Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa
File:                     6ce768b5-d60f-3189-83e9-957251f4b838.roa (raw, json)
Hash identifier:          BbXUDny1yBuURF1dcfIEdpbSVmehGgkCXfYbb00kj/Q=
Subject key identifier:   34:4E:74:2B:F1:06:51:FC:82:60:10:05:93:63:07:37:16:94:6E:DD
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584DBBA0511B85B1683E6B717800
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     399102
IP address blocks:        164.116.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:51:1b:85:b1:68:3e:6b:71:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=9b7b6d2e-d2e0-4caf-875e-3337d1d2133d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:08:33:81:7c:55:1d:24:97:ba:3e:87:58:
                    4c:89:a8:80:b6:d8:d3:c3:9d:b4:be:32:5b:c5:c3:
                    9b:59:c9:50:f3:04:83:40:32:bc:16:90:fc:41:92:
                    cf:bc:ab:4c:ae:ae:fb:ff:a0:e4:3e:78:ae:22:3a:
                    e5:b9:32:4f:12:5c:72:f9:11:77:77:89:6b:07:5d:
                    d2:26:0a:33:47:1e:ed:e6:64:92:5d:d3:22:35:bf:
                    f6:9a:92:9f:b4:45:3a:6d:5b:e3:43:ac:4a:41:51:
                    be:94:5c:79:8d:63:c2:1e:e5:37:a0:db:d9:71:5e:
                    d4:c9:65:f5:c1:26:46:25:b9:78:9f:ff:90:db:f4:
                    52:33:00:61:9e:77:91:ed:56:21:37:ad:83:e5:ce:
                    54:64:45:5d:eb:57:ca:58:7d:47:8b:ea:da:55:85:
                    81:59:45:7a:40:4a:47:be:9c:80:17:59:1f:aa:9c:
                    58:27:f5:68:59:8f:79:4e:38:90:3c:1e:10:d0:7c:
                    b8:c8:34:37:eb:a4:97:e7:42:1e:69:ed:77:43:15:
                    34:b1:2e:1a:d6:9e:7d:a5:1c:96:e2:f8:40:ea:4f:
                    e3:b4:f8:3c:9f:c3:81:48:ca:68:8a:c4:d1:d6:37:
                    95:fd:98:57:92:fd:5e:c5:8f:00:45:65:8a:03:5d:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:74:2B:F1:06:51:FC:82:60:10:05:93:63:07:37:16:94:6E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/6ce768b5-d60f-3189-83e9-957251f4b838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:04:7b:9e:35:59:aa:ea:f9:97:67:36:90:e4:c8:51:fa:55:
         04:8f:ef:38:df:f8:eb:47:1d:7d:33:89:5b:b9:9a:08:83:e1:
         01:fd:3d:46:1e:b3:41:74:88:d8:3c:77:b7:43:c1:81:b8:84:
         4b:22:ce:20:cd:5b:8e:ab:3b:8c:41:4f:7a:0a:1e:27:28:69:
         36:cf:89:68:63:37:04:9f:01:0a:01:ed:8e:c9:bc:ad:b1:c4:
         80:54:fe:fd:b6:19:5b:ac:a1:58:79:20:ec:04:29:c2:d8:92:
         e1:a9:bd:22:b1:2d:32:26:2e:a9:c6:f3:6b:d8:2c:01:52:1d:
         82:fd:59:d2:ef:a1:05:ea:fc:6e:0a:dc:c8:a0:b5:9d:ca:a8:
         19:36:2a:47:15:bb:69:db:46:24:2a:74:7a:26:c6:71:ce:13:
         87:26:71:59:84:e7:22:81:5d:a3:61:65:a9:ba:1f:2f:1c:ee:
         ad:49:af:30:5f:fe:df:43:47:92:5c:9d:20:03:cf:41:e8:fa:
         d4:91:e6:39:b0:26:9b:66:49:3f:06:0c:83:8d:a3:6d:f3:d3:
         43:30:e3:67:ee:54:ed:1c:a7:3f:ac:a3:1b:21:cd:58:f5:40:
         35:40:7f:e5:ee:bb:f5:74:f6:98:48:89:1d:27:80:4a:d1:f0:
         b4:b5:48:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFEbhbFoPmtxeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
OWI3YjZkMmUtZDJlMC00Y2FmLTg3NWUtMzMzN2QxZDIxMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBsIM4F8VR0kl7o+h1hMiaiAttjTw520vjJb
xcObWclQ8wSDQDK8FpD8QZLPvKtMrq77/6DkPniuIjrluTJPElxy+RF3d4lrB13S
JgozRx7t5mSSXdMiNb/2mpKftEU6bVvjQ6xKQVG+lFx5jWPCHuU3oNvZcV7UyWX1
wSZGJbl4n/+Q2/RSMwBhnneR7VYhN62D5c5UZEVd61fKWH1Hi+raVYWBWUV6QEpH
vpyAF1kfqpxYJ/VoWY95TjiQPB4Q0Hy4yDQ366SX50Ieae13QxU0sS4a1p59pRyW
4vhA6k/jtPg8n8OBSMpoisTR1jeV/ZhXkv1exY8ARWWKA13wVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDROdCvxBlH8gmAQBZNjBzcWlG7dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNmNlNzY4YjUtZDYwZi0z
MTg5LTgzZTktOTU3MjUxZjRiODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApHQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIEe541Warq+ZdnNpDkyFH6VQSP7zjf+OtHHX0ziVu5mgiD4QH9PUYe
s0F0iNg8d7dDwYG4hEsiziDNW46rO4xBT3oKHicoaTbPiWhjNwSfAQoB7Y7JvK2x
xIBU/v22GVusoVh5IOwEKcLYkuGpvSKxLTImLqnG82vYLAFSHYL9WdLvoQXq/G4K
3MigtZ3KqBk2KkcVu2nbRiQqdHomxnHOE4cmcVmE5yKBXaNhZam6Hy8c7q1JrzBf
/t9DR5JcnSADz0Ho+tSR5jmwJptmST8GDIONo23z00Mw42fuVO0cpz+soxshzVj1
QDVAf+Xuu/V09phIiR0ngErR8LS1SDg=
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:13 2026 by rpki-client