Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/416d0182-3429-3293-a047-64d3c30a1551.roa
File:                     416d0182-3429-3293-a047-64d3c30a1551.roa (raw, json)
Hash identifier:          AWaEJVYdyz0H+fdb0Lk4FcAQy38k9duLiW6cGCvftWc=
Subject key identifier:   8B:95:4C:9F:88:6A:24:62:AA:3A:81:DD:15:E1:51:78:65:1A:E8:97
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E200A449A9D85BF36E4D180
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/416d0182-3429-3293-a047-64d3c30a1551.roa
Signing time:             Fri 24 Apr 2026 23:23:51 +0000
ROA not before:           Fri 24 Apr 2026 23:23:51 +0000
ROA not after:            Thu 23 Jul 2026 23:23:51 +0000
asID:                     397630
IP address blocks:        64.16.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:20:0a:44:9a:9d:85:bf:36:e4:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:51 2026 GMT
            Not After : Jul 23 23:23:51 2026 GMT
        Subject: CN=e7e3a043-a8ca-4fb4-94ba-a2ad04709515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:87:36:e7:e0:e9:23:7d:ce:05:4a:2b:9d:
                    78:b3:81:8f:b0:a0:b3:34:11:26:94:1d:4c:06:5c:
                    a9:3b:f2:60:ad:3b:0f:3b:1f:34:7c:42:e8:03:ac:
                    51:24:54:d3:77:74:ff:5b:e7:41:45:86:4b:af:36:
                    d8:47:56:16:9b:91:6e:75:a9:96:8f:a6:84:2b:cb:
                    2d:b2:61:09:fb:92:b4:16:0f:1e:c6:55:2d:61:d0:
                    93:02:49:ab:f4:d5:a2:d6:f8:65:28:e1:a0:2e:62:
                    66:4d:6d:cd:54:ba:20:97:40:0d:60:a1:8d:67:b9:
                    9f:f6:1c:7c:84:03:22:c8:94:e9:52:59:ac:2c:60:
                    cd:f1:2a:70:4d:fb:c0:43:ab:13:a1:cf:41:ed:0d:
                    4f:62:a3:e3:0f:a1:76:79:e2:40:65:65:b8:bf:03:
                    32:1e:0a:9d:ff:dc:77:be:61:1b:c4:a2:2d:63:ed:
                    a3:88:27:04:7f:e5:84:e5:7c:dd:31:21:32:73:bc:
                    ce:78:e0:39:be:a8:13:fb:97:02:ef:2f:5d:ec:ee:
                    dc:a5:db:00:41:c9:f4:64:95:f2:78:e0:d1:9f:2d:
                    4e:a3:68:94:61:04:c0:1d:25:31:e9:6f:d1:82:be:
                    b6:cc:83:b6:36:82:79:2a:eb:6f:fb:c5:ee:4a:c2:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:4C:9F:88:6A:24:62:AA:3A:81:DD:15:E1:51:78:65:1A:E8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/416d0182-3429-3293-a047-64d3c30a1551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:6d:98:5a:a7:e2:89:ef:d3:55:67:a4:76:53:4f:cc:14:
         39:25:c8:44:98:13:41:af:69:72:54:44:f1:53:9e:99:ce:17:
         70:fc:82:2f:df:b0:36:e8:c9:b0:7b:54:27:62:86:04:f0:96:
         ef:88:7d:5c:3d:af:86:6c:6e:09:0d:cc:a7:41:76:91:d6:d9:
         fa:57:35:08:26:37:82:4f:56:3d:31:34:73:f6:e2:ea:63:87:
         38:16:a8:74:25:bc:4c:84:45:8f:70:0c:7e:cd:eb:89:85:f0:
         b8:fc:b6:28:6f:95:c6:66:9d:a2:95:6f:85:d3:73:72:47:21:
         1f:bd:31:d3:30:3d:1d:a5:c0:60:db:e6:3e:83:ea:79:68:6d:
         73:da:1f:f7:6a:15:ba:01:52:7c:7a:e8:e0:64:f6:b6:49:86:
         b6:02:df:4a:87:cf:43:d5:57:5b:80:00:38:2d:6e:4c:63:e0:
         6e:0b:27:3e:f5:76:30:74:b3:7c:b2:a8:4f:88:80:fb:56:58:
         c4:f1:7d:2c:80:b2:60:05:3a:ab:d3:a2:0f:31:59:ca:ab:4b:
         51:d2:6a:ea:35:e3:ad:56:1e:4d:5f:8a:f7:13:f9:2a:03:df:
         29:b7:bc:ae:46:cc:16:d3:a9:81:60:fd:6c:e9:0e:1a:01:91:
         58:43:68:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIApEmp2Fvzbk0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDQyNDIzMjM1MVoXDTI2MDcyMzIzMjM1MVowLzEtMCsGA1UEAxMk
ZTdlM2EwNDMtYThjYS00ZmI0LTk0YmEtYTJhZDA0NzA5NTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz82HNufg6SN9zgVKK514s4GPsKCzNBEmlB1M
BlypO/JgrTsPOx80fELoA6xRJFTTd3T/W+dBRYZLrzbYR1YWm5FudamWj6aEK8st
smEJ+5K0Fg8exlUtYdCTAkmr9NWi1vhlKOGgLmJmTW3NVLogl0ANYKGNZ7mf9hx8
hAMiyJTpUlmsLGDN8SpwTfvAQ6sToc9B7Q1PYqPjD6F2eeJAZWW4vwMyHgqd/9x3
vmEbxKItY+2jiCcEf+WE5XzdMSEyc7zOeOA5vqgT+5cC7y9d7O7cpdsAQcn0ZJXy
eODRny1Oo2iUYQTAHSUx6W/Rgr62zIO2NoJ5Kutv+8XuSsInxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuVTJ+IaiRiqjqB3RXhUXhlGuiXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDE2ZDAxODItMzQyOS0z
MjkzLWEwNDctNjRkM2MzMGExNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPObZhap+KJ79NVZ6R2U0/MFDklyESYE0GvaXJURPFTnpnOF3D8gi/f
sDboybB7VCdihgTwlu+IfVw9r4ZsbgkNzKdBdpHW2fpXNQgmN4JPVj0xNHP24upj
hzgWqHQlvEyERY9wDH7N64mF8Lj8tihvlcZmnaKVb4XTc3JHIR+9MdMwPR2lwGDb
5j6D6nlobXPaH/dqFboBUnx66OBk9rZJhrYC30qHz0PVV1uAADgtbkxj4G4LJz71
djB0s3yyqE+IgPtWWMTxfSyAsmAFOqvTog8xWcqrS1HSauo1461WHk1fivcT+SoD
3ym3vK5GzBbTqYFg/WzpDhoBkVhDaDg=
-----END CERTIFICATE-----
Generated at Wed May 13 15:07:23 2026 by rpki-client