Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa
File:                     feb035d0-a74a-3791-8fee-e996319d6a19.roa (raw, json)
Hash identifier:          SESuvpPoMNDMwwsI+QU2kpLqICTNrPkdqJbiFH8I+5g=
Subject key identifier:   12:9B:30:4B:B4:67:38:02:AA:3A:19:8C:58:8C:D0:6A:9A:78:E1:C2
Certificate issuer:       /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40
Certificate serial:       010D0C9F4328584E4AEF4B4BC07AC1848D3A3840
Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     139341
IP address blocks:        104.255.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4b:4b:c0:7a:c1:84:8d:3a:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c55c0c94-1e00-41b8-880e-cec4271314ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:e1:d2:db:aa:80:19:7e:5e:41:1c:02:de:
                    88:07:65:0d:b3:42:90:61:2a:1f:fe:34:b5:df:84:
                    f9:21:89:a7:8a:40:a5:41:65:a9:14:d4:e7:67:b5:
                    4f:58:02:28:3d:6c:60:ab:c3:e7:39:c8:e4:b0:f7:
                    e2:5c:0a:d1:09:25:34:e1:0f:d6:d2:c8:4c:f7:05:
                    34:91:1b:ef:bd:d2:ba:02:83:38:00:b4:dc:76:bf:
                    78:c0:d3:8c:c8:72:b9:95:77:94:46:3d:a5:04:74:
                    01:52:a3:c0:9e:fd:db:cd:d2:8e:c5:7e:72:56:01:
                    53:11:41:7b:f1:54:84:3c:83:40:a2:55:47:b9:ed:
                    8f:f4:93:06:fd:94:f4:55:f4:3f:9b:79:2d:64:43:
                    69:71:b4:34:8f:7f:68:df:1c:4e:39:fa:59:e5:29:
                    46:6e:d8:0b:f2:c6:dc:91:16:36:e6:69:d6:d2:9e:
                    1d:2c:3a:7a:77:e5:64:af:ec:f8:b7:a5:7d:34:52:
                    80:f3:84:87:bd:59:18:b7:c0:8d:86:75:ec:e8:7e:
                    ef:96:b8:0c:d4:42:a1:6a:98:c0:52:5e:05:49:1c:
                    49:58:f6:4b:a0:75:37:db:db:e2:69:4f:cc:d3:20:
                    a6:54:f5:6e:a0:78:5a:3b:7b:23:bb:02:05:75:47:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:30:4B:B4:67:38:02:AA:3A:19:8C:58:8C:D0:6A:9A:78:E1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl

            X509v3 Authority Key Identifier:
                keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:d3:90:dd:35:17:81:5d:21:3e:5c:87:54:40:d6:af:25:
         d4:d5:1d:b1:38:36:4d:3f:db:2b:ef:76:a3:9a:c6:c2:30:8e:
         c0:12:dd:aa:23:a1:02:f8:ff:d9:db:02:ce:b9:e9:af:42:68:
         6e:23:5b:1e:64:9c:e6:02:1f:ef:30:c4:d3:7b:b8:93:74:46:
         0f:f4:4a:00:3b:2e:94:fa:aa:32:ac:a5:ad:9d:c4:9f:05:2e:
         46:d4:a2:d9:12:23:87:dd:3d:79:a1:0a:1a:b2:25:c3:bc:39:
         10:dd:cf:dd:d6:5f:0d:31:13:43:a4:5d:45:e1:17:3d:76:30:
         37:b0:c5:42:1a:a4:c7:a7:29:93:74:1b:d3:e2:8c:86:4e:f6:
         8c:42:e2:a4:ee:39:1c:10:bf:d4:d9:e9:de:6d:eb:a4:77:99:
         fe:d9:d1:f5:e0:f4:6a:b5:a6:2a:b1:c5:de:e7:b0:c0:0b:8f:
         d6:44:e0:8e:98:75:a2:18:48:29:38:b4:a8:23:17:57:a2:c6:
         fd:9d:3b:56:c2:b4:48:71:e3:35:8f:cd:f3:14:ae:d3:e1:5d:
         57:5a:49:58:7d:a3:73:a3:21:cb:e9:b1:82:84:4d:9f:93:26:
         a0:c1:a7:74:cc:10:9d:65:4e:7b:29:c6:3c:0f:ce:9f:7f:42:
         8a:26:d7:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70tLwHrBhI06OEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl
YjQwMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YzU1YzBjOTQtMWUwMC00MWI4LTg4MGUtY2VjNDI3MTMxNGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmzh0tuqgBl+XkEcAt6IB2UNs0KQYSof/jS1
34T5IYmnikClQWWpFNTnZ7VPWAIoPWxgq8PnOcjksPfiXArRCSU04Q/W0shM9wU0
kRvvvdK6AoM4ALTcdr94wNOMyHK5lXeURj2lBHQBUqPAnv3bzdKOxX5yVgFTEUF7
8VSEPINAolVHue2P9JMG/ZT0VfQ/m3ktZENpcbQ0j39o3xxOOfpZ5SlGbtgL8sbc
kRY25mnW0p4dLDp6d+Vkr+z4t6V9NFKA84SHvVkYt8CNhnXs6H7vlrgM1EKhapjA
Ul4FSRxJWPZLoHU329viaU/M0yCmVPVuoHhaO3sjuwIFdUftjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKbMEu0ZzgCqjoZjFiM0GqaeOHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3
ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvZmViMDM1ZDAtYTc0YS0z
NzkxLThmZWUtZTk5NjMxOWQ2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2
OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi
ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm
MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6c05DdNReBXSE+XIdUQNavJdTVHbE4Nk0/2yvvdqOaxsIwjsAS3aoj
oQL4/9nbAs656a9CaG4jWx5knOYCH+8wxNN7uJN0Rg/0SgA7LpT6qjKspa2dxJ8F
LkbUotkSI4fdPXmhChqyJcO8ORDdz93WXw0xE0OkXUXhFz12MDewxUIapMenKZN0
G9PijIZO9oxC4qTuORwQv9TZ6d5t66R3mf7Z0fXg9Gq1piqxxd7nsMALj9ZE4I6Y
daIYSCk4tKgjF1eixv2dO1bCtEhx4zWPzfMUrtPhXVdaSVh9o3OjIcvpsYKETZ+T
JqDBp3TMEJ1lTnspxjwPzp9/Qoom19o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:54:40 2026 by rpki-client