Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
File:                     3bbfae60-4960-3e7f-8c84-89601126f245.roa (raw, json)
Hash identifier:          051OQJmBuuB9DeEfhxZiBVesbZDVf/tST+HGB+9Q1iM=
Subject key identifier:   A7:B5:AB:D1:9B:49:12:17:A9:D1:43:4B:E4:46:5A:B8:28:1E:14:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA0A14F00F871CBE639C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     855
IP address blocks:        156.34.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a0:a1:4f:00:f8:71:cb:e6:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=211ea7ad-b42e-4252-99c9-7538ab499b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:4c:3b:26:b3:23:2f:4e:04:2a:06:15:f3:
                    f5:42:13:57:09:ad:90:72:69:3d:41:90:fb:b4:3e:
                    83:3a:43:55:f9:7d:da:42:35:12:49:e9:06:fb:21:
                    68:87:af:a6:93:57:f7:a1:ce:06:32:f2:9e:87:69:
                    c7:fd:71:9e:c1:b3:d1:31:f9:86:9e:60:c1:75:10:
                    29:85:de:9f:78:b0:ca:b3:6a:30:60:f5:f0:fe:e1:
                    3b:46:78:2c:2b:fe:bf:29:62:7d:4b:4b:36:07:b8:
                    2c:bf:22:f1:a5:db:36:a5:62:98:2f:3b:09:89:a8:
                    94:b2:59:06:d4:6e:49:93:60:87:b9:cb:96:f3:7a:
                    fb:c1:34:b7:c6:2d:6e:7f:29:6f:0a:55:9b:20:ef:
                    f2:8b:b2:47:ef:0e:64:b7:17:d0:87:90:6a:a1:f1:
                    13:23:f6:03:7b:4b:94:36:0d:45:d0:01:63:3d:53:
                    b1:e8:7f:13:bf:a8:f5:c7:89:dd:74:33:30:9d:d6:
                    8f:59:8f:27:ae:8f:d0:f2:2a:a7:71:c2:b7:ca:fa:
                    45:fd:5b:eb:40:c0:e1:8c:45:87:66:47:20:16:36:
                    5b:f8:24:08:21:5f:f6:ef:c5:e6:8e:4f:a8:e6:96:
                    bc:66:23:8a:a7:b6:ba:1a:cd:71:03:d9:ff:61:75:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B5:AB:D1:9B:49:12:17:A9:D1:43:4B:E4:46:5A:B8:28:1E:14:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:8a:2e:94:9c:ec:ff:30:9b:61:ed:94:4c:d5:94:da:98:
         35:e1:ff:0b:ac:10:cc:18:c0:50:78:0d:ba:a1:0a:32:0b:80:
         2b:5d:e9:d1:70:bc:35:9d:94:5f:04:40:21:5d:27:23:0a:86:
         e2:3e:aa:e7:ff:b5:cb:34:95:62:f8:b0:f1:21:be:2c:00:04:
         dd:8e:f7:46:1d:05:95:ae:b6:22:e1:71:94:bb:eb:46:a7:99:
         98:88:e4:e4:ed:a0:db:5c:cb:4a:e2:c7:19:0c:f3:d1:11:6d:
         42:b1:de:d3:21:57:ef:46:b8:10:de:ca:54:90:e0:45:fa:ab:
         fc:9d:b4:e6:4d:46:ed:79:6a:a3:3e:82:5f:fb:3e:d2:d6:96:
         51:19:6e:65:c3:e2:56:6a:59:9c:c9:7a:bb:1f:44:86:45:56:
         eb:ba:0c:fa:9c:38:5f:48:a9:33:6b:ef:bf:1a:dd:2f:1f:e4:
         ec:9e:7d:b2:eb:e2:37:aa:60:05:ad:2b:35:e8:e1:13:e0:3f:
         af:10:9d:da:ca:c2:2e:55:06:bf:c7:c5:66:61:d4:47:fc:ac:
         d6:59:92:96:46:14:93:e2:04:3a:08:5c:a2:2c:bb:47:12:3a:
         f9:ad:22:ca:4e:97:7c:5e:9e:b9:4f:1f:3c:f6:7e:c2:89:e7:
         45:09:f0:c6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2DyqChTwD4ccvmOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MjExZWE3YWQtYjQyZS00MjUyLTk5YzktNzUzOGFiNDk5YjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjJMOyazIy9OBCoGFfP1QhNXCa2Qcmk9QZD7
tD6DOkNV+X3aQjUSSekG+yFoh6+mk1f3oc4GMvKeh2nH/XGewbPRMfmGnmDBdRAp
hd6feLDKs2owYPXw/uE7RngsK/6/KWJ9S0s2B7gsvyLxpds2pWKYLzsJiaiUslkG
1G5Jk2CHucuW83r7wTS3xi1ufylvClWbIO/yi7JH7w5ktxfQh5BqofETI/YDe0uU
Ng1F0AFjPVOx6H8Tv6j1x4nddDMwndaPWY8nro/Q8iqnccK3yvpF/VvrQMDhjEWH
ZkcgFjZb+CQIIV/278Xmjk+o5pa8ZiOKp7a6Gs1xA9n/YXXPCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKe1q9GbSRIXqdFDS+RGWrgoHhQEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2JiZmFlNjAtNDk2MC0z
ZTdmLThjODQtODk2MDExMjZmMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnCIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFcOKLpSc7P8wm2HtlEzVlNqYNeH/C6wQzBjAUHgNuqEKMguAK13p0XC8
NZ2UXwRAIV0nIwqG4j6q5/+1yzSVYviw8SG+LAAE3Y73Rh0Fla62IuFxlLvrRqeZ
mIjk5O2g21zLSuLHGQzz0RFtQrHe0yFX70a4EN7KVJDgRfqr/J205k1G7Xlqoz6C
X/s+0taWURluZcPiVmpZnMl6ux9EhkVW67oM+pw4X0ipM2vvvxrdLx/k7J59suvi
N6pgBa0rNejhE+A/rxCd2srCLlUGv8fFZmHUR/ys1lmSlkYUk+IEOghcoiy7RxI6
+a0iyk6XfF6euU8fPPZ+wonnRQnwxg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:02 2026 by rpki-client