Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/afa6e16f-3428-34d7-bbd5-b0bdd278249a.roa
File:                     afa6e16f-3428-34d7-bbd5-b0bdd278249a.roa (raw, json)
Hash identifier:          4AUFzzRfUy65zq959a8WycZdC7PlpEl6hjE68YMcI8o=
Subject key identifier:   2B:8A:DB:F6:AF:2C:5D:43:6C:EC:C9:E2:CF:BD:23:33:9B:64:FA:38
Certificate issuer:       /CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091
Certificate serial:       010D0C9F4328584F2D87B09D72A91BC05CB83600
Authority key identifier: 91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/afa6e16f-3428-34d7-bbd5-b0bdd278249a.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        155.103.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b0:9d:72:a9:1b:c0:5c:b8:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=314c4b89-d75a-4ef1-b932-c23457ec4a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:93:46:bd:f2:49:bf:93:f5:9b:12:c8:e4:
                    43:5e:d4:44:0f:aa:51:25:eb:c6:62:37:0d:3c:d0:
                    55:78:23:8d:32:de:b5:c1:5c:c9:f2:7d:9a:e1:a7:
                    5d:05:18:29:cf:bd:69:d4:c5:c3:f0:07:7e:c7:f0:
                    65:15:e7:2e:38:21:34:70:88:80:7f:9f:e9:66:86:
                    34:0f:9f:82:3b:35:28:2d:de:fe:1d:26:ab:f5:0c:
                    1f:64:24:7e:9d:00:83:4e:32:3f:fa:ba:0f:68:0f:
                    f1:54:81:4b:28:02:36:56:7f:b3:a1:32:7d:d3:34:
                    00:9a:23:ea:c7:0d:a3:6f:4c:23:61:de:ba:13:ab:
                    6f:84:cb:b6:0e:a8:f1:7d:8b:8c:a0:c9:32:9e:10:
                    f6:9a:c8:ce:1d:68:5e:b2:41:be:ed:d7:f5:70:cf:
                    29:d6:6e:31:fe:ab:62:be:b6:81:9c:27:92:e1:c9:
                    e5:9d:4d:c2:f6:d7:56:ce:75:49:79:61:c6:c3:5d:
                    6f:8e:15:35:72:f1:2a:8a:f9:53:50:d9:1e:bf:53:
                    d0:18:d2:b9:2b:d6:39:ef:b4:71:3e:57:18:a1:e5:
                    50:40:cc:8b:a8:a3:47:6d:43:18:78:10:0f:b3:e1:
                    db:d6:20:1c:95:39:96:c1:ab:62:15:33:9e:b2:e8:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:DB:F6:AF:2C:5D:43:6C:EC:C9:E2:CF:BD:23:33:9B:64:FA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/afa6e16f-3428-34d7-bbd5-b0bdd278249a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl

            X509v3 Authority Key Identifier:
                keyid:91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:19:2d:71:89:6f:2e:98:de:d8:6a:40:4a:56:62:c3:d0:
         e0:22:7b:11:9d:98:4f:d8:bd:ff:46:3b:b6:c1:2a:13:5b:12:
         51:8f:0a:25:4c:25:16:84:cb:f3:5b:cc:be:6c:f7:3a:46:49:
         a5:53:5a:7a:96:a9:e3:4e:83:39:ed:dc:32:67:24:3b:d6:33:
         22:c0:74:cc:7b:99:b7:05:af:af:4d:ed:45:8c:a5:b9:3a:b3:
         41:ce:49:fd:0a:bb:5b:ab:7b:42:ab:96:65:ca:85:63:7c:ac:
         d6:e4:6d:3a:6f:93:69:7d:fd:f6:73:f6:6a:5d:13:e8:18:8d:
         d5:92:98:3a:7b:0d:cd:84:6d:ee:a5:11:19:3f:f4:ab:bd:1d:
         2c:d4:84:16:50:a1:4f:15:dc:26:24:a2:fc:a7:7d:83:84:05:
         bb:84:4a:7f:05:90:8d:cf:ad:8c:84:59:eb:a9:d2:2f:ec:36:
         0b:1c:5a:69:4b:d7:5d:2a:a0:9a:e4:2d:4d:f1:77:1a:e7:6d:
         52:4e:8d:e9:34:10:49:fe:99:ae:fc:48:c1:64:54:8d:48:33:
         8c:05:2b:49:57:bc:32:28:aa:24:a1:df:b2:c8:30:bb:49:02:
         f6:af:89:b5:5b:e9:ad:dd:9c:f5:c0:21:03:5a:05:23:c0:91:
         a6:b8:13:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7CdcqkbwFy4NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUwYzM0MzUtYmY0MC00Y2RjLTkzNzItNGNjZjFlYzdh
MDkxMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzE0YzRiODktZDc1YS00ZWYxLWI5MzItYzIzNDU3ZWM0YTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR+TRr3ySb+T9ZsSyORDXtRED6pRJevGYjcN
PNBVeCONMt61wVzJ8n2a4addBRgpz71p1MXD8Ad+x/BlFecuOCE0cIiAf5/pZoY0
D5+COzUoLd7+HSar9QwfZCR+nQCDTjI/+roPaA/xVIFLKAI2Vn+zoTJ90zQAmiPq
xw2jb0wjYd66E6tvhMu2DqjxfYuMoMkynhD2msjOHWheskG+7df1cM8p1m4x/qti
vraBnCeS4cnlnU3C9tdWznVJeWHGw11vjhU1cvEqivlTUNkev1PQGNK5K9Y577Rx
PlcYoeVQQMyLqKNHbUMYeBAPs+Hb1iAclTmWwatiFTOesuhI6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuK2/avLF1DbOzJ4s+9IzObZPo4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTBj
MzQzNS1iZjQwLTRjZGMtOTM3Mi00Y2NmMWVjN2EwOTEvYWZhNmUxNmYtMzQyOC0z
NGQ3LWJiZDUtYjBiZGQyNzgyNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTUwYzM0MzUtYmY0MC00Y2RjLTkz
NzItNGNjZjFlYzdhMDkxL2E1MGMzNDM1LWJmNDAtNGNkYy05MzcyLTRjY2YxZWM3
YTA5MS5jcmwwHwYDVR0jBBgwFoAUkU6sJK+Ioqnh17IWHDRiAZn1aqswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTBjMzQzNS1iZjQwLTRjZGMtOTM3Mi00Y2Nm
MWVjN2EwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm2c4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAId7GS1xiW8umN7YakBKVmLD0OAiexGdmE/Yvf9GO7bBKhNbElGPCiVM
JRaEy/NbzL5s9zpGSaVTWnqWqeNOgznt3DJnJDvWMyLAdMx7mbcFr69N7UWMpbk6
s0HOSf0Ku1ure0KrlmXKhWN8rNbkbTpvk2l9/fZz9mpdE+gYjdWSmDp7Dc2Ebe6l
ERk/9Ku9HSzUhBZQoU8V3CYkovynfYOEBbuESn8FkI3PrYyEWeup0i/sNgscWmlL
110qoJrkLU3xdxrnbVJOjek0EEn+ma78SMFkVI1IM4wFK0lXvDIoqiSh37LIMLtJ
AvavibVb6a3dnPXAIQNaBSPAkaa4E2o=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:49:28 2026 by rpki-client