Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa
File:                     9b4cc6dd-c54d-3718-9282-ece89447c50b.roa (raw, json)
Hash identifier:          /jl/mHqrN9ngyGQsDuIaogoSyU/PtTESGCEPL75Gpk8=
Subject key identifier:   2D:B8:99:F2:41:FF:5D:76:69:5D:7B:86:BE:AE:68:8A:EA:D8:61:4B
Certificate issuer:       /CN=e751f735-1712-4284-af50-5bd135a0234b
Certificate serial:       010D0C9F4328584ECD373408F8F719C9BA292A00
Authority key identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        70.35.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:34:08:f8:f7:19:c9:ba:29:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e751f735-1712-4284-af50-5bd135a0234b
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=39a0b3c4-bd99-4bfd-ae91-1d49070d5fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:69:e7:49:f6:b0:b5:8e:b5:5f:5b:54:19:
                    be:ca:81:44:60:c6:da:42:5b:09:31:66:78:5d:84:
                    65:5b:95:36:16:af:a3:b8:d8:d7:2c:7f:28:da:b1:
                    a1:90:ad:4e:a9:b5:26:85:92:90:f0:d4:14:42:3a:
                    a5:06:66:bb:38:bb:9c:c5:86:1f:3b:2f:de:18:9d:
                    43:9e:75:25:01:f8:9a:01:08:61:28:74:00:28:32:
                    7e:fa:f0:b7:f3:0e:5d:e5:35:cd:34:b2:01:6e:8c:
                    21:2b:8d:b5:35:73:95:c3:46:36:56:c6:42:31:24:
                    27:d3:40:2e:6f:31:3d:ee:5f:c3:23:47:6c:f9:45:
                    67:33:63:aa:7e:2b:a9:8a:60:ee:f8:28:68:5d:fd:
                    03:50:c8:f4:9a:90:31:01:a9:a9:4f:ce:30:eb:9b:
                    05:5c:9f:19:e4:0d:30:07:41:ea:1a:4f:c1:99:e3:
                    b0:31:53:49:24:0c:ae:a6:d2:08:de:4b:5e:bb:a2:
                    82:f8:e8:b4:79:47:49:a4:06:3b:9b:9c:96:20:b7:
                    61:50:59:b0:58:db:57:72:f1:ef:7b:0b:92:e5:68:
                    3a:4f:ee:db:6d:ac:ba:c3:1b:cb:ee:93:9c:27:ae:
                    c2:3f:4b:f2:37:2c:41:a1:17:86:a9:a1:3f:2d:0d:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:99:F2:41:FF:5D:76:69:5D:7B:86:BE:AE:68:8A:EA:D8:61:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/9b4cc6dd-c54d-3718-9282-ece89447c50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:19:b9:75:a1:dd:90:83:16:dd:4d:9c:10:ee:71:02:0d:
         5e:e6:3b:7e:e9:65:57:6e:89:3d:f7:b5:3c:88:5c:fd:27:30:
         bd:0f:c9:64:9b:7a:4b:64:f8:c3:50:57:4c:77:e6:91:83:d7:
         68:c8:9c:64:28:35:39:85:fb:41:f5:53:3a:45:38:dc:b3:35:
         19:72:23:0e:70:3e:63:52:8d:07:94:30:d3:c5:fa:ff:ae:18:
         19:32:1b:9e:71:6d:7e:c4:71:ef:bf:71:f0:6d:9b:80:66:28:
         2b:4e:52:46:b7:36:c5:bb:ae:14:f6:c7:06:11:76:cf:08:0f:
         12:5f:ca:4f:10:04:5b:71:da:e0:54:7c:78:18:ef:a2:02:38:
         36:07:6e:91:2e:a9:f9:ac:f4:fa:bd:49:0a:63:f1:22:04:4b:
         4b:25:16:e8:b1:c2:fe:32:32:b4:72:24:2d:c4:88:fe:59:6f:
         90:58:40:86:17:e7:d1:c2:e2:de:22:ab:17:9a:0b:91:d3:95:
         5b:8a:7d:94:6e:a3:84:ac:bc:bc:d8:ba:c8:0c:44:e7:14:86:
         6e:5f:89:da:3d:ad:aa:ca:8c:d9:d1:0c:de:bd:39:87:8c:81:
         08:92:77:1a:d3:b5:d6:6d:84:3e:82:ea:67:85:47:37:0e:48:
         64:81:c8:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzQI+PcZybopKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc1MWY3MzUtMTcxMi00Mjg0LWFmNTAtNWJkMTM1YTAy
MzRiMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
MzlhMGIzYzQtYmQ5OS00YmZkLWFlOTEtMWQ0OTA3MGQ1ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRp50n2sLWOtV9bVBm+yoFEYMbaQlsJMWZ4
XYRlW5U2Fq+juNjXLH8o2rGhkK1OqbUmhZKQ8NQUQjqlBma7OLucxYYfOy/eGJ1D
nnUlAfiaAQhhKHQAKDJ++vC38w5d5TXNNLIBbowhK421NXOVw0Y2VsZCMSQn00Au
bzE97l/DI0ds+UVnM2OqfiupimDu+ChoXf0DUMj0mpAxAampT84w65sFXJ8Z5A0w
B0HqGk/BmeOwMVNJJAyuptII3kteu6KC+Oi0eUdJpAY7m5yWILdhUFmwWNtXcvHv
ewuS5Wg6T+7bbay6wxvL7pOcJ67CP0vyNyxBoReGqaE/LQ1T2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC24mfJB/112aV17hr6uaIrq2GFLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNzUx
ZjczNS0xNzEyLTQyODQtYWY1MC01YmQxMzVhMDIzNGIvOWI0Y2M2ZGQtYzU0ZC0z
NzE4LTkyODItZWNlODk0NDdjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTc1MWY3MzUtMTcxMi00Mjg0LWFm
NTAtNWJkMTM1YTAyMzRiL2U3NTFmNzM1LTE3MTItNDI4NC1hZjUwLTViZDEzNWEw
MjM0Yi5jcmwwHwYDVR0jBBgwFoAUxlyK2LiyTkwcw1RcL9Fjz0BouSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNzUxZjczNS0xNzEyLTQyODQtYWY1MC01YmQx
MzVhMDIzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8HGbl1od2QgxbdTZwQ7nECDV7mO37pZVduiT33tTyIXP0nML0PyWSb
ektk+MNQV0x35pGD12jInGQoNTmF+0H1UzpFONyzNRlyIw5wPmNSjQeUMNPF+v+u
GBkyG55xbX7Ece+/cfBtm4BmKCtOUka3NsW7rhT2xwYRds8IDxJfyk8QBFtx2uBU
fHgY76ICODYHbpEuqfms9Pq9SQpj8SIES0slFuixwv4yMrRyJC3EiP5Zb5BYQIYX
59HC4t4iqxeaC5HTlVuKfZRuo4SsvLzYusgMROcUhm5fido9rarKjNnRDN69OYeM
gQiSdxrTtdZthD6C6meFRzcOSGSByO4=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:49:46 2026 by rpki-client