Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f16bedb-9a97-3897-a83e-61c03ab03636.roa
File:                     2f16bedb-9a97-3897-a83e-61c03ab03636.roa (raw, json)
Hash identifier:          p+3D48OEwszsouc3UjkVwq1l9soYPLhXss1bWrhEfeI=
Subject key identifier:   6F:8A:0E:13:81:19:32:58:98:98:57:0B:3D:D6:F6:97:4E:7E:1C:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600E074AC97B7A3E1FB9F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f16bedb-9a97-3897-a83e-61c03ab03636.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        96.217.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:e0:74:ac:97:b7:a3:e1:fb:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=85bc7740-377b-4f5b-b59f-69b08ab8ff00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:96:f3:f7:f3:69:b5:e6:e6:cc:97:eb:6f:
                    46:00:2c:74:7f:18:dc:67:e0:b8:31:16:f7:66:37:
                    21:22:68:e4:62:9e:d6:17:c9:83:e2:da:8e:6c:72:
                    cd:01:54:bb:e5:21:4b:2c:4a:73:b9:51:27:7c:d1:
                    09:6e:3d:68:d5:7d:70:52:a6:9c:ac:91:9d:32:72:
                    1b:29:b7:de:59:24:8b:01:f3:88:1e:d4:41:cc:d1:
                    f5:85:5e:25:d2:e6:79:83:cb:05:44:36:08:ac:ce:
                    03:18:46:d5:9b:15:41:57:12:63:6e:04:32:a0:8b:
                    ff:85:51:7a:38:dc:9d:70:09:11:83:e6:fc:37:11:
                    1e:93:b8:08:d2:06:3d:9d:37:c6:1d:05:a4:80:37:
                    8c:5b:31:7c:1f:69:15:de:b2:aa:c8:cf:1c:62:53:
                    1d:39:fd:b5:9b:07:cc:f5:88:0b:8a:16:02:1d:4e:
                    43:65:b3:13:4f:1f:33:00:96:e1:42:cb:bc:27:b2:
                    58:60:37:6a:d5:fc:3f:f8:33:6d:57:93:35:6b:f0:
                    3a:be:a2:8f:9a:46:2b:a9:d5:78:d7:80:23:fa:01:
                    23:b1:fe:75:29:f1:13:fa:f6:62:2f:1e:9e:21:35:
                    c4:e6:5d:5b:ef:39:0d:ac:41:3e:c3:e2:39:cf:6a:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8A:0E:13:81:19:32:58:98:98:57:0B:3D:D6:F6:97:4E:7E:1C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f16bedb-9a97-3897-a83e-61c03ab03636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.217.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:f3:a9:35:1e:6c:77:77:ac:c7:ef:f2:b8:f6:a6:a6:c5:89:
         61:ef:f4:49:bc:6c:01:11:62:95:d5:12:70:f0:4d:75:c5:35:
         75:ee:66:99:a6:a9:fc:60:60:50:54:b7:1a:2e:aa:45:42:5e:
         fa:5b:fb:c4:4b:8a:b9:b9:70:0c:93:d6:79:bf:1d:10:75:a7:
         6a:85:e5:8a:df:19:be:79:ba:f5:0e:64:7d:ec:70:6a:e0:4c:
         83:05:59:fa:70:d7:75:c8:6c:7a:ab:92:cb:1a:15:51:49:3f:
         55:94:ef:fe:0a:db:ba:27:71:39:9f:2f:af:c7:fc:0a:20:64:
         94:dd:a1:03:f3:a8:5d:27:00:8c:62:47:f9:22:c5:d9:cf:08:
         3d:47:d1:0f:0d:ea:ca:97:db:18:94:df:5b:c3:15:d8:8a:b0:
         5e:71:b1:79:1e:24:41:8b:6d:2d:7d:3b:dc:12:63:6e:ab:ba:
         7f:cf:a9:6d:fd:1e:55:31:ca:19:f5:c6:96:4f:06:ef:6c:60:
         88:1f:e5:89:b1:bc:78:67:bf:84:0a:4a:0f:7b:e8:6f:b9:47:
         ad:e5:26:34:38:51:f6:73:3a:ac:3b:08:d8:46:23:c5:a6:52:
         d3:47:9f:05:0d:f4:81:87:d8:a4:04:bb:53:1e:ea:3d:cb:97:
         e0:8a:54:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AOB0rJe3o+H7n4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ODViYzc3NDAtMzc3Yi00ZjViLWI1OWYtNjliMDhhYjhmZjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6W8/fzabXm5syX629GACx0fxjcZ+C4MRb3
ZjchImjkYp7WF8mD4tqObHLNAVS75SFLLEpzuVEnfNEJbj1o1X1wUqacrJGdMnIb
KbfeWSSLAfOIHtRBzNH1hV4l0uZ5g8sFRDYIrM4DGEbVmxVBVxJjbgQyoIv/hVF6
ONydcAkRg+b8NxEek7gI0gY9nTfGHQWkgDeMWzF8H2kV3rKqyM8cYlMdOf21mwfM
9YgLihYCHU5DZbMTTx8zAJbhQsu8J7JYYDdq1fw/+DNtV5M1a/A6vqKPmkYrqdV4
14Aj+gEjsf51KfET+vZiLx6eITXE5l1b7zkNrEE+w+I5z2ocowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+KDhOBGTJYmJhXCz3W9pdOfhzFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmYxNmJlZGItOWE5Ny0z
ODk3LWE4M2UtNjFjMDNhYjAzNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYNlIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANHzqTUebHd3rMfv8rj2pqbFiWHv9Em8bAERYpXVEnDwTXXFNXXuZpmm
qfxgYFBUtxouqkVCXvpb+8RLirm5cAyT1nm/HRB1p2qF5YrfGb55uvUOZH3scGrg
TIMFWfpw13XIbHqrkssaFVFJP1WU7/4K27oncTmfL6/H/AogZJTdoQPzqF0nAIxi
R/kixdnPCD1H0Q8N6sqX2xiU31vDFdiKsF5xsXkeJEGLbS19O9wSY26run/PqW39
HlUxyhn1xpZPBu9sYIgf5YmxvHhnv4QKSg976G+5R63lJjQ4UfZzOqw7CNhGI8Wm
UtNHnwUN9IGH2KQEu1Me6j3Ll+CKVAg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:28 2026 by rpki-client