Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/edbda322-fd40-3479-8b82-5e579fa51fbf.roa
File:                     edbda322-fd40-3479-8b82-5e579fa51fbf.roa (raw, json)
Hash identifier:          qnb3eqgyZ0AcTNHXpODodtfWnAD8zzJkLTnuDzHWJpg=
Subject key identifier:   EC:78:C0:37:43:8E:1B:3A:D8:55:90:DF:34:FF:57:76:F4:D5:55:01
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584F480D333E933F4B4B41B5FE30
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/edbda322-fd40-3479-8b82-5e579fa51fbf.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16524
IP address blocks:        72.11.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:33:3e:93:3f:4b:4b:41:b5:fe:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=175caeb1-0d2f-4c4b-a0b9-f37026100356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8c:47:0a:82:1e:c0:bb:09:2c:3d:78:19:26:
                    d3:40:9f:c1:18:ee:63:9f:aa:1e:51:0c:8d:9b:64:
                    08:df:37:1b:71:a2:1a:27:ba:98:46:01:93:cb:a1:
                    0c:12:90:db:78:9c:c9:79:b8:38:97:0e:0b:af:c8:
                    75:49:b1:a4:78:de:bd:b6:c8:51:07:df:48:70:b1:
                    d9:72:ff:16:d5:78:7d:6a:f4:82:8e:a8:44:e8:5c:
                    57:87:0a:c5:57:1e:28:41:b4:bd:ec:b2:6d:c2:d3:
                    d6:ce:3f:2d:4e:e3:60:c8:5a:dc:e9:95:f7:e0:7a:
                    09:c9:5f:ca:05:93:02:87:0c:cb:88:68:2c:4a:07:
                    a0:f5:0a:92:5a:b3:bd:04:e0:3b:79:98:84:29:62:
                    ac:a2:84:07:16:93:c2:73:5f:db:49:8d:17:bd:63:
                    a6:80:db:03:d9:c1:22:96:6b:bb:3a:e3:6f:20:52:
                    84:b1:a6:90:ae:83:c7:f9:4e:62:95:dc:eb:16:c1:
                    67:1d:ac:a8:ae:a3:5b:e0:a1:1c:a8:32:d4:5b:56:
                    82:12:ef:40:78:b6:bb:05:97:30:cd:97:7c:f4:43:
                    1e:5d:45:24:30:e4:f9:87:ac:d2:72:77:79:37:64:
                    0e:bc:7d:fe:3d:6d:c4:60:08:6a:9b:91:11:5d:74:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:C0:37:43:8E:1B:3A:D8:55:90:DF:34:FF:57:76:F4:D5:55:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/edbda322-fd40-3479-8b82-5e579fa51fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:14:de:96:a0:fc:97:d4:12:fa:dd:4b:a2:3b:56:a1:e9:d7:
         06:88:ef:be:1f:71:c3:12:24:b3:19:36:e6:18:47:86:19:59:
         b6:5d:34:d2:1d:46:eb:cc:47:1e:c5:ec:d0:d8:1d:d0:3d:c3:
         0f:0a:da:5b:db:21:01:d6:1a:04:09:c2:f6:40:59:39:8c:8e:
         9e:c5:3b:97:a8:96:d8:e6:69:18:e4:19:22:0c:88:e2:30:5f:
         d3:ba:17:35:95:a7:01:38:28:cc:3f:7c:41:7a:43:6e:4d:dc:
         83:85:45:6f:2a:d2:30:fa:51:15:5c:09:98:2e:9b:5f:b7:ac:
         08:56:d6:af:1a:c6:42:0c:f2:56:74:98:6b:b6:6e:bc:7c:60:
         55:f3:40:8c:ce:66:22:ec:bd:18:0c:8b:dc:fe:e4:9b:0c:52:
         a2:14:a7:c3:b4:7d:40:8c:7e:ce:7d:75:f7:da:76:92:92:4d:
         96:73:6f:37:79:fa:18:f5:bd:bc:a6:b6:19:72:a4:f2:61:30:
         98:7e:c8:c6:bf:48:c9:9f:9f:07:02:a5:51:31:43:e4:10:c6:
         f2:0a:3d:05:7e:b6:f6:6e:51:01:ef:8d:ab:90:17:53:d7:96:
         3d:15:15:82:02:be:63:fc:63:14:de:7f:80:fb:4a:f8:c8:d6:
         de:ff:33:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTM+kz9LS0G1/jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2
ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTc1Y2FlYjEtMGQyZi00YzRiLWEwYjktZjM3MDI2MTAwMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioxHCoIewLsJLD14GSbTQJ/BGO5jn6oeUQyN
m2QI3zcbcaIaJ7qYRgGTy6EMEpDbeJzJebg4lw4Lr8h1SbGkeN69tshRB99IcLHZ
cv8W1Xh9avSCjqhE6FxXhwrFVx4oQbS97LJtwtPWzj8tTuNgyFrc6ZX34HoJyV/K
BZMChwzLiGgsSgeg9QqSWrO9BOA7eZiEKWKsooQHFpPCc1/bSY0XvWOmgNsD2cEi
lmu7OuNvIFKEsaaQroPH+U5ildzrFsFnHayorqNb4KEcqDLUW1aCEu9AeLa7BZcw
zZd89EMeXUUkMOT5h6zScnd5N2QOvH3+PW3EYAhqm5ERXXQlOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOx4wDdDjhs62FWQ3zT/V3b01VUBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1
ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZWRiZGEzMjItZmQ0MC0z
NDc5LThiODItNWU1NzlmYTUxZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm
NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl
NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2
MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUU3pag/JfUEvrdS6I7VqHp1waI774fccMSJLMZNuYYR4YZWbZdNNId
RuvMRx7F7NDYHdA9ww8K2lvbIQHWGgQJwvZAWTmMjp7FO5eoltjmaRjkGSIMiOIw
X9O6FzWVpwE4KMw/fEF6Q25N3IOFRW8q0jD6URVcCZgum1+3rAhW1q8axkIM8lZ0
mGu2brx8YFXzQIzOZiLsvRgMi9z+5JsMUqIUp8O0fUCMfs59dffadpKSTZZzbzd5
+hj1vbymthlypPJhMJh+yMa/SMmfnwcCpVExQ+QQxvIKPQV+tvZuUQHvjauQF1PX
lj0VFYICvmP8YxTef4D7SvjI1t7/M0M=
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:55:11 2026 by rpki-client