Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02fb8c17-1028-379b-9c98-38dc6cfa2e31.roa
File:                     02fb8c17-1028-379b-9c98-38dc6cfa2e31.roa (raw, json)
Hash identifier:          r/0qxtiNSFXJaGvakIMFuc2Ic0w/HVV4bnRmulbcgT4=
Subject key identifier:   C3:44:CE:39:49:64:F2:C8:4D:13:A8:95:4F:B4:7C:80:2D:F4:4F:46
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDA8490C20D21CB8D7780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02fb8c17-1028-379b-9c98-38dc6cfa2e31.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        192.171.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:84:90:c2:0d:21:cb:8d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=824ebcf4-2e84-4c58-95f9-f14e5657ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c6:32:d9:35:d3:9f:5c:a6:49:7d:1e:4b:3a:
                    b7:40:31:64:bb:e5:96:3c:ac:44:ea:b2:6c:e2:c2:
                    f7:e3:78:f3:b9:67:52:21:2b:ad:87:8c:00:f6:d1:
                    aa:6f:9d:ee:81:eb:fe:a1:e5:55:3b:9f:c9:9e:38:
                    a4:f6:14:2a:bd:14:dc:b9:ba:1b:75:01:a6:a6:26:
                    33:af:3c:e0:00:bd:46:b7:d8:b2:d5:73:cc:3c:b2:
                    b4:51:f4:0b:c2:cf:32:97:aa:56:61:ed:b3:b8:d3:
                    65:e7:8e:3e:e2:ab:ad:c0:b9:bc:90:2b:7d:e1:98:
                    3c:0b:91:eb:5d:76:46:c0:e3:be:b9:8b:49:97:2d:
                    2f:2e:2e:92:eb:a3:ae:03:cd:0f:1f:4d:97:e7:70:
                    00:f3:b8:32:42:86:a7:80:de:9c:ba:05:80:10:0c:
                    28:b5:cd:72:c8:57:cf:5a:65:14:58:36:06:d0:73:
                    2c:6c:88:9b:72:a2:dd:d1:07:fe:c6:c7:15:ed:f5:
                    14:2f:06:64:89:42:23:ce:9f:8a:ef:d6:c1:68:75:
                    5a:0f:77:d6:0f:07:d3:41:d0:19:7b:21:e3:a3:3f:
                    7c:b5:94:de:b7:fd:4c:54:47:f4:ec:e5:75:c1:45:
                    40:51:b5:dc:bd:b7:a3:8d:fb:f8:1e:66:65:34:bf:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:44:CE:39:49:64:F2:C8:4D:13:A8:95:4F:B4:7C:80:2D:F4:4F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02fb8c17-1028-379b-9c98-38dc6cfa2e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:70:22:86:1d:48:16:0e:66:bb:9a:6d:6d:17:08:dc:14:ad:
         68:0b:c1:8a:6e:bc:cd:b7:5e:58:68:52:a1:72:32:82:3a:a3:
         55:47:07:8a:65:c4:01:6d:5f:f6:4f:6a:09:58:e2:55:79:3c:
         a9:bc:7a:ec:e4:61:8a:1b:ba:c7:de:b2:92:6c:a5:68:9c:cb:
         4d:2c:59:1a:52:b0:e5:e4:3e:fe:08:09:96:a3:a8:2c:49:08:
         3a:85:93:2b:0b:92:34:f1:95:fd:b5:8c:2d:0e:12:19:a9:06:
         e2:f9:57:8d:ca:c7:b9:50:bb:90:9b:3d:46:45:3e:22:35:06:
         7c:e3:ee:f0:5f:05:08:fc:16:89:db:5c:77:39:55:dc:af:80:
         9a:9b:74:3b:6c:ca:c4:d9:6a:67:bc:bc:0e:ad:a9:1d:b6:14:
         62:28:83:04:0f:48:0f:48:9d:e8:2f:92:ca:da:83:71:2e:59:
         ab:2c:91:b6:99:0a:db:62:74:c4:d7:ed:a0:62:5a:94:6f:22:
         c3:2f:c0:15:64:02:d5:f5:dd:c4:94:03:d2:52:14:a2:06:ff:
         a5:cd:5e:af:9f:88:66:c1:0d:25:d2:27:36:ef:db:7a:49:d7:
         53:d0:1f:dc:46:cb:8c:aa:4a:bc:01:9f:20:aa:bb:71:d3:88:
         08:18:ad:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9qEkMINIcuNd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ODI0ZWJjZjQtMmU4NC00YzU4LTk1ZjktZjE0ZTU2NTdjYTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Yy2TXTn1ymSX0eSzq3QDFku+WWPKxE6rJs
4sL343jzuWdSISuth4wA9tGqb53ugev+oeVVO5/Jnjik9hQqvRTcubobdQGmpiYz
rzzgAL1Gt9iy1XPMPLK0UfQLws8yl6pWYe2zuNNl544+4qutwLm8kCt94Zg8C5Hr
XXZGwOO+uYtJly0vLi6S66OuA80PH02X53AA87gyQoangN6cugWAEAwotc1yyFfP
WmUUWDYG0HMsbIibcqLd0Qf+xscV7fUULwZkiUIjzp+K79bBaHVaD3fWDwfTQdAZ
eyHjoz98tZTet/1MVEf07OV1wUVAUbXcvbejjfv4HmZlNL/dtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNEzjlJZPLITROolU+0fIAt9E9GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDJmYjhjMTctMTAyOC0z
NzliLTljOTgtMzhkYzZjZmEyZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhwIoYdSBYOZruabW0XCNwUrWgLwYpuvM23XlhoUqFyMoI6o1VHB4pl
xAFtX/ZPaglY4lV5PKm8euzkYYobusfespJspWicy00sWRpSsOXkPv4ICZajqCxJ
CDqFkysLkjTxlf21jC0OEhmpBuL5V43Kx7lQu5CbPUZFPiI1Bnzj7vBfBQj8Fonb
XHc5VdyvgJqbdDtsysTZame8vA6tqR22FGIogwQPSA9Inegvksrag3EuWasskbaZ
CttidMTX7aBiWpRvIsMvwBVkAtX13cSUA9JSFKIG/6XNXq+fiGbBDSXSJzbv23pJ
11PQH9xGy4yqSrwBnyCqu3HTiAgYrZY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:37 2026 by rpki-client