Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
File:                     557b01e3-e91e-3788-b50f-a45035dbf24c.roa (raw, json)
Hash identifier:          s+o3tjfSOzVn+SUQmo1qUv66UFgMlEpxjv/M6hHQ1CE=
Subject key identifier:   62:22:F9:70:F6:00:BB:C8:B9:87:37:54:9E:E3:25:71:AC:3C:BA:3F
Certificate issuer:       /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
Certificate serial:       010D0C9F4328584EBDDC58D4E866494D8BA2B940
Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     11821
IP address blocks:        148.59.150.0/24 maxlen: 24
                          158.51.184.0/22 maxlen: 22
                          205.201.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:58:d4:e8:66:49:4d:8b:a2:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=b41a8675-2da3-488b-96f0-a184a8395695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:66:f5:a2:c8:1b:70:4c:18:33:53:54:43:
                    c4:93:a1:8f:2c:a7:81:b8:d1:98:31:fe:75:ef:de:
                    cb:6e:66:29:01:62:34:11:34:64:29:11:bb:29:34:
                    53:52:db:eb:ce:64:1c:3e:a2:7d:a8:97:14:cc:5d:
                    7e:2c:34:84:f8:16:a7:a5:53:d4:60:ac:43:4f:34:
                    a3:68:77:73:2f:8a:7d:ce:b7:06:71:8e:11:b0:2c:
                    b8:ff:c8:5a:23:03:7c:01:37:80:c0:6c:a9:9f:59:
                    79:e0:cb:27:01:43:95:17:bf:5f:72:a8:bb:a7:b2:
                    43:3c:e7:98:65:bc:d7:b4:ab:06:2d:9f:1c:7d:f1:
                    ed:d1:8c:95:92:3f:b0:cd:3b:f4:96:38:90:62:73:
                    7c:94:57:6a:f6:0b:34:0c:ae:24:45:64:8a:bc:d4:
                    48:ce:25:c2:ed:2b:f6:c0:68:4d:d8:82:d1:0a:be:
                    be:e1:24:27:54:df:f6:df:c6:fd:32:52:9b:81:62:
                    42:07:c7:93:02:84:66:da:8e:58:ef:43:c4:01:6b:
                    e3:08:7e:12:82:b1:24:a7:e6:33:c5:57:fd:f4:32:
                    4d:d5:da:da:5b:4a:05:24:6e:bf:18:79:0a:5d:7f:
                    ae:82:e8:d9:d0:e3:06:92:a0:62:15:55:23:8e:d4:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:F9:70:F6:00:BB:C8:B9:87:37:54:9E:E3:25:71:AC:3C:BA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl

            X509v3 Authority Key Identifier:
                keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.150.0/24
                  158.51.184.0/22
                  205.201.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:de:e2:88:7b:20:9f:a2:20:47:a0:ac:f7:47:ce:78:f2:
         0f:2e:b7:46:b9:be:7c:f8:e1:3c:cb:c8:8e:c9:90:2a:81:0c:
         61:72:f6:76:25:8f:48:3f:3b:90:e3:3a:92:19:4d:59:e6:3e:
         68:5f:5d:a1:c3:1c:82:d9:da:5c:3e:31:29:75:58:7f:ca:42:
         50:63:cd:ff:01:2a:a0:fb:00:c9:04:a8:4c:f4:ce:fe:fa:5b:
         79:28:6e:64:60:d7:90:c2:94:d9:e2:90:0b:31:cd:8f:a2:17:
         e3:23:f7:ee:7a:d6:4a:83:81:10:d1:9f:e0:3e:cc:6a:5b:11:
         08:13:69:ca:16:bf:b1:b4:cd:e0:a5:2a:40:e8:6f:fb:39:78:
         8d:47:86:a7:15:09:e9:0b:8c:b8:1a:22:78:ea:af:99:86:70:
         e3:26:67:b1:7e:e9:b5:82:32:c0:cb:73:d9:a1:4d:eb:b6:f6:
         af:c5:13:33:2b:47:5a:1d:66:2b:79:c6:5f:6f:01:59:09:50:
         4c:b2:0f:78:15:ea:2a:5d:71:cf:88:1d:24:72:77:df:06:8a:
         1d:c9:fe:6a:09:f4:66:ed:40:4f:ca:eb:2f:5e:58:1f:5e:b5:
         82:0d:ef:1f:e7:63:3e:63:11:6b:fc:c5:0b:11:a9:90:75:1b:
         6b:ad:62:7f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE693FjU6GZJTYuiuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5
ZWRkMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjQxYTg2NzUtMmRhMy00ODhiLTk2ZjAtYTE4NGE4Mzk1Njk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7tm9aLIG3BMGDNTVEPEk6GPLKeBuNGYMf51
797LbmYpAWI0ETRkKRG7KTRTUtvrzmQcPqJ9qJcUzF1+LDSE+BanpVPUYKxDTzSj
aHdzL4p9zrcGcY4RsCy4/8haIwN8ATeAwGypn1l54MsnAUOVF79fcqi7p7JDPOeY
ZbzXtKsGLZ8cffHt0YyVkj+wzTv0ljiQYnN8lFdq9gs0DK4kRWSKvNRIziXC7Sv2
wGhN2ILRCr6+4SQnVN/238b9MlKbgWJCB8eTAoRm2o5Y70PEAWvjCH4SgrEkp+Yz
xVf99DJN1draW0oFJG6/GHkKXX+ugujZ0OMGkqBiFVUjjtS6UQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGIi+XD2ALvIuYc3VJ7jJXGsPLo/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1
OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvNTU3YjAxZTMtZTkxZS0z
Nzg4LWI1MGYtYTQ1MDM1ZGJmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3
MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3
OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0
Y2YzNzllZGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlDuWAwQC
njO4AwQAzck2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB1n3uKIeyCfoiBHoKz3R8548g8ut0a5vnz44TzL
yI7JkCqBDGFy9nYlj0g/O5DjOpIZTVnmPmhfXaHDHILZ2lw+MSl1WH/KQlBjzf8B
KqD7AMkEqEz0zv76W3kobmRg15DClNnikAsxzY+iF+Mj9+561kqDgRDRn+A+zGpb
EQgTacoWv7G0zeClKkDob/s5eI1HhqcVCekLjLgaInjqr5mGcOMmZ7F+6bWCMsDL
c9mhTeu29q/FEzMrR1odZit5xl9vAVkJUEyyD3gV6ipdcc+IHSRyd98Gih3J/moJ
9GbtQE/K6y9eWB9etYIN7x/nYz5jEWv8xQsRqZB1G2utYn8=
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:00:23 2026 by rpki-client