Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa
File:                     f797bfd8-c314-333c-8050-442d888e309b.roa (raw, json)
Hash identifier:          0nQuwtHP/Y4LuSja8pkKnh30PPk2W7FWmO1Ua1K47Bg=
Subject key identifier:   DC:4B:0D:16:48:84:84:41:2C:45:7C:17:6A:35:AF:68:00:DC:31:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0851D7DD882DCA529400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     4540
IP address blocks:        207.35.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:08:51:d7:dd:88:2d:ca:52:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0e0ecbc2-4f59-4509-82c5-48f503707545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:cc:ff:ad:76:bc:b5:e4:a3:d7:5c:42:ba:
                    e1:1c:ff:13:be:c9:4b:fb:15:f8:1d:ce:58:f6:1a:
                    57:ce:c1:96:d9:d4:63:2b:aa:ce:d2:56:98:94:62:
                    69:52:2b:cb:a4:95:19:6a:26:47:f2:18:df:51:d9:
                    26:63:43:98:c0:1a:f7:f1:2a:4e:3b:c9:f6:f0:70:
                    c1:a2:88:c9:2a:7c:ec:07:46:f4:bd:64:ae:36:91:
                    6b:e6:4c:48:d8:d3:20:48:4c:ba:72:dc:a1:9b:30:
                    9e:fe:68:d4:43:e4:de:e8:f7:c6:73:c7:43:fd:c8:
                    00:64:6a:af:eb:b4:19:e0:3d:70:d7:3b:65:91:23:
                    24:c4:3e:44:f8:79:f6:5e:e2:88:3a:3d:97:57:55:
                    44:24:63:c3:77:9e:6f:ad:6c:50:22:4a:df:79:8c:
                    89:4a:24:7c:df:af:60:91:4e:95:d2:4f:81:67:fd:
                    34:a6:53:a9:78:2b:88:a5:85:92:b5:d7:f6:a4:f0:
                    56:8d:ba:f2:15:ca:d9:b1:10:a6:3a:f4:37:4e:b0:
                    1f:4e:1a:6e:18:26:f8:a2:fa:23:a6:c3:5e:b1:07:
                    e8:2d:64:c4:95:db:71:f7:ef:18:fe:bf:a1:62:f3:
                    dc:d6:1d:d5:d5:fe:9a:3d:66:77:c6:6c:bf:2c:1a:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4B:0D:16:48:84:84:41:2C:45:7C:17:6A:35:AF:68:00:DC:31:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:1a:94:04:52:d0:e6:1a:c2:e6:92:2c:67:2a:d1:b5:dc:
         65:d3:d9:90:fc:72:e7:f0:e7:04:26:45:ae:c9:bd:8a:fc:31:
         fb:ab:f7:c6:cb:0e:80:a7:f4:9b:7d:b1:da:00:e0:d8:36:2b:
         d9:27:e1:fe:f9:35:e7:e1:d2:b0:5e:42:5c:ba:88:25:54:36:
         cc:3a:90:68:b3:5b:31:5a:e1:e3:5a:2d:a3:20:6d:f0:b3:64:
         f4:85:a1:23:43:c3:33:92:90:aa:d5:36:c4:0f:49:19:29:ba:
         eb:75:f3:81:e0:01:41:59:63:3b:8a:82:4c:a6:03:ad:88:dc:
         4f:e9:96:af:5c:3f:24:be:fb:af:fd:15:0d:9b:73:08:20:50:
         37:1c:68:3b:6e:3a:33:27:04:82:e9:aa:48:37:c0:4e:5c:ea:
         7d:c6:fa:ab:f6:3e:e0:7f:11:2b:1b:9b:d6:f9:50:09:d2:b6:
         f8:92:e7:58:da:4c:dd:4e:6e:b5:52:bc:72:0c:09:21:cd:8f:
         5b:67:a0:c5:3e:a4:99:a6:20:9d:8f:b1:13:b3:ab:a6:27:f3:
         a8:d1:18:f3:e3:7b:1d:12:e9:0f:46:06:ed:ad:69:cc:0e:fd:
         bc:d9:71:46:96:19:45:63:2d:e7:4c:ea:62:9b:3a:c1:8e:8f:
         34:c2:2c:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DywhR192ILcpSlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MGUwZWNiYzItNGY1OS00NTA5LTgyYzUtNDhmNTAzNzA3NTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT7M/612vLXko9dcQrrhHP8TvslL+xX4Hc5Y
9hpXzsGW2dRjK6rO0laYlGJpUivLpJUZaiZH8hjfUdkmY0OYwBr38SpOO8n28HDB
oojJKnzsB0b0vWSuNpFr5kxI2NMgSEy6ctyhmzCe/mjUQ+Te6PfGc8dD/cgAZGqv
67QZ4D1w1ztlkSMkxD5E+Hn2XuKIOj2XV1VEJGPDd55vrWxQIkrfeYyJSiR8369g
kU6V0k+BZ/00plOpeCuIpYWStdf2pPBWjbryFcrZsRCmOvQ3TrAfThpuGCb4ovoj
psNesQfoLWTEldtx9+8Y/r+hYvPc1h3V1f6aPWZ3xmy/LBoI9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxLDRZIhIRBLEV8F2o1r2gA3DHmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjc5N2JmZDgtYzMxNC0z
MzNjLTgwNTAtNDQyZDg4OGUzMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHszGpQEUtDmGsLmkixnKtG13GXT2ZD8cufw5wQmRa7JvYr8Mfur98bL
DoCn9Jt9sdoA4Ng2K9kn4f75Nefh0rBeQly6iCVUNsw6kGizWzFa4eNaLaMgbfCz
ZPSFoSNDwzOSkKrVNsQPSRkpuut184HgAUFZYzuKgkymA62I3E/plq9cPyS++6/9
FQ2bcwggUDccaDtuOjMnBILpqkg3wE5c6n3G+qv2PuB/ESsbm9b5UAnStviS51ja
TN1ObrVSvHIMCSHNj1tnoMU+pJmmIJ2PsROzq6Yn86jRGPPjex0S6Q9GBu2tacwO
/bzZcUaWGUVjLedM6mKbOsGOjzTCLL8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:08 2026 by rpki-client