Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa
File:                     a4205bf2-e400-30c6-a941-dcb3dff03477.roa (raw, json)
Hash identifier:          1u3M4fbgDZZd7ov2dBjKTZQEJBQc+Jdw5H9yc5dqpw4=
Subject key identifier:   9E:B7:BD:94:42:EF:1A:5B:8C:BC:2F:B6:96:99:8B:9A:E7:F1:07:42
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E3764832FBCE35C38F90DEC80
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     55286
IP address blocks:        152.232.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:83:2f:bc:e3:5c:38:f9:0d:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=30f01f44-4537-4b07-b7d4-d294c3416f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:8f:64:15:ee:cf:b6:24:50:6a:f5:01:41:
                    41:ea:83:ac:3e:68:ce:88:75:05:5b:c9:03:f0:59:
                    98:4d:36:c9:61:6c:45:87:d1:04:aa:8b:49:68:29:
                    a7:92:26:c3:f7:a1:d6:d9:43:23:1f:87:82:f0:66:
                    00:ba:46:c4:1d:87:84:2b:90:9d:c3:da:87:4e:da:
                    7d:00:73:e5:c1:09:c9:03:1f:fc:a5:c7:df:4b:7c:
                    92:3a:0f:27:d4:c1:5d:33:6a:0a:81:86:c4:88:8d:
                    25:d3:eb:9b:cb:bd:07:f6:26:91:fb:3b:1f:39:56:
                    b0:f3:04:9a:23:bd:97:38:97:5f:c4:14:64:54:f4:
                    a0:2d:5f:85:19:d4:eb:c2:e1:f7:9b:81:85:b7:41:
                    8e:1e:cc:67:1c:dd:1b:f0:ec:ea:d1:8e:d1:92:07:
                    9d:3f:ce:82:96:31:1d:64:86:dd:ad:1e:8c:a6:42:
                    aa:f4:ec:48:d0:47:bd:80:cb:10:15:1e:41:c1:1f:
                    5d:f5:5b:a1:38:8d:da:15:ed:e2:0c:49:66:54:f7:
                    c1:29:d0:37:ad:18:8e:60:91:5e:0f:a8:a9:21:cd:
                    b2:96:d9:6e:12:b0:f9:fc:9d:82:e4:7a:65:2b:0a:
                    df:d8:bc:47:63:09:60:36:bf:35:fb:23:07:37:d5:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:BD:94:42:EF:1A:5B:8C:BC:2F:B6:96:99:8B:9A:E7:F1:07:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:b9:60:c8:1d:74:83:c2:bf:16:89:ba:40:9a:15:a3:6b:
         d3:a2:87:be:9e:52:2b:4f:5f:4e:df:51:84:4a:34:e6:e5:53:
         1d:a6:2c:ea:9c:57:fa:a6:1a:92:39:ce:e8:50:60:81:d3:f1:
         13:fa:11:80:72:14:1b:2a:83:23:1b:0c:6f:0d:ab:81:08:2a:
         cc:5d:36:e3:85:c0:ac:9c:d2:75:89:7b:a5:80:97:8a:72:13:
         7f:16:4b:a9:68:c3:05:88:07:20:6b:f7:87:c1:73:b8:ab:9c:
         e3:f4:f0:5a:f8:ab:d1:65:1b:a2:ae:76:3f:6e:6b:c6:c0:f3:
         b5:9a:bf:f8:3d:89:78:1f:c1:60:23:73:9e:e9:35:40:2a:96:
         03:16:21:a1:f1:d7:76:55:1d:51:96:dd:1a:d4:c5:3e:2d:7d:
         d9:b0:ca:09:f2:5a:90:e8:91:42:22:f2:15:51:01:09:0c:47:
         c1:e6:db:96:ee:30:33:63:66:d6:ce:ad:bc:78:96:0e:1c:63:
         12:53:60:6d:47:e0:d5:6a:0b:d2:69:80:bf:27:a6:9b:2f:f8:
         ff:99:be:86:61:55:61:5d:33:01:19:ce:3d:19:6f:c8:b2:27:
         f9:68:d4:e6:f4:8d:fd:03:bd:8e:cb:1c:a3:87:e5:15:17:c2:
         a4:9e:7b:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIMvvONcOPkN7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzBmMDFmNDQtNDUzNy00YjA3LWI3ZDQtZDI5NGMzNDE2ZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkSPZBXuz7YkUGr1AUFB6oOsPmjOiHUFW8kD
8FmYTTbJYWxFh9EEqotJaCmnkibD96HW2UMjH4eC8GYAukbEHYeEK5Cdw9qHTtp9
AHPlwQnJAx/8pcffS3ySOg8n1MFdM2oKgYbEiI0l0+uby70H9iaR+zsfOVaw8wSa
I72XOJdfxBRkVPSgLV+FGdTrwuH3m4GFt0GOHsxnHN0b8Ozq0Y7RkgedP86CljEd
ZIbdrR6MpkKq9OxI0Ee9gMsQFR5BwR9d9VuhOI3aFe3iDElmVPfBKdA3rRiOYJFe
D6ipIc2yltluErD5/J2C5HplKwrf2LxHYwlgNr81+yMHN9X/SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ63vZRC7xpbjLwvtpaZi5rn8QdCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTQyMDViZjItZTQwMC0z
MGM2LWE5NDEtZGNiM2RmZjAzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOivMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1luWDIHXSDwr8WibpAmhWja9Oih76eUitPX07fUYRKNOblUx2mLOqc
V/qmGpI5zuhQYIHT8RP6EYByFBsqgyMbDG8Nq4EIKsxdNuOFwKyc0nWJe6WAl4py
E38WS6lowwWIByBr94fBc7irnOP08Fr4q9FlG6Kudj9ua8bA87Wav/g9iXgfwWAj
c57pNUAqlgMWIaHx13ZVHVGW3RrUxT4tfdmwygnyWpDokUIi8hVRAQkMR8Hm25bu
MDNjZtbOrbx4lg4cYxJTYG1H4NVqC9JpgL8nppsv+P+ZvoZhVWFdMwEZzj0Zb8iy
J/lo1Ob0jf0DvY7LHKOH5RUXwqSee7g=
-----END CERTIFICATE-----
Generated at Tue Jul 14 01:48:31 2026 by rpki-client