Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa
File:                     5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa (raw, json)
Hash identifier:          4IDewO6IjaMef7z0bzuvQI8b9T4hYre8BwOuQI4qge8=
Subject key identifier:   B2:60:82:63:77:AF:A6:4E:EE:D1:4A:A9:5D:02:7E:BC:39:12:83:49
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584EAE819E0C6B111F1871A54B00
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     27395
IP address blocks:        104.156.156.0/24 maxlen: 24
                          104.156.157.0/24 maxlen: 24
                          104.156.158.0/24 maxlen: 24
                          104.156.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:9e:0c:6b:11:1f:18:71:a5:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=6b2ce70a-3827-4dd7-9966-5c59e3820526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:60:64:7b:df:86:0e:02:a9:7a:88:62:fb:
                    c7:f3:ee:ff:31:eb:e4:5d:15:36:7b:ba:0a:37:69:
                    83:cf:ac:da:2a:0c:94:9a:31:8b:89:b3:d8:e6:75:
                    44:7e:cd:7a:e6:f2:f5:6d:95:5f:2a:4e:b8:70:bb:
                    ef:0e:87:6d:b3:a5:97:8d:8e:31:1d:03:ac:ae:f5:
                    71:10:cc:01:d2:61:3e:ee:e4:ad:f9:41:75:31:20:
                    27:f0:ee:ab:f4:4c:63:c6:fb:f8:fb:a8:84:9c:f1:
                    40:96:08:b7:96:3c:5b:37:8d:60:cb:50:06:68:d8:
                    f9:a8:ad:fe:71:5f:f6:87:c3:8e:98:cd:4d:f6:9f:
                    b5:8f:52:dd:70:80:0a:77:63:98:61:46:e0:e2:24:
                    7c:b2:01:b7:50:f4:72:5b:a5:5c:1e:69:21:e8:55:
                    9c:02:df:16:ed:e9:0c:36:9f:e0:44:0b:2e:54:6a:
                    03:c8:70:c6:83:03:88:24:ec:68:60:67:1c:c8:91:
                    68:90:3b:b5:67:89:28:52:90:5f:db:1b:d5:f7:d6:
                    3d:fc:58:d7:10:f7:4f:20:d6:fd:52:ba:7e:17:7d:
                    01:0b:a9:2d:c6:97:d1:6a:4f:ec:fa:fd:16:fa:bb:
                    56:8f:2c:99:08:fe:f7:19:cf:2d:aa:d2:8d:48:42:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:82:63:77:AF:A6:4E:EE:D1:4A:A9:5D:02:7E:BC:39:12:83:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e8:ad:ea:c9:56:9a:56:db:d7:27:ad:1e:9d:fc:10:2a:d1:
         e3:c2:f3:9f:b2:7d:9c:ec:4d:48:bc:00:ab:e7:9e:57:6e:9a:
         b1:27:32:df:12:3a:cb:80:bd:f0:76:a9:7e:97:3e:46:19:75:
         e7:f8:e1:43:10:c4:f6:d0:3f:94:3a:19:9e:c3:a6:32:47:57:
         c4:19:e1:c0:4d:02:e3:ce:6a:f2:73:9b:eb:b4:4a:26:1f:93:
         fb:e9:50:c7:01:fc:39:29:07:96:43:2f:9a:bd:79:5c:89:85:
         08:35:a9:11:65:cc:e4:a8:62:ef:b9:df:b2:16:8c:0b:4c:5a:
         a0:5d:69:3e:86:17:70:a7:f7:30:83:4e:49:49:ef:e7:6c:f5:
         41:ac:ee:8c:82:b2:8c:f5:3c:63:a6:cd:c4:42:a2:91:e1:d5:
         37:bd:a8:0a:b6:fc:fc:69:f5:b0:2e:37:c4:29:9d:43:53:c7:
         97:b3:fa:9d:91:35:34:b6:42:92:b8:34:c2:9b:21:e3:9f:ce:
         48:08:44:df:94:8f:be:e5:97:0f:1e:a4:55:0f:e3:6e:eb:9b:
         32:db:e3:18:15:c8:dc:60:68:40:71:59:10:7f:8f:f1:91:24:
         f6:34:ea:2c:7b:80:b4:13:2d:33:cc:26:78:8f:4b:16:22:dc:
         c9:22:fa:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZ4MaxEfGHGlSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3
ZWFmMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
NmIyY2U3MGEtMzgyNy00ZGQ3LTk5NjYtNWM1OWUzODIwNTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEpgZHvfhg4CqXqIYvvH8+7/MevkXRU2e7oK
N2mDz6zaKgyUmjGLibPY5nVEfs165vL1bZVfKk64cLvvDodts6WXjY4xHQOsrvVx
EMwB0mE+7uSt+UF1MSAn8O6r9Exjxvv4+6iEnPFAlgi3ljxbN41gy1AGaNj5qK3+
cV/2h8OOmM1N9p+1j1LdcIAKd2OYYUbg4iR8sgG3UPRyW6VcHmkh6FWcAt8W7ekM
Np/gRAsuVGoDyHDGgwOIJOxoYGccyJFokDu1Z4koUpBf2xvV99Y9/FjXEPdPINb9
Urp+F30BC6ktxpfRak/s+v0W+rtWjyyZCP73Gc8tqtKNSELcRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJggmN3r6ZO7tFKqV0Cfrw5EoNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk
OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNWIxZTdmY2YtMmIzZS0z
NDliLWFlZWYtMzE1YTdiYmEyMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl
NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2
N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1
ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLorerJVppW29cnrR6d/BAq0ePC85+yfZzsTUi8AKvnnldumrEnMt8S
OsuAvfB2qX6XPkYZdef44UMQxPbQP5Q6GZ7DpjJHV8QZ4cBNAuPOavJzm+u0SiYf
k/vpUMcB/DkpB5ZDL5q9eVyJhQg1qRFlzOSoYu+537IWjAtMWqBdaT6GF3Cn9zCD
TklJ7+ds9UGs7oyCsoz1PGOmzcRCopHh1Te9qAq2/Pxp9bAuN8QpnUNTx5ez+p2R
NTS2QpK4NMKbIeOfzkgIRN+Uj77llw8epFUP427rmzLb4xgVyNxgaEBxWRB/j/GR
JPY06ix7gLQTLTPMJniPSxYi3Mki+mQ=
-----END CERTIFICATE-----
Generated at Fri Aug 7 07:03:41 2026 by rpki-client