Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2717cf30-6464-39fa-9b78-5f9c2343bab4.roa
File:                     2717cf30-6464-39fa-9b78-5f9c2343bab4.roa (raw, json)
Hash identifier:          aCLQBPprsT7bTZr2VgHwdOQ0Df/Yy5sx0sUbceKX4e8=
Subject key identifier:   A2:36:BA:97:60:5B:39:D8:C7:7A:DF:9B:43:1E:39:73:73:63:01:DC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DCC6059ADB211996510BBD900
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2717cf30-6464-39fa-9b78-5f9c2343bab4.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        216.171.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:59:ad:b2:11:99:65:10:bb:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=1e62378d-e15b-4288-ac01-b3c1ae619f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:07:bd:19:a4:fc:77:3d:f2:7f:d3:20:09:
                    94:99:9c:ed:79:e3:c1:78:1b:fc:fc:a3:c7:a3:5f:
                    15:9b:e2:87:6a:de:44:83:91:a1:64:52:8d:ea:c2:
                    34:e5:1f:53:10:03:07:6f:fd:77:8e:32:5b:36:be:
                    a5:4f:f5:28:07:4f:08:e2:25:be:59:27:e7:91:1d:
                    00:c3:24:31:70:e5:a9:69:19:49:23:96:9f:2a:b5:
                    7d:ff:18:88:bd:b8:a5:65:09:8e:05:5f:7e:f7:b3:
                    68:e6:0a:cf:3a:9b:a0:47:1b:56:a6:e1:89:dc:d9:
                    f2:ee:e0:1b:25:ea:df:c6:bc:c4:6d:12:ae:49:ad:
                    43:70:05:04:0b:db:6e:5e:70:f6:8a:ae:b6:78:34:
                    d2:00:04:3a:74:e6:65:92:86:d4:f7:4e:bc:e2:2d:
                    c8:bc:79:fa:da:30:ce:27:44:43:03:a5:7b:5d:31:
                    e3:39:e5:02:68:91:03:e8:86:8a:73:fd:7b:7c:e9:
                    d0:d1:80:df:21:f3:7b:75:e1:45:aa:8d:ad:77:f7:
                    8d:3f:5c:fa:69:8a:bb:1d:bc:a1:a8:67:2d:00:ab:
                    77:53:d2:e9:fd:56:04:af:ca:86:f3:97:df:a2:0f:
                    8a:51:31:b7:02:26:c1:35:0d:cf:ff:de:11:4a:bb:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:BA:97:60:5B:39:D8:C7:7A:DF:9B:43:1E:39:73:73:63:01:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2717cf30-6464-39fa-9b78-5f9c2343bab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:34:13:27:78:e6:21:59:33:25:5a:2a:0e:8c:13:27:d4:76:
         e1:44:67:62:22:51:bf:cd:10:1c:67:42:76:6f:35:38:43:7c:
         3f:10:8a:8b:ab:db:ef:d3:f4:2e:8d:e4:05:12:49:a1:88:b9:
         a4:54:79:85:f0:7f:ae:83:71:1d:52:d2:f8:5d:4c:a3:36:f1:
         47:ee:e1:f1:ea:2f:7d:61:47:79:95:c4:36:7a:6e:2c:95:0b:
         40:a0:dd:f8:f6:2e:e7:db:21:8d:58:9f:14:66:f0:f8:45:17:
         06:88:c0:f9:a2:ba:24:e9:a5:cf:88:24:4d:67:2f:95:ff:17:
         0c:07:34:ed:fa:7f:46:cd:b8:fe:be:43:56:cf:b2:c4:72:74:
         f7:61:04:b6:be:09:e4:6c:aa:d7:d6:59:f3:40:0a:11:da:9c:
         33:40:14:84:15:35:ee:6b:d6:47:fb:a3:1b:49:b2:41:83:17:
         0a:a5:9a:e9:f6:a5:d0:e4:81:55:43:49:11:2a:81:fe:55:2a:
         5c:a2:3c:3f:91:a9:3e:db:c6:bc:a2:63:a0:d9:9c:fe:1c:74:
         3a:2b:bf:95:4e:8a:bf:a4:d8:d5:15:c9:b9:5f:9e:6b:a1:1a:
         b4:db:52:52:d7:ea:04:94:9a:5c:fc:93:3d:86:74:b6:d0:96:
         ac:f5:87:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYFmtshGZZRC72QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MWU2MjM3OGQtZTE1Yi00Mjg4LWFjMDEtYjNjMWFlNjE5ZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEUHvRmk/Hc98n/TIAmUmZzteePBeBv8/KPH
o18Vm+KHat5Eg5GhZFKN6sI05R9TEAMHb/13jjJbNr6lT/UoB08I4iW+WSfnkR0A
wyQxcOWpaRlJI5afKrV9/xiIvbilZQmOBV9+97No5grPOpugRxtWpuGJ3Nny7uAb
JerfxrzEbRKuSa1DcAUEC9tuXnD2iq62eDTSAAQ6dOZlkobU90684i3IvHn62jDO
J0RDA6V7XTHjOeUCaJED6IaKc/17fOnQ0YDfIfN7deFFqo2td/eNP1z6aYq7Hbyh
qGctAKt3U9Lp/VYEr8qG85ffog+KUTG3AibBNQ3P/94RSrvUbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKI2updgWznYx3rfm0MeOXNzYwHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjcxN2NmMzAtNjQ2NC0z
OWZhLTliNzgtNWY5YzIzNDNiYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU0Eyd45iFZMyVaKg6MEyfUduFEZ2IiUb/NEBxnQnZvNThDfD8Qiour
2+/T9C6N5AUSSaGIuaRUeYXwf66DcR1S0vhdTKM28Ufu4fHqL31hR3mVxDZ6biyV
C0Cg3fj2LufbIY1YnxRm8PhFFwaIwPmiuiTppc+IJE1nL5X/FwwHNO36f0bNuP6+
Q1bPssRydPdhBLa+CeRsqtfWWfNAChHanDNAFIQVNe5r1kf7oxtJskGDFwqlmun2
pdDkgVVDSREqgf5VKlyiPD+RqT7bxryiY6DZnP4cdDorv5VOir+k2NUVyblfnmuh
GrTbUlLX6gSUmlz8kz2GdLbQlqz1h3A=
-----END CERTIFICATE-----
Generated at Wed May 13 09:32:39 2026 by rpki-client