Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47ed8797-e1f8-3a88-b325-a08e7513c730.roa
File:                     47ed8797-e1f8-3a88-b325-a08e7513c730.roa (raw, json)
Hash identifier:          wZl+9xhO2u7FPpFAzUHsY8fV2dWGXmCI3SzF7x+AA9c=
Subject key identifier:   26:CA:83:76:F1:37:DC:8B:BE:21:4A:69:EE:9A:9C:36:12:A1:18:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A74290EB52045047E5F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47ed8797-e1f8-3a88-b325-a08e7513c730.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        107.167.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:74:29:0e:b5:20:45:04:7e:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=eb705098-afbf-488e-8405-54da81032bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:3e:b2:b2:e7:68:e2:50:de:d1:03:90:7f:
                    f9:59:f2:81:03:5c:7d:a7:5b:aa:f6:ba:05:19:04:
                    89:08:3b:18:b3:2f:1d:97:18:4d:7d:9b:61:a7:2a:
                    db:d5:0c:7d:70:2a:c2:4e:29:3d:16:15:2a:79:a4:
                    77:74:6c:bf:14:8a:d6:b6:7b:4b:1f:76:ba:23:19:
                    00:6f:b1:47:ec:b8:26:ef:67:27:6a:ee:ae:fb:82:
                    4d:9c:72:b0:4b:fd:4d:d9:08:e4:e7:bc:53:c7:e9:
                    d5:c0:68:5a:13:01:86:81:5a:0b:9d:d8:41:84:0c:
                    53:be:a9:94:d6:78:dd:84:e2:9c:4c:8a:06:b3:ff:
                    b2:b5:d9:8b:e7:a6:aa:ae:dc:73:83:f4:43:19:75:
                    74:7a:b8:b1:89:f9:69:9f:d0:2d:01:3c:02:2b:1c:
                    f0:81:fc:ea:61:9e:e7:b8:9c:33:70:68:a6:34:82:
                    e7:47:c4:ff:36:fc:d5:a4:3c:b6:f7:03:1b:84:12:
                    a9:d3:0e:be:ef:4b:c5:4a:e6:f5:03:8c:2d:e4:b4:
                    18:e0:7f:7e:c8:27:14:57:b1:bd:95:73:eb:18:ee:
                    9c:19:3f:7c:e1:de:41:07:cc:16:bf:d0:7c:2e:8f:
                    22:10:6e:94:5e:67:14:77:ef:66:6c:70:dc:d1:99:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:83:76:F1:37:DC:8B:BE:21:4A:69:EE:9A:9C:36:12:A1:18:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47ed8797-e1f8-3a88-b325-a08e7513c730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:0b:17:68:c0:96:ba:36:8f:18:6d:d0:32:11:da:00:80:
         14:07:9c:d1:04:99:9f:40:ac:cb:2c:76:31:a0:9f:fc:62:7f:
         b4:b3:35:ce:7e:b3:d1:c7:7b:d0:c9:f0:f0:11:21:29:74:57:
         fa:68:56:68:b3:e4:61:38:61:76:f1:2c:f4:87:d0:11:b0:04:
         3b:c8:b6:99:fd:b2:58:04:44:24:79:60:60:9b:4c:d4:85:a0:
         6b:df:c2:0c:b0:b3:4e:20:57:92:3b:04:8e:9f:a4:32:69:7f:
         19:83:f3:88:c4:a8:1f:09:8a:69:0e:c7:bd:04:b6:20:58:0e:
         72:25:ce:56:24:d8:38:c7:bb:79:f4:e7:de:35:47:d5:62:58:
         3e:27:66:a2:8a:09:9a:0b:74:09:3b:45:6b:f7:06:c0:ed:fb:
         a1:43:c9:b1:1f:57:6a:f6:6f:b8:00:52:65:3e:87:c2:ed:2a:
         b8:d0:e8:a6:74:f6:ca:74:33:f0:75:db:b1:03:f5:8a:86:76:
         c3:57:ae:56:ea:7b:2b:6a:e8:62:3e:1b:e3:0d:c9:b5:97:3d:
         3c:86:c1:f8:30:3c:89:38:93:66:c7:14:e5:6e:12:13:da:37:
         05:b8:e7:4f:cb:1f:4a:07:4c:bf:70:ab:0d:f9:01:45:61:17:
         86:03:ea:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnQpDrUgRQR+X4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZWI3MDUwOTgtYWZiZi00ODhlLTg0MDUtNTRkYTgxMDMyYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmU+srLnaOJQ3tEDkH/5WfKBA1x9p1uq9roF
GQSJCDsYsy8dlxhNfZthpyrb1Qx9cCrCTik9FhUqeaR3dGy/FIrWtntLH3a6IxkA
b7FH7Lgm72cnau6u+4JNnHKwS/1N2Qjk57xTx+nVwGhaEwGGgVoLndhBhAxTvqmU
1njdhOKcTIoGs/+ytdmL56aqrtxzg/RDGXV0erixiflpn9AtATwCKxzwgfzqYZ7n
uJwzcGimNILnR8T/NvzVpDy29wMbhBKp0w6+70vFSub1A4wt5LQY4H9+yCcUV7G9
lXPrGO6cGT984d5BB8wWv9B8Lo8iEG6UXmcUd+9mbHDc0ZmURwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbKg3bxN9yLviFKae6anDYSoRiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDdlZDg3OTctZTFmOC0z
YTg4LWIzMjUtYTA4ZTc1MTNjNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6epMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkRCxdowJa6No8YbdAyEdoAgBQHnNEEmZ9ArMssdjGgn/xif7SzNc5+
s9HHe9DJ8PARISl0V/poVmiz5GE4YXbxLPSH0BGwBDvItpn9slgERCR5YGCbTNSF
oGvfwgyws04gV5I7BI6fpDJpfxmD84jEqB8JimkOx70EtiBYDnIlzlYk2DjHu3n0
5941R9ViWD4nZqKKCZoLdAk7RWv3BsDt+6FDybEfV2r2b7gAUmU+h8LtKrjQ6KZ0
9sp0M/B127ED9YqGdsNXrlbqeytq6GI+G+MNybWXPTyGwfgwPIk4k2bHFOVuEhPa
NwW450/LH0oHTL9wqw35AUVhF4YD6jU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:34 2026 by rpki-client