Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
File:                     0a8fc802-9e58-3fa1-be39-940fa9664733.roa (raw, json)
Hash identifier:          B+z3hnUJxz6X861mGMPpxA8BiSdhR5ys8keaF4K4FtE=
Subject key identifier:   CC:1F:6B:5B:26:B4:49:A3:62:77:31:28:18:37:A9:14:92:D3:C9:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB288572E84769C458AF50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        24.160.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:28:85:72:e8:47:69:c4:58:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1516f47d-63b5-4d87-b088-9b2c79a99be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:69:9c:ff:8a:39:9c:2f:78:15:f0:c9:27:
                    8c:af:79:86:c0:a8:77:68:38:32:96:32:0b:19:73:
                    72:5e:64:74:c6:4e:08:91:ee:1d:93:62:3d:48:62:
                    cc:3c:27:e4:ec:fd:83:3a:08:57:e5:56:c6:16:31:
                    d3:af:af:54:c3:99:c3:4d:8f:a7:14:33:7c:33:38:
                    bf:36:12:30:db:d9:bd:6d:d9:e7:ad:20:e2:db:f8:
                    9b:56:53:15:42:bb:dc:2e:4d:94:1e:0c:9f:d7:b5:
                    f8:36:d8:08:79:ea:3a:13:41:98:78:d5:bf:b0:78:
                    cb:06:8b:36:44:07:be:1a:68:12:3c:bd:19:a3:58:
                    76:24:68:01:dc:b4:d6:da:d6:c2:94:37:61:d8:1d:
                    10:17:1e:02:02:6f:08:c5:07:e4:df:46:70:42:13:
                    39:e9:3a:7b:0a:71:e1:d2:52:48:bf:78:81:e4:08:
                    9a:44:03:6d:b3:5e:9a:f5:5d:a3:8b:fa:86:79:7e:
                    57:7b:1d:31:df:d5:2a:df:04:6c:ad:3c:d8:58:47:
                    7b:9a:a7:78:e3:75:23:0e:3e:18:8c:97:f9:57:8f:
                    43:20:40:54:b4:7c:b5:32:2b:4a:db:5b:1a:7f:09:
                    87:2f:86:f2:b9:a7:86:bf:c0:08:15:5d:26:3b:02:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:6B:5B:26:B4:49:A3:62:77:31:28:18:37:A9:14:92:D3:C9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:99:68:d1:83:24:d3:14:53:d2:a5:e7:df:b8:90:ad:79:09:
         bf:1e:8d:87:a0:e4:8f:4a:6e:a5:52:51:00:37:9d:b9:db:66:
         93:f5:f9:38:ea:1a:cf:8b:01:0b:32:a2:28:cf:7f:a1:28:3d:
         dd:7e:e3:a2:d6:79:cf:50:6c:e1:7c:e3:e9:78:32:f3:8d:ad:
         cf:04:e3:4c:88:42:b6:e1:a8:6f:51:12:b0:bc:93:f5:15:94:
         28:3d:93:4d:a7:cd:fc:14:19:53:51:34:15:ed:84:9d:ac:e4:
         9e:84:db:50:2c:df:11:3b:a1:f5:b1:f8:eb:5e:3b:c4:42:25:
         e3:a7:41:16:42:67:b5:27:ee:b7:ec:ac:b3:e6:69:e3:d7:f7:
         c6:14:13:0c:dd:d6:23:58:03:51:42:c5:b1:ec:00:46:53:46:
         be:19:58:5f:f1:66:15:95:e3:5d:0d:71:6a:62:b5:0c:d0:f8:
         a1:b7:db:91:9b:51:ac:c4:62:28:b6:80:44:0e:5d:e0:7e:e1:
         74:25:86:6c:08:63:e6:94:00:d6:e4:ee:40:83:69:fd:6c:62:
         01:49:23:45:44:07:40:70:e5:fc:19:3e:0b:87:35:3d:96:45:
         70:ec:29:b7:75:f5:51:8c:3b:64:da:c3:12:7a:76:77:b5:7e:
         4c:1c:a7:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyyiFcuhHacRYr1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MTUxNmY0N2QtNjNiNS00ZDg3LWIwODgtOWIyYzc5YTk5YmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwhpnP+KOZwveBXwySeMr3mGwKh3aDgyljIL
GXNyXmR0xk4Ike4dk2I9SGLMPCfk7P2DOghX5VbGFjHTr69Uw5nDTY+nFDN8Mzi/
NhIw29m9bdnnrSDi2/ibVlMVQrvcLk2UHgyf17X4NtgIeeo6E0GYeNW/sHjLBos2
RAe+GmgSPL0Zo1h2JGgB3LTW2tbClDdh2B0QFx4CAm8IxQfk30ZwQhM56Tp7CnHh
0lJIv3iB5AiaRANts16a9V2ji/qGeX5Xex0x39Uq3wRsrTzYWEd7mqd443UjDj4Y
jJf5V49DIEBUtHy1MitK21safwmHL4byuaeGv8AIFV0mOwIClQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwfa1smtEmjYncxKBg3qRSS08n1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGE4ZmM4MDItOWU1OC0z
ZmExLWJlMzktOTQwZmE5NjY0NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKZaNGDJNMUU9Kl59+4kK15Cb8ejYeg5I9KbqVSUQA3nbnbZpP1+Tjq
Gs+LAQsyoijPf6EoPd1+46LWec9QbOF84+l4MvONrc8E40yIQrbhqG9RErC8k/UV
lCg9k02nzfwUGVNRNBXthJ2s5J6E21As3xE7ofWx+OteO8RCJeOnQRZCZ7Un7rfs
rLPmaePX98YUEwzd1iNYA1FCxbHsAEZTRr4ZWF/xZhWV410NcWpitQzQ+KG325Gb
UazEYii2gEQOXeB+4XQlhmwIY+aUANbk7kCDaf1sYgFJI0VEB0Bw5fwZPguHNT2W
RXDsKbd19VGMO2TawxJ6dne1fkwcpwA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:54 2026 by rpki-client