Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
File:                     0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa (raw, json)
Hash identifier:          m3izTFth4wlfRXa23KnINOvXE0GQh8AUvtAgwaV+uHY=
Subject key identifier:   53:34:AB:21:86:26:16:91:28:3A:2E:EF:EF:A2:57:64:EB:FE:DD:42
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584F506D485956BCA2E42A142F00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     26337
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:48:59:56:bc:a2:e4:2a:14:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=c968ba5e-57ea-4ab5-9a15-17dbb1b787c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:2c:30:91:d7:40:10:ee:a6:46:df:49:d7:
                    47:77:8e:f9:ef:1e:6a:50:a0:fc:35:fd:a3:ee:7c:
                    f4:7d:5f:66:93:80:75:9f:e3:78:e7:9a:4e:85:a4:
                    88:d1:45:fd:c9:dc:e8:76:34:b0:8e:a0:b4:83:c5:
                    6f:2a:8f:44:4e:45:92:de:4a:b9:72:25:38:b0:c5:
                    68:f1:24:77:a6:1a:b2:8b:52:55:6e:a6:f9:9b:22:
                    e0:e1:47:d1:9a:00:e5:70:32:e5:e9:75:01:f3:eb:
                    74:8b:d6:9f:e4:87:6b:4f:91:28:3e:45:12:1e:f3:
                    86:06:d3:5b:89:86:ec:a9:e4:ac:f4:68:81:35:bc:
                    89:54:b5:17:fd:d3:cb:8d:3d:e8:d1:b1:d3:94:ad:
                    29:94:da:40:8e:dc:02:72:83:b6:86:60:f0:70:1e:
                    9f:43:60:21:02:69:16:01:8f:de:e7:fb:04:59:6d:
                    0e:37:d4:0c:33:3b:57:aa:2c:36:0e:f1:56:6e:2c:
                    23:01:58:63:a3:5b:3e:98:5f:5c:81:3f:4f:50:e1:
                    3e:80:15:26:a3:2d:d8:e8:d6:30:36:fa:ae:ea:76:
                    bb:4a:b2:a0:ab:8a:ef:3c:98:c4:3d:be:60:00:c1:
                    5f:2f:f4:08:b0:49:a3:06:c6:ab:94:a1:1c:a7:f4:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:AB:21:86:26:16:91:28:3A:2E:EF:EF:A2:57:64:EB:FE:DD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:35:93:52:6d:06:e7:e2:dd:12:c0:95:b1:10:c4:7d:fd:7c:
         06:36:3d:d1:a7:37:a1:e8:df:69:79:cd:d1:34:07:b8:88:8f:
         d3:d9:c0:a4:8f:78:b3:dc:ce:59:6c:c9:a2:e3:31:50:8c:e8:
         6b:06:5e:5e:88:07:95:a5:ae:bf:98:b9:55:be:44:d7:a1:1c:
         7c:20:4a:ec:19:f3:a2:c0:30:1a:f6:6b:13:34:57:4f:54:50:
         3b:46:0c:68:55:54:5e:7f:ed:38:84:a8:2d:c8:7a:47:82:9b:
         7c:38:6a:63:32:a3:2f:9f:ca:0f:26:e4:6d:8b:75:a9:3c:7a:
         5c:37:24:48:6f:26:f0:39:21:4e:aa:0b:a6:da:28:40:18:02:
         81:36:e3:0a:2f:1b:64:a3:e0:64:1f:09:d3:34:3e:6b:f3:22:
         ef:ee:db:31:3a:fc:87:b6:2f:5f:cd:6e:a6:ea:47:66:28:34:
         74:53:5c:14:e5:82:4d:40:94:55:81:c4:85:17:3e:19:44:89:
         ad:cc:92:04:32:f7:3e:02:6f:3b:ec:d0:b4:d5:88:1b:62:53:
         95:20:06:cd:06:bd:ad:cd:77:56:00:3c:88:eb:54:56:27:90:
         7f:e3:c3:3b:d1:90:01:09:bd:97:47:1f:7b:e1:a1:95:19:02:
         29:03:19:66
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWE9QbUhZVryi5CoULwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
Yzk2OGJhNWUtNTdlYS00YWI1LTlhMTUtMTdkYmIxYjc4N2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6MsMJHXQBDupkbfSddHd4757x5qUKD8Nf2j
7nz0fV9mk4B1n+N455pOhaSI0UX9ydzodjSwjqC0g8VvKo9ETkWS3kq5ciU4sMVo
8SR3phqyi1JVbqb5myLg4UfRmgDlcDLl6XUB8+t0i9af5IdrT5EoPkUSHvOGBtNb
iYbsqeSs9GiBNbyJVLUX/dPLjT3o0bHTlK0plNpAjtwCcoO2hmDwcB6fQ2AhAmkW
AY/e5/sEWW0ON9QMMztXqiw2DvFWbiwjAVhjo1s+mF9cgT9PUOE+gBUmoy3Y6NYw
Nvqu6na7SrKgq4rvPJjEPb5gAMFfL/QIsEmjBsarlKEcp/SjbwIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFFM0qyGGJhaRKDou7++iV2Tr/t1CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMGE1NmEwZjAtNDA1YS0z
MTQwLWFhZjYtOTVjMzNjMzNmMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvAwQGMnRAAwQE
YH2gAwQGbKeAAwQGbLPAAwMAwLkDBAbA6MADBAfA/oADBAXYrKAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
aDWTUm0G5+LdEsCVsRDEff18BjY90ac3oejfaXnN0TQHuIiP09nApI94s9zOWWzJ
ouMxUIzoawZeXogHlaWuv5i5Vb5E16EcfCBK7BnzosAwGvZrEzRXT1RQO0YMaFVU
Xn/tOISoLch6R4KbfDhqYzKjL5/KDybkbYt1qTx6XDckSG8m8DkhTqoLptooQBgC
gTbjCi8bZKPgZB8J0zQ+a/Mi7+7bMTr8h7YvX81upupHZig0dFNcFOWCTUCUVYHE
hRc+GUSJrcySBDL3PgJvO+zQtNWIG2JTlSAGzQa9rc13VgA8iOtUVieQf+PDO9GQ
AQm9l0cfe+GhlRkCKQMZZg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:56:54 2026 by rpki-client