Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa
File:                     bf953474-b3f9-3e3e-be7d-af68bce99754.roa (raw, json)
Hash identifier:          rIKLdaNkuhGV5ZVGZlbZiNdAJB4gQUD4+ixiDIUbc7w=
Subject key identifier:   BB:0C:7B:84:56:3B:47:1C:EB:4C:5C:18:4B:61:45:24:B8:2D:B1:19
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E885A47A50F880E8F3DEA1700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     16696
IP address blocks:        216.181.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:47:a5:0f:88:0e:8f:3d:ea:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=b6962e28-ee4b-44fb-b12e-d85b7868c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:fb:29:e2:a0:c3:6a:af:45:53:81:d9:04:
                    c5:d5:16:7e:a8:51:44:20:8e:ca:cb:c0:a3:ba:57:
                    94:70:ab:97:10:7c:06:0e:fd:68:1d:18:ff:b1:b1:
                    0b:e7:ff:58:75:c8:a3:47:2b:8d:86:de:22:75:9c:
                    df:4c:2b:50:e5:ba:19:83:68:8c:b1:ed:60:4d:6e:
                    f1:a8:67:82:30:66:e8:af:8c:5b:12:15:78:b1:bd:
                    c5:3a:30:63:29:73:17:9b:3f:e9:34:1a:28:0a:4b:
                    55:14:b3:48:b0:f5:83:ec:16:76:43:60:4b:db:39:
                    61:bd:1c:11:ca:7e:be:f2:3a:92:4d:2b:36:4a:35:
                    84:3d:14:7c:71:7c:a2:34:8e:14:c4:88:1b:df:a1:
                    90:3f:14:d3:4f:95:b3:36:37:05:74:e5:9d:7e:c4:
                    c1:48:d7:33:99:b7:2b:ac:97:30:b1:c8:c4:8c:f6:
                    5c:b3:cf:b0:2e:c7:5d:6b:9a:f9:85:ed:57:f1:f0:
                    a4:96:73:12:05:55:4c:ab:f3:b8:45:70:99:df:5b:
                    8e:e5:76:39:bb:52:76:b6:ce:b3:e2:3e:a0:f4:bf:
                    26:44:7b:90:0d:62:fc:67:e2:27:48:b1:b8:a7:ec:
                    c7:08:3a:15:e5:c6:da:b9:49:dc:b3:f8:fb:6c:75:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0C:7B:84:56:3B:47:1C:EB:4C:5C:18:4B:61:45:24:B8:2D:B1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:04:f7:ca:6e:97:8d:d0:86:20:fe:e6:50:5f:41:da:87:cb:
         07:16:9e:de:28:62:d3:01:97:3a:eb:eb:4c:4f:7b:d8:97:c7:
         18:1b:77:b7:a7:8c:4a:11:fc:04:7f:e1:15:d2:b7:91:e2:f1:
         0a:69:a1:9c:03:f0:84:92:40:2e:da:90:99:2e:2c:d4:29:68:
         b8:b5:c9:f3:46:7a:48:81:c3:f5:17:c8:a5:a1:1f:41:fe:c3:
         52:99:89:8b:0f:07:31:72:6f:7a:10:a0:cb:b8:0d:0b:db:37:
         85:92:4e:1f:4d:05:b6:4e:d1:2e:4e:d3:72:10:98:e7:cc:3a:
         05:05:ed:92:4f:64:04:65:04:f3:01:da:a8:b0:6a:70:e2:d5:
         1d:6c:58:81:6a:b2:a5:7e:cf:9b:a8:b3:5d:3b:db:84:7d:07:
         f0:15:6c:23:96:fe:2e:df:c4:dd:2d:fe:41:c9:bd:5a:8a:d9:
         8c:94:cd:45:c4:8a:e9:b3:01:9b:1e:64:d9:39:60:ae:dd:62:
         2a:c3:6a:7c:92:8d:49:eb:83:2b:38:7d:a1:88:a2:fb:a7:07:
         07:07:26:6f:3f:c8:10:ef:7b:be:ec:cc:ca:2c:2f:37:85:1f:
         da:55:1f:1d:e0:db:ba:66:f1:89:3d:72:4a:0f:14:12:c9:2a:
         87:5b:ec:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkelD4gOjz3qFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
YjY5NjJlMjgtZWU0Yi00NGZiLWIxMmUtZDg1Yjc4NjhjMjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmr7KeKgw2qvRVOB2QTF1RZ+qFFEII7Ky8Cj
uleUcKuXEHwGDv1oHRj/sbEL5/9YdcijRyuNht4idZzfTCtQ5boZg2iMse1gTW7x
qGeCMGbor4xbEhV4sb3FOjBjKXMXmz/pNBooCktVFLNIsPWD7BZ2Q2BL2zlhvRwR
yn6+8jqSTSs2SjWEPRR8cXyiNI4UxIgb36GQPxTTT5WzNjcFdOWdfsTBSNczmbcr
rJcwscjEjPZcs8+wLsdda5r5he1X8fCklnMSBVVMq/O4RXCZ31uO5XY5u1J2ts6z
4j6g9L8mRHuQDWL8Z+InSLG4p+zHCDoV5cbauUncs/j7bHVpGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsMe4RWO0cc60xcGEthRSS4LbEZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmY5NTM0NzQtYjNmOS0z
ZTNlLWJlN2QtYWY2OGJjZTk5NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUE98pul43QhiD+5lBfQdqHywcWnt4oYtMBlzrr60xPe9iXxxgbd7en
jEoR/AR/4RXSt5Hi8QppoZwD8ISSQC7akJkuLNQpaLi1yfNGekiBw/UXyKWhH0H+
w1KZiYsPBzFyb3oQoMu4DQvbN4WSTh9NBbZO0S5O03IQmOfMOgUF7ZJPZARlBPMB
2qiwanDi1R1sWIFqsqV+z5uos10724R9B/AVbCOW/i7fxN0t/kHJvVqK2YyUzUXE
iumzAZseZNk5YK7dYirDanySjUnrgys4faGIovunBwcHJm8/yBDve77szMosLzeF
H9pVHx3g27pm8Yk9ckoPFBLJKodb7EU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:49 2026 by rpki-client