Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/f3b9ae0d-282f-3b15-a63f-caf892212fa2.roa
File:                     f3b9ae0d-282f-3b15-a63f-caf892212fa2.roa (raw, json)
Hash identifier:          XHaowe+s6gReFjQs3U2zXen9aXE60kJ3Z8g3BQnW4q4=
Subject key identifier:   37:8B:A2:3D:8F:8B:93:C5:01:24:CA:6E:FA:96:F3:2F:0D:BC:FD:6C
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584D44FA60F67E00FB2D1899DB80
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/f3b9ae0d-282f-3b15-a63f-caf892212fa2.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     32723
IP address blocks:        216.6.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:60:f6:7e:00:fb:2d:18:99:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=d383755a-8555-4ce8-8b36-3ddf582ee458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:35:50:c0:51:21:ea:39:d5:7a:71:a1:b0:
                    c1:7a:52:38:fc:15:39:96:88:29:b1:e4:b1:6e:9d:
                    e3:79:77:38:9d:e6:5f:b0:5c:94:17:a9:42:f6:f9:
                    85:ca:c3:7f:78:2b:fd:62:6d:ab:59:ec:69:ff:58:
                    0b:ba:63:43:7b:1c:58:85:f5:1e:72:45:43:b8:9f:
                    b3:ef:42:ec:d5:cf:c3:d9:96:c8:a4:be:16:68:8d:
                    2d:22:ef:dd:92:ea:66:0f:4c:48:9a:bd:ad:62:29:
                    04:58:62:07:2b:e3:82:d6:28:5a:a3:41:4f:b7:7b:
                    c7:d3:bf:f7:2a:8e:91:cd:72:03:4a:91:b7:b1:82:
                    2b:2f:e4:c3:89:c5:8b:50:c3:fa:5a:0d:9d:20:71:
                    f7:72:bf:6b:59:b1:5f:92:5d:39:bc:a9:5b:f3:f1:
                    2f:cd:28:81:2a:ff:b8:71:68:33:b4:14:3d:63:38:
                    9d:23:a4:17:de:1b:7a:cb:ec:02:9a:4e:2d:34:7b:
                    d0:66:0d:6c:20:88:dc:ad:31:11:19:15:20:63:c0:
                    32:6e:13:37:31:27:79:bb:76:1e:2a:6f:96:a8:17:
                    db:93:d9:d1:9e:95:27:c0:78:74:c2:45:78:5d:22:
                    66:10:3f:bc:e9:2e:5e:68:d7:bb:b4:6f:cc:49:df:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8B:A2:3D:8F:8B:93:C5:01:24:CA:6E:FA:96:F3:2F:0D:BC:FD:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/f3b9ae0d-282f-3b15-a63f-caf892212fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:b1:55:98:b9:97:18:61:a3:bd:ec:52:9e:e5:f7:fa:24:
         27:b7:5c:c3:e3:1e:21:3b:4a:7d:ca:ca:7c:26:0b:a2:a0:45:
         32:95:44:94:8e:3e:85:e5:fc:7f:c7:6f:fd:f5:5e:02:1d:10:
         61:cb:b4:65:8e:2f:8e:fe:78:42:1c:4e:15:70:bc:5b:ee:fc:
         5e:be:f4:81:be:04:d8:58:0c:76:a0:e2:0d:a7:ba:45:d9:c5:
         95:9e:fe:2e:1f:a8:bd:53:0e:67:0c:c9:c5:18:09:9f:90:23:
         fa:50:ef:9a:03:45:a0:1b:81:de:55:0a:b4:11:1c:f1:9b:c6:
         01:7d:7c:4f:3f:9c:2f:02:a6:96:1e:8d:cb:43:8d:0a:7e:98:
         6e:73:99:f3:29:21:aa:ea:b0:b0:35:ea:5e:51:c9:17:98:b3:
         fd:02:27:5b:26:73:76:f9:ca:9e:37:dd:e9:0c:df:02:d4:0e:
         d4:88:a2:2e:86:d9:8d:00:bd:78:1b:b5:20:2a:dd:83:65:05:
         55:f7:6a:bc:10:e6:c5:26:cb:9d:2c:15:5c:95:63:dc:9b:7a:
         4e:b0:4e:3f:2d:69:55:ca:f5:52:b5:01:c0:2d:6c:e0:20:a6:
         a2:60:e4:79:5b:7c:55:2e:45:39:7d:0f:f8:38:6c:34:26:6e:
         a5:53:d3:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mD2fgD7LRiZ24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw
MDEyMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
ZDM4Mzc1NWEtODU1NS00Y2U4LThiMzYtM2RkZjU4MmVlNDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P01UMBRIeo51XpxobDBelI4/BU5logpseSx
bp3jeXc4neZfsFyUF6lC9vmFysN/eCv9Ym2rWexp/1gLumNDexxYhfUeckVDuJ+z
70Ls1c/D2ZbIpL4WaI0tIu/dkupmD0xImr2tYikEWGIHK+OC1ihao0FPt3vH07/3
Ko6RzXIDSpG3sYIrL+TDicWLUMP6Wg2dIHH3cr9rWbFfkl05vKlb8/EvzSiBKv+4
cWgztBQ9YzidI6QX3ht6y+wCmk4tNHvQZg1sIIjcrTERGRUgY8AybhM3MSd5u3Ye
Km+WqBfbk9nRnpUnwHh0wkV4XSJmED+86S5eaNe7tG/MSd9YZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeLoj2Pi5PFASTKbvqW8y8NvP1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1
MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvZjNiOWFlMGQtMjgyZi0z
YjE1LWE2M2YtY2FmODkyMjEyZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm
NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh
MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx
NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2AasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa4sVWYuZcYYaO97FKe5ff6JCe3XMPjHiE7Sn3KynwmC6KgRTKVRJSO
PoXl/H/Hb/31XgIdEGHLtGWOL47+eEIcThVwvFvu/F6+9IG+BNhYDHag4g2nukXZ
xZWe/i4fqL1TDmcMycUYCZ+QI/pQ75oDRaAbgd5VCrQRHPGbxgF9fE8/nC8CppYe
jctDjQp+mG5zmfMpIarqsLA16l5RyReYs/0CJ1smc3b5yp433ekM3wLUDtSIoi6G
2Y0AvXgbtSAq3YNlBVX3arwQ5sUmy50sFVyVY9ybek6wTj8taVXK9VK1AcAtbOAg
pqJg5HlbfFUuRTl9D/g4bDQmbqVT07g=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:35 2026 by rpki-client