Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa
File:                     1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json)
Hash identifier:          +mAcEkthFUUxT1Cp1to6NXkc4EGGRvW8PP6BoXbanas=
Subject key identifier:   54:17:D2:6E:7D:63:C9:77:B6:F3:1D:D5:06:3A:BA:A1:A5:9F:55:3E
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584D571FB8EC299FA0D18AC038C0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     16789
IP address blocks:        104.156.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b8:ec:29:9f:a0:d1:8a:c0:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=c4e277ae-2cb6-42f8-9b6a-2a36a33bce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:ba:6a:d8:65:fd:23:67:93:70:10:94:c0:
                    3a:e4:08:04:4c:d9:1e:f1:e2:14:5b:45:40:6c:af:
                    26:25:77:04:d7:b6:70:e0:e0:17:bc:af:40:87:02:
                    29:89:0f:ab:cf:01:e3:61:4a:e5:f8:8c:b6:ad:de:
                    f8:16:dc:c8:17:ea:c9:27:04:30:96:89:9b:74:a1:
                    5a:a6:b8:56:b4:6d:e7:b6:3c:73:cb:80:e7:ee:d1:
                    d6:37:8f:ac:c8:f1:ac:cd:0c:0e:3b:de:7d:83:8a:
                    ef:d1:52:8c:70:93:66:de:9d:29:06:11:bf:46:e3:
                    05:37:c2:8e:b2:b9:0b:fa:7a:a3:78:8e:dd:c2:2c:
                    2e:f2:16:92:9b:1b:33:34:de:4c:e1:5e:54:ff:19:
                    8e:ef:b9:de:2e:61:ef:3f:38:e0:63:c6:ea:96:7a:
                    3e:14:cf:ee:8c:7d:55:53:16:73:55:4f:10:31:5c:
                    b9:a4:a9:34:b8:2e:89:89:75:84:c4:77:57:01:d7:
                    75:6d:66:09:8e:7d:c7:75:4c:7f:95:0c:af:fd:9a:
                    72:87:fd:1c:74:cf:e3:71:11:fc:67:9c:e9:78:ae:
                    76:7a:8d:b7:ae:00:f2:b5:2b:4d:c2:12:a8:5b:0b:
                    63:d2:6c:43:dc:85:35:38:60:9c:a8:11:6b:ff:a0:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:17:D2:6E:7D:63:C9:77:B6:F3:1D:D5:06:3A:BA:A1:A5:9F:55:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:e1:f3:d6:9d:05:5f:b0:52:40:4a:f5:1c:10:b2:68:3a:
         01:ed:42:61:1f:42:5e:a0:6d:87:31:ab:45:f6:01:df:4f:4a:
         52:f3:f8:9c:87:1b:32:d0:7b:5c:c1:79:4b:91:97:bc:1f:97:
         e5:dd:43:24:69:a5:a2:ed:e5:e1:8e:98:a0:07:54:69:1d:c4:
         3c:e1:a7:76:c2:64:82:ff:45:ed:88:5e:f4:b6:77:08:cd:01:
         3a:c2:d3:9d:5b:64:ee:07:34:38:9e:e2:8a:16:05:04:88:48:
         b1:7a:c2:bd:25:e1:9e:c6:50:52:97:25:9d:1f:cb:b6:a6:7c:
         e4:7d:b7:f2:e0:1b:0e:22:80:c0:1f:f4:d1:fa:6d:d3:d3:59:
         3b:2f:83:10:fa:41:3d:d2:a4:87:2a:52:a5:c7:a4:11:7d:60:
         ac:cf:de:be:3b:e6:e1:39:5e:01:d6:ad:ff:2f:bc:ca:af:cf:
         44:de:47:e7:da:77:a8:d9:05:2d:b4:5a:21:51:dc:f6:47:6b:
         b6:1b:72:7f:30:d0:91:f5:ff:5e:cb:25:82:3c:d2:24:04:44:
         9c:96:b2:8f:05:59:0c:44:7c:96:7c:7a:13:97:cb:09:45:29:
         81:8a:72:02:c9:1d:fa:20:32:b2:26:ac:36:e3:c1:d6:33:9e:
         8e:70:5f:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7jsKZ+g0YrAOMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4
YjY4MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
YzRlMjc3YWUtMmNiNi00MmY4LTliNmEtMmEzNmEzM2JjZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gm6athl/SNnk3AQlMA65AgETNke8eIUW0VA
bK8mJXcE17Zw4OAXvK9AhwIpiQ+rzwHjYUrl+Iy2rd74FtzIF+rJJwQwlombdKFa
prhWtG3ntjxzy4Dn7tHWN4+syPGszQwOO959g4rv0VKMcJNm3p0pBhG/RuMFN8KO
srkL+nqjeI7dwiwu8haSmxszNN5M4V5U/xmO77neLmHvPzjgY8bqlno+FM/ujH1V
UxZzVU8QMVy5pKk0uC6JiXWExHdXAdd1bWYJjn3HdUx/lQyv/Zpyh/0cdM/jcRH8
Z5zpeK52eo23rgDytStNwhKoWwtj0mxD3IU1OGCcqBFr/6DRbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQX0m59Y8l3tvMd1QY6uqGln1U+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy
ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z
OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5
YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk
OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy
ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPG4fPWnQVfsFJASvUcELJoOgHtQmEfQl6gbYcxq0X2Ad9PSlLz+JyH
GzLQe1zBeUuRl7wfl+XdQyRppaLt5eGOmKAHVGkdxDzhp3bCZIL/Re2IXvS2dwjN
ATrC051bZO4HNDie4ooWBQSISLF6wr0l4Z7GUFKXJZ0fy7amfOR9t/LgGw4igMAf
9NH6bdPTWTsvgxD6QT3SpIcqUqXHpBF9YKzP3r475uE5XgHWrf8vvMqvz0TeR+fa
d6jZBS20WiFR3PZHa7Ybcn8w0JH1/17LJYI80iQERJyWso8FWQxEfJZ8ehOXywlF
KYGKcgLJHfogMrImrDbjwdYzno5wXyk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:24 2026 by rpki-client