Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa
File:                     02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa (raw, json)
Hash identifier:          nNidVragitnnU/sD4MOQlFqF/mnVRXRfjtjD4s76O9I=
Subject key identifier:   50:37:10:34:0F:86:26:3D:DE:01:01:FE:0F:95:BC:85:32:F2:4E:BF
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584E4129C32D33823BEB2D81F4E0
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     29802
IP address blocks:        107.155.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c3:2d:33:82:3b:eb:2d:81:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=ac4d29b9-c4db-4de7-ab54-6a25cf63af51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:25:1f:85:48:cd:51:e4:2c:85:c0:87:38:
                    56:fd:1e:4f:14:43:a1:1c:dc:26:05:9c:a1:44:6e:
                    cb:ff:d6:9d:06:39:87:41:ae:ad:72:cd:be:29:49:
                    e4:55:8f:1c:2b:e5:8c:7c:b8:de:40:02:8e:e6:c4:
                    90:ad:66:5f:4c:06:ed:e4:ee:d8:88:37:d1:64:36:
                    08:f9:2c:56:55:e4:f9:e4:f9:c4:15:62:76:17:94:
                    76:22:ab:fa:af:a4:9e:a6:cc:89:c9:16:75:a3:bc:
                    53:b7:31:f5:ff:63:69:df:93:63:2d:b6:8d:3f:7c:
                    eb:5f:12:b0:b6:c3:e3:79:56:c1:a4:5d:06:b8:56:
                    37:2a:c3:b8:54:bd:1c:1d:53:39:31:66:f4:6b:49:
                    c5:04:ab:be:d3:90:bd:58:59:f2:83:07:ea:00:3d:
                    16:68:ba:c3:af:5a:4b:6f:eb:8d:20:c2:f7:c8:ef:
                    73:fb:fa:df:1a:13:f4:78:e0:91:ed:f5:c8:ee:46:
                    d7:8d:c7:16:00:7e:ad:5a:25:49:72:6d:a3:83:57:
                    9e:18:45:b5:e4:4b:ac:37:f3:8e:cc:29:d4:02:56:
                    29:98:83:86:54:6d:3b:7d:5c:10:15:46:2c:04:8b:
                    06:34:8e:5b:ee:b7:69:f7:df:43:f6:24:58:89:c3:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:10:34:0F:86:26:3D:DE:01:01:FE:0F:95:BC:85:32:F2:4E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/02e28cf9-2ab1-3034-9b06-7c3924bb6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:37:95:89:d3:ef:b9:2c:31:56:b8:14:04:22:7c:7e:31:
         92:fd:61:16:57:7e:78:7d:bf:99:c1:4a:47:12:43:40:1c:0a:
         51:c2:f7:07:74:30:f7:43:72:1d:c9:84:1c:ab:b8:65:7d:7d:
         aa:d4:d8:7a:47:ec:9e:a3:f6:76:bb:c5:7e:a0:0b:f7:01:c1:
         08:bd:7f:dd:66:66:49:bc:88:2a:c4:e1:3c:d6:12:b1:a4:a6:
         26:ab:24:7f:5d:94:00:b2:d5:36:71:c0:ab:f7:0e:d8:78:50:
         66:21:be:e2:94:c2:f5:6a:f8:2e:f3:62:3e:72:c4:0a:97:b8:
         d2:2a:49:d1:9f:52:86:45:fd:bb:7b:ce:3c:11:8a:1d:99:fa:
         4c:17:7a:c3:81:fb:96:d4:fd:59:88:b5:37:5f:6f:c0:79:f0:
         4e:3a:25:d7:a3:b0:48:fa:66:8a:7c:f0:33:23:9d:72:13:fa:
         16:9e:09:e1:4f:b3:35:c5:4f:f1:30:9f:de:75:96:cb:25:1f:
         74:93:03:1a:0b:05:e4:71:2a:87:31:c5:90:54:44:4e:0e:08:
         bb:4b:e3:81:38:6b:01:96:52:fb:a8:8a:f7:33:66:05:64:ae:
         63:d2:e4:1a:4f:8e:a4:3b:52:e0:64:f8:a6:c6:b9:42:d3:17:
         09:74:1e:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcMtM4I76y2B9OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YWM0ZDI5YjktYzRkYi00ZGU3LWFiNTQtNmEyNWNmNjNhZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gMlH4VIzVHkLIXAhzhW/R5PFEOhHNwmBZyh
RG7L/9adBjmHQa6tcs2+KUnkVY8cK+WMfLjeQAKO5sSQrWZfTAbt5O7YiDfRZDYI
+SxWVeT55PnEFWJ2F5R2Iqv6r6SepsyJyRZ1o7xTtzH1/2Np35NjLbaNP3zrXxKw
tsPjeVbBpF0GuFY3KsO4VL0cHVM5MWb0a0nFBKu+05C9WFnygwfqAD0WaLrDr1pL
b+uNIML3yO9z+/rfGhP0eOCR7fXI7kbXjccWAH6tWiVJcm2jg1eeGEW15EusN/OO
zCnUAlYpmIOGVG07fVwQFUYsBIsGNI5b7rdp999D9iRYicMQBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFA3EDQPhiY93gEB/g+VvIUy8k6/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvMDJlMjhjZjktMmFiMS0z
MDM0LTliMDYtN2MzOTI0YmI2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5v4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqON5WJ0++5LDFWuBQEInx+MZL9YRZXfnh9v5nBSkcSQ0AcClHC9wd0
MPdDch3JhByruGV9farU2HpH7J6j9na7xX6gC/cBwQi9f91mZkm8iCrE4TzWErGk
piarJH9dlACy1TZxwKv3Dth4UGYhvuKUwvVq+C7zYj5yxAqXuNIqSdGfUoZF/bt7
zjwRih2Z+kwXesOB+5bU/VmItTdfb8B58E46JdejsEj6Zop88DMjnXIT+haeCeFP
szXFT/Ewn951lsslH3STAxoLBeRxKocxxZBURE4OCLtL44E4awGWUvuoivczZgVk
rmPS5BpPjqQ7UuBk+KbGuULTFwl0Hjg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:25 2026 by rpki-client