Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb1353a7-8690-3c2b-9af4-97538c98c776.roa
File:                     cb1353a7-8690-3c2b-9af4-97538c98c776.roa (raw, json)
Hash identifier:          VdAZ88SCOcu0RqTI80ep1NJSS/ehLrMXyjibkIfmI9w=
Subject key identifier:   E7:99:FC:46:2B:AE:30:BC:37:84:DE:64:86:F8:3D:1F:21:7D:F6:93
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF9F0E0D2D47E30A562D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb1353a7-8690-3c2b-9af4-97538c98c776.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        150.195.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:9f:0e:0d:2d:47:e3:0a:56:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e8b7e2ab-0fff-4788-9057-77374a902ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:0f:01:bb:b8:81:d8:53:85:54:88:9e:2e:
                    cf:8b:38:b4:ba:f0:9d:c8:9d:34:cb:de:8d:29:6a:
                    cc:8e:87:22:ba:b4:3a:40:6e:c6:a1:d5:7c:81:d4:
                    fc:20:8c:38:0f:33:a2:56:84:f9:9b:e4:81:2b:18:
                    5a:7e:d2:60:16:ef:ca:07:95:d2:70:37:c0:66:1f:
                    a8:6d:01:65:f4:32:a3:d6:5d:b3:2a:39:38:37:f8:
                    ce:0e:80:49:3e:ba:b3:76:4c:86:f0:fe:7a:09:4f:
                    32:d7:ea:76:ab:45:47:16:e7:54:d8:11:bf:fd:86:
                    3e:30:7c:58:bb:38:8d:73:29:b7:92:09:ec:8f:1b:
                    3b:e4:25:41:44:fd:85:65:6e:13:a8:03:df:b0:5b:
                    28:b1:dd:c6:d9:4f:ce:fc:0c:64:bb:de:07:39:d1:
                    35:44:7c:d6:d7:dd:9b:4b:cb:0c:ae:ed:82:8b:e0:
                    d6:f4:6f:12:b6:c0:ec:e4:f1:6d:b7:83:15:73:cf:
                    1e:5b:d7:48:d6:29:4c:0d:0e:1e:f5:5e:36:50:f0:
                    15:0e:f6:2c:aa:ec:15:16:cd:4a:9b:54:0b:11:f6:
                    59:bc:57:cf:bf:b9:3a:3f:40:41:4d:f4:ee:c3:65:
                    1b:61:87:36:e5:d5:2c:82:89:63:fa:30:e1:9b:10:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:FC:46:2B:AE:30:BC:37:84:DE:64:86:F8:3D:1F:21:7D:F6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb1353a7-8690-3c2b-9af4-97538c98c776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:f7:4b:c9:43:04:17:38:1a:e3:e6:05:d2:f5:4f:c1:55:
         1f:d6:5c:4d:f7:08:a4:90:54:89:43:a3:e3:68:38:36:df:1e:
         64:80:02:bc:d3:31:56:28:b4:3e:41:98:b9:b5:a9:4d:22:07:
         da:0c:65:9c:7f:75:6a:1e:56:04:b0:c7:b8:91:79:2d:ca:6a:
         cc:5f:48:18:23:e8:49:48:f0:aa:b3:90:85:dc:92:a9:b9:19:
         46:1e:fa:4d:67:94:93:11:fc:01:c9:34:f7:b7:3e:b5:31:1b:
         47:05:04:1d:2e:34:27:f3:2b:6f:5e:7f:61:2a:c4:e6:ad:a1:
         61:55:26:0b:aa:b2:05:d1:e1:95:58:00:ce:e7:72:3d:d7:98:
         ee:fe:a3:7e:48:b3:63:ad:d7:56:85:67:28:27:55:87:ef:49:
         32:78:b9:e7:d9:35:fe:25:02:06:e5:3f:59:04:16:95:dd:c3:
         9b:14:d1:dd:53:f4:97:cd:4c:08:65:c0:3d:cc:47:0a:f0:30:
         62:bb:98:ca:31:ed:14:f0:d5:f0:81:17:91:fc:03:e0:d8:12:
         0e:0d:a5:af:bb:ea:9c:e1:28:33:19:5c:aa:18:b5:5a:8c:68:
         65:12:40:01:c5:c9:fd:af:0e:2b:29:36:8f:f6:f7:6a:03:00:
         cc:5a:50:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k358ODS1H4wpWLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZThiN2UyYWItMGZmZi00Nzg4LTkwNTctNzczNzRhOTAyYWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYPAbu4gdhThVSIni7Pizi0uvCdyJ00y96N
KWrMjociurQ6QG7GodV8gdT8IIw4DzOiVoT5m+SBKxhaftJgFu/KB5XScDfAZh+o
bQFl9DKj1l2zKjk4N/jODoBJPrqzdkyG8P56CU8y1+p2q0VHFudU2BG//YY+MHxY
uziNcym3kgnsjxs75CVBRP2FZW4TqAPfsFsosd3G2U/O/Axku94HOdE1RHzW192b
S8sMru2Ci+DW9G8StsDs5PFtt4MVc88eW9dI1ilMDQ4e9V42UPAVDvYsquwVFs1K
m1QLEfZZvFfPv7k6P0BBTfTuw2UbYYc25dUsgolj+jDhmxCzMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeZ/EYrrjC8N4TeZIb4PR8hffaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2IxMzUzYTctODY5MC0z
YzJiLTlhZjQtOTc1MzhjOThjNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlsM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjq90vJQwQXOBrj5gXS9U/BVR/WXE33CKSQVIlDo+NoODbfHmSAArzT
MVYotD5BmLm1qU0iB9oMZZx/dWoeVgSwx7iReS3KasxfSBgj6ElI8KqzkIXckqm5
GUYe+k1nlJMR/AHJNPe3PrUxG0cFBB0uNCfzK29ef2EqxOatoWFVJguqsgXR4ZVY
AM7ncj3XmO7+o35Is2Ot11aFZygnVYfvSTJ4uefZNf4lAgblP1kEFpXdw5sU0d1T
9JfNTAhlwD3MRwrwMGK7mMox7RTw1fCBF5H8A+DYEg4Npa+76pzhKDMZXKoYtVqM
aGUSQAHFyf2vDispNo/292oDAMxaULg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:32 2026 by rpki-client