Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa
File:                     3916c6d6-2cf8-381b-a120-9f617bbac524.roa (raw, json)
Hash identifier:          BjWKk/lXIrNiVXrMuripC2AhgRRZ3IJbJ0NQX9oAPMk=
Subject key identifier:   EC:FF:82:04:0E:E8:B5:A3:89:5C:88:F9:FF:14:A6:A3:62:79:36:F7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10ABDF04D21078499D611C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa
Signing time:             Fri 01 May 2026 18:01:18 +0000
ROA not before:           Fri 01 May 2026 18:01:18 +0000
ROA not after:            Thu 30 Jul 2026 18:01:18 +0000
asID:                     19905
IP address blocks:        150.195.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0a:bd:f0:4d:21:07:84:99:d6:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:01:18 2026 GMT
            Not After : Jul 30 18:01:18 2026 GMT
        Subject: CN=95a3ca4c-9502-4563-868b-80a263037087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:32:36:8d:0f:25:03:44:f9:35:09:aa:7e:
                    40:79:54:d0:03:d3:7c:8b:11:93:29:33:87:b0:14:
                    af:50:d6:e1:7c:38:ca:7b:fb:4f:bb:83:4a:0a:56:
                    3a:d4:79:0d:f9:81:55:a5:d6:c0:18:c0:9d:7b:b7:
                    67:16:30:19:fe:80:1d:52:5d:cc:ab:8b:98:d0:1d:
                    d7:42:e4:33:ac:db:22:fd:42:02:c7:b8:6c:2f:6e:
                    cb:55:05:29:6e:02:1c:df:98:ab:55:d5:fd:1a:b2:
                    90:87:46:cd:50:cf:76:1e:06:34:b9:5c:fb:f4:70:
                    43:ff:26:84:fb:87:cb:80:41:03:2f:d4:81:e6:75:
                    76:75:70:42:51:94:e1:47:2e:d0:0a:06:f7:27:24:
                    bc:a8:1b:af:5a:0d:c5:6c:7d:c3:d2:f6:4d:47:87:
                    f5:ab:c5:69:89:2e:ee:67:fb:15:ce:08:02:96:ae:
                    44:53:35:c9:d9:27:ae:b9:0f:26:a0:dc:f8:eb:a8:
                    59:8d:0e:2d:c7:23:3e:c2:dc:d7:14:35:96:fe:dd:
                    b8:07:ad:d7:8d:40:da:32:9b:e3:47:cf:57:b6:96:
                    e1:54:e6:06:e9:b0:ec:15:f5:04:22:77:a9:f3:15:
                    73:ed:50:92:3c:da:db:e7:fb:28:31:b2:cd:94:d0:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:82:04:0E:E8:B5:A3:89:5C:88:F9:FF:14:A6:A3:62:79:36:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3916c6d6-2cf8-381b-a120-9f617bbac524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:03:f6:c9:b8:c8:aa:f8:ef:25:cb:89:a6:27:bb:9d:bd:6e:
         a8:20:13:12:54:a5:f0:8f:3d:88:c5:61:e8:f5:a9:9b:0b:aa:
         b4:e5:b0:39:6e:b3:aa:4e:8d:10:82:b3:1c:71:4a:26:f0:5f:
         86:bb:b6:75:5d:1a:96:37:2c:52:cd:ff:c0:31:fb:1b:ae:ef:
         52:ed:ae:eb:ae:53:c8:16:91:cc:52:06:4c:e5:24:ad:6e:a5:
         93:27:77:be:71:b4:8c:f5:d8:57:ee:23:cc:62:ec:62:d5:d2:
         ef:f2:ca:25:94:1e:3a:13:5f:dc:86:b6:60:10:0f:c1:ca:7b:
         85:cc:f1:68:cf:5c:d4:ff:90:92:a4:d3:55:5f:5c:42:97:5d:
         90:1c:ba:a9:c2:1e:51:a8:34:da:2b:ed:d7:b9:48:bb:3d:d2:
         6b:a4:8f:c7:23:7e:37:56:d3:7b:23:19:be:28:8a:db:ef:08:
         57:f1:97:49:a6:aa:a2:8d:5a:4f:92:e2:9c:aa:13:02:83:b2:
         5b:07:1e:24:3e:fe:93:0e:e1:0d:b1:2a:cc:8b:6b:a9:b2:f9:
         95:ba:05:2e:88:a8:47:80:e0:e8:4d:fa:c5:71:5d:fc:9d:7a:
         ba:fa:56:d7:e4:78:59:a6:2f:dd:32:aa:09:e8:14:1b:3c:34:
         27:99:66:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2xCr3wTSEHhJnWEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUwMTE4MDExOFoXDTI2MDczMDE4MDExOFowLzEtMCsGA1UEAxMk
OTVhM2NhNGMtOTUwMi00NTYzLTg2OGItODBhMjYzMDM3MDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuukyNo0PJQNE+TUJqn5AeVTQA9N8ixGTKTOH
sBSvUNbhfDjKe/tPu4NKClY61HkN+YFVpdbAGMCde7dnFjAZ/oAdUl3Mq4uY0B3X
QuQzrNsi/UICx7hsL27LVQUpbgIc35irVdX9GrKQh0bNUM92HgY0uVz79HBD/yaE
+4fLgEEDL9SB5nV2dXBCUZThRy7QCgb3JyS8qBuvWg3FbH3D0vZNR4f1q8VpiS7u
Z/sVzggClq5EUzXJ2SeuuQ8moNz466hZjQ4txyM+wtzXFDWW/t24B63XjUDaMpvj
R89XtpbhVOYG6bDsFfUEInep8xVz7VCSPNrb5/soMbLNlNCx7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOz/ggQO6LWjiVyI+f8UpqNieTb3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzkxNmM2ZDYtMmNmOC0z
ODFiLWExMjAtOWY2MTdiYmFjNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMD9sm4yKr47yXLiaYnu529bqggExJUpfCPPYjFYej1qZsLqrTlsDlu
s6pOjRCCsxxxSibwX4a7tnVdGpY3LFLN/8Ax+xuu71LtruuuU8gWkcxSBkzlJK1u
pZMnd75xtIz12FfuI8xi7GLV0u/yyiWUHjoTX9yGtmAQD8HKe4XM8WjPXNT/kJKk
01VfXEKXXZAcuqnCHlGoNNor7de5SLs90mukj8cjfjdW03sjGb4oitvvCFfxl0mm
qqKNWk+S4pyqEwKDslsHHiQ+/pMO4Q2xKsyLa6my+ZW6BS6IqEeA4OhN+sVxXfyd
err6VtfkeFmmL90yqgnoFBs8NCeZZl0=
-----END CERTIFICATE-----
Generated at Fri May 8 20:26:00 2026 by rpki-client