Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f629818-3dc3-3784-9d64-4bbd95e4c37c.roa
File:                     9f629818-3dc3-3784-9d64-4bbd95e4c37c.roa (raw, json)
Hash identifier:          /2P1iuIz0OuVbjhVmi7Zjn4Ni0D7lHwU+aZaFD9Ig/s=
Subject key identifier:   A7:02:24:93:13:E8:D6:B6:B7:73:BB:43:98:9D:05:E2:48:B7:DB:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA907E834DF70809152240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f629818-3dc3-3784-9d64-4bbd95e4c37c.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        184.149.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:90:7e:83:4d:f7:08:09:15:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fd5cedef-4bc4-4e47-bdb3-8e32ed0f5d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:f3:80:c8:4d:c1:b3:8f:a8:4e:09:c2:72:
                    dc:7c:ca:9b:3f:16:5b:78:cc:c4:ac:04:9d:75:ea:
                    2d:e8:97:01:15:2c:68:98:06:86:04:75:d8:82:55:
                    f8:f7:3c:90:80:2e:7d:29:02:23:13:98:4d:92:6a:
                    dd:19:86:df:f8:7f:39:ac:15:21:f4:a0:74:64:3f:
                    1c:e0:8b:2c:a4:b0:cb:e6:ed:c9:33:c0:06:77:9b:
                    51:a4:50:2d:cd:27:24:b9:1e:03:de:af:33:f9:f8:
                    c2:a2:2f:81:06:3c:6b:11:06:8f:a6:fa:58:c7:d1:
                    3c:ff:ed:ef:96:15:68:ae:01:69:9e:67:59:94:a5:
                    4b:86:fa:5d:5c:7f:af:f0:f8:56:d8:6d:8e:cf:03:
                    c2:23:75:71:1b:b9:2f:03:45:6a:d1:05:ad:84:8c:
                    2e:ab:4c:64:f4:82:c0:1a:2b:6c:d2:e0:b4:ac:57:
                    86:4f:d5:96:4f:1b:de:20:3d:41:a5:ef:ff:a5:24:
                    06:c6:35:6c:8d:cc:dc:e8:64:44:46:f7:e2:c8:03:
                    e9:62:ca:28:24:cd:b1:aa:cd:8d:1e:40:80:58:fd:
                    33:fb:19:ae:d9:50:5c:9f:d6:66:1c:8e:a2:03:96:
                    5b:1e:15:8a:68:14:a5:3f:5d:e8:cd:f6:c5:2f:ca:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:24:93:13:E8:D6:B6:B7:73:BB:43:98:9D:05:E2:48:B7:DB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f629818-3dc3-3784-9d64-4bbd95e4c37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:ec:fa:29:3f:f4:e2:d0:31:9f:73:fa:bc:fe:3f:3f:4f:
         8f:a6:2b:a2:be:33:2e:44:a7:c7:7f:f5:9f:86:4a:3c:cd:94:
         c8:17:ac:15:5d:51:e1:06:e2:8d:6d:63:3b:cb:6f:2c:90:8c:
         e8:75:85:85:8f:8f:cc:33:2b:ba:ae:ce:b9:54:94:8e:e8:e5:
         71:6b:e0:75:92:48:a7:81:18:46:35:6c:9b:87:e9:e7:cb:c2:
         2c:3b:41:da:11:1e:d1:bb:13:a9:5c:96:12:f7:7b:d9:1e:ee:
         5e:e0:e3:29:67:b3:bd:56:12:81:54:6f:5e:f0:4b:7a:e0:74:
         5d:26:21:13:47:c7:6c:be:8e:47:93:80:a7:51:41:fe:26:a2:
         19:af:4b:7f:5d:ba:cd:fe:de:f0:10:47:4c:74:92:9b:61:3d:
         72:35:1a:b0:39:b1:a0:93:ae:7c:c1:37:12:37:e3:aa:6a:95:
         b9:02:62:22:bf:99:c4:66:96:e0:b8:82:09:2e:97:0b:5c:67:
         d1:c5:b1:26:64:a8:f5:38:11:e7:82:83:47:f9:92:b0:e7:0a:
         32:99:88:4a:fd:3d:d3:61:4a:03:e6:21:34:87:28:3c:94:d7:
         cc:4d:2d:66:72:07:a9:36:fa:c5:99:c1:15:e9:81:ad:5c:40:
         72:6c:a3:e2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2DypB+g033CAkVIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZmQ1Y2VkZWYtNGJjNC00ZTQ3LWJkYjMtOGUzMmVkMGY1ZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKzzgMhNwbOPqE4JwnLcfMqbPxZbeMzErASd
deot6JcBFSxomAaGBHXYglX49zyQgC59KQIjE5hNkmrdGYbf+H85rBUh9KB0ZD8c
4IsspLDL5u3JM8AGd5tRpFAtzSckuR4D3q8z+fjCoi+BBjxrEQaPpvpYx9E8/+3v
lhVorgFpnmdZlKVLhvpdXH+v8PhW2G2OzwPCI3VxG7kvA0Vq0QWthIwuq0xk9ILA
Gits0uC0rFeGT9WWTxveID1Bpe//pSQGxjVsjczc6GRERvfiyAPpYsooJM2xqs2N
HkCAWP0z+xmu2VBcn9ZmHI6iA5ZbHhWKaBSlP13ozfbFL8q5JwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKcCJJMT6Na2t3O7Q5idBeJIt9ssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWY2Mjk4MTgtM2RjMy0z
Nzg0LTlkNjQtNGJiZDk1ZTRjMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAuJUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPhbs+ik/9OLQMZ9z+rz+Pz9Pj6Yror4zLkSnx3/1n4ZKPM2UyBesFV1R
4QbijW1jO8tvLJCM6HWFhY+PzDMruq7OuVSUjujlcWvgdZJIp4EYRjVsm4fp58vC
LDtB2hEe0bsTqVyWEvd72R7uXuDjKWezvVYSgVRvXvBLeuB0XSYhE0fHbL6OR5OA
p1FB/iaiGa9Lf126zf7e8BBHTHSSm2E9cjUasDmxoJOufME3EjfjqmqVuQJiIr+Z
xGaW4LiCCS6XC1xn0cWxJmSo9TgR54KDR/mSsOcKMpmISv0902FKA+YhNIcoPJTX
zE0tZnIHqTb6xZnBFemBrVxAcmyj4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:44 2026 by rpki-client