Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/7f6db503-4a91-3391-b10c-d6dbb663ada5.roa
File:                     7f6db503-4a91-3391-b10c-d6dbb663ada5.roa (raw, json)
Hash identifier:          59XsRLX0LwodSji7GSP6HrPVlvu0Eq8l1bKxoGmt5ow=
Subject key identifier:   D4:C2:53:B9:F3:41:3B:81:7F:C7:27:FB:63:F1:4E:0C:C4:12:7D:78
Certificate issuer:       /CN=b16b3fcc-0a15-499f-8a99-d97f68a2f543
Certificate serial:       010D0C9F4328584D386A4628DD8EF3A843FEC220
Authority key identifier: 6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/7f6db503-4a91-3391-b10c-d6dbb663ada5.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     16934
IP address blocks:        68.233.144.0/20 maxlen: 24
                          158.51.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:46:28:dd:8e:f3:a8:43:fe:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16b3fcc-0a15-499f-8a99-d97f68a2f543
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=ccff0d12-2077-4aa5-9648-ded1c04bfd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:a7:0b:0b:c3:0b:24:c5:82:c6:59:be:39:
                    42:ff:90:d9:65:fe:12:1e:09:63:f8:c0:94:aa:30:
                    54:0b:c3:3e:cf:ec:7a:92:48:a3:80:6c:1a:ea:67:
                    82:fa:05:90:39:df:02:bb:ba:a9:b5:6e:69:2c:1b:
                    82:fb:5c:5b:a7:fa:e1:a2:99:16:ad:fc:ed:0e:56:
                    cc:41:07:c0:58:3b:98:82:bc:00:e9:fe:f9:48:d2:
                    ed:47:fe:b3:6d:de:6e:1b:15:a0:63:33:7a:86:e4:
                    33:f2:fc:ea:b8:c4:b0:73:5a:d6:86:2f:34:fa:06:
                    fb:38:7c:5c:8e:ab:db:f2:1a:a9:4c:1b:08:16:46:
                    65:11:27:fa:11:5e:17:57:34:8b:96:1a:ad:5c:52:
                    58:ac:8c:26:7b:08:be:29:84:f8:57:b1:0c:bb:7b:
                    a3:c8:10:79:ad:bb:ea:68:11:b2:e7:33:8d:17:6c:
                    33:55:0e:e0:83:27:aa:09:2c:06:bb:9b:db:c0:8e:
                    ab:e6:b7:a5:06:3e:b9:44:db:72:32:38:58:d1:01:
                    15:6f:4e:c8:43:3d:d3:b9:8c:70:5b:e1:b8:8b:2c:
                    7a:8c:51:08:93:cc:ae:25:62:d3:e4:6a:59:1f:08:
                    bc:52:64:e1:84:a6:dd:d3:ff:17:9c:85:dd:39:25:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:53:B9:F3:41:3B:81:7F:C7:27:FB:63:F1:4E:0C:C4:12:7D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/7f6db503-4a91-3391-b10c-d6dbb663ada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.crl

            X509v3 Authority Key Identifier:
                keyid:6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.144.0/20
                  158.51.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:75:f3:93:63:26:c3:4d:df:d6:ca:e9:6d:a5:3b:fd:fe:
         a3:20:0e:84:89:39:d9:5c:f9:6a:56:37:89:07:52:0d:bf:72:
         72:99:04:21:b7:99:20:00:40:14:c0:f9:59:33:c5:08:00:8b:
         ce:f8:55:df:66:d5:4d:91:02:ca:a7:2d:fc:aa:d3:e8:7a:e6:
         93:94:28:09:4c:2b:4f:e1:59:ea:1c:5d:5c:fa:d3:77:95:3c:
         25:a1:48:9e:f2:02:5a:ff:e7:ea:a6:41:af:b5:25:b4:96:78:
         90:6b:8a:5b:16:2e:d9:c4:b8:75:9e:65:93:26:1a:b9:8d:72:
         b1:d5:7e:01:eb:2f:80:7a:13:ed:cb:86:57:bb:88:6c:72:c7:
         b7:7b:31:aa:92:b9:d0:7c:88:c5:36:fe:43:55:73:ec:b0:73:
         5c:b5:64:a5:59:db:1e:7c:e3:7f:9e:b4:92:be:de:b1:34:32:
         8f:de:85:3e:25:6b:dd:30:e6:b6:92:63:ad:d0:21:01:60:46:
         6d:b2:0c:4b:dc:83:7a:7d:bb:a9:41:8f:26:5f:c9:0d:42:ef:
         6f:ff:03:8f:27:60:57:48:93:e5:d1:b3:14:80:73:3b:fa:db:
         20:d8:a0:aa:e4:a4:c1:bc:5e:da:c8:ae:04:46:05:e2:4c:11:
         92:1b:64:9c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE04akYo3Y7zqEP+wiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE2YjNmY2MtMGExNS00OTlmLThhOTktZDk3ZjY4YTJm
NTQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
Y2NmZjBkMTItMjA3Ny00YWE1LTk2NDgtZGVkMWMwNGJmZDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKnCwvDCyTFgsZZvjlC/5DZZf4SHglj+MCU
qjBUC8M+z+x6kkijgGwa6meC+gWQOd8Cu7qptW5pLBuC+1xbp/rhopkWrfztDlbM
QQfAWDuYgrwA6f75SNLtR/6zbd5uGxWgYzN6huQz8vzquMSwc1rWhi80+gb7OHxc
jqvb8hqpTBsIFkZlESf6EV4XVzSLlhqtXFJYrIwmewi+KYT4V7EMu3ujyBB5rbvq
aBGy5zONF2wzVQ7ggyeqCSwGu5vbwI6r5relBj65RNtyMjhY0QEVb07IQz3TuYxw
W+G4iyx6jFEIk8yuJWLT5GpZHwi8UmThhKbd0/8XnIXdOSW08wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNTCU7nzQTuBf8cn+2PxTgzEEn14MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMTZi
M2ZjYy0wYTE1LTQ5OWYtOGE5OS1kOTdmNjhhMmY1NDMvN2Y2ZGI1MDMtNGE5MS0z
MzkxLWIxMGMtZDZkYmI2NjNhZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjE2YjNmY2MtMGExNS00OTlmLThh
OTktZDk3ZjY4YTJmNTQzL2IxNmIzZmNjLTBhMTUtNDk5Zi04YTk5LWQ5N2Y2OGEy
ZjU0My5jcmwwHwYDVR0jBBgwFoAUa6+G2DwQ2p+HJ0Ck7HA6OEWjIeMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMTZiM2ZjYy0wYTE1LTQ5OWYtOGE5OS1kOTdm
NjhhMmY1NDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEROmQAwQC
njMUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADHtdfOTYybDTd/WyultpTv9/qMgDoSJOdlc+WpWN4kHUg2/
cnKZBCG3mSAAQBTA+VkzxQgAi874Vd9m1U2RAsqnLfyq0+h65pOUKAlMK0/hWeoc
XVz603eVPCWhSJ7yAlr/5+qmQa+1JbSWeJBrilsWLtnEuHWeZZMmGrmNcrHVfgHr
L4B6E+3Lhle7iGxyx7d7MaqSudB8iMU2/kNVc+ywc1y1ZKVZ2x5843+etJK+3rE0
Mo/ehT4la90w5raSY63QIQFgRm2yDEvcg3p9u6lBjyZfyQ1C72//A48nYFdIk+XR
sxSAczv62yDYoKrkpMG8XtrIrgRGBeJMEZIbZJw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:12 2026 by rpki-client