Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
File:                     4e9f50cf-171b-33f5-a287-280df82c96bd.roa (raw, json)
Hash identifier:          Yn5nw7YmLAyApOrZQawnUvIaHUbbA2Wtkq8iECAMPUw=
Subject key identifier:   C3:E9:1D:DD:F6:10:13:C6:22:D1:5D:F0:32:97:CF:A5:88:A4:93:48
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584EEA87561687D9CE20EA9BCA00
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     27395
IP address blocks:        155.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:56:16:87:d9:ce:20:ea:9b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=2155a11f-2857-4f97-8ef5-ec5ada8bab5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:94:03:e1:69:2c:02:1c:86:cd:04:49:b2:
                    4f:14:28:5a:04:f4:f5:a0:96:34:24:33:25:62:ce:
                    22:85:19:8b:aa:d8:e5:e1:8c:32:c8:6d:2f:3d:04:
                    b2:89:a0:24:f6:ab:35:fb:77:26:23:75:77:38:df:
                    4e:d6:12:5d:a4:f1:14:da:17:8b:0f:75:55:e7:fc:
                    89:ef:9c:62:9e:e8:cc:40:75:d0:92:ea:60:46:38:
                    01:88:17:43:a0:61:bf:a9:34:d9:e3:a2:47:8b:7e:
                    26:5c:1e:32:82:e7:9a:5d:4c:68:49:5f:34:b8:6e:
                    7d:72:19:db:9e:65:d8:44:92:ac:fc:f8:c3:ff:c0:
                    ba:81:8b:fc:97:5c:1e:fd:2e:cf:58:99:d9:88:2a:
                    9d:6a:9c:29:8d:cc:bc:a1:c3:8c:28:9d:27:e7:9c:
                    af:bc:09:1a:60:65:a6:fd:50:6f:3a:05:42:46:63:
                    93:ac:98:98:e2:91:fb:af:cd:83:4a:fd:b2:8c:f6:
                    17:22:6b:5c:39:2f:d6:b3:0d:eb:e1:09:5d:9b:29:
                    8c:15:29:5c:a1:5d:11:67:b4:c4:9c:b3:f2:2d:ff:
                    06:51:9a:3a:be:aa:04:4b:22:ef:40:3f:22:a5:91:
                    0c:f7:61:e4:3b:79:fd:c2:ae:da:6e:72:f9:9c:67:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:1D:DD:F6:10:13:C6:22:D1:5D:F0:32:97:CF:A5:88:A4:93:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:fb:7f:ce:e3:54:b6:61:7d:86:85:17:b7:89:47:fe:e8:
         57:05:53:be:3e:a6:10:6d:11:39:2f:80:7a:1e:d1:6d:73:b2:
         1a:36:bb:54:3d:5d:b1:6d:35:20:74:6a:30:1b:68:e1:79:9a:
         82:c2:cb:54:b8:53:3a:e1:13:73:97:7f:5d:ac:2e:60:5d:b3:
         06:2d:26:39:56:f6:96:d4:ac:ca:15:09:ac:3e:a1:62:cd:d7:
         c6:c3:af:48:ca:22:ba:e8:0e:12:b2:e1:9e:62:5c:d3:16:00:
         23:55:4d:ad:b1:90:c9:29:d1:d9:91:5d:fa:9e:43:fa:66:b5:
         7b:38:4d:4a:1c:ba:ac:48:fd:cd:8a:65:77:77:5e:3d:fc:e9:
         45:4e:8f:0d:47:f7:fe:0e:ab:0d:0c:07:92:a2:62:06:ed:58:
         53:3f:8a:5b:8a:a1:63:52:36:b1:5b:0e:f5:2e:73:98:ed:f2:
         97:84:f7:4d:3e:fb:e2:50:33:4f:4d:47:2d:be:92:74:ea:3e:
         cb:41:92:e1:a3:d3:b3:a6:f7:bf:30:64:4f:da:d2:ef:34:6b:
         6f:e5:d4:88:54:bd:6f:76:b4:f0:d0:bf:31:29:91:3f:35:6c:
         6b:22:6d:81:8b:10:ae:34:39:cf:e8:d9:ca:b5:64:9f:f4:c3:
         10:a7:6e:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1YWh9nOIOqbygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3
ZWFmMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
MjE1NWExMWYtMjg1Ny00Zjk3LThlZjUtZWM1YWRhOGJhYjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAKUA+FpLAIchs0ESbJPFChaBPT1oJY0JDMl
Ys4ihRmLqtjl4YwyyG0vPQSyiaAk9qs1+3cmI3V3ON9O1hJdpPEU2heLD3VV5/yJ
75xinujMQHXQkupgRjgBiBdDoGG/qTTZ46JHi34mXB4ygueaXUxoSV80uG59chnb
nmXYRJKs/PjD/8C6gYv8l1we/S7PWJnZiCqdapwpjcy8ocOMKJ0n55yvvAkaYGWm
/VBvOgVCRmOTrJiY4pH7r82DSv2yjPYXImtcOS/Wsw3r4QldmymMFSlcoV0RZ7TE
nLPyLf8GUZo6vqoESyLvQD8ipZEM92HkO3n9wq7abnL5nGcxCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPpHd32EBPGItFd8DKXz6WIpJNIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk
OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNGU5ZjUwY2YtMTcxYi0z
M2Y1LWEyODctMjgwZGY4MmM5NmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl
NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2
N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1
ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm/7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYu+3/O41S2YX2GhRe3iUf+6FcFU74+phBtETkvgHoe0W1zsho2u1Q9
XbFtNSB0ajAbaOF5moLCy1S4UzrhE3OXf12sLmBdswYtJjlW9pbUrMoVCaw+oWLN
18bDr0jKIrroDhKy4Z5iXNMWACNVTa2xkMkp0dmRXfqeQ/pmtXs4TUocuqxI/c2K
ZXd3Xj386UVOjw1H9/4Oqw0MB5KiYgbtWFM/iluKoWNSNrFbDvUuc5jt8peE900+
++JQM09NRy2+knTqPstBkuGj07Om978wZE/a0u80a2/l1IhUvW92tPDQvzEpkT81
bGsibYGLEK40Oc/o2cq1ZJ/0wxCnbu4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:01:26 2026 by rpki-client