Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/a24fe0c0-b5b4-3ce7-8bb2-571d59268714.roa
File:                     a24fe0c0-b5b4-3ce7-8bb2-571d59268714.roa (raw, json)
Hash identifier:          MC2pQaxhX7al08Ba5RpjPBoeKbrsJ2IcYJytjdRMGm4=
Subject key identifier:   23:C0:93:DB:B1:3C:8F:D7:67:2A:38:E3:08:EF:41:46:1E:41:19:C7
Certificate issuer:       /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Certificate serial:       010D0C9F4328584D3DFF846D91FA84CB92AB0BC0
Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/a24fe0c0-b5b4-3ce7-8bb2-571d59268714.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        162.217.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:84:6d:91:fa:84:cb:92:ab:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=8d52f7fa-d421-4cbc-a2e7-ee10c46ed48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:5f:2a:64:eb:16:67:3f:e1:ea:09:2e:79:
                    ed:15:df:54:6b:62:38:cd:ef:7d:7f:6c:c0:b6:42:
                    af:f5:4d:c8:a9:77:bf:8d:b9:25:4a:11:80:4b:38:
                    2e:e6:79:de:2c:18:8d:ad:92:90:5f:d7:aa:6d:39:
                    1f:81:47:0a:25:05:c2:4d:db:86:55:2a:19:e8:b3:
                    9e:8e:7a:ed:8c:1e:16:d2:e0:7e:57:45:a2:08:e6:
                    cc:0a:09:bb:74:b3:d1:b4:ec:9e:09:7e:88:eb:d2:
                    9f:56:4c:04:2c:3b:b8:3e:4d:ee:73:88:fa:bd:46:
                    6c:9b:bf:bd:c4:fd:d4:90:5e:2c:ea:62:fc:2c:55:
                    d3:09:b1:a8:e4:07:e4:de:be:d1:00:c3:e8:18:21:
                    2a:b0:06:4f:8c:01:db:a3:e0:f1:c2:b8:fe:15:ea:
                    0e:5e:13:11:bd:d9:7b:97:57:2c:11:0b:38:d8:27:
                    b0:8d:3e:41:38:1f:c3:12:1f:58:92:63:3c:8b:47:
                    07:56:d7:f7:0a:dd:66:26:3b:e3:5f:f9:46:bf:68:
                    33:fd:05:6d:4b:1d:bf:e0:bc:6d:4f:6a:c3:7b:af:
                    38:08:7b:ce:1f:2a:64:5f:38:48:b4:8a:c5:64:4f:
                    e8:7b:aa:17:2d:81:47:de:b2:77:0a:f2:7f:49:be:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:93:DB:B1:3C:8F:D7:67:2A:38:E3:08:EF:41:46:1E:41:19:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/a24fe0c0-b5b4-3ce7-8bb2-571d59268714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl

            X509v3 Authority Key Identifier:
                keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:37:ea:00:07:fb:fa:dd:f5:f4:84:45:3b:23:ff:e1:7b:
         19:a9:d8:3a:e0:f9:80:af:03:55:be:a2:57:1f:4a:17:2a:ff:
         c5:ff:bd:07:e7:b0:7a:e9:a9:87:c2:06:10:92:74:f2:03:f1:
         3e:d8:d7:6b:46:f4:d9:7a:10:ed:1d:c8:2f:04:41:9b:b3:e0:
         c4:9e:11:9e:0b:36:37:bd:5e:ac:da:f7:4d:d6:af:25:59:d9:
         97:ee:e7:65:15:8f:83:10:7a:a3:fb:ce:36:8c:6f:60:27:f0:
         93:1b:13:22:89:d9:04:00:08:9b:52:dd:0f:e0:f4:db:91:3e:
         f7:8e:01:26:b8:b7:88:08:88:9e:19:65:5e:09:aa:a1:ee:b2:
         80:1d:ec:83:ed:30:d2:77:99:8d:f2:03:93:a1:59:03:de:cf:
         31:fa:cd:03:1b:99:99:04:d8:ec:a2:5d:e7:37:ab:e5:03:a8:
         74:54:f8:6f:23:5d:ff:5f:6c:c3:ad:98:88:12:8a:da:64:8b:
         d7:f2:e8:ab:74:41:44:08:07:77:68:6c:75:36:ee:6e:0f:b4:
         a1:91:6f:79:49:46:5a:f7:67:8c:6f:d4:84:b1:09:0f:bf:e6:
         d8:34:eb:8e:bb:a0:4d:25:5e:7f:9a:07:99:65:59:09:a2:f1:
         c9:a9:95:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4RtkfqEy5KrC8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RkMzE5YmUtMjg3Ni00MDNlLWJhODYtMjRkMjdhYWE4
ZmMwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
OGQ1MmY3ZmEtZDQyMS00Y2JjLWEyZTctZWUxMGM0NmVkNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF9fKmTrFmc/4eoJLnntFd9Ua2I4ze99f2zA
tkKv9U3IqXe/jbklShGASzgu5nneLBiNrZKQX9eqbTkfgUcKJQXCTduGVSoZ6LOe
jnrtjB4W0uB+V0WiCObMCgm7dLPRtOyeCX6I69KfVkwELDu4Pk3uc4j6vUZsm7+9
xP3UkF4s6mL8LFXTCbGo5Afk3r7RAMPoGCEqsAZPjAHbo+Dxwrj+FeoOXhMRvdl7
l1csEQs42CewjT5BOB/DEh9YkmM8i0cHVtf3Ct1mJjvjX/lGv2gz/QVtSx2/4Lxt
T2rDe684CHvOHypkXzhItIrFZE/oe6oXLYFH3rJ3CvJ/Sb4HUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPAk9uxPI/XZyo44wjvQUYeQRnHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZGQz
MTliZS0yODc2LTQwM2UtYmE4Ni0yNGQyN2FhYThmYzAvYTI0ZmUwYzAtYjViNC0z
Y2U3LThiYjItNTcxZDU5MjY4NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2RkMzE5YmUtMjg3Ni00MDNlLWJh
ODYtMjRkMjdhYWE4ZmMwLzdkZDMxOWJlLTI4NzYtNDAzZS1iYTg2LTI0ZDI3YWFh
OGZjMC5jcmwwHwYDVR0jBBgwFoAUFqpMiZHY8up04nAcQ2H02dlqIMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ZGQzMTliZS0yODc2LTQwM2UtYmE4Ni0yNGQy
N2FhYThmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotl0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeLN+oAB/v63fX0hEU7I//hexmp2Drg+YCvA1W+olcfShcq/8X/vQfn
sHrpqYfCBhCSdPID8T7Y12tG9Nl6EO0dyC8EQZuz4MSeEZ4LNje9Xqza903WryVZ
2Zfu52UVj4MQeqP7zjaMb2An8JMbEyKJ2QQACJtS3Q/g9NuRPveOASa4t4gIiJ4Z
ZV4JqqHusoAd7IPtMNJ3mY3yA5OhWQPezzH6zQMbmZkE2OyiXec3q+UDqHRU+G8j
Xf9fbMOtmIgSitpki9fy6Kt0QUQIB3dobHU27m4PtKGRb3lJRlr3Z4xv1ISxCQ+/
5tg06467oE0lXn+aB5llWQmi8cmplXg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:13 2026 by rpki-client