Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b7dfca69-ec1b-38eb-92d2-f3ba9ffefcc4.roa
File:                     b7dfca69-ec1b-38eb-92d2-f3ba9ffefcc4.roa (raw, json)
Hash identifier:          1DYP4ZTwlJTa4HW3Vc5jppitTqMEDvYnhnXknNSCOQE=
Subject key identifier:   AC:1D:2D:E2:88:69:15:CC:FC:44:AB:9B:F5:FD:E3:5A:C9:0F:01:E2
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D0217AB1E42A43390C0A1D830
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b7dfca69-ec1b-38eb-92d2-f3ba9ffefcc4.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     13768
IP address blocks:        65.39.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ab:1e:42:a4:33:90:c0:a1:d8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=69ab4654-e106-47a2-ab82-0d760af4fcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:f0:5a:b3:86:b4:dc:3d:41:70:10:08:75:
                    98:d3:fc:fe:1b:d2:6d:4f:1e:9e:69:8c:a7:62:e9:
                    bf:3b:bf:1f:b9:85:52:3e:2c:18:89:36:73:b6:af:
                    55:f0:71:ac:48:b5:32:5b:7d:1b:c1:49:ee:8c:f4:
                    9f:81:07:a3:85:47:9d:ff:33:ef:df:0e:6a:1a:ff:
                    90:58:0a:11:e8:e6:07:d0:9e:2e:ac:00:a3:56:49:
                    e4:e2:0a:75:f5:9d:d8:03:a4:2c:e9:7a:7d:e5:c5:
                    4c:bb:17:fe:87:7c:f2:3f:38:df:96:ee:f0:ad:9f:
                    b7:76:2e:ef:46:5c:6a:c8:87:56:1c:29:12:ba:c2:
                    bb:4a:74:2f:3f:8e:e0:89:2e:dc:41:65:72:57:79:
                    ef:56:5e:29:57:ec:65:81:73:36:19:af:b4:df:27:
                    d5:9c:36:18:5f:fb:f8:b2:d8:6c:7d:68:df:1f:49:
                    5f:3f:5b:7f:08:f2:33:32:76:c6:12:fe:e7:c0:6f:
                    95:18:b6:c1:79:d2:3a:18:01:4c:0f:3e:57:81:d7:
                    72:94:69:4b:25:96:b6:0f:92:39:64:e8:6d:5f:b1:
                    a4:ae:f0:ec:80:69:8d:63:21:64:75:0d:90:29:33:
                    7e:93:6f:15:e7:f8:01:9a:eb:ef:6c:92:53:40:4e:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1D:2D:E2:88:69:15:CC:FC:44:AB:9B:F5:FD:E3:5A:C9:0F:01:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b7dfca69-ec1b-38eb-92d2-f3ba9ffefcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:11:1d:a6:83:83:c5:4c:e7:b2:9c:b8:d2:7d:45:b8:7e:
         2f:7d:4e:1a:c0:40:91:90:1e:68:39:19:e8:57:58:73:fc:c3:
         fa:2d:bd:05:bb:31:56:6a:14:23:70:89:99:03:35:a6:e5:9d:
         df:a8:3b:7f:95:ec:58:62:45:7f:44:53:92:15:29:a6:5f:6a:
         8d:27:2c:c5:1c:df:bd:c5:cf:58:eb:9b:b9:bb:18:d3:85:1b:
         23:13:7d:31:e1:2a:0b:bc:40:e6:fc:54:ec:81:a4:55:93:52:
         e1:e2:6c:d4:87:91:1d:2c:63:55:cb:bc:c1:e8:ba:5c:68:d2:
         8e:a3:20:3c:6b:e0:ae:c3:b1:81:f4:0e:3e:14:36:a9:38:3d:
         fe:4a:0d:0a:48:58:41:35:da:87:56:20:97:27:90:6d:f9:90:
         78:cc:88:be:c2:a5:50:a9:39:e0:04:c6:b2:57:3b:30:0e:67:
         0c:19:1c:98:80:c7:5b:cc:f3:ec:3a:be:8b:62:58:62:40:4b:
         1f:6c:eb:dc:b2:09:5b:8a:1a:80:f4:d4:74:74:6d:62:09:f4:
         89:df:87:c4:6f:d4:9b:7c:1a:a0:91:47:97:cb:1e:16:27:87:
         2f:36:35:16:41:93:54:33:b6:3a:86:71:a3:a5:77:72:98:dd:
         29:b9:71:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6seQqQzkMCh2DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjlhYjQ2NTQtZTEwNi00N2EyLWFiODItMGQ3NjBhZjRmY2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/zwWrOGtNw9QXAQCHWY0/z+G9JtTx6eaYyn
Yum/O78fuYVSPiwYiTZztq9V8HGsSLUyW30bwUnujPSfgQejhUed/zPv3w5qGv+Q
WAoR6OYH0J4urACjVknk4gp19Z3YA6Qs6Xp95cVMuxf+h3zyPzjflu7wrZ+3di7v
RlxqyIdWHCkSusK7SnQvP47giS7cQWVyV3nvVl4pV+xlgXM2Ga+03yfVnDYYX/v4
sthsfWjfH0lfP1t/CPIzMnbGEv7nwG+VGLbBedI6GAFMDz5XgddylGlLJZa2D5I5
ZOhtX7GkrvDsgGmNYyFkdQ2QKTN+k28V5/gBmuvvbJJTQE6NIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwdLeKIaRXM/ESrm/X941rJDwHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYjdkZmNhNjktZWMxYi0z
OGViLTkyZDItZjNiYTlmZmVmY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSecMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHH4ER2mg4PFTOeynLjSfUW4fi99ThrAQJGQHmg5GehXWHP8w/otvQW7
MVZqFCNwiZkDNablnd+oO3+V7FhiRX9EU5IVKaZfao0nLMUc373Fz1jrm7m7GNOF
GyMTfTHhKgu8QOb8VOyBpFWTUuHibNSHkR0sY1XLvMHoulxo0o6jIDxr4K7DsYH0
Dj4UNqk4Pf5KDQpIWEE12odWIJcnkG35kHjMiL7CpVCpOeAExrJXOzAOZwwZHJiA
x1vM8+w6votiWGJASx9s69yyCVuKGoD01HR0bWIJ9Infh8Rv1Jt8GqCRR5fLHhYn
hy82NRZBk1QztjqGcaOld3KY3Sm5cdw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:17 2026 by rpki-client