Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa
File:                     3135362e392e38382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          qIaMiImI+T4GCu0+t1o61+hAnPkpBFUk/jcUrqjv0hs=
Subject key identifier:   D3:CE:29:F0:A3:66:48:9E:93:4A:61:9E:AA:55:9A:5D:40:B1:B3:43
Certificate issuer:       /CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Certificate serial:       1C5C563208F457EABDDD37991E3BA126EFAF6D03
Authority key identifier: D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa
Signing time:             Sun 18 Oct 2026 15:36:34 +0000
ROA not before:           Sun 18 Oct 2026 15:31:34 +0000
ROA not after:            Sun 17 Oct 2027 15:36:34 +0000
asID:                     0
IP address blocks:        156.9.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
                          rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5c:56:32:08:f4:57:ea:bd:dd:37:99:1e:3b:a1:26:ef:af:6d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
        Validity
            Not Before: Oct 18 15:31:34 2026 GMT
            Not After : Oct 17 15:36:34 2027 GMT
        Subject: CN=D3CE29F0A366489E934A619EAA559A5D40B1B343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:f3:cb:f3:4f:51:61:7f:d1:8b:32:68:fd:
                    a6:44:57:c3:e4:da:f0:2a:df:99:ac:5f:08:90:6a:
                    c5:6f:ff:6a:fa:bb:8b:2a:af:d2:7f:15:91:5c:7f:
                    fc:39:f3:92:de:62:92:bd:03:b6:11:f7:e8:46:cb:
                    ab:9c:fd:14:a5:8d:db:50:aa:67:d0:c6:ff:3f:e5:
                    a7:55:2f:13:0d:59:a2:0a:98:a8:6c:cc:fa:db:ca:
                    80:bb:5e:20:b5:49:b2:19:97:14:78:63:74:a5:50:
                    31:6c:89:9e:f1:44:44:88:59:e2:f3:5f:86:96:74:
                    a1:5d:ce:83:ea:2a:e7:53:2b:2b:22:1b:22:25:de:
                    82:89:f8:5e:ad:cc:58:c7:59:e9:67:11:7d:56:e7:
                    b9:49:7e:4c:92:69:96:54:6b:f3:04:39:90:ec:86:
                    e5:06:f5:06:1b:c0:26:76:bd:b2:3e:6b:e2:fe:be:
                    aa:fc:7c:1f:d2:90:e1:af:40:68:97:c9:6c:24:f3:
                    f9:ce:a9:16:fc:b0:80:84:71:7a:9e:6d:87:96:de:
                    ff:2f:51:dd:e3:49:8c:00:07:85:52:c6:54:b4:f4:
                    f7:89:c0:cf:a6:98:87:20:90:91:43:29:a9:80:d0:
                    bc:b0:79:1c:6f:0d:25:bb:c8:a1:6c:a2:46:58:fb:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:29:F0:A3:66:48:9E:93:4A:61:9E:AA:55:9A:5D:40:B1:B3:43
            X509v3 Authority Key Identifier:
                keyid:D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:9f:b7:fc:20:07:fe:82:71:b1:03:6f:43:df:59:f6:bf:
         d7:f4:24:8f:f0:bf:e1:19:d2:b0:42:db:e0:4c:5b:c9:7f:3c:
