Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa
File:                     35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa (raw, json)
Hash identifier:          CQpn/Hzhi/1UEO25Xq7W5GGDFH3+CUdXAWj7qirCwmk=
Subject key identifier:   AC:A1:C8:95:20:F0:33:ED:01:32:B5:9C:90:52:A2:3B:57:A9:5A:9E
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584D524355233B684AB5DFE41430
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7794
IP address blocks:        104.194.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:55:23:3b:68:4a:b5:df:e4:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=2face416-a470-4a58-b27f-a69030802797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:05:df:25:c6:fc:33:9f:13:42:74:45:1d:
                    32:d4:85:7d:a0:6e:57:b5:88:4f:5f:88:22:c4:2c:
                    e8:12:69:fb:cf:8b:64:39:50:db:9d:89:9e:00:b2:
                    a8:4c:66:4e:a3:f7:64:23:09:ba:71:25:ea:82:9d:
                    41:0e:93:03:6d:5e:e3:3e:9d:85:1c:42:ea:b9:f9:
                    50:c4:d1:0a:12:df:08:c8:17:87:da:4f:bf:e9:d1:
                    ba:20:6a:ba:65:3f:71:e6:5d:3f:59:fc:e3:b5:30:
                    36:dc:00:9b:0f:b8:a2:3f:71:50:5e:35:68:b0:b2:
                    bb:2c:2c:4e:6c:c6:41:fb:a3:27:62:e6:bc:0d:26:
                    34:66:40:ae:3d:17:6c:31:3a:4d:ab:7f:2d:42:bd:
                    26:8f:18:c3:63:3d:22:e5:42:b9:df:f1:8d:69:5e:
                    38:3a:28:3a:4a:5b:51:a4:53:e4:92:06:be:59:2f:
                    cb:28:2a:f7:46:49:18:50:d1:d1:69:21:8e:66:5c:
                    3d:31:dc:f1:0a:ea:ad:bf:9f:cf:e9:e2:fc:dd:fe:
                    16:4d:86:1d:9b:40:de:bb:82:13:de:9a:5a:c6:2d:
                    eb:8a:f4:23:70:cf:63:19:98:5e:7e:eb:4b:7d:dd:
                    60:43:ae:13:aa:4e:11:c9:f1:04:60:78:e1:1a:b4:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A1:C8:95:20:F0:33:ED:01:32:B5:9C:90:52:A2:3B:57:A9:5A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/35f2d94d-e21a-3f32-ab8d-64a19cf4e2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:46:f9:cf:dd:df:26:f5:3e:70:63:6a:4a:aa:4f:43:82:
         17:53:ed:92:4d:06:06:5c:72:90:cb:b3:cb:72:8d:60:af:54:
         a3:7a:43:d4:25:bd:f6:6a:15:2f:57:07:29:d4:ab:ed:08:5a:
         2f:54:a3:c8:d0:ed:91:9f:2d:80:3e:8e:11:2d:6d:91:7e:ff:
         15:d7:e4:5a:a8:bd:3d:cc:76:33:4f:f8:51:29:1e:d7:7e:d2:
         2e:8b:8a:04:6d:cd:4e:94:be:af:9d:38:95:ff:1d:d2:95:89:
         91:2b:41:29:0d:82:8f:27:29:79:2d:cc:6b:6f:17:ee:83:07:
         b6:ad:59:17:6f:fe:84:6a:c2:b5:e8:40:b3:ad:6d:f7:f6:34:
         84:bb:98:86:5c:ba:a2:ed:27:94:84:2b:12:16:94:27:ca:ec:
         6b:10:bf:52:41:24:81:dd:55:d6:b1:53:7d:b7:e6:ba:72:48:
         76:e4:eb:2c:52:31:94:6d:7e:8a:fd:d4:33:d6:4c:fa:94:f3:
         93:b8:86:c4:70:12:7a:04:e6:4e:14:ec:d3:4a:01:1a:dc:dc:
         b1:0f:9b:e1:d1:b2:b5:d2:bf:60:42:d7:52:a0:2f:3e:f5:6d:
         a0:54:8a:d5:ba:24:a3:8b:e5:85:68:e8:e4:1c:05:d2:33:26:
         ee:c0:fd:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1UjO2hKtd/kFDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx
NzZlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
MmZhY2U0MTYtYTQ3MC00YTU4LWIyN2YtYTY5MDMwODAyNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lAF3yXG/DOfE0J0RR0y1IV9oG5XtYhPX4gi
xCzoEmn7z4tkOVDbnYmeALKoTGZOo/dkIwm6cSXqgp1BDpMDbV7jPp2FHELquflQ
xNEKEt8IyBeH2k+/6dG6IGq6ZT9x5l0/WfzjtTA23ACbD7iiP3FQXjVosLK7LCxO
bMZB+6MnYua8DSY0ZkCuPRdsMTpNq38tQr0mjxjDYz0i5UK53/GNaV44Oig6SltR
pFPkkga+WS/LKCr3RkkYUNHRaSGOZlw9MdzxCuqtv5/P6eL83f4WTYYdm0Deu4IT
3ppaxi3rivQjcM9jGZhefutLfd1gQ64Tqk4RyfEEYHjhGrQKowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyhyJUg8DPtATK1nJBSojtXqVqeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk
Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvMzVmMmQ5NGQtZTIxYS0z
ZjMyLWFiOGQtNjRhMTljZjRlMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1
ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz
MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm
Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACq8RvnP3d8m9T5wY2pKqk9DghdT7ZJNBgZccpDLs8tyjWCvVKN6Q9Ql
vfZqFS9XBynUq+0IWi9Uo8jQ7ZGfLYA+jhEtbZF+/xXX5FqovT3MdjNP+FEpHtd+
0i6LigRtzU6Uvq+dOJX/HdKViZErQSkNgo8nKXktzGtvF+6DB7atWRdv/oRqwrXo
QLOtbff2NIS7mIZcuqLtJ5SEKxIWlCfK7GsQv1JBJIHdVdaxU3235rpySHbk6yxS
MZRtfor91DPWTPqU85O4hsRwEnoE5k4U7NNKARrc3LEPm+HRsrXSv2BC11KgLz71
baBUitW6JKOL5YVo6OQcBdIzJu7A/Rs=
-----END CERTIFICATE-----
Generated at Tue Apr 14 23:25:50 2026 by rpki-client