Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a20596b9-1925-3a94-b7b7-fc8191d2d1df.roa
File:                     a20596b9-1925-3a94-b7b7-fc8191d2d1df.roa (raw, json)
Hash identifier:          /ZgQNmxq5bA7Qmp71qkQAHbNcV4FDHTZT/0DQE5snHA=
Subject key identifier:   06:D4:B8:FD:60:E2:C6:F6:4D:57:17:76:BE:39:FA:1C:77:20:42:18
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D386A44BE3A1B5A0B9C14BB00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a20596b9-1925-3a94-b7b7-fc8191d2d1df.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     64267
IP address blocks:        168.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:44:be:3a:1b:5a:0b:9c:14:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=b7245101-a0b8-4e32-8cfa-5896df3a1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:a9:e7:78:a8:bb:ed:50:69:d3:fa:f1:93:
                    71:53:68:7c:60:37:52:8b:51:3d:ca:6b:8a:7c:bc:
                    eb:9f:9c:8a:30:47:19:5d:2c:ba:cb:33:ce:0a:95:
                    ec:ee:56:94:2f:ad:72:bc:ad:f9:eb:7c:7d:f8:08:
                    48:b9:e8:92:c0:8a:06:e6:48:3c:7b:69:b9:4b:8d:
                    aa:c9:05:8b:7a:1e:51:b6:bc:c8:a6:33:72:99:ef:
                    d8:d9:96:ad:48:2f:28:6a:e0:ab:3f:b3:d6:89:b2:
                    dd:16:20:87:c7:7b:fc:fb:94:50:e5:78:76:06:18:
                    73:5b:59:9b:6f:5e:9b:c3:9b:fc:39:ab:76:d0:a1:
                    94:e2:2d:48:e7:6e:59:f5:08:35:9d:fa:fe:fe:8e:
                    1e:87:82:2e:ed:91:00:e9:ef:1b:56:b9:31:5e:de:
                    d8:e0:b8:c9:82:03:a1:45:3b:72:1b:ad:13:0d:5d:
                    c4:f0:d2:8b:19:7f:5a:aa:e4:4c:bf:44:b8:7c:fe:
                    6d:1b:b7:25:d0:03:34:f3:63:f8:6d:21:ec:17:6e:
                    90:b7:40:b2:b2:f2:53:02:02:07:66:04:f9:ee:81:
                    fc:52:be:14:59:73:9e:60:13:c2:ae:1f:5a:8e:27:
                    12:1d:0b:53:d3:dc:39:84:02:cf:c9:2f:a7:b1:51:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D4:B8:FD:60:E2:C6:F6:4D:57:17:76:BE:39:FA:1C:77:20:42:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a20596b9-1925-3a94-b7b7-fc8191d2d1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:40:94:4a:c9:1a:b7:76:5f:e8:66:52:55:86:26:f5:a3:8f:
         d8:9d:b5:58:5c:c5:f4:4b:b6:38:1d:ac:38:cb:cb:86:35:06:
         d2:8a:1f:fd:ac:ce:81:0e:3f:ec:87:11:12:bb:94:bb:a1:54:
         be:4e:01:b1:be:b6:e7:d8:f3:5c:ab:8d:1a:77:a3:73:28:c0:
         18:02:b2:af:fd:4d:9c:c0:cd:1d:3e:49:92:10:fa:07:6d:ee:
         2a:97:11:7c:9c:cd:ac:8a:81:fc:8f:30:3a:e7:ab:b3:5b:c6:
         2c:3d:03:2d:22:cc:65:4b:b9:a4:64:46:98:79:52:44:0b:76:
         8f:3c:59:91:c1:7c:f7:af:a7:25:96:7d:df:15:ff:a7:f5:6d:
         d3:79:a4:73:c7:e0:ca:c9:f0:84:d8:0d:60:8a:6f:27:84:76:
         55:b9:68:85:bc:4b:5d:c0:df:49:6e:61:af:07:f9:dd:e5:2f:
         c0:1a:e6:60:20:17:8b:1b:5d:1a:66:c0:71:3e:de:b8:a2:84:
         c2:76:60:39:8e:b7:be:1f:6f:ff:77:2c:61:79:99:c9:77:36:
         24:3a:bd:ce:85:1c:a8:1b:8e:d5:71:20:51:4d:70:27:58:aa:
         66:3e:82:eb:34:70:70:38:30:5c:7f:25:6d:0e:9f:b1:d3:f4:
         6d:69:90:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akS+OhtaC5wUuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
YjcyNDUxMDEtYTBiOC00ZTMyLThjZmEtNTg5NmRmM2ExYTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uGp53iou+1QadP68ZNxU2h8YDdSi1E9ymuK
fLzrn5yKMEcZXSy6yzPOCpXs7laUL61yvK3563x9+AhIueiSwIoG5kg8e2m5S42q
yQWLeh5RtrzIpjNyme/Y2ZatSC8oauCrP7PWibLdFiCHx3v8+5RQ5Xh2BhhzW1mb
b16bw5v8Oat20KGU4i1I525Z9Qg1nfr+/o4eh4Iu7ZEA6e8bVrkxXt7Y4LjJggOh
RTtyG60TDV3E8NKLGX9aquRMv0S4fP5tG7cl0AM082P4bSHsF26Qt0CysvJTAgIH
ZgT57oH8Ur4UWXOeYBPCrh9ajicSHQtT09w5hALPyS+nsVFbKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbUuP1g4sb2TVcXdr45+hx3IEIYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTIwNTk2YjktMTkyNS0z
YTk0LWI3YjctZmM4MTkxZDJkMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFslMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANxAlErJGrd2X+hmUlWGJvWjj9idtVhcxfRLtjgdrDjLy4Y1BtKKH/2s
zoEOP+yHERK7lLuhVL5OAbG+tufY81yrjRp3o3MowBgCsq/9TZzAzR0+SZIQ+gdt
7iqXEXyczayKgfyPMDrnq7Nbxiw9Ay0izGVLuaRkRph5UkQLdo88WZHBfPevpyWW
fd8V/6f1bdN5pHPH4MrJ8ITYDWCKbyeEdlW5aIW8S13A30luYa8H+d3lL8Aa5mAg
F4sbXRpmwHE+3riihMJ2YDmOt74fb/93LGF5mcl3NiQ6vc6FHKgbjtVxIFFNcCdY
qmY+gus0cHA4MFx/JW0On7HT9G1pkJ4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:24 2026 by rpki-client