         32:6e:c2:56:96:c1:a5:51:79:e1:4e:c4:21:43:21:90:39:98:
         bf:9f:e3:65:66:88:cf:0d:4c:98:58:d5:5f:6d:93:dc:be:bf:
         c1:2c:8d:24:19:f4:03:5a:e4:82:08:2b:71:ce:fe:59:7e:8d:
         8d:c2:1c:d0:f8:3c:91:2f:97:d2:ba:3d:62:d5:09:aa:a0:bb:
         35:6a:9e:de:16:17:c8:3f:79:2c:b2:3a:5f:8d:85:8d:aa:a0:
         62:23:dd:6b:d4:70:52:54:96:08:ad:a8:33:09:e2:98:17:1f:
         34:43:19:40:dc:bb:86:43:8f:76:18:61:01:67:e0:37:7d:37:
         92:8c:8a:e2:cf:b3:f9:4b:76:e6:e5:0c:b8:bc:19:0e:c7:ce:
         e4:22:d8:b8:f0:6c:26:a8:35:00:31:70:96:6b:7e:2e:88:3b:
         6a:a2:e5:6b:e8:c6:ff:85:a0:32:a7:09:f5:01:8c:f1:c2:0f:
         6d:11:d9:28:72:1d:10:7b:ef:79:5e:36:4e:5a:6c:b2:6e:48:
         07:f1:29:99:80:bd:b1:09:f7:bc:74:8e:6b:a7:ce:cc:33:9a:
         cc:87:65:97
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIUHFxWMgj0V+q93TeZHjuhJu+vbQMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjVjYTllZmExM2U5MzNiYWQ5ZDFkYmVhMDYxYmJkNDVl
Zjg0NGJkZmQ2MWFiYTgwYzgwHhcNMjYxMDE4MTUzMTM0WhcNMjcxMDE3MTUzNjM0
WjAzMTEwLwYDVQQDEyhEM0NFMjlGMEEzNjY0ODlFOTM0QTYxOUVBQTU1OUE1RDQw
QjFCMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX7zy/NPUWF/
0YsyaP2mRFfD5NrwKt+ZrF8IkGrFb/9q+ruLKq/SfxWRXH/8OfOS3mKSvQO2Effo
RsurnP0UpY3bUKpn0Mb/P+WnVS8TDVmiCpiobMz628qAu14gtUmyGZcUeGN0pVAx
bIme8UREiFni81+GlnShXc6D6irnUysrIhsiJd6CifhercxYx1npZxF9Vue5SX5M
kmmWVGvzBDmQ7IblBvUGG8Amdr2yPmvi/r6q/Hwf0pDhr0Bol8lsJPP5zqkW/LCA
hHF6nm2Hlt7/L1Hd40mMAAeFUsZUtPT3icDPppiHIJCRQympgNC8sHkcbw0lu8ih
bKJGWPugTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNPOKfCjZkiek0phnqpVml1A
sbNDMB8GA1UdIwQYMBaAFNIXvihBOYKTSjxAKw5nELmFqZNWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkYjk1YzAwYzhlMjQ3NjFhZWNlNzkxODM1Y2UzMTZjLzAv
RDIxN0JFMjg0MTM5ODI5MzRBM0M0MDJCMEU2NzEwQjk4NUE5OTM1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzI5NDVkZmI3LWJkMDctNDk5NS04OWVlLWYxZmYxNjlkNGJkNC9iNWNh
OWVmYTEzZTkzM2JhZDlkMWRiZWEwNjFiYmQ0NWVmODQ0YmRmZDYxYWJhODBjOC5j
ZXIwgZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzRkYjk1YzAwYzhlMjQ3NjFhZWNlNzkx
ODM1Y2UzMTZjLzAvMzEzNTM2MmUzOTJlMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNk
M2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCnAlYMA0GCSqGSIb3DQEBCwUAA4IBAQA0/p+3/CAH
/oJxsQNvQ99Z9r/X9CSP8L/hGdKwQtvgTFvJfzwybsJWlsGlUXnhTsQhQyGQOZi/
n+NlZojPDUyYWNVfbZPcvr/BLI0kGfQDWuSCCCtxzv5Zfo2NwhzQ+DyRL5fSuj1i
1QmqoLs1ap7eFhfIP3kssjpfjYWNqqBiI91r1HBSVJYIragzCeKYFx80QxlA3LuG
Q492GGEBZ+A3fTeSjIriz7P5S3bm5Qy4vBkOx87kIti48GwmqDUAMXCWa34uiDtq
ouVr6Mb/haAypwn1AYzxwg9tEdkoch0Qe+95XjZOWmyybkgH8SmZgL2xCfe8dI5r
p87MM5rMh2WX
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:27 2026 by rpki-client