Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/0d33a9d6-b5e4-30dd-9f2b-6825662e3086.roa
File:                     0d33a9d6-b5e4-30dd-9f2b-6825662e3086.roa (raw, json)
Hash identifier:          7iMgjzPIbACjQR25NPSXYowGhg0LsKKuYupA9fY8kWI=
Subject key identifier:   F7:55:1F:9D:65:C3:72:2E:B1:35:A9:4C:20:85:79:52:41:BB:29:9A
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D98179403C9106B73E1588080
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/0d33a9d6-b5e4-30dd-9f2b-6825662e3086.roa
Signing time:             Wed 22 Apr 2026 19:31:57 +0000
ROA not before:           Wed 22 Apr 2026 19:31:57 +0000
ROA not after:            Tue 21 Jul 2026 19:31:57 +0000
asID:                     14877
IP address blocks:        162.223.16.0/24 maxlen: 24
                          162.223.17.0/24 maxlen: 24
                          162.223.18.0/24 maxlen: 24
                          162.223.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:17:94:03:c9:10:6b:73:e1:58:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 19:31:57 2026 GMT
            Not After : Jul 21 19:31:57 2026 GMT
        Subject: CN=54795446-92ec-4520-a847-0a2e2fb27013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:4b:6d:d5:a8:be:b3:e6:9d:27:40:78:7f:
                    dc:0e:6b:c4:f0:25:c9:cb:5e:d4:36:d5:82:93:69:
                    81:07:12:4f:89:94:57:f6:e3:3e:d7:00:74:f9:6b:
                    cc:b4:b7:e3:31:8c:fa:35:59:2f:80:ca:22:1b:2f:
                    a8:4f:c1:88:73:51:18:79:d5:3a:78:41:6f:b4:c2:
                    20:69:69:59:9e:16:fd:2e:63:58:ae:74:06:94:c0:
                    9a:61:a0:a5:27:a7:8e:2b:ec:6e:67:72:3c:ab:ee:
                    d4:e3:74:38:19:8f:a9:92:09:43:7c:f9:5f:2e:63:
                    e6:e4:91:5c:a4:5b:1b:16:d7:ea:a3:8f:f1:ed:00:
                    eb:2b:62:7b:51:a6:6f:f4:f5:db:b4:cf:0f:72:b2:
                    a1:f2:13:f8:90:ce:2f:af:b9:5a:a1:c8:c8:8b:e6:
                    aa:5f:ea:b5:b8:5e:4a:d4:bb:98:43:c3:b2:19:05:
                    66:2f:2c:9e:07:5e:cc:84:48:44:17:4b:7e:81:b0:
                    b1:28:71:0d:81:00:52:37:d4:87:d1:31:98:92:5c:
                    76:8b:68:22:e6:6a:1a:a5:3b:3a:2d:b7:38:88:f5:
                    1b:f9:7e:71:31:50:69:5f:60:7a:c3:a5:a9:64:7e:
                    65:16:d2:da:44:fe:be:28:cd:c5:5f:84:44:04:f4:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:1F:9D:65:C3:72:2E:B1:35:A9:4C:20:85:79:52:41:BB:29:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/0d33a9d6-b5e4-30dd-9f2b-6825662e3086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:28:92:66:b4:46:ab:98:48:d7:99:0a:9c:20:98:59:62:08:
         6b:77:44:cb:a7:0d:69:5f:57:62:54:eb:d0:19:8a:66:45:04:
         da:0c:f1:3c:4d:55:fc:54:90:ac:2c:c1:58:24:4e:0b:3c:6c:
         7e:66:76:44:a6:58:6c:9e:5e:6b:d6:73:78:e5:fa:4e:31:7e:
         dd:85:c9:65:ba:ad:7d:cd:99:ed:bf:56:58:6d:d2:bb:05:3e:
         95:6c:a1:31:be:f4:38:c8:e5:94:bd:c0:a2:1c:38:72:06:2c:
         25:3e:39:9c:28:c9:36:4c:c6:c2:51:33:95:75:10:d3:e1:86:
         bc:bb:a9:7d:84:9f:5e:3c:ac:ef:e4:9d:38:7b:f3:62:7f:ac:
         b1:25:de:2a:1f:a7:a2:d9:b6:4d:5c:30:85:3f:ed:7a:ec:7c:
         83:50:04:49:f1:5b:1a:99:eb:3e:70:4b:57:d0:dc:d7:72:cb:
         15:d5:18:24:58:ef:d7:02:f4:16:84:ad:d0:f1:c0:0e:30:24:
         d9:6d:2c:ff:a1:c6:9f:0d:c5:fd:c2:5a:12:f8:6c:e6:85:0a:
         ea:4d:ca:60:40:74:a4:dc:7b:47:e8:1a:ea:0d:df:ad:28:f4:
         20:58:2e:d4:15:e6:fc:47:8e:ee:92:5a:08:ff:1e:2b:44:a6:
         4d:03:4a:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YF5QDyRBrc+FYgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3
OGZkMB4XDTI2MDQyMjE5MzE1N1oXDTI2MDcyMTE5MzE1N1owLzEtMCsGA1UEAxMk
NTQ3OTU0NDYtOTJlYy00NTIwLWE4NDctMGEyZTJmYjI3MDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/xLbdWovrPmnSdAeH/cDmvE8CXJy17UNtWC
k2mBBxJPiZRX9uM+1wB0+WvMtLfjMYz6NVkvgMoiGy+oT8GIc1EYedU6eEFvtMIg
aWlZnhb9LmNYrnQGlMCaYaClJ6eOK+xuZ3I8q+7U43Q4GY+pkglDfPlfLmPm5JFc
pFsbFtfqo4/x7QDrK2J7UaZv9PXbtM8PcrKh8hP4kM4vr7laocjIi+aqX+q1uF5K
1LuYQ8OyGQVmLyyeB17MhEhEF0t+gbCxKHENgQBSN9SH0TGYklx2i2gi5moapTs6
Lbc4iPUb+X5xMVBpX2B6w6WpZH5lFtLaRP6+KM3FX4REBPRENQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdVH51lw3IusTWpTCCFeVJBuymaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5
NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMGQzM2E5ZDYtYjVlNC0z
MGRkLTlmMmItNjgyNTY2MmUzMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx
ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0
NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy
MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgokma0RquYSNeZCpwgmFliCGt3RMunDWlfV2JU69AZimZFBNoM8TxN
VfxUkKwswVgkTgs8bH5mdkSmWGyeXmvWc3jl+k4xft2FyWW6rX3Nme2/Vlht0rsF
PpVsoTG+9DjI5ZS9wKIcOHIGLCU+OZwoyTZMxsJRM5V1ENPhhry7qX2En148rO/k
nTh782J/rLEl3iofp6LZtk1cMIU/7XrsfINQBEnxWxqZ6z5wS1fQ3NdyyxXVGCRY
79cC9BaErdDxwA4wJNltLP+hxp8Nxf3CWhL4bOaFCupNymBAdKTce0foGuoN360o
9CBYLtQV5vxHju6SWgj/HitEpk0DSis=
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:32 2026 by rpki-client