Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99113464-74ee-399e-95be-11d0cf16f398.roa
File:                     99113464-74ee-399e-95be-11d0cf16f398.roa (raw, json)
Hash identifier:          B1GOfM2EuOWhD2nIBD9UkUrK0UfFzvSF8aRFnffrTGQ=
Subject key identifier:   67:34:91:67:AB:B8:B3:7B:17:E1:4E:A6:C6:88:E4:A8:C9:53:0C:6B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB13BB36C11966B255E4E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99113464-74ee-399e-95be-11d0cf16f398.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        70.29.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:13:bb:36:c1:19:66:b2:55:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=624aab8f-a6f8-41ef-b7e5-a8d25a412311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:e5:17:78:84:d8:ae:d4:90:2b:a3:e2:b2:
                    df:a1:4c:e2:a0:a2:99:ee:e5:ee:25:4c:5b:96:dc:
                    ac:59:ec:53:34:f5:58:bb:02:41:5b:af:92:21:5c:
                    84:40:42:63:17:d0:4d:32:94:34:38:f3:96:f5:d0:
                    1f:60:d3:49:a1:13:c8:b8:32:03:63:b4:3e:65:1d:
                    b7:4f:e2:bc:cf:24:1b:48:93:54:e7:aa:77:f5:26:
                    28:77:d4:43:20:fb:31:a5:78:ff:30:66:3e:df:64:
                    44:e5:25:24:25:4a:ba:da:aa:d5:62:3f:ab:94:29:
                    eb:db:ad:5c:62:22:2c:58:fc:2d:f3:1d:00:68:35:
                    5b:58:51:57:36:35:33:6a:a8:ca:46:96:a1:e7:a5:
                    e0:f3:56:76:bb:b2:85:17:ed:17:f1:29:91:64:83:
                    78:fe:df:f2:db:46:cc:d1:87:4b:9f:d8:21:57:b1:
                    da:e0:8e:c3:4f:92:27:47:d1:c1:ac:c7:b0:14:5d:
                    20:b9:58:f7:b6:67:ad:45:00:50:2e:26:5e:a3:75:
                    72:eb:ef:3d:00:db:2b:8a:3c:e8:d5:58:b6:25:6e:
                    5f:10:c0:7f:a3:45:e2:17:12:18:51:25:62:c8:a0:
                    99:63:0f:12:56:5a:b9:90:f7:53:d0:b6:ae:e5:22:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:91:67:AB:B8:B3:7B:17:E1:4E:A6:C6:88:E4:A8:C9:53:0C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99113464-74ee-399e-95be-11d0cf16f398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8e:87:54:a3:99:19:04:e2:cd:e3:57:59:51:15:03:0d:25:
         4a:76:9c:3a:90:be:b6:01:66:69:58:1d:48:42:f1:a4:58:3f:
         a9:dd:55:23:ce:03:72:ba:2d:14:35:a3:1c:ae:8a:e3:b8:b4:
         ac:bb:94:69:0a:f3:ef:88:c2:53:95:f5:e6:00:1f:5e:27:71:
         60:51:f6:49:64:46:84:3f:f7:61:bd:23:9c:ec:be:44:a3:8e:
         ae:89:99:2e:b8:21:7c:67:24:08:f3:a7:65:36:87:26:62:32:
         e4:27:42:15:31:78:2d:c9:b2:d8:b1:77:dd:03:5e:41:76:61:
         42:8b:7f:30:42:74:93:06:36:67:9f:f9:38:d9:2e:3f:9b:08:
         15:b8:d3:80:26:bc:a1:e6:85:12:4d:da:cf:64:40:83:2e:c1:
         c5:af:f4:4e:09:7a:b1:35:c3:4f:af:eb:59:cf:f4:c8:47:cf:
         4a:1e:3e:b6:e5:31:e3:5a:07:7c:be:6f:62:34:2b:c2:eb:14:
         42:05:54:88:e8:f1:b1:50:ee:b9:5a:ec:1c:3e:e4:07:f1:2f:
         76:d2:e1:37:fa:cb:7d:ad:ca:0d:b6:80:9d:f6:e6:7b:3a:81:
         04:da:ca:9c:6e:1f:f5:c9:84:b3:d9:09:ac:25:df:f8:48:d0:
         57:c4:b8:5e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2DyxO7NsEZZrJV5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
NjI0YWFiOGYtYTZmOC00MWVmLWI3ZTUtYThkMjVhNDEyMzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonXlF3iE2K7UkCuj4rLfoUzioKKZ7uXuJUxb
ltysWexTNPVYuwJBW6+SIVyEQEJjF9BNMpQ0OPOW9dAfYNNJoRPIuDIDY7Q+ZR23
T+K8zyQbSJNU56p39SYod9RDIPsxpXj/MGY+32RE5SUkJUq62qrVYj+rlCnr261c
YiIsWPwt8x0AaDVbWFFXNjUzaqjKRpah56Xg81Z2u7KFF+0X8SmRZIN4/t/y20bM
0YdLn9ghV7Ha4I7DT5InR9HBrMewFF0guVj3tmetRQBQLiZeo3Vy6+89ANsrijzo
1Vi2JW5fEMB/o0XiFxIYUSViyKCZYw8SVlq5kPdT0Lau5SKi3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGc0kWeruLN7F+FOpsaI5KjJUwxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTkxMTM0NjQtNzRlZS0z
OTllLTk1YmUtMTFkMGNmMTZmMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARh0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgo6HVKOZGQTizeNXWVEVAw0lSnacOpC+tgFmaVgdSELxpFg/qd1VI84D
crotFDWjHK6K47i0rLuUaQrz74jCU5X15gAfXidxYFH2SWRGhD/3Yb0jnOy+RKOO
romZLrghfGckCPOnZTaHJmIy5CdCFTF4Lcmy2LF33QNeQXZhQot/MEJ0kwY2Z5/5
ONkuP5sIFbjTgCa8oeaFEk3az2RAgy7Bxa/0Tgl6sTXDT6/rWc/0yEfPSh4+tuUx
41oHfL5vYjQrwusUQgVUiOjxsVDuuVrsHD7kB/EvdtLhN/rLfa3KDbaAnfbmezqB
BNrKnG4f9cmEs9kJrCXf+EjQV8S4Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:12 2026 by rpki-client