Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
File:                     35febe00-9c57-373a-948b-0f3b0e170f27.roa (raw, json)
Hash identifier:          YhMvaeRZp8MhVJg1r9OeuL10oYmKrfbxizwapKF/Ku8=
Subject key identifier:   61:73:3E:F5:9F:A4:03:0B:D4:62:9A:D1:54:32:5C:DB:6B:ED:85:00
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584D0217A6DFE300EA19894A0FE0
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     397984
IP address blocks:        198.184.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a6:df:e3:00:ea:19:89:4a:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=3225078c-4287-43a6-9cc8-b5cb0df6c64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:1f:3e:a3:0b:b9:3d:2b:b2:c4:28:65:da:
                    1f:6e:9f:d6:64:16:05:d1:ef:80:d2:39:e5:83:3e:
                    2f:61:ca:ec:c4:47:bd:7a:c4:0d:f7:3d:63:27:7f:
                    81:d3:ac:3f:a2:1f:96:df:1e:c4:0c:34:94:90:2c:
                    c6:95:ef:8e:4a:ad:be:b4:43:7d:d4:13:6d:86:9d:
                    79:e6:ac:08:25:07:f1:91:95:da:28:34:5d:b1:57:
                    92:8b:bf:2e:e7:85:aa:7b:3e:c4:dc:d9:fb:d2:44:
                    c3:98:a0:e1:bb:db:eb:92:1d:9c:36:a0:c7:91:ef:
                    c6:91:75:eb:6c:d1:3b:3d:e6:e2:d7:6b:42:bf:85:
                    03:22:ba:bc:88:5f:12:b3:1a:fb:7b:b4:9b:48:83:
                    c5:a7:d0:b3:07:62:81:dd:0e:24:ca:8d:54:d2:9d:
                    c0:e4:4c:45:99:4b:21:5c:6c:90:7b:c1:83:82:a5:
                    d3:a9:8b:45:9c:10:d1:9d:d5:8c:ff:8b:3e:0f:1c:
                    9a:bc:c0:ba:3e:5c:ec:1c:55:47:78:6f:54:4e:63:
                    c8:97:b8:57:77:08:4f:98:dc:79:31:cc:c7:0e:1c:
                    d9:34:44:fc:9e:fd:90:be:a5:77:04:85:99:bd:bc:
                    cf:31:a6:d5:5b:96:de:1e:3b:ee:48:12:fd:ca:14:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:3E:F5:9F:A4:03:0B:D4:62:9A:D1:54:32:5C:DB:6B:ED:85:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:df:08:41:e1:84:6c:a8:3e:db:ed:36:39:67:fc:e0:a0:
         a8:d6:58:4a:5d:3a:a6:81:f3:b3:f8:7b:4b:ac:e5:db:c9:f4:
         92:f0:f8:f6:de:58:c8:10:39:3c:99:aa:47:30:82:2f:b3:76:
         cc:0c:67:b1:8e:0b:af:98:69:46:50:e9:1e:3b:9c:6c:fd:e1:
         90:6d:44:bf:d6:c2:2d:ae:58:65:14:68:25:3c:9b:e9:62:8e:
         ce:83:44:16:68:6c:bf:88:88:97:8f:49:3f:88:be:ad:4f:39:
         c2:34:4c:f2:5c:2e:ef:b0:36:45:c9:bc:09:ef:d7:f0:9e:f9:
         40:9f:a9:43:8c:94:41:07:00:a8:fb:46:d8:ec:d6:c1:1d:b1:
         8d:89:63:b7:fc:38:57:de:08:14:91:8f:8b:ce:6b:bd:8a:61:
         8c:c7:fc:3d:5d:46:f3:a0:bd:99:54:52:83:d4:ba:3d:ce:0b:
         01:04:90:59:83:30:b2:86:24:e1:60:3b:e7:a6:e6:1a:09:f0:
         89:26:86:de:f9:36:dc:a9:36:e0:aa:dd:07:db:cd:cf:f2:a8:
         fa:68:d1:27:df:90:9e:96:6c:07:0b:58:ef:1d:19:b0:fa:6b:
         ea:bd:95:36:84:19:2b:75:05:13:1e:b2:38:70:89:c5:1e:e4:
         b7:c7:3c:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6bf4wDqGYlKD+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm
NDJlMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzIyNTA3OGMtNDI4Ny00M2E2LTljYzgtYjVjYjBkZjZjNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AkfPqMLuT0rssQoZdofbp/WZBYF0e+A0jnl
gz4vYcrsxEe9esQN9z1jJ3+B06w/oh+W3x7EDDSUkCzGle+OSq2+tEN91BNthp15
5qwIJQfxkZXaKDRdsVeSi78u54Wqez7E3Nn70kTDmKDhu9vrkh2cNqDHke/GkXXr
bNE7Pebi12tCv4UDIrq8iF8Ssxr7e7SbSIPFp9CzB2KB3Q4kyo1U0p3A5ExFmUsh
XGyQe8GDgqXTqYtFnBDRndWM/4s+DxyavMC6PlzsHFVHeG9UTmPIl7hXdwhPmNx5
MczHDhzZNET8nv2QvqV3BIWZvbzPMabVW5beHjvuSBL9yhTXGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFzPvWfpAML1GKa0VQyXNtr7YUAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm
ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMzVmZWJlMDAtOWM1Ny0z
NzNhLTk0OGItMGYzYjBlMTcwZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz
YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2
ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj
NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxricMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBw3whB4YRsqD7b7TY5Z/zgoKjWWEpdOqaB87P4e0us5dvJ9JLw+Pbe
WMgQOTyZqkcwgi+zdswMZ7GOC6+YaUZQ6R47nGz94ZBtRL/Wwi2uWGUUaCU8m+li
js6DRBZobL+IiJePST+Ivq1POcI0TPJcLu+wNkXJvAnv1/Ce+UCfqUOMlEEHAKj7
Rtjs1sEdsY2JY7f8OFfeCBSRj4vOa72KYYzH/D1dRvOgvZlUUoPUuj3OCwEEkFmD
MLKGJOFgO+em5hoJ8Ikmht75NtypNuCq3Qfbzc/yqPpo0SffkJ6WbAcLWO8dGbD6
a+q9lTaEGSt1BRMesjhwicUe5LfHPAw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:46 2026 by rpki-client