Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa
File:                     8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa (raw, json)
Hash identifier:          bl5lE4ndI7J0swBsttbzsDPvM4t1OvEsk8kFVxpNJYs=
Subject key identifier:   6C:0A:84:9C:98:D8:92:62:29:11:4F:20:71:C3:D0:16:61:1D:C4:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA90159243839406D7E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        207.35.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a9:01:59:24:38:39:40:6d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2882ee1a-1b4b-49cd-9d24-8e0ba8aebf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:95:04:f3:3e:54:a7:1c:14:74:5f:3f:0b:
                    62:5d:f7:23:91:0b:a1:7d:c6:b8:6e:d2:19:b2:47:
                    b6:38:9f:80:02:1b:c2:a7:e1:9e:5b:7c:6b:fd:1c:
                    b4:14:cd:05:e8:51:37:9c:49:d4:91:11:e7:57:a6:
                    97:bd:89:0e:d0:67:8a:bb:30:aa:da:3a:ea:8b:78:
                    20:8b:eb:9b:59:f3:d2:4d:7c:bf:1c:39:24:7b:7d:
                    1f:86:95:40:e9:82:59:d2:f4:5c:64:b7:13:27:ee:
                    74:79:ac:78:9b:9e:b4:ef:23:08:de:40:15:6c:60:
                    23:0e:ed:48:33:7b:a0:3c:af:a2:eb:54:af:cf:7e:
                    e7:2a:01:20:0d:ea:00:d6:c7:9a:86:ac:a6:d8:d1:
                    07:5a:10:9a:15:3d:0a:42:66:2b:de:26:a7:d2:3c:
                    d1:66:dd:53:2a:84:31:e9:04:89:78:48:58:61:f6:
                    d4:a0:ce:24:b2:0d:ba:6d:e8:25:b8:c0:09:50:a1:
                    8c:ef:04:8d:61:b4:65:e9:98:21:99:b4:bb:42:2b:
                    35:8a:d7:c4:52:c6:6c:dd:13:58:f8:70:3d:e5:3e:
                    a1:54:ca:8f:76:15:a2:3c:82:82:80:8e:0c:79:4b:
                    86:84:2d:f8:98:a9:0d:45:22:0e:68:55:31:82:8f:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:84:9C:98:D8:92:62:29:11:4F:20:71:C3:D0:16:61:1D:C4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:9f:ec:4e:71:82:07:49:84:6b:a6:3d:01:b7:f6:0a:5b:
         b5:d5:1e:97:6f:a5:91:04:d8:1c:e3:40:5f:15:8a:82:d3:6b:
         92:76:df:2e:18:5b:db:1a:59:47:a5:59:dc:81:1b:a9:cd:a8:
         fc:82:f5:fe:7b:9f:79:da:74:68:42:5c:27:26:83:92:dc:6b:
         af:23:35:b8:0b:76:3a:73:dc:d0:6b:54:36:81:b2:71:5c:ca:
         58:8f:1b:f3:3d:64:83:6b:6c:8e:27:66:4b:64:06:5a:0d:8a:
         8a:8f:c0:dc:56:78:f4:a6:ba:b5:cf:6b:55:52:9b:01:7b:32:
         d0:68:96:6f:b8:27:4f:4f:f9:b6:2a:06:b3:28:18:b1:e3:6a:
         fb:e1:ab:4b:6d:23:88:1e:5b:8d:0a:ed:1a:06:9b:2e:b9:cb:
         1c:55:26:72:48:24:c5:8e:cb:7e:d1:5b:b0:f8:23:84:23:9f:
         24:0e:ba:7f:13:f4:e4:3a:22:6a:ba:af:de:cf:50:85:c6:f4:
         dc:a7:f5:47:1d:75:10:2d:fa:0c:14:27:1b:7c:fd:47:55:ea:
         d6:8c:75:db:d2:5e:32:68:c8:77:71:56:8e:d6:7e:9a:da:9a:
         c9:d1:d3:d1:30:1d:a8:12:bf:d4:aa:b1:a4:37:0b:d6:74:74:
         7c:2e:55:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyqkBWSQ4OUBtfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
Mjg4MmVlMWEtMWI0Yi00OWNkLTlkMjQtOGUwYmE4YWViZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOGVBPM+VKccFHRfPwtiXfcjkQuhfca4btIZ
ske2OJ+AAhvCp+GeW3xr/Ry0FM0F6FE3nEnUkRHnV6aXvYkO0GeKuzCq2jrqi3gg
i+ubWfPSTXy/HDkke30fhpVA6YJZ0vRcZLcTJ+50eax4m5607yMI3kAVbGAjDu1I
M3ugPK+i61Svz37nKgEgDeoA1seahqym2NEHWhCaFT0KQmYr3ian0jzRZt1TKoQx
6QSJeEhYYfbUoM4ksg26begluMAJUKGM7wSNYbRl6ZghmbS7Qis1itfEUsZs3RNY
+HA95T6hVMqPdhWiPIKCgI4MeUuGhC34mKkNRSIOaFUxgo/zOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwKhJyY2JJiKRFPIHHD0BZhHcRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGJmMTU5OTMtOWUwYi0z
NzRjLWI4YjQtZGE4YmViNjZjM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyPrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEt2n+xOcYIHSYRrpj0Bt/YKW7XVHpdvpZEE2BzjQF8VioLTa5J23y4Y
W9saWUelWdyBG6nNqPyC9f57n3nadGhCXCcmg5Lca68jNbgLdjpz3NBrVDaBsnFc
yliPG/M9ZINrbI4nZktkBloNioqPwNxWePSmurXPa1VSmwF7MtBolm+4J09P+bYq
BrMoGLHjavvhq0ttI4geW40K7RoGmy65yxxVJnJIJMWOy37RW7D4I4QjnyQOun8T
9OQ6Imq6r97PUIXG9Nyn9UcddRAt+gwUJxt8/UdV6taMddvSXjJoyHdxVo7Wfpra
msnR09EwHagSv9SqsaQ3C9Z0dHwuVSc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:29:46 2026 by rpki-client