Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa
File:                     3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa (raw, json)
Hash identifier:          aM/GH0s1PEi8k2ZHr8WZK9i+H2vOHL1khI9vSVSzZDY=
Subject key identifier:   F9:B2:26:B8:ED:87:E9:EB:6A:54:C0:48:9C:94:AC:E3:3F:22:AB:CF
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584F49757074490FC3D50A0401A0
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33548
IP address blocks:        104.254.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:70:74:49:0f:c3:d5:0a:04:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb316b6c-21f5-4766-88d1-042a8d6e23a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:f7:53:c4:3f:e7:b9:34:94:d4:d5:aa:07:
                    bd:e6:d7:d4:67:97:34:35:ad:20:e0:c2:45:b6:d8:
                    3d:b5:6f:e1:fe:7c:94:1a:bb:1b:2a:0f:d0:d1:ee:
                    ed:e5:1b:7b:4d:f1:48:98:97:bf:46:fe:8e:b2:47:
                    2c:66:ae:2a:41:a6:cb:30:74:c1:f7:8e:fc:1c:27:
                    ac:6f:3a:65:72:1a:94:c7:c1:78:cf:4e:2c:9c:0b:
                    2f:6e:34:92:3c:a6:ab:4a:9e:7a:18:48:1f:59:eb:
                    ba:58:18:19:a0:35:b6:eb:2c:4e:59:c5:bc:b1:7c:
                    91:23:23:6b:9d:41:d0:6a:6f:eb:3c:e5:38:53:57:
                    7a:a4:2b:14:33:09:bd:ac:40:12:2d:21:43:16:fe:
                    96:4c:16:69:27:5a:1f:6e:1d:84:ae:33:3e:ce:56:
                    05:ec:2d:81:47:9e:80:80:0d:ce:f2:c6:1d:a7:ea:
                    0b:1f:0f:e2:ee:3f:89:ec:52:83:c0:8d:57:2b:bc:
                    34:c3:19:f8:80:81:ea:a3:4d:1e:88:c4:9f:a3:bd:
                    d3:01:b3:52:20:74:b8:e7:cf:73:62:b1:e8:0c:dd:
                    2c:12:34:e9:df:21:6f:0b:16:37:21:64:4f:bb:e4:
                    9c:93:7d:11:64:2c:80:f0:7d:37:b6:cb:0d:91:83:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:26:B8:ED:87:E9:EB:6A:54:C0:48:9C:94:AC:E3:3F:22:AB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:d3:6c:c9:ac:75:e6:71:ac:eb:fa:41:67:0e:cb:d2:d9:
         a1:f4:90:cb:40:cf:0d:93:0f:88:28:4b:2e:68:97:dd:5d:f1:
         fa:62:4b:5e:ed:10:45:c1:69:d9:15:38:a5:00:17:b8:8e:83:
         e5:d5:a6:de:19:92:97:fc:eb:aa:d2:2a:59:71:de:3b:9b:61:
         d0:9f:8a:56:2e:36:2c:b4:75:fc:7e:34:98:5f:56:f8:43:b6:
         1b:b5:34:ee:e9:81:f9:14:aa:d3:2d:16:63:95:74:f5:1d:f8:
         39:e0:2d:65:b7:59:2e:9e:39:1c:93:f3:c0:18:23:53:58:0c:
         ff:ab:f7:0e:53:41:b6:04:ab:8e:dd:2c:58:93:99:8c:b8:48:
         f4:11:fc:98:bb:5e:ec:11:53:9a:67:90:87:d2:b8:20:b6:9c:
         47:01:f5:ea:d1:ce:d4:42:37:cc:0c:0c:7e:51:4b:d2:ee:b1:
         65:47:1b:ad:5c:b0:45:b6:f6:e1:6b:4b:65:c4:de:fd:6f:9b:
         eb:3d:07:46:04:b6:de:52:20:c5:b8:17:23:23:f3:c1:de:b3:
         d6:de:ab:cd:58:49:14:e5:b5:8f:26:f8:a2:56:4e:82:ca:43:
         21:18:67:b0:3e:3d:43:5e:0f:9f:e6:46:88:26:2a:15:7c:48:
         34:14:a8:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXB0SQ/D1QoEAaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmIzMTZiNmMtMjFmNS00NzY2LTg4ZDEtMDQyYThkNmUyM2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtf3U8Q/57k0lNTVqge95tfUZ5c0Na0g4MJF
ttg9tW/h/nyUGrsbKg/Q0e7t5Rt7TfFImJe/Rv6OskcsZq4qQabLMHTB9478HCes
bzplchqUx8F4z04snAsvbjSSPKarSp56GEgfWeu6WBgZoDW26yxOWcW8sXyRIyNr
nUHQam/rPOU4U1d6pCsUMwm9rEASLSFDFv6WTBZpJ1ofbh2ErjM+zlYF7C2BR56A
gA3O8sYdp+oLHw/i7j+J7FKDwI1XK7w0wxn4gIHqo00eiMSfo73TAbNSIHS4589z
YrHoDN0sEjTp3yFvCxY3IWRPu+Sck30RZCyA8H03tssNkYN6LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmyJrjth+nralTASJyUrOM/IqvPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvM2QwYTgwMjEtMGMxNy0z
YTllLTllYWQtZTExNGUxMWY3NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP5kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6o02zJrHXmcazr+kFnDsvS2aH0kMtAzw2TD4goSy5ol91d8fpiS17t
EEXBadkVOKUAF7iOg+XVpt4Zkpf866rSKllx3jubYdCfilYuNiy0dfx+NJhfVvhD
thu1NO7pgfkUqtMtFmOVdPUd+DngLWW3WS6eORyT88AYI1NYDP+r9w5TQbYEq47d
LFiTmYy4SPQR/Ji7XuwRU5pnkIfSuCC2nEcB9erRztRCN8wMDH5RS9LusWVHG61c
sEW29uFrS2XE3v1vm+s9B0YEtt5SIMW4FyMj88Hes9beq81YSRTltY8m+KJWToLK
QyEYZ7A+PUNeD5/mRogmKhV8SDQUqA0=
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:18:24 2026 by rpki-client