Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
File:                     8f26921d-434d-3723-b8ca-eb6e29241ee3.roa (raw, json)
Hash identifier:          V+R938LoK8Yujf5bqn1llDCgueo04nD2002JZasISdc=
Subject key identifier:   B3:87:1B:80:47:67:F3:58:B8:15:D1:07:4A:A6:C1:D4:51:25:31:71
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584DC565C0E5DB4AAEAF227D3780
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     16524
IP address blocks:        72.11.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c0:e5:db:4a:ae:af:22:7d:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=4eedbdd4-e441-4663-9f22-3cdb1bc26547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:82:66:14:39:8f:66:6d:6c:c2:18:7e:05:
                    6d:0e:aa:07:79:08:6c:97:c9:e6:b2:22:2d:62:a5:
                    d9:32:5b:1b:76:bd:bb:4b:35:62:4c:90:86:43:a1:
                    a9:0b:2d:97:0d:8c:71:fb:6d:1b:07:03:b6:b7:23:
                    3f:c8:14:b5:a3:4d:da:a5:e2:d3:c9:ea:c8:73:8b:
                    82:7c:de:67:04:96:d3:9f:2b:67:8e:61:06:97:3e:
                    1c:7b:71:3e:c9:f7:c2:55:9c:67:53:70:7e:a2:1a:
                    bc:43:5f:10:92:83:bb:07:19:3a:fc:2c:51:7c:ae:
                    fb:95:10:5a:ae:49:95:40:a7:e5:f8:17:79:7f:39:
                    e3:4b:02:7a:89:61:12:2c:4f:10:e8:d4:58:7a:e7:
                    dc:a9:44:c2:2d:b3:de:9a:61:61:dc:8e:c0:96:3e:
                    f5:5a:74:97:20:e7:62:41:d5:3f:13:e3:36:6d:13:
                    c8:92:bf:f0:55:5e:92:cf:ed:53:10:e7:19:09:ee:
                    13:0d:67:1d:a0:10:e1:cd:34:bc:bc:16:a6:b5:be:
                    a0:54:82:fd:0e:a1:e0:9a:61:ab:75:23:d2:ae:89:
                    41:22:09:04:17:d4:a5:7f:9a:39:ab:3d:05:f3:61:
                    4e:7b:87:ea:39:0b:b8:35:ef:89:6c:3d:ff:27:2b:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:87:1B:80:47:67:F3:58:B8:15:D1:07:4A:A6:C1:D4:51:25:31:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:7e:6b:f5:2b:63:ac:38:4f:3c:33:da:80:07:3e:90:63:
         4f:f7:9a:58:55:d0:1c:e3:bd:c1:3e:da:81:09:2c:07:c9:60:
         9b:ee:9a:34:1d:d7:c4:ab:07:71:cf:c4:9c:3c:24:61:65:93:
         83:f9:e8:94:a2:91:28:4d:13:76:a3:7a:a7:b9:91:cd:86:29:
         13:12:30:e5:4d:14:3a:e4:0b:b8:08:4d:4e:04:13:2f:4c:5b:
         2f:3f:e4:68:82:4c:81:34:57:a3:ce:03:bd:65:96:44:84:d7:
         f4:fe:bc:87:73:2c:b3:4b:80:92:4d:03:7b:54:a8:b3:4a:e8:
         79:8f:89:fe:84:e4:81:cb:b0:34:ae:75:6d:e9:8d:cb:6d:0b:
         cb:66:51:c4:ff:46:c8:b5:87:68:9e:a4:fc:b7:9e:17:66:db:
         8e:12:ac:84:79:eb:c7:4e:bb:64:e2:07:20:d1:17:9e:2f:84:
         24:ff:b9:fe:b2:df:1d:23:70:19:11:f0:9e:01:cf:59:a3:4c:
         d9:f6:37:ad:42:d1:ce:91:b5:db:38:fd:94:01:9d:98:71:2f:
         8b:c2:19:ac:c8:bc:5e:40:71:fc:72:f9:78:78:16:6f:bb:d7:
         a4:13:6c:3c:1c:ea:b1:eb:34:2b:9e:f0:84:a9:74:c7:76:94:
         0d:0f:8d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcDl20quryJ9N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2
ZTFiMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
NGVlZGJkZDQtZTQ0MS00NjYzLTlmMjItM2NkYjFiYzI2NTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyuCZhQ5j2ZtbMIYfgVtDqoHeQhsl8nmsiIt
YqXZMlsbdr27SzViTJCGQ6GpCy2XDYxx+20bBwO2tyM/yBS1o03apeLTyerIc4uC
fN5nBJbTnytnjmEGlz4ce3E+yffCVZxnU3B+ohq8Q18QkoO7Bxk6/CxRfK77lRBa
rkmVQKfl+Bd5fznjSwJ6iWESLE8Q6NRYeufcqUTCLbPemmFh3I7Alj71WnSXIOdi
QdU/E+M2bRPIkr/wVV6Sz+1TEOcZCe4TDWcdoBDhzTS8vBamtb6gVIL9DqHgmmGr
dSPSrolBIgkEF9Slf5o5qz0F82FOe4fqOQu4Ne+JbD3/JytEowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOHG4BHZ/NYuBXRB0qmwdRRJTFxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1
ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvOGYyNjkyMWQtNDM0ZC0z
NzIzLWI4Y2EtZWI2ZTI5MjQxZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm
NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl
NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2
MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwXfmv1K2OsOE88M9qABz6QY0/3mlhV0BzjvcE+2oEJLAfJYJvumjQd
18SrB3HPxJw8JGFlk4P56JSikShNE3ajeqe5kc2GKRMSMOVNFDrkC7gITU4EEy9M
Wy8/5GiCTIE0V6POA71llkSE1/T+vIdzLLNLgJJNA3tUqLNK6HmPif6E5IHLsDSu
dW3pjcttC8tmUcT/Rsi1h2iepPy3nhdm244SrIR568dOu2TiByDRF54vhCT/uf6y
3x0jcBkR8J4Bz1mjTNn2N61C0c6Rtds4/ZQBnZhxL4vCGazIvF5Acfxy+Xh4Fm+7
16QTbDwc6rHrNCue8ISpdMd2lA0PjXY=
-----END CERTIFICATE-----
Generated at Wed May 13 13:19:53 2026 by rpki-client