVlQPQN5QTkFL
JKzB8oGVR+fy3/n5UCHSfHAPqpCh8/64LptUnxfUkc9JGAgnF7biiwnqaJ/JpgEr
AA8VEHeB4S55XC7e2hBsSC0r09GzDSo=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:14 2026 by rpki-client