Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
File:                     3bbfae60-4960-3e7f-8c84-89601126f245.roa (raw, json)
Hash identifier:          sgan+PwIXqiM715zDV90fmUn+wddtdWBlPTtSjZfrV4=
Subject key identifier:   A4:BB:B8:92:84:5E:9E:7B:01:6A:8E:03:3A:65:53:A1:57:37:91:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F6651F982F29A19F24780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     855
IP address blocks:        156.34.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:66:51:f9:82:f2:9a:19:f2:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=e4345264-a7a9-43be-bf5c-46920d6ea5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:bb:79:32:b0:00:51:03:0a:e6:a3:d2:d1:
                    65:04:78:45:28:5e:d5:8c:97:d6:ea:52:fb:7e:5d:
                    55:fe:20:3d:f2:b2:ad:b6:42:ef:32:b4:df:d9:08:
                    2c:f5:f1:93:64:2d:5f:5c:3c:ba:d7:5d:fc:b2:45:
                    79:8b:38:a1:b9:ae:ba:e0:cc:bc:dc:da:02:2c:fd:
                    b7:b5:48:72:79:38:42:a3:0d:10:17:6d:8b:8d:08:
                    95:77:a7:81:13:e0:a7:98:c5:80:f3:b6:66:38:67:
                    ba:84:95:ed:df:68:70:c7:be:98:7f:d6:65:e6:6e:
                    cd:a7:b9:1f:b1:f3:8c:08:ce:3f:75:1d:e5:05:12:
                    45:77:ce:3c:15:a4:90:28:ad:65:85:67:7f:be:85:
                    77:2f:c8:3a:da:5f:92:94:74:b3:1b:04:ae:9a:8a:
                    46:a4:d5:30:bc:40:67:27:ad:02:41:dc:32:0c:15:
                    44:d2:82:21:76:cd:78:9a:8b:6c:b2:14:d3:9d:b9:
                    18:57:16:e7:b0:30:d0:2b:dd:66:04:8e:3a:a9:93:
                    d5:d2:49:c2:3c:18:2d:4c:e2:4f:0b:fa:03:e7:b4:
                    4c:90:2f:59:8e:8c:ae:3c:42:73:3d:95:8e:d1:d7:
                    ce:5b:c1:67:77:a3:da:c5:e2:ef:b0:9e:14:38:23:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:B8:92:84:5E:9E:7B:01:6A:8E:03:3A:65:53:A1:57:37:91:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:c5:e4:52:b8:6a:7a:6e:4b:94:67:3b:61:84:77:d3:ce:
         9f:6b:b5:b8:e7:04:b0:a5:3b:cc:00:47:4b:67:aa:4a:30:0e:
         a6:c7:33:fe:e5:16:c5:3f:89:77:d4:e9:93:23:96:21:c9:d5:
         69:b0:19:08:9d:cd:07:cd:9d:91:9e:52:eb:23:0b:91:cb:c2:
         b6:7e:e1:e2:b0:64:69:1a:1d:34:a1:e3:b2:94:e9:c7:3c:c5:
         9a:d0:1f:38:70:f6:1c:66:8c:d5:57:d0:f1:87:6c:78:e6:2b:
         9c:18:68:5e:77:59:e6:a6:76:27:fc:1e:16:ca:d3:14:a1:08:
         bb:11:8e:87:c0:1e:92:89:0f:17:b4:50:72:f3:6f:9c:31:8a:
         91:5e:60:d1:3f:b1:d5:41:c8:93:65:7e:60:d2:ce:16:e7:6e:
         c8:c8:df:f8:f6:e0:e9:dc:0f:ba:54:36:99:e5:d3:8c:9e:58:
         53:6e:dc:2b:e5:ca:08:36:c9:76:d1:ee:3e:3b:6c:fb:3e:fd:
         79:24:53:eb:e8:3f:07:12:8a:23:a2:44:6d:ce:10:f4:79:60:
         46:e1:b4:6a:53:66:3d:7a:b2:51:3d:8b:d1:da:a6:d0:aa:36:
         c7:7a:4c:a8:36:bc:fb:56:eb:ae:33:38:e9:c5:99:c1:36:2f:
         56:0c:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:33 2026 by rpki-client