Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa
File:                     0a6d902e-b68f-324b-862c-c6d4e9655731.roa (raw, json)
Hash identifier:          2s5oZPLFzSwT77RlqGZZkcIwrCmkD4YtZmUODpw/TxQ=
Subject key identifier:   29:F6:06:22:B2:E9:D4:6F:15:AB:34:8C:D8:94:CC:55:AD:24:69:26
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E78FF7DDF0D158944954A9C80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     16696
IP address blocks:        216.120.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7d:df:0d:15:89:44:95:4a:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=13d0fd23-a681-42e0-bf46-fad749c40109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:6a:01:83:65:e3:d0:e4:36:d6:e2:b5:29:
                    ff:9d:db:83:fe:c6:73:be:9a:ea:12:e3:fe:e4:e8:
                    13:4b:d0:5c:f9:d2:31:a6:a2:8e:ac:c1:23:48:30:
                    c8:16:33:9f:af:12:0f:9f:dc:c6:d5:28:c9:6b:b4:
                    5f:4c:b5:3c:c2:1b:3f:70:e2:97:de:0e:2b:7a:04:
                    55:92:8d:11:08:b7:01:6f:84:6e:74:e5:6c:2f:31:
                    9c:20:6d:4e:a1:e3:f9:c3:f5:04:79:03:61:83:02:
                    d4:3e:ab:72:81:18:87:32:64:55:6a:04:df:39:a1:
                    3e:12:df:c3:98:2d:e7:e4:48:7c:ce:b1:ba:e1:0e:
                    17:28:06:6d:65:e5:36:86:eb:ca:6b:b1:89:97:27:
                    f6:62:ca:10:06:9b:1d:3e:64:53:ee:fd:74:51:42:
                    0f:e9:8f:4b:57:20:f0:28:7a:8e:1b:c4:5f:57:89:
                    2f:fd:07:13:f1:b3:eb:f6:26:83:23:4f:b4:5d:ea:
                    e5:02:47:7e:53:f1:a9:21:d4:3f:91:70:cc:bb:84:
                    6e:83:22:38:fe:26:a2:b5:20:c7:1a:65:db:15:75:
                    59:03:d4:2f:e1:1e:39:84:83:77:44:ae:ec:6d:fc:
                    df:d6:82:c9:31:40:51:17:84:15:8a:d0:1c:0f:51:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:06:22:B2:E9:D4:6F:15:AB:34:8C:D8:94:CC:55:AD:24:69:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:36:93:19:00:ce:46:4f:62:0b:c7:e4:c5:19:1b:2f:c4:
         37:99:df:ed:c5:db:f5:19:2b:d8:66:ba:70:9c:03:bb:62:06:
         76:76:3c:a7:f8:34:2e:e0:48:fb:a4:86:60:25:54:24:73:6b:
         af:4b:07:17:01:0d:f3:f9:cb:95:97:e4:11:4a:a3:46:5e:6a:
         5c:2c:a0:f4:5e:a4:d1:24:ea:92:e0:03:4c:6b:f5:04:89:61:
         3a:ac:47:7c:9d:98:08:95:1e:57:65:0f:dc:b1:5c:1e:ab:63:
         43:53:86:cd:ae:ec:80:3a:67:59:e3:22:23:2c:98:62:52:dd:
         cd:71:02:7d:da:cb:bb:fa:6d:87:d7:7f:87:2a:d4:03:ff:e8:
         49:85:fd:58:b1:ee:eb:52:2d:10:ee:ae:d7:a9:51:e1:0a:b5:
         3b:37:2e:95:02:26:a0:97:f6:cb:dc:a3:94:b6:30:d4:d3:ab:
         e6:a0:f5:6f:8e:55:fa:40:d3:32:e7:88:3f:3a:03:f2:85:cf:
         a2:d5:f2:75:9d:fc:d4:99:5d:9e:d2:59:ea:e3:07:1d:f5:dc:
         38:91:97:48:04:89:8b:fa:cf:af:f1:dd:c3:da:0e:b2:b1:3a:
         68:f8:ff:11:b0:e3:d3:a5:b8:a7:c4:57:70:6f:8a:26:cf:7a:
         2c:97:30:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/33fDRWJRJVKnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MTNkMGZkMjMtYTY4MS00MmUwLWJmNDYtZmFkNzQ5YzQwMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkstqAYNl49DkNtbitSn/nduD/sZzvprqEuP+
5OgTS9Bc+dIxpqKOrMEjSDDIFjOfrxIPn9zG1SjJa7RfTLU8whs/cOKX3g4regRV
ko0RCLcBb4RudOVsLzGcIG1OoeP5w/UEeQNhgwLUPqtygRiHMmRVagTfOaE+Et/D
mC3n5Eh8zrG64Q4XKAZtZeU2huvKa7GJlyf2YsoQBpsdPmRT7v10UUIP6Y9LVyDw
KHqOG8RfV4kv/QcT8bPr9iaDI0+0XerlAkd+U/GpIdQ/kXDMu4RugyI4/iaitSDH
GmXbFXVZA9Qv4R45hIN3RK7sbfzf1oLJMUBRF4QVitAcD1GkBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCn2BiKy6dRvFas0jNiUzFWtJGkmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGE2ZDkwMmUtYjY4Zi0z
MjRiLTg2MmMtYzZkNGU5NjU1NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHV9NpMZAM5GT2ILx+TFGRsvxDeZ3+3F2/UZK9hmunCcA7tiBnZ2PKf4
NC7gSPukhmAlVCRza69LBxcBDfP5y5WX5BFKo0ZealwsoPRepNEk6pLgA0xr9QSJ
YTqsR3ydmAiVHldlD9yxXB6rY0NThs2u7IA6Z1njIiMsmGJS3c1xAn3ay7v6bYfX
f4cq1AP/6EmF/Vix7utSLRDurtepUeEKtTs3LpUCJqCX9svco5S2MNTTq+ag9W+O
VfpA0zLniD86A/KFz6LV8nWd/NSZXZ7SWerjBx313DiRl0gEiYv6z6/x3cPaDrKx
Omj4/xGw49OluKfEV3BviibPeiyXMH4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:26 2026 by rpki-client