Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a337bff-7e83-39c0-b4d3-085c5898b4e4.roa
File:                     8a337bff-7e83-39c0-b4d3-085c5898b4e4.roa (raw, json)
Hash identifier:          aAFsSoiEloOgv66onZQParYioIGEN/YpWjw/lJhL9VY=
Subject key identifier:   16:A5:AE:ED:AE:89:7A:CC:E8:10:EB:29:33:05:BD:33:D7:BA:8F:F8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D44FA62E453EFB32F4962A900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a337bff-7e83-39c0-b4d3-085c5898b4e4.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     10753
IP address blocks:        216.24.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:62:e4:53:ef:b3:2f:49:62:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=6a2556dd-1b13-4abc-838f-cde453f844dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:a0:3e:b2:6f:5f:4d:aa:e1:c0:af:8e:08:
                    85:16:f0:91:44:1e:e8:eb:b3:f4:18:43:af:b6:68:
                    56:36:3e:bf:14:19:d5:da:1b:98:67:0e:11:97:20:
                    98:3c:bf:a2:1e:df:e9:b8:d8:4c:55:8d:8e:6e:97:
                    3c:ef:01:62:de:23:e7:2d:53:f4:42:f3:d5:03:7e:
                    fb:91:59:03:10:c8:e3:ce:00:a5:db:be:48:24:24:
                    1f:35:c7:eb:55:fb:2d:2d:a9:de:ba:e5:11:a9:0d:
                    96:9f:11:30:f7:40:fd:6c:90:01:9d:83:1a:83:19:
                    c3:6f:cc:95:1d:26:c9:0d:b8:7f:b5:51:f1:f1:05:
                    59:4f:32:39:3a:e1:cb:45:14:f6:3e:3d:14:de:93:
                    22:28:22:bb:a9:86:2c:e7:2c:71:6e:8b:01:b0:f5:
                    c4:e1:93:e5:4d:d5:43:10:ab:6b:da:e0:af:c9:e1:
                    38:54:eb:99:92:76:6c:91:a3:7f:55:ab:d9:47:ce:
                    27:06:7c:48:81:52:84:40:99:01:6b:6f:04:6c:88:
                    5a:0f:a7:1e:91:8d:41:c2:eb:5e:d6:30:90:89:ec:
                    70:cb:ec:49:e8:10:ea:a9:cb:cd:36:cd:04:1c:49:
                    5c:07:75:2c:28:28:f1:c9:63:9b:c6:84:bd:dd:56:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A5:AE:ED:AE:89:7A:CC:E8:10:EB:29:33:05:BD:33:D7:BA:8F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a337bff-7e83-39c0-b4d3-085c5898b4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:18:a0:4b:71:c2:1d:83:16:76:cb:7f:1e:c8:f7:b9:e8:
         9d:60:b4:2a:81:6d:a4:5b:db:71:3a:77:1c:df:02:ff:12:f4:
         e7:0b:2a:f2:5c:4e:e4:65:f1:5a:2a:69:7a:80:dc:96:f3:15:
         71:49:bb:43:1f:f6:ba:a2:97:5c:54:c2:38:8f:58:f1:8d:92:
         74:9e:ff:9c:7d:c5:ae:5c:20:13:45:1e:0f:79:c0:8b:9c:17:
         22:61:cd:80:f3:a7:2b:95:9e:38:ad:ee:fa:89:35:d7:f7:bc:
         17:7d:bc:33:be:02:8b:77:6c:9f:64:e1:95:27:2c:4f:d5:e0:
         19:92:99:2b:2f:5d:00:c6:bc:48:2f:18:f1:96:1f:82:ca:07:
         d4:48:bc:f9:e8:78:96:65:02:63:fc:7c:b9:7a:21:b5:68:91:
         97:57:46:72:a3:02:76:48:0c:96:9c:20:88:85:9f:4c:89:de:
         bf:ab:8c:55:68:dd:db:6e:b1:07:ce:90:b4:a1:ea:f9:02:48:
         b8:8e:3a:3c:b0:f4:07:53:8e:0c:25:9b:ad:40:e2:40:a0:77:
         66:cc:8f:31:ff:5c:ec:4b:81:b1:56:3b:65:a4:91:46:01:07:
         84:11:70:21:13:0d:04:5d:0d:ff:c1:f0:d1:29:34:ab:97:5c:
         92:e3:6c:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mLkU++zL0liqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
NmEyNTU2ZGQtMWIxMy00YWJjLTgzOGYtY2RlNDUzZjg0NGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkWgPrJvX02q4cCvjgiFFvCRRB7o67P0GEOv
tmhWNj6/FBnV2huYZw4RlyCYPL+iHt/puNhMVY2Obpc87wFi3iPnLVP0QvPVA377
kVkDEMjjzgCl275IJCQfNcfrVfstLaneuuURqQ2WnxEw90D9bJABnYMagxnDb8yV
HSbJDbh/tVHx8QVZTzI5OuHLRRT2Pj0U3pMiKCK7qYYs5yxxbosBsPXE4ZPlTdVD
EKtr2uCvyeE4VOuZknZskaN/VavZR84nBnxIgVKEQJkBa28EbIhaD6cekY1Bwute
1jCQiexwy+xJ6BDqqcvNNs0EHElcB3UsKCjxyWObxoS93VY5/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBalru2uiXrM6BDrKTMFvTPXuo/4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOGEzMzdiZmYtN2U4My0z
OWMwLWI0ZDMtMDg1YzU4OThiNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqyGKBLccIdgxZ2y38eyPe56J1gtCqBbaRb23E6dxzfAv8S9OcLKvJc
TuRl8VoqaXqA3JbzFXFJu0Mf9rqil1xUwjiPWPGNknSe/5x9xa5cIBNFHg95wIuc
FyJhzYDzpyuVnjit7vqJNdf3vBd9vDO+Aot3bJ9k4ZUnLE/V4BmSmSsvXQDGvEgv
GPGWH4LKB9RIvPnoeJZlAmP8fLl6IbVokZdXRnKjAnZIDJacIIiFn0yJ3r+rjFVo
3dtusQfOkLSh6vkCSLiOOjyw9AdTjgwlm61A4kCgd2bMjzH/XOxLgbFWO2WkkUYB
B4QRcCETDQRdDf/B8NEpNKuXXJLjbCk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:49:37 2026 by rpki-client