Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa
File:                     318c522d-ce21-3f80-9f64-c4484a1a5c05.roa (raw, json)
Hash identifier:          /tEl894JR3n8jERkERg3JVuzNRaXw5KHlx0Y+oMY/wA=
Subject key identifier:   3F:12:88:35:D4:CC:92:90:A6:65:EB:CE:EF:0D:33:CC:24:64:52:28
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584D1B1A6237C2BB4AF05ADCE700
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        206.219.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:62:37:c2:bb:4a:f0:5a:dc:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=174c53eb-21a6-4424-bfd3-fac530435dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:92:0c:c3:a9:2a:84:7b:fe:2e:25:46:13:
                    5a:7c:1b:f3:b2:c7:ed:d2:bf:b8:2b:11:ce:44:0b:
                    0f:94:81:ef:ad:b3:de:dd:05:5c:97:73:cc:b0:0d:
                    00:b8:a9:d5:98:5d:24:53:04:3d:49:a9:b4:bc:0c:
                    42:ce:98:a4:3e:e6:86:55:63:59:27:32:a7:5c:2c:
                    6a:ff:f9:87:55:4a:36:42:c8:26:c3:17:41:d9:6b:
                    26:00:84:a9:67:22:a7:25:f0:b1:b2:86:4c:1d:ca:
                    cc:94:4d:50:09:d8:48:87:76:19:02:56:7f:7b:dc:
                    7b:95:b3:b0:99:05:2a:cb:bc:5a:75:6c:c7:1c:f0:
                    fd:4b:a9:ff:bb:54:dc:5f:ab:e3:a1:76:62:44:ce:
                    d6:82:a2:f6:af:57:1a:6d:1f:96:4d:2f:80:e3:5b:
                    74:ba:75:0a:58:6b:ee:ca:84:9e:bf:f3:10:ed:d7:
                    83:18:dd:dd:7f:50:c2:87:a9:53:b3:da:e4:05:4d:
                    43:d0:ed:5a:5e:87:f2:28:0e:b7:2a:43:79:34:f9:
                    2d:d2:ca:d7:cf:f3:26:61:fb:95:61:e3:43:83:7b:
                    0d:f7:94:96:02:bf:2d:4d:91:cb:75:e4:6a:17:d7:
                    47:52:46:dc:62:a0:a2:4a:a2:fb:c7:cc:86:02:40:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:88:35:D4:CC:92:90:A6:65:EB:CE:EF:0D:33:CC:24:64:52:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:31:de:67:39:58:1c:88:ad:47:8d:70:47:89:78:ba:cf:
         4b:42:e1:18:4c:b6:38:37:22:57:d6:7b:28:c5:b0:84:93:b8:
         6f:c5:b4:5b:db:8b:47:ae:71:cd:f1:e2:8f:a3:b4:72:b4:cb:
         21:f3:65:d1:d6:47:c5:a2:ad:ba:25:94:bb:af:1b:71:45:87:
         1b:d6:fa:9b:a3:a2:9a:72:dc:31:52:3f:27:97:9d:a1:3c:64:
         95:df:02:c7:d2:c8:fd:5f:c4:c5:f4:23:69:76:bf:39:a4:0a:
         82:ad:da:c8:8d:a7:b7:63:17:a0:b9:0f:fb:d9:47:04:e6:ff:
         79:0b:0d:42:17:a0:f9:55:10:b5:b1:72:69:0f:6b:4a:58:b4:
         38:07:a4:ea:b0:9c:bf:8a:b7:db:18:12:8f:91:53:07:04:89:
         96:ea:8c:62:10:2c:0b:23:93:a7:5f:69:fb:53:e2:77:ea:23:
         71:4e:e4:32:d2:8e:27:b5:45:08:df:20:26:e3:c8:1c:df:46:
         51:42:e9:b5:2f:c8:1e:3f:f7:96:93:43:65:fd:a8:23:d6:e7:
         34:63:41:f0:96:ca:6a:dd:73:17:b5:d1:ab:7c:ef:c1:38:e2:
         de:eb:f4:00:7d:3e:0c:98:f9:97:13:2c:08:a8:70:a0:67:43:
         66:78:fd:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmI3wrtK8Frc5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk
NTVkMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MTc0YzUzZWItMjFhNi00NDI0LWJmZDMtZmFjNTMwNDM1ZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVaSDMOpKoR7/i4lRhNafBvzssft0r+4KxHO
RAsPlIHvrbPe3QVcl3PMsA0AuKnVmF0kUwQ9Sam0vAxCzpikPuaGVWNZJzKnXCxq
//mHVUo2QsgmwxdB2WsmAISpZyKnJfCxsoZMHcrMlE1QCdhIh3YZAlZ/e9x7lbOw
mQUqy7xadWzHHPD9S6n/u1TcX6vjoXZiRM7WgqL2r1cabR+WTS+A41t0unUKWGvu
yoSev/MQ7deDGN3df1DCh6lTs9rkBU1D0O1aXofyKA63KkN