Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
File:                     3d359667-78f9-3d87-b525-31bf659ba3c5.roa (raw, json)
Hash identifier:          oxuQpkZb9nEAC8e/xiuAYeq08R3tR0HXXjXvCGD3v40=
Subject key identifier:   87:74:A8:9C:FC:DA:E5:24:67:A6:48:E1:D8:74:B2:18:5A:00:5A:DA
Certificate issuer:       /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial:       010D0C9F4328584D40CA5ACAB731C0309E534040
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     31868
IP address blocks:        216.129.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5a:ca:b7:31:c0:30:9e:53:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=27eca21b-c980-4d73-94b7-acdc3d1124ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:88:47:bf:2a:04:8d:d1:b8:b0:50:a0:91:
                    94:f7:8e:74:16:ca:33:06:5e:d8:4a:2c:93:1e:74:
                    bb:02:60:b7:a1:ad:cf:a7:b3:d9:27:ee:cb:54:1a:
                    98:f6:25:e7:c1:ec:4b:ee:1b:0c:e1:9d:fc:ad:a9:
                    2d:4c:f8:dc:ac:b2:8b:fb:7c:46:26:c5:68:78:c4:
                    67:92:78:42:36:d8:4f:f6:b3:de:ef:9b:42:1d:dc:
                    ef:97:ab:66:76:25:69:33:53:8a:a6:81:cb:77:b1:
                    69:c6:aa:a5:02:52:54:08:16:81:86:13:11:32:12:
                    8f:6a:5d:7e:9c:5e:e5:3c:11:90:11:db:df:49:4f:
                    a3:40:97:61:0b:e3:61:bc:9b:0e:53:87:42:ed:8d:
                    bc:ef:6a:99:04:a5:f2:0d:16:9c:90:fd:1e:39:aa:
                    e8:8b:ce:bc:c5:49:61:eb:51:ef:4a:dd:1b:81:5f:
                    2a:c8:b7:08:71:86:ff:f2:b0:30:b3:33:2b:e9:ba:
                    45:c6:70:0c:e6:89:13:94:ea:2d:96:9e:94:82:8f:
                    64:4c:5b:50:f3:fe:e8:d9:67:29:56:e5:d6:c8:4a:
                    3f:ad:28:fb:85:a2:9e:39:73:9c:f5:bd:d1:8e:13:
                    0f:c6:17:e0:e3:1a:95:ce:b7:eb:a5:9c:6a:7c:7d:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:74:A8:9C:FC:DA:E5:24:67:A6:48:E1:D8:74:B2:18:5A:00:5A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:15:66:09:0f:1f:98:8d:3c:83:e4:f1:f3:54:29:bc:32:62:
         66:0b:7a:ef:6c:93:d0:13:fb:a1:ee:1b:fd:38:cd:4a:7c:64:
         64:c3:c8:16:d1:87:b1:93:ec:31:50:4c:3f:b9:57:f9:f0:79:
         a5:59:bb:fe:50:c8:c5:a0:3c:5b:37:c8:a4:73:76:0f:b6:8b:
         0b:86:03:84:7d:02:0b:92:9c:34:9e:98:6e:79:9c:bb:2b:d9:
         83:96:c6:34:7e:69:17:74:48:5f:79:1e:27:d2:08:e7:0d:bf:
         a0:21:5e:ae:57:5e:a7:c8:7f:a5:62:fd:8c:fb:07:85:34:79:
         a5:cf:10:4d:8c:ea:13:a5:f6:43:5e:aa:33:14:29:0c:fe:e3:
         31:74:0b:45:f6:68:b7:aa:7d:6d:d2:99:77:96:13:42:73:ba:
         bc:7e:70:a3:cd:54:65:be:29:82:54:80:dc:6e:a4:3e:45:45:
         c2:88:dc:42:d2:0c:9c:96:85:88:c4:a2:80:ad:68:87:da:ff:
         dd:8e:04:20:fa:44:cc:9e:e7:49:b7:5c:a3:2d:55:da:c3:5c:
         d8:d0:c6:c2:54:3f:0e:1b:36:13:fa:a6:c3:de:bf:94:26:a9:
         c9:d6:e1:90:a7:28:4c:81:08:94:79:21:88:1f:9a:2b:f6:7b:
         cf:40:1f:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylrKtzHAMJ5TQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2MjM4YzYtOTM4OS00ZmJlLWE2YWEtMjQwOTU5NjZl
YTQwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MjdlY2EyMWItYzk4MC00ZDczLTk0YjctYWNkYzNkMTEyNGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRCIR78qBI3RuLBQoJGU9450FsozBl7YSiyT
HnS7AmC3oa3Pp7PZJ+7LVBqY9iXnwexL7hsM4Z38raktTPjcrLKL+3xGJsVoeMRn
knhCNthP9rPe75tCHdzvl6tmdiVpM1OKpoHLd7FpxqqlAlJUCBaBhhMRMhKPal1+
nF7lPBGQEdvfSU+jQJdhC+NhvJsOU4dC7Y2872qZBKXyDRackP0eOaroi868xUlh
61HvSt0bgV8qyLcIcYb/8rAwszMr6bpFxnAM5okTlOotlp6Ugo9kTFtQ8/7o2Wcp
VuXWyEo/rSj7haKeOXOc9b3RjhMPxhfg4xqVzrfrpZxqfH2uSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFId0qJz82uUkZ6ZI4dh0shhaAFraMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTYy
MzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5NTk2NmVhNDAvM2QzNTk2NjctNzhmOS0z
ZDg3LWI1MjUtMzFiZjY1OWJhM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU2MjM4YzYtOTM4OS00ZmJlLWE2
YWEtMjQwOTU5NjZlYTQwL2FlNjIzOGM2LTkzODktNGZiZS1hNmFhLTI0MDk1OTY2
ZWE0MC5jcmwwHwYDVR0jBBgwFoAUIv1CbsCrd20+6XM6CS593lyAt2wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hZTYyMzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5
NTk2NmVhNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgVZgkPH5iNPIPk8fNUKbwyYmYLeu9sk9AT+6HuG/04zUp8ZGTDyBbR
h7GT7DFQTD+5V/nweaVZu/5QyMWgPFs3yKRzdg+2iwuGA4R9AguSnDSemG55nLsr
2YOWxjR+aRd0SF95HifSCOcNv6AhXq5XXqfIf6Vi/Yz7B4U0eaXPEE2M6hOl9kNe
qjMUKQz+4zF0C0X2aLeqfW3SmXeWE0Jzurx+cKPNVGW+KYJUgNxupD5FRcKI3ELS
DJyWhYjEooCtaIfa/92OBCD6RMye50m3XKMtVdrDXNjQxsJUPw4bNhP6psPev5Qm
qcnW4ZCnKEyBCJR5IYgfmiv2e89AHxo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:55 2026 by rpki-client