Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f30d6f42-034a-320f-9e7c-cabf86a995cd.roa
File:                     f30d6f42-034a-320f-9e7c-cabf86a995cd.roa (raw, json)
Hash identifier:          lxcXpAImOTP+XngCKefjSrLdQxvmcS3o9gAzK+vUbb4=
Subject key identifier:   4A:9A:F4:1D:63:75:E1:D6:A2:30:14:2A:BA:65:B0:EB:00:70:58:AA
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584CDF3278298853A491B0CB6C00
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f30d6f42-034a-320f-9e7c-cabf86a995cd.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     5650
IP address blocks:        104.153.80.0/24 maxlen: 24
                          104.153.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:78:29:88:53:a4:91:b0:cb:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=3eefbff6-452c-423b-b810-5796895f8311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:e0:e6:41:69:1e:93:ac:54:ab:37:cc:bb:
                    4a:74:72:bb:07:bd:1a:3f:40:01:e2:15:a4:2a:ee:
                    de:76:ff:0b:38:5e:94:9e:e2:b7:66:93:b2:bd:d9:
                    03:a6:8b:4e:97:0d:77:be:b7:7e:47:be:aa:b8:17:
                    b0:70:20:3c:9e:0a:0b:d6:49:01:47:7c:8d:dd:ad:
                    b3:3d:a3:9a:11:cf:51:a8:79:16:63:6e:13:62:b1:
                    fe:74:55:6c:21:bd:a5:73:58:d5:e7:20:6e:aa:31:
                    c8:66:f6:a9:c6:1f:9c:d7:be:c8:47:91:40:44:ef:
                    af:87:0e:c6:53:bc:e6:f7:50:60:f3:90:e1:b4:b2:
                    d7:b2:0b:9f:5e:70:2b:6f:46:f6:d1:8e:36:e0:09:
                    6a:d2:9b:8f:f8:18:6b:6c:da:dd:01:58:02:a4:ef:
                    60:7b:af:63:98:b5:60:e2:3b:29:28:59:5e:f6:78:
                    d4:d2:73:51:b1:4c:50:cc:d9:9a:3e:db:0f:de:34:
                    c3:84:fa:83:10:a8:32:4c:46:c8:51:6b:32:44:88:
                    d3:3a:0b:cc:a0:d5:4c:9c:37:c6:94:47:df:b0:bf:
                    4a:6a:b1:3c:55:36:60:d5:35:9a:51:ba:02:81:8a:
                    64:b2:13:ac:7f:35:c8:ab:e9:67:17:cb:ab:8a:a9:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:F4:1D:63:75:E1:D6:A2:30:14:2A:BA:65:B0:EB:00:70:58:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f30d6f42-034a-320f-9e7c-cabf86a995cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.80.0/24
                  104.153.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1b:94:2e:0f:34:75:6c:b5:e5:30:15:57:67:e2:5f:47:74:
         94:72:a8:24:d1:a5:af:e1:91:fe:c3:62:ec:7f:13:e0:d5:d4:
         3b:73:1d:d5:01:8a:2b:c1:83:50:c1:40:69:77:60:86:9f:1d:
         49:fd:9c:68:ac:f5:f9:8a:9b:1a:e4:2e:4b:1f:6e:28:73:fc:
         2b:77:5f:a3:57:56:47:80:30:ca:e2:13:ef:a0:cd:0f:07:18:
         3b:84:11:63:53:4c:e1:89:1a:bd:e7:32:64:de:85:cd:dd:2a:
         a2:c3:91:ef:a1:09:13:56:20:0a:eb:1a:cf:e4:c9:95:bf:5d:
         49:9a:ad:ab:45:62:56:69:b7:32:bc:61:13:ea:8e:6f:4f:dd:
         21:f5:79:4a:c8:f3:91:2f:7d:93:07:5a:b7:9f:84:31:47:bf:
         aa:b5:98:a4:07:60:2f:08:c7:91:29:a4:ca:0b:9d:36:7e:93:
         b1:2f:d1:a1:69:3a:ab:72:23:9e:40:21:7d:51:63:2a:b2:68:
         70:4f:19:bc:f0:00:07:1f:c5:fa:9b:0e:de:16:c1:f6:4b:90:
         6c:20:08:c5:15:ab:58:46:cc:97:bf:33:e8:35:80:43:23:1e:
         73:aa:73:6d:80:22:5b:51:64:74:73:52:bf:df:4f:36:be:76:
         6b:b0:f4:9f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzfMngpiFOkkbDLbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
M2VlZmJmZjYtNDUyYy00MjNiLWI4MTAtNTc5Njg5NWY4MzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/g5kFpHpOsVKs3zLtKdHK7B70aP0AB4hWk
Ku7edv8LOF6UnuK3ZpOyvdkDpotOlw13vrd+R76quBewcCA8ngoL1kkBR3yN3a2z
PaOaEc9RqHkWY24TYrH+dFVsIb2lc1jV5yBuqjHIZvapxh+c177IR5FARO+vhw7G
U7zm91Bg85DhtLLXsgufXnArb0b20Y424Alq0puP+BhrbNrdAVgCpO9ge69jmLVg
4jspKFle9njU0nNRsUxQzNmaPtsP3jTDhPqDEKgyTEbIUWsyRIjTOgvMoNVMnDfG
lEffsL9KarE8VTZg1TWaUboCgYpkshOsfzXIq+lnF8uriqn1zwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEqa9B1jdeHWojAUKrplsOsAcFiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvZjMwZDZmNDItMDM0YS0z
MjBmLTllN2MtY2FiZjg2YTk5NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaJlQAwQA
aJlTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD0blC4PNHVsteUwFVdn4l9HdJRyqCTRpa/hkf7DYux/E+DV
1DtzHdUBiivBg1DBQGl3YIafHUn9nGis9fmKmxrkLksfbihz/Ct3X6NXVkeAMMri
E++gzQ8HGDuEEWNTTOGJGr3nMmTehc3dKqLDke+hCRNWIArrGs/kyZW/XUmaratF
YlZptzK8YRPqjm9P3SH1eUrI85EvfZMHWrefhDFHv6q1mKQHYC8Ix5EppMoLnTZ+
k7Ev0aFpOqtyI55AIX1RYyqyaHBPGbzwAAcfxfqbDt4WwfZLkGwgCMUVq1hGzJe/
M+g1gEMjHnOqc22AIltRZHRzUr/fTza+dmuw9J8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:36 2026 by rpki-client