Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File:                     1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier:          A8QSEdqPhEpHUBzea8bfWo5V81+l7JKjS5O5yCr7CoA=
Subject key identifier:   BA:D6:DE:AC:74:0D:2D:99:4A:9F:CE:80:0C:57:B3:EC:3E:5E:B2:91
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D492A7274E147152E45780F00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     62533
IP address blocks:        216.68.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:72:74:e1:47:15:2e:45:78:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=d6a7dc83-5492-4e35-bc8a-9f5fdccf40f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:6c:2f:a8:e9:94:a8:d1:8e:6d:f2:f7:49:
                    33:50:2f:60:a3:ff:0e:a3:17:40:c6:21:46:6c:32:
                    8f:d5:cd:d4:d1:13:23:f3:51:68:ae:4c:f9:ef:05:
                    8b:bf:9e:ab:b2:97:ff:3c:fb:a6:0f:86:7f:83:a3:
                    d4:19:8c:99:25:ef:34:88:57:35:21:3c:7c:d7:bb:
                    62:a5:d7:a9:f2:b8:61:88:48:13:c2:65:34:bd:c3:
                    a8:c7:1a:93:16:db:9f:78:a5:78:c9:75:79:9b:2a:
                    94:a7:10:33:31:a5:4b:07:01:f4:3b:94:fb:02:13:
                    5a:e1:cd:8e:df:9d:e1:2f:0b:42:d5:61:11:0d:e1:
                    5e:eb:10:b5:e4:4d:8f:a7:24:ef:8a:a6:81:87:7b:
                    44:34:0b:ba:73:bc:89:49:8c:66:26:48:0c:0f:bb:
                    7b:4e:e8:58:48:a5:78:f3:f7:86:f4:bd:c0:db:8c:
                    37:20:76:f3:73:6d:d9:0f:4c:e6:c1:a8:42:17:0b:
                    7b:42:0c:f5:2b:8a:d5:d0:d3:58:22:ec:3a:b8:89:
                    e1:bd:59:eb:e1:68:43:a5:96:38:70:da:eb:88:c5:
                    6c:03:1d:d3:61:a6:91:6a:1d:5c:83:38:22:bd:f4:
                    99:a5:6b:b7:7d:17:75:40:7b:0f:ff:ff:37:31:1d:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:DE:AC:74:0D:2D:99:4A:9F:CE:80:0C:57:B3:EC:3E:5E:B2:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:df:52:d4:ad:c9:fb:87:15:c0:c4:4b:b2:7e:1a:e7:c4:73:
         d2:3a:2f:7c:3e:1f:52:31:2b:10:86:32:b9:d1:b7:42:a7:8a:
         58:e9:54:9d:4c:00:a4:aa:08:4a:65:4d:7b:99:91:21:62:2a:
         6a:c2:cf:4c:59:88:0c:63:33:d2:1e:03:80:14:1a:28:d4:39:
         91:e5:46:19:20:8b:23:fa:e0:52:99:d7:f0:a1:1c:49:57:59:
         78:53:f6:c6:28:99:86:95:b6:d9:5a:98:b0:b1:ed:05:30:1d:
         ee:8f:89:c1:35:86:9b:77:47:57:5b:f0:0a:d7:a9:ee:27:67:
         9c:b4:68:85:04:e3:e1:a1:36:58:8d:5e:36:14:12:d3:7b:23:
         19:7c:1c:37:89:50:6d:a1:e5:bf:6a:52:69:d7:24:ef:57:23:
         1c:26:1e:4a:19:6e:a6:5c:33:7e:84:10:7f:15:6a:57:6a:ea:
         c2:18:1b:8a:c6:0f:2f:be:ab:90:f8:c6:53:6a:be:4b:6a:1a:
         f5:ad:3f:d5:5b:92:a2:69:60:3b:70:eb:cf:55:21:59:34:07:
         42:a5:ed:84:50:93:22:a9:ac:63:89:06:23:1b:32:f3:d8:56:
         6b:b4:80:57:62:38:89:66:69:f2:d5:92:06:5f:fd:b5:5b:de:
         f8:f7:87:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnJ04UcVLkV4DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz
YTBjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZDZhN2RjODMtNTQ5Mi00ZTM1LWJjOGEtOWY1ZmRjY2Y0MGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9lsL6jplKjRjm3y90kzUC9go/8OoxdAxiFG
bDKP1c3U0RMj81Forkz57wWLv56rspf/PPumD4Z/g6PUGYyZJe80iFc1ITx817ti
pdep8rhhiEgTwmU0vcOoxxqTFtufeKV4yXV5myqUpxAzMaVLBwH0O5T7AhNa4c2O
353hLwtC1WERDeFe6xC15E2PpyTviqaBh3tENAu6c7yJSYxmJkgMD7t7TuhYSKV4
8/eG9L3A24w3IHbzc23ZD0zmwahCFwt7Qgz1K4rV0NNYIuw6uInhvVnr4WhDpZY4
cNrriMVsAx3TYaaRah1cgzgivfSZpWu3fRd1QHsP//83MR1+PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrW3qx0DS2ZSp/OgAxXs+w+XrKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz
OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMWIxNjY4NjQtNmY1YS0z
NjYxLTllMzMtZThmYmNlYmRhNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4
YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0
M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw
NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ERVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbfUtStyfuHFcDES7J+GufEc9I6L3w+H1IxKxCGMrnRt0KniljpVJ1M
AKSqCEplTXuZkSFiKmrCz0xZiAxjM9IeA4AUGijUOZHlRhkgiyP64FKZ1/ChHElX
WXhT9sYomYaVttlamLCx7QUwHe6PicE1hpt3R1db8ArXqe4nZ5y0aIUE4+GhNliN
XjYUEtN7Ixl8HDeJUG2h5b9qUmnXJO9XIxwmHkoZbqZcM36EEH8Valdq6sIYG4rG
Dy++q5D4xlNqvktqGvWtP9VbkqJpYDtw689VIVk0B0Kl7YRQkyKprGOJBiMbMvPY
Vmu0gFdiOIlmafLVkgZf/bVb3vj3h1g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:25 2026 by rpki-client