Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa
File:                     04416291-d3d4-3bd7-a5e6-c378f705767e.roa (raw, json)
Hash identifier:          MV+49CU60f/bdejjGNGpJnDiLrEuyiqmGeJHzf4J7Ro=
Subject key identifier:   A7:C7:FC:BD:C0:6F:6B:BD:70:F1:1A:AA:5A:2D:61:BE:11:A5:32:F7
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584F49872003CA26A504322AD900
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11377
IP address blocks:        216.20.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:20:03:ca:26:a5:04:32:2a:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=56df808f-175a-413a-b912-da4a6ec9f09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:13:a1:5c:31:39:9b:2a:cb:f7:f4:7a:f2:
                    1c:c9:48:89:e1:13:48:16:77:2c:ef:e4:12:4e:7c:
                    44:a4:c7:da:6e:21:cf:7d:cd:59:ba:a1:11:59:41:
                    15:92:40:01:c5:5b:20:ab:28:96:3a:c9:3c:30:a9:
                    dc:2b:a5:47:a3:50:71:25:e6:98:5b:77:c8:02:28:
                    f2:02:99:0c:4e:35:2c:c2:37:64:be:2c:7d:34:2a:
                    42:6f:d4:d7:44:60:25:eb:7b:92:5e:29:73:ee:c4:
                    36:94:bb:58:63:a6:b1:a4:a9:02:3c:7b:0a:2e:d3:
                    66:56:ce:59:36:08:c2:02:b8:b6:bf:62:46:2c:06:
                    db:92:be:8a:ed:45:c3:06:e9:01:97:97:05:99:2a:
                    8b:1d:40:9f:a6:dc:c8:f6:ee:b7:2c:41:aa:b5:83:
                    61:e3:0b:88:54:fb:36:a6:d1:f8:fa:08:ff:00:66:
                    1f:7c:a4:d7:ac:b6:c3:40:7c:3e:a5:64:04:15:d8:
                    6f:4f:cd:54:5a:c7:30:07:49:ca:ba:75:64:7d:b3:
                    f6:98:a1:80:78:ff:cc:fd:64:5d:35:52:88:53:aa:
                    f2:d4:4c:01:c4:4b:f8:8e:d3:c6:b5:3c:50:c3:16:
                    63:6d:64:13:fb:f6:29:99:fa:ab:83:a6:ab:16:87:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:FC:BD:C0:6F:6B:BD:70:F1:1A:AA:5A:2D:61:BE:11:A5:32:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:fc:1f:3c:9a:2a:4e:5d:90:f2:cf:4d:5b:22:95:c9:a8:
         13:64:14:6e:9d:1c:4c:86:b0:a8:e4:12:6c:65:34:a6:42:82:
         6d:2e:9b:d1:d0:b8:c6:34:a1:82:61:7f:0e:31:2f:c9:1f:6f:
         81:05:51:3b:dd:26:35:a8:59:d9:e6:39:31:3d:d3:4a:11:34:
         17:6f:de:d9:07:79:0e:30:b8:43:28:53:c1:92:b0:be:20:c2:
         bd:1d:59:df:42:b4:b7:1d:ea:ed:40:a2:aa:95:52:7e:0a:8a:
         48:94:b4:a3:8a:21:86:d0:73:40:10:d8:d7:6d:8c:57:d1:b8:
         ce:62:01:95:a4:0b:c6:2d:f5:be:8f:9c:2e:4e:13:ba:f3:8e:
         db:b8:cc:35:7b:53:e1:cb:45:37:7e:0d:ad:ad:d7:24:02:7d:
         22:0c:a7:48:8d:ac:ce:27:88:a0:0e:a6:5e:f6:9a:21:43:67:
         8b:1e:35:01:e5:16:f3:fd:a7:e2:f9:1a:e8:f2:f2:24:9b:b5:
         d9:9b:81:c4:8d:d5:39:ef:b7:e8:45:13:4e:9e:d6:b9:e0:7e:
         78:f2:3d:f9:6f:7a:95:a8:dd:05:f1:3c:76:89:f1:ce:09:6e:
         8d:6a:88:ce:7f:4a:ba:78:43:d8:16:df:48:b4:ae:71:e3:88:
         78:fb:ef:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyADyialBDIq2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTZkZjgwOGYtMTc1YS00MTNhLWI5MTItZGE0YTZlYzlmMDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4ToVwxOZsqy/f0evIcyUiJ4RNIFncs7+QS
TnxEpMfabiHPfc1ZuqERWUEVkkABxVsgqyiWOsk8MKncK6VHo1BxJeaYW3fIAijy
ApkMTjUswjdkvix9NCpCb9TXRGAl63uSXilz7sQ2lLtYY6axpKkCPHsKLtNmVs5Z
NgjCAri2v2JGLAbbkr6K7UXDBukBl5cFmSqLHUCfptzI9u63LEGqtYNh4wuIVPs2
ptH4+gj/AGYffKTXrLbDQHw+pWQEFdhvT81UWscwB0nKunVkfbP2mKGAeP/M/WRd
NVKIU6ry1EwBxEv4jtPGtTxQwxZjbWQT+/Ypmfqrg6arFoemvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfH/L3Ab2u9cPEaqlotYb4RpTL3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMDQ0MTYyOTEtZDNkNC0z
YmQ3LWE1ZTYtYzM3OGY3MDU3NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH42/B88mipOXZDyz01bIpXJqBNkFG6dHEyGsKjkEmxlNKZCgm0um9HQ
uMY0oYJhfw4xL8kfb4EFUTvdJjWoWdnmOTE900oRNBdv3tkHeQ4wuEMoU8GSsL4g
wr0dWd9CtLcd6u1AoqqVUn4KikiUtKOKIYbQc0AQ2NdtjFfRuM5iAZWkC8Yt9b6P
nC5OE7rzjtu4zDV7U+HLRTd+Da2t1yQCfSIMp0iNrM4niKAOpl72miFDZ4seNQHl
FvP9p+L5Gujy8iSbtdmbgcSN1Tnvt+hFE06e1rngfnjyPflvepWo3QXxPHaJ8c4J
bo1qiM5/Srp4Q9gW30i0rnHjiHj77zE=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:27:41 2026 by rpki-client