Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
File:                     d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa (raw, json)
Hash identifier:          j2+b5U60jyv6SWVKhJChB2OFoBPLPi1WuAdGH37uCXM=
Subject key identifier:   6B:EF:5C:DC:4F:8A:2E:87:9E:24:A5:1C:EE:82:7B:B9:6A:8F:6A:BC
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F4328584D9E5018013F861D0E79855300
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        216.59.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:18:01:3f:86:1d:0e:79:85:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=ffffd39f-018f-4e8f-8ec3-f6a65c798525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:b9:7b:cd:3f:8d:c0:f5:fa:c8:c0:20:9e:
                    af:a4:a9:94:d2:d8:e2:97:e8:5e:ca:c9:e0:f9:fc:
                    3e:49:66:4b:d1:9c:50:1b:c1:ee:e1:a0:31:f3:09:
                    99:d2:58:5d:52:db:7e:30:65:4a:09:ec:96:0f:1f:
                    bf:67:c8:0f:09:72:7d:27:06:31:8d:2d:d8:91:5f:
                    e5:1f:61:1f:04:dd:02:4d:76:91:b9:20:38:89:af:
                    99:0c:c5:b4:31:fc:f9:3c:2c:85:f6:34:13:58:a5:
                    6f:7d:41:77:bb:3d:e7:f6:ad:c4:aa:27:e4:3f:72:
                    ba:1a:e3:12:3c:00:61:27:5c:a5:85:40:68:c8:3d:
                    68:2d:ff:c7:fa:7d:e1:36:02:0d:1a:ea:f6:d0:f0:
                    3c:35:f5:07:32:35:f9:8d:e2:55:fe:9c:ad:09:07:
                    04:02:76:b9:21:a5:53:fb:86:ea:a9:e4:7d:32:ba:
                    1d:be:2c:20:6c:1e:ff:15:d9:df:05:8b:66:99:26:
                    6b:01:40:b9:da:c8:de:0f:6f:3e:39:08:de:a2:86:
                    49:c2:95:43:be:a7:f3:57:f5:0e:4e:50:4c:f8:f6:
                    24:62:7e:de:10:2f:0b:8a:79:ae:be:65:52:43:34:
                    c5:f0:1c:dc:57:60:98:0e:63:07:01:20:e9:a4:f6:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:5C:DC:4F:8A:2E:87:9E:24:A5:1C:EE:82:7B:B9:6A:8F:6A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:e6:3a:a9:d5:0b:61:c2:f3:33:fa:6b:53:c1:2b:7f:d0:
         cf:8c:24:ac:43:0c:c3:58:a3:b7:ba:8a:81:31:e0:15:97:5c:
         26:ce:80:00:32:f7:e6:f0:01:10:e0:2e:1f:c3:9d:0a:63:2c:
         43:f9:2d:f0:c3:40:19:5c:39:7a:68:ba:82:ea:3d:28:9e:88:
         06:0b:39:98:71:af:c8:41:fd:df:a8:84:a1:9e:f2:f5:64:39:
         be:ff:04:fa:98:d3:98:3e:14:2e:fa:4e:12:dc:66:52:9c:72:
         12:6c:d4:c3:49:35:a5:fa:26:27:74:ef:7d:1d:03:19:0c:81:
         77:7a:92:21:65:7a:b4:a1:32:08:6e:09:09:be:f9:30:a4:fc:
         7e:35:0e:3d:ad:72:3b:43:43:c0:a2:81:d8:df:0b:45:f9:f8:
         ac:bc:03:0b:7e:55:5e:6a:3a:3c:82:f3:71:52:c5:35:70:7a:
         c6:f3:ed:3c:68:14:d1:e5:03:33:2f:ed:a8:dc:69:49:83:7a:
         83:7c:36:44:2f:0b:78:89:60:34:b3:f2:d1:9d:38:7e:cb:0a:
         d3:db:37:80:ab:7b:dd:56:92:26:89:99:12:28:ae:42:0f:b3:
         36:98:ce:f1:ab:a7:a6:f1:87:9d:37:df:04:89:c3:c7:85:5e:
         34:1b:65:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBgBP4YdDnmFUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4
Y2E2MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZmZmZmQzOWYtMDE4Zi00ZThmLThlYzMtZjZhNjVjNzk4NTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz65e80/jcD1+sjAIJ6vpKmU0tjil+heysng
+fw+SWZL0ZxQG8Hu4aAx8wmZ0lhdUtt+MGVKCeyWDx+/Z8gPCXJ9JwYxjS3YkV/l
H2EfBN0CTXaRuSA4ia+ZDMW0Mfz5PCyF9jQTWKVvfUF3uz3n9q3EqifkP3K6GuMS
PABhJ1ylhUBoyD1oLf/H+n3hNgINGur20PA8NfUHMjX5jeJV/pytCQcEAna5IaVT
+4bqqeR9MrodviwgbB7/FdnfBYtmmSZrAUC52sjeD28+OQjeooZJwpVDvqfzV/UO
TlBM+PYkYn7eEC8LinmuvmVSQzTF8BzcV2CYDmMHASDppPZpswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvvXNxPii6HniSlHO6Ce7lqj2q8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy
MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvZDE4NzEyZDctMWMzYi0z
NGQ0LTljMDUtM2FjZDg2M2YwNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2
MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx
OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1
NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2DuQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4W5jqp1QthwvMz+mtTwSt/0M+MJKxDDMNYo7e6ioEx4BWXXCbOgAAy
9+bwARDgLh/DnQpjLEP5LfDDQBlcOXpouoLqPSieiAYLOZhxr8hB/d+ohKGe8vVk
Ob7/BPqY05g+FC76ThLcZlKcchJs1MNJNaX6Jid0730dAxkMgXd6kiFlerShMghu
CQm++TCk/H41Dj2tcjtDQ8CigdjfC0X5+Ky8Awt+VV5qOjyC83FSxTVwesbz7Txo
FNHlAzMv7ajcaUmDeoN8NkQvC3iJYDSz8tGdOH7LCtPbN4Cre91WkiaJmRIorkIP
szaYzvGrp6bxh5033wSJw8eFXjQbZWY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:34:34 2026 by rpki-client