Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
File:                     12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json)
Hash identifier:          i9lnuvXpjJjgr+ljIloxhCXZj9xzSa7I8/KXPuG671M=
Subject key identifier:   6E:3B:82:7D:75:AF:22:C8:02:FC:35:2D:2E:77:E0:1D:0A:00:D1:04
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DB4A574661F56EDB46E017C80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     22781
IP address blocks:        216.131.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:74:66:1f:56:ed:b4:6e:01:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=a4c8ed51-d8dd-4149-b439-52902e87dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:cb:3f:91:86:3b:15:f4:98:7e:91:f5:03:
                    d0:b8:4f:35:f7:92:a6:50:41:d4:75:c2:b9:98:82:
                    15:a1:25:02:78:47:5d:24:14:43:a3:62:3c:72:5d:
                    5c:02:3c:d2:b4:96:6f:b7:a3:ec:68:14:3f:cc:b2:
                    1d:dd:fd:95:72:12:25:d2:41:bc:ea:da:35:63:58:
                    81:e5:82:90:a1:cb:e3:42:25:53:b1:dd:95:46:f5:
                    cf:c0:2e:cc:80:98:2f:7b:58:37:03:22:85:be:72:
                    1f:6a:5e:36:03:64:7d:9d:59:5b:2c:0a:d6:09:b1:
                    be:c7:ae:38:6c:b9:bc:93:12:0b:ee:18:dd:cf:83:
                    a5:10:bb:2c:fa:64:36:51:a3:4c:3b:c6:1f:eb:2b:
                    7b:e8:2c:d8:1e:58:5e:18:c3:04:ca:39:1a:f4:3e:
                    62:60:4c:09:5b:5b:3c:12:61:88:03:8d:73:ec:da:
                    78:40:a9:00:8a:1a:ae:ba:71:55:1e:bd:a6:63:a2:
                    23:86:84:0e:f0:ba:c9:70:0c:10:04:36:7f:a2:62:
                    14:c8:0e:e9:26:ca:5b:1b:b7:c3:7c:ba:1f:14:ce:
                    ef:e6:69:80:56:b6:38:9c:2e:91:5a:17:c1:3b:1c:
                    13:57:ce:5e:2d:2d:b9:bb:83:84:e2:61:4a:6f:81:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:82:7D:75:AF:22:C8:02:FC:35:2D:2E:77:E0:1D:0A:00:D1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:c2:df:77:24:6a:48:d8:9d:ed:46:3c:d9:3d:9e:9b:f8:
         b6:83:ce:5c:f6:6f:22:9f:46:04:b1:ff:5a:cb:7c:46:b6:43:
         69:ae:84:66:ab:03:5c:c4:a8:06:d6:cb:50:a8:6e:44:e7:1c:
         32:f2:d9:af:5a:98:a7:83:29:d2:09:95:92:5c:ae:ed:41:ff:
         58:76:f5:00:64:a9:1f:e6:dd:3f:0f:28:66:b0:77:c2:ec:b0:
         1d:0f:c6:a1:cb:5d:07:4d:3d:0f:2c:90:5f:a5:33:54:81:cb:
         49:b7:8f:8b:b9:37:df:95:e8:bc:9e:79:1a:8e:a1:6a:7c:cc:
         c8:d4:00:01:55:53:fe:9c:67:2f:ac:6d:c6:28:0b:a2:92:ad:
         c0:b2:8a:fd:72:ad:69:09:b7:d9:36:73:c5:ca:fd:26:71:1a:
         1e:a1:ea:b3:2d:d7:7d:1b:a0:79:d3:65:e4:6d:cb:91:a4:bc:
         3f:22:94:2f:b6:62:18:44:a4:7a:e5:b3:7f:cd:b0:8c:48:37:
         aa:05:75:e7:04:d9:4d:dd:99:2a:a9:a6:c6:3a:40:f1:67:80:
         30:03:a0:d0:12:ca:6b:16:cf:ed:1e:8e:6b:72:d8:c4:42:27:
         66:55:47:f8:c8:99:74:f7:35:5a:bb:34:53:e6:27:67:8c:aa:
         f5:d4:86:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXRmH1bttG4BfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
YTRjOGVkNTEtZDhkZC00MTQ5LWI0MzktNTI5MDJlODdkZDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP7LP5GGOxX0mH6R9QPQuE8195KmUEHUdcK5
mIIVoSUCeEddJBRDo2I8cl1cAjzStJZvt6PsaBQ/zLId3f2VchIl0kG86to1Y1iB
5YKQocvjQiVTsd2VRvXPwC7MgJgve1g3AyKFvnIfal42A2R9nVlbLArWCbG+x644
bLm8kxIL7hjdz4OlELss+mQ2UaNMO8Yf6yt76CzYHlheGMMEyjka9D5iYEwJW1s8
EmGIA41z7Np4QKkAihquunFVHr2mY6IjhoQO8LrJcAwQBDZ/omIUyA7pJspbG7fD
fLofFM7v5mmAVrY4nC6RWhfBOxwTV85eLS25u4OE4mFKb4GSwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG47gn11ryLIAvw1LS534B0KANEEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z
NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElKwt93JGpI2J3tRjzZPZ6b+LaDzlz2byKfRgSx/1rLfEa2Q2muhGar
A1zEqAbWy1CobkTnHDLy2a9amKeDKdIJlZJcru1B/1h29QBkqR/m3T8PKGawd8Ls
sB0PxqHLXQdNPQ8skF+lM1SBy0m3j4u5N9+V6LyeeRqOoWp8zMjUAAFVU/6cZy+s
bcYoC6KSrcCyiv1yrWkJt9k2c8XK/SZxGh6h6rMt130boHnTZeRty5GkvD8ilC+2
YhhEpHrls3/NsIxIN6oFdecE2U3dmSqppsY6QPFngDADoNASymsWz+0ejmty2MRC
J2ZVR/jImXT3NVq7NFPmJ2eMqvXUhqY=
-----END CERTIFICATE-----
Generated at Wed May 13 16:06:04 2026 by rpki-client