Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa
File:                     35c5b19c-d212-3871-bbc6-e557994a06be.roa (raw, json)
Hash identifier:          krfvxD+ogGIJSoaCTwT9mcBk2IeeFkr5HtbkllTBCPM=
Subject key identifier:   C3:B5:D0:4C:3F:40:46:71:47:D5:87:30:8D:4C:98:11:F9:44:89:5F
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584DD35B138FA56B3C329D9E4B80
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     40401
IP address blocks:        104.153.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:13:8f:a5:6b:3c:32:9d:9e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=52587bc8-65c5-412e-9bfe-b0910a13a7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:65:b2:26:c5:1f:9b:ac:bd:b2:3d:41:4c:
                    d4:8b:e7:99:d2:94:4a:08:e4:e2:16:c1:7e:ad:8e:
                    22:86:05:52:7a:50:d5:6c:b2:8e:57:62:ae:05:49:
                    f8:9d:4d:65:89:9b:4d:5c:70:63:d3:a8:79:1a:67:
                    0a:b4:8c:8e:4c:bb:48:6e:3f:73:c3:36:be:bf:8a:
                    7d:1c:9a:03:15:10:db:e0:93:89:d5:4b:cb:60:16:
                    d2:32:69:45:9f:fa:54:5f:46:af:55:42:1e:b6:50:
                    f2:f2:a8:30:34:e8:8e:1a:b7:28:d1:02:d3:3b:38:
                    10:d3:91:1d:17:55:31:5d:ca:6e:71:fd:c6:9c:6c:
                    cb:24:f1:2c:ea:a7:30:dd:25:1d:ba:5d:61:cf:26:
                    bb:bd:a9:04:96:32:d1:06:6d:7a:fe:e7:a4:a8:d9:
                    8d:aa:40:0a:5a:6a:e8:dc:0a:88:70:8c:90:1d:71:
                    b4:2d:b4:3c:5d:62:cc:ae:8f:54:e3:e6:02:52:1c:
                    5e:c4:b6:ec:3a:04:df:cb:84:ce:04:17:17:25:a1:
                    46:85:7e:84:cb:4f:ee:8f:12:ae:e5:55:bb:ff:fa:
                    9a:2a:6c:17:5e:de:44:45:3f:a4:95:44:67:4b:11:
                    70:82:a2:b4:f8:1b:44:14:c7:e9:15:ed:57:a2:22:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:D0:4C:3F:40:46:71:47:D5:87:30:8D:4C:98:11:F9:44:89:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:67:14:35:ee:bf:52:a5:60:d2:cf:ef:10:b9:27:98:e6:62:
         6d:f3:bc:b6:6f:c8:60:d3:75:3e:be:57:14:b0:cd:fa:3d:ca:
         13:2f:7f:a4:b6:02:fd:68:28:37:2b:b0:28:e5:0a:f1:88:82:
         fd:76:54:2e:8b:67:e6:a4:7c:41:4c:7c:d8:38:04:dc:96:27:
         fa:f1:c5:22:aa:fb:c9:c6:7f:94:94:ba:d6:5f:7c:3c:ef:d4:
         d7:72:76:61:1c:a7:3c:86:fb:46:c1:66:c6:df:55:e1:ec:0f:
         eb:72:a1:09:be:78:65:ab:f9:2f:76:17:a6:33:dd:d5:0c:04:
         70:8c:92:ed:9f:14:73:59:bc:98:4d:d2:ac:5b:56:9d:d8:72:
         18:61:39:0b:10:4e:84:e5:6b:1e:9a:1a:45:b1:b2:da:b6:5f:
         6d:1a:e2:13:c2:2f:e6:20:ba:f3:dc:18:97:c7:13:a0:a5:62:
         05:92:8b:19:2b:8a:9d:21:0b:37:48:77:9a:09:11:44:24:db:
         af:23:a5:2b:d0:96:1c:e4:ac:6d:2f:ea:ec:ee:ef:f1:04:34:
         d1:50:88:e8:2e:96:96:7e:a9:66:b0:50:f2:33:5d:13:83:21:
         90:9b:84:4b:34:ed:9d:93:fb:50:49:d2:77:41:55:d5:16:1e:
         23:5b:f2:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxOPpWs8Mp2eS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll
Mjg3MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NTI1ODdiYzgtNjVjNS00MTJlLTliZmUtYjA5MTBhMTNhN2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlplsibFH5usvbI9QUzUi+eZ0pRKCOTiFsF+
rY4ihgVSelDVbLKOV2KuBUn4nU1liZtNXHBj06h5GmcKtIyOTLtIbj9zwza+v4p9
HJoDFRDb4JOJ1UvLYBbSMmlFn/pUX0avVUIetlDy8qgwNOiOGrco0QLTOzgQ05Ed
F1UxXcpucf3GnGzLJPEs6qcw3SUdul1hzya7vakEljLRBm16/uekqNmNqkAKWmro
3AqIcIyQHXG0LbQ8XWLMro9U4+YCUhxexLbsOgTfy4TOBBcXJaFGhX6Ey0/ujxKu
5VW7//qaKmwXXt5ERT+klURnSxFwgqK0+BtEFMfpFe1XoiLBbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMO10Ew/QEZxR9WHMI1MmBH5RIlfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx
M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMzVjNWIxOWMtZDIxMi0z
ODcxLWJiYzYtZTU1Nzk5NGEwNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj
NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5
ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz
YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJnoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9nFDXuv1KlYNLP7xC5J5jmYm3zvLZvyGDTdT6+VxSwzfo9yhMvf6S2
Av1oKDcrsCjlCvGIgv12VC6LZ+akfEFMfNg4BNyWJ/rxxSKq+8nGf5SUutZffDzv
1NdydmEcpzyG+0bBZsbfVeHsD+tyoQm+eGWr+S92F6Yz3dUMBHCMku2fFHNZvJhN
0qxbVp3YchhhOQsQToTlax6aGkWxstq2X20a4hPCL+YguvPcGJfHE6ClYgWSixkr
ip0hCzdId5oJEUQk268jpSvQlhzkrG0v6uzu7/EENNFQiOgulpZ+qWawUPIzXROD
IZCbhEs07Z2T+1BJ0ndBVdUWHiNb8pA=
-----END CERTIFICATE-----
Generated at Sat May 16 23:31:33 2026 by rpki-client