Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
File:                     ba10d448-b912-33bc-a392-2588e49baea1.roa (raw, json)
Hash identifier:          fd4q+Pt6wByaskxZGcQGKa4iJ1sUCYBVOCmG0cnG9Bc=
Subject key identifier:   44:A7:2F:65:06:FE:BB:B3:90:72:FA:FE:42:E7:23:0C:ED:06:72:7E
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F4328584D3DFFAB3E4FB6ACD2AC24E400
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14977
IP address blocks:        198.99.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ab:3e:4f:b6:ac:d2:ac:24:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ed544431-6108-4c45-aca7-b0a6de36301e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:60:22:a9:25:f0:c1:60:b4:67:83:c6:e5:
                    f2:ea:35:f4:3b:9f:75:bf:e7:7e:3c:9b:8e:3f:df:
                    46:6d:94:ce:6f:e3:ac:26:c8:72:81:94:1d:6a:84:
                    f2:15:2d:dd:a8:8a:c8:bb:b7:a7:47:94:80:33:89:
                    92:78:60:7b:2c:02:4a:c7:4c:c8:ad:93:96:39:63:
                    72:b0:00:ea:e4:a6:71:2e:0d:cd:bb:c3:9b:34:e3:
                    49:59:1e:0c:a3:94:97:7f:0f:de:56:37:56:bb:ce:
                    d4:9b:9b:a5:fb:0c:48:cf:33:ca:03:df:a9:a1:a8:
                    cc:b2:35:b4:ea:3d:ec:30:a2:c0:e8:8d:56:9c:56:
                    c4:0a:de:f8:8a:36:2e:b8:32:ef:d2:da:86:f5:fe:
                    6b:b5:8c:5a:c2:f2:bb:74:88:05:89:ad:ac:f6:0b:
                    57:94:86:85:75:28:76:65:60:9f:cc:46:b8:f1:c7:
                    37:18:3c:05:25:c4:98:13:18:69:b1:ee:7b:0a:3f:
                    7e:16:ef:6a:83:c0:2f:0a:a6:49:3e:1f:48:82:4d:
                    c9:c9:74:d3:e3:9a:f5:76:2b:32:0d:77:d7:76:22:
                    95:ad:b1:b5:84:33:fe:fc:1f:fe:05:27:5e:1a:5b:
                    bc:00:3d:ff:1d:20:a2:bc:c4:55:10:d5:1a:a6:95:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:2F:65:06:FE:BB:B3:90:72:FA:FE:42:E7:23:0C:ED:06:72:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:86:0e:00:32:ed:ef:76:62:6c:0f:f9:59:8e:dd:91:32:
         99:2c:ff:5a:03:fc:81:21:cc:4a:98:ab:cc:4a:92:b7:b7:e0:
         c9:b6:3d:ae:b7:56:46:0a:3c:ee:a5:78:eb:de:42:ef:82:36:
         97:a9:7c:e2:82:e0:4f:79:58:68:bc:96:62:44:ae:6a:55:c9:
         5d:73:db:e2:c2:50:5c:0d:78:58:39:07:f0:82:da:90:36:85:
         83:91:2a:61:e3:a4:39:20:ca:a6:9a:39:5b:35:1a:14:ae:20:
         89:a1:e4:98:b8:73:a8:99:2d:b3:b6:8f:e6:15:f9:54:cc:aa:
         7d:f0:20:73:ab:4c:68:28:2b:b3:68:12:ba:05:b3:2c:50:6c:
         30:a1:39:3c:fb:3a:43:97:a0:cf:11:94:e7:30:77:86:03:9f:
         53:a0:72:c4:13:8d:3a:76:a1:65:33:b0:c2:bd:e4:fb:65:17:
         48:26:71:5d:3f:e6:3e:2c:88:38:b1:3d:03:d6:00:92:c6:ba:
         a8:c2:c8:31:70:b4:eb:7f:10:4c:fe:5a:ce:36:f6:49:76:92:
         a0:07:32:e0:d3:bd:09:87:60:5f:31:6b:8e:21:cf:d4:cf:7f:
         34:0b:a5:a7:9d:53:97:f7:57:38:22:d5:65:2b:86:84:5f:85:
         70:e4:0d:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6s+T7as0qwk5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViMjNiMDMtOWQxZC00MTJkLWE1NmEtNDkzYWVhYTVk
MDU3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZWQ1NDQ0MzEtNjEwOC00YzQ1LWFjYTctYjBhNmRlMzYzMDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mNgIqkl8MFgtGeDxuXy6jX0O591v+d+PJuO
P99GbZTOb+OsJshygZQdaoTyFS3dqIrIu7enR5SAM4mSeGB7LAJKx0zIrZOWOWNy
sADq5KZxLg3Nu8ObNONJWR4Mo5SXfw/eVjdWu87Um5ul+wxIzzPKA9+poajMsjW0
6j3sMKLA6I1WnFbECt74ijYuuDLv0tqG9f5rtYxawvK7dIgFia2s9gtXlIaFdSh2
ZWCfzEa48cc3GDwFJcSYExhpse57Cj9+Fu9qg8AvCqZJPh9Igk3JyXTT45r1disy
DXfXdiKVrbG1hDP+/B/+BSdeGlu8AD3/HSCivMRVENUappUnGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESnL2UG/ruzkHL6/kLnIwztBnJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZWIy
M2IwMy05ZDFkLTQxMmQtYTU2YS00OTNhZWFhNWQwNTcvYmExMGQ0NDgtYjkxMi0z
M2JjLWEzOTItMjU4OGU0OWJhZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmViMjNiMDMtOWQxZC00MTJkLWE1
NmEtNDkzYWVhYTVkMDU3LzZlYjIzYjAzLTlkMWQtNDEyZC1hNTZhLTQ5M2FlYWE1
ZDA1Ny5jcmwwHwYDVR0jBBgwFoAUNjS2acy/hsHKvgZtNPMkpobTMY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82ZWIyM2IwMy05ZDFkLTQxMmQtYTU2YS00OTNh
ZWFhNWQwNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACK0hg4AMu3vdmJsD/lZjt2RMpks/1oD/IEhzEqYq8xKkre34Mm2Pa63
VkYKPO6leOveQu+CNpepfOKC4E95WGi8lmJErmpVyV1z2+LCUFwNeFg5B/CC2pA2
hYORKmHjpDkgyqaaOVs1GhSuIImh5Ji4c6iZLbO2j+YV+VTMqn3wIHOrTGgoK7No
EroFsyxQbDChOTz7OkOXoM8RlOcwd4YDn1OgcsQTjTp2oWUzsMK95PtlF0gmcV0/
5j4siDixPQPWAJLGuqjCyDFwtOt/EEz+Ws429kl2kqAHMuDTvQmHYF8xa44hz9TP
fzQLpaedU5f3Vzgi1WUrhoRfhXDkDY4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:29 2026 by rpki-client