Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa
File:                     02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa (raw, json)
Hash identifier:          yzoto8tnLdNge9W1dzQAmOHj7fHrwmKzlDq9VezEWBI=
Subject key identifier:   BC:6E:30:35:6C:F1:B4:A5:D8:9A:11:E5:BD:DF:CE:DB:29:0A:C4:BB
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584D609C67EA5635DABC8907F180
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa
Signing time:             Thu 02 Apr 2026 22:34:19 +0000
ROA not before:           Thu 02 Apr 2026 22:34:19 +0000
ROA not after:            Wed 01 Jul 2026 22:34:19 +0000
asID:                     29802
IP address blocks:        107.155.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:9c:67:ea:56:35:da:bc:89:07:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Apr  2 22:34:19 2026 GMT
            Not After : Jul  1 22:34:19 2026 GMT
        Subject: CN=3739227d-6919-4e98-8ba4-b6dd31cb8cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:bc:e7:5a:56:93:5c:6d:d8:ea:df:44:83:
                    2a:3a:1c:0d:eb:b1:e7:e7:70:ee:65:8e:68:fe:f4:
                    5a:ef:25:c4:88:ac:b7:6e:e7:dc:07:81:26:90:65:
                    61:2b:79:22:eb:12:d0:b5:27:8d:37:e5:21:3f:9a:
                    ee:3a:ac:28:91:d7:c0:c0:fc:3d:2e:0d:41:21:ae:
                    31:fb:6e:10:2d:3c:eb:74:3f:17:77:19:9a:e2:c4:
                    5a:2b:3e:4f:e8:c2:cd:3e:ed:05:ba:e3:41:41:57:
                    a6:35:c8:43:af:57:e5:3a:73:d7:fe:04:a1:05:6c:
                    f2:e7:95:ff:fd:c7:90:5d:ff:80:c5:c2:68:78:69:
                    13:80:a3:57:8c:3b:a9:6e:d2:d7:bd:05:84:da:d4:
                    db:1a:8a:d4:82:97:4d:fe:e1:a5:4d:f3:ec:23:f1:
                    36:91:e9:b5:84:2b:58:c2:94:db:83:dc:c2:a5:6e:
                    a8:ba:53:08:f5:60:c9:e7:f1:16:93:f5:a0:28:98:
                    55:1e:28:3f:18:09:3e:f0:8e:b2:73:b7:7c:92:7c:
                    cf:c7:6e:9d:2f:2e:33:66:d7:0b:c1:d5:82:ce:95:
                    ec:7f:84:9a:6f:73:ab:b3:45:d3:23:9e:76:af:b3:
                    31:c9:82:f2:76:d7:e6:fa:6c:71:16:7d:53:f5:34:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6E:30:35:6C:F1:B4:A5:D8:9A:11:E5:BD:DF:CE:DB:29:0A:C4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:df:d8:4b:ab:f2:39:b0:5e:2b:63:69:5c:4c:36:35:c7:
         e2:c3:95:03:ca:7a:65:cf:d1:f1:51:0b:7a:84:d8:c0:09:14:
         f9:2d:cb:20:9e:bb:01:ca:20:59:3c:3b:63:6e:a3:20:e6:37:
         7d:af:56:bb:ca:37:11:d6:31:e6:4e:97:34:32:c5:56:6c:5e:
         1f:d8:6e:38:4a:cc:dc:f6:84:73:59:a8:f4:5b:ce:40:62:ce:
         71:e2:1d:43:61:78:42:6f:90:0a:9d:d8:2d:bd:1d:13:76:04:
         6b:ea:d1:77:23:12:ea:8f:16:e3:32:86:86:69:61:4f:c9:75:
         27:7f:a9:bd:dc:98:48:9b:e9:37:6e:fe:fb:18:c0:9c:66:19:
         34:42:e0:02:68:24:f7:01:bd:94:63:39:c2:28:a8:7f:ec:48:
         8b:14:50:fa:5e:92:46:ff:1c:f4:16:f4:37:6a:3a:4b:15:50:
         4a:54:07:fb:98:47:5b:fb:e7:eb:82:3d:91:ee:a3:87:03:0e:
         65:a6:60:88:e4:15:de:65:64:60:28:6b:40:2d:d5:60:e2:de:
         b6:03:01:a4:dd:08:e0:85:33:f7:9a:48:33:0a:c0:72:27:09:
         52:d1:09:14:3f:44:b2:fc:9b:df:02:1f:59:24:80:36:0a:d6:
         99:98:31:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1gnGfqVjXavIkH8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI2MDQwMjIyMzQxOVoXDTI2MDcwMTIyMzQxOVowLzEtMCsGA1UEAxMk
MzczOTIyN2QtNjkxOS00ZTk4LThiYTQtYjZkZDMxY2I4Y2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguq851pWk1xt2OrfRIMqOhwN67Hn53DuZY5o
/vRa7yXEiKy3bufcB4EmkGVhK3ki6xLQtSeNN+UhP5ruOqwokdfAwPw9Lg1BIa4x
+24QLTzrdD8Xdxma4sRaKz5P6MLNPu0FuuNBQVemNchDr1flOnPX/gShBWzy55X/
/ceQXf+AxcJoeGkTgKNXjDupbtLXvQWE2tTbGorUgpdN/uGlTfPsI/E2kem1hCtY
wpTbg9zCpW6oulMI9WDJ5/EWk/WgKJhVHig/GAk+8I6yc7d8knzPx26dLy4zZtcL
wdWCzpXsf4Sab3Ors0XTI552r7MxyYLydtfm+mxxFn1T9TQDZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxuMDVs8bSl2JoR5b3fztspCsS7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvMDJlMjhjZjktMmFiMS0z
MDM0LTliMDYtN2MzOTI0YmI2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5v4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3739hLq/I5sF4rY2lcTDY1x+LDlQPKemXP0fFRC3qE2MAJFPktyyCe
uwHKIFk8O2NuoyDmN32vVrvKNxHWMeZOlzQyxVZsXh/YbjhKzNz2hHNZqPRbzkBi
znHiHUNheEJvkAqd2C29HRN2BGvq0XcjEuqPFuMyhoZpYU/JdSd/qb3cmEib6Tdu
/vsYwJxmGTRC4AJoJPcBvZRjOcIoqH/sSIsUUPpekkb/HPQW9DdqOksVUEpUB/uY
R1v75+uCPZHuo4cDDmWmYIjkFd5lZGAoa0At1WDi3rYDAaTdCOCFM/eaSDMKwHIn
CVLRCRQ/RLL8m98CH1kkgDYK1pmYMck=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:32:35 2026 by rpki-client