Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa
File:                     50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa (raw, json)
Hash identifier:          1CwUPAbeW9cFy+U64Elz+UR7iIGIywJWxpDG1TFhrvI=
Subject key identifier:   99:E4:8D:FD:EE:B1:BE:E2:AF:F6:41:FA:4C:99:17:7A:E1:88:7C:56
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584D359FD25C5EDC5A4F60DAAEC0
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     6589
IP address blocks:        216.40.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:d2:5c:5e:dc:5a:4f:60:da:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=855a9777-54f6-4781-b9be-a82b6d3ab0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:ed:81:8a:c0:7a:16:b7:fa:61:89:8a:68:
                    9e:90:36:e8:c7:5b:01:6b:fa:f0:5a:69:5b:3b:75:
                    e1:b6:ef:a4:62:24:99:67:fb:06:2c:06:01:03:bd:
                    b2:cf:c8:f7:06:6f:72:3e:bf:34:7e:a7:f9:8c:a7:
                    c1:53:d9:db:89:20:ca:17:c1:a8:6c:1c:b8:ba:14:
                    d5:b1:29:1b:ca:3f:07:92:d9:03:d0:20:e4:7e:25:
                    5d:1d:e2:4e:0f:9e:e6:0a:c5:e8:21:2e:65:0a:df:
                    e8:8c:b6:54:9f:0f:6f:75:2a:8a:e1:5b:12:2e:30:
                    ae:0c:0b:0b:10:c9:91:86:6a:37:f8:ea:ce:4c:cc:
                    4f:9e:ee:78:64:c5:85:32:02:43:42:0b:82:38:99:
                    a7:ad:15:44:a6:1a:6c:34:7a:42:45:0e:21:b1:6d:
                    cb:28:02:63:07:49:88:3b:c4:73:83:8e:8d:c7:f4:
                    e2:86:97:a0:94:a2:15:79:53:91:83:c5:ad:0d:a3:
                    63:91:8f:e3:80:66:90:58:c2:93:91:e9:70:ec:a1:
                    b2:eb:d2:06:55:a9:26:de:db:6b:5e:83:27:4b:29:
                    88:d7:9b:cd:bc:92:32:cc:bf:cd:74:85:94:a4:83:
                    0a:0a:f7:59:21:76:26:2e:38:0e:b6:d4:64:a1:b5:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E4:8D:FD:EE:B1:BE:E2:AF:F6:41:FA:4C:99:17:7A:E1:88:7C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:51:d9:6a:01:65:3f:7d:a6:bf:7c:4c:8b:b4:7d:ae:f1:5a:
         f1:ad:79:cf:d0:09:21:0e:17:99:0a:12:f2:ef:7a:a5:74:d2:
         07:ec:51:11:3a:bc:78:3f:e7:d6:ef:f8:6f:85:66:cb:9f:39:
         a0:f2:59:d4:51:0e:af:74:a2:1b:cc:06:80:57:c8:aa:1f:a8:
         3e:80:0e:1a:0c:f8:6f:a2:4f:e2:49:64:47:b3:b6:8e:17:53:
         a5:24:75:52:a5:53:43:88:3b:d8:bf:f9:1b:24:55:4d:78:6c:
         17:61:29:50:78:c6:cb:19:b1:7f:bc:12:65:3e:6d:7e:65:65:
         f3:bd:70:69:a0:76:7d:bc:3f:2e:81:cf:bc:f3:fc:07:08:ba:
         a0:a0:d1:19:f8:50:3a:42:99:03:40:bd:a2:16:8e:88:f3:0b:
         89:ed:78:5a:84:5d:fb:c3:b0:a1:ac:2f:3d:7b:43:d5:51:fb:
         bf:8b:8f:6c:ce:f2:d8:14:63:54:5f:9a:8c:43:17:fc:c2:d1:
         04:7a:6f:75:22:6c:f9:94:9f:52:7f:3b:eb:b5:1b:c3:32:65:
         7e:ed:58:48:dd:fd:2f:13:7b:07:3e:34:60:a1:1a:32:b1:3f:
         d2:23:cc:ed:dd:b7:7f:cb:9b:b0:06:47:63:f2:9b:2f:b7:cd:
         bd:09:bf:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9JcXtxaT2DarsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5
OTYxMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ODU1YTk3NzctNTRmNi00NzgxLWI5YmUtYTgyYjZkM2FiMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ntgYrAeha3+mGJimiekDbox1sBa/rwWmlb
O3Xhtu+kYiSZZ/sGLAYBA72yz8j3Bm9yPr80fqf5jKfBU9nbiSDKF8GobBy4uhTV
sSkbyj8HktkD0CDkfiVdHeJOD57mCsXoIS5lCt/ojLZUnw9vdSqK4VsSLjCuDAsL
EMmRhmo3+OrOTMxPnu54ZMWFMgJDQguCOJmnrRVEphpsNHpCRQ4hsW3LKAJjB0mI
O8Rzg46Nx/TihpeglKIVeVORg8WtDaNjkY/jgGaQWMKTkelw7KGy69IGVakm3ttr
XoMnSymI15vNvJIyzL/NdIWUpIMKCvdZIXYmLjgOttRkobXpLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnkjf3usb7ir/ZB+kyZF3rhiHxWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YmEw
MzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvNTA0NzRlYWEtNWU2OS0z
MTVhLThhNWYtOTU4M2FjMGE2NGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGJhMDMwNjQtMDI4OC00ZWM0LWI3
M2YtZDZiYTFkNjM5OTYxLzRiYTAzMDY0LTAyODgtNGVjNC1iNzNmLWQ2YmExZDYz
OTk2MS5jcmwwHwYDVR0jBBgwFoAU1bCh9ujIDJsNuG89eCAve3nUrdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJh
MWQ2Mzk5NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJR2WoBZT99pr98TIu0fa7xWvGtec/QCSEOF5kKEvLveqV00gfsURE6
vHg/59bv+G+FZsufOaDyWdRRDq90ohvMBoBXyKofqD6ADhoM+G+iT+JJZEezto4X
U6UkdVKlU0OIO9i/+RskVU14bBdhKVB4xssZsX+8EmU+bX5lZfO9cGmgdn28Py6B
z7zz/AcIuqCg0Rn4UDpCmQNAvaIWjojzC4nteFqEXfvDsKGsLz17Q9VR+7+Lj2zO
8tgUY1RfmoxDF/zC0QR6b3UibPmUn1J/O+u1G8MyZX7tWEjd/S8Tewc+NGChGjKx
P9IjzO3dt3/Lm7AGR2Pymy+3zb0Jv4k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:26 2026 by rpki-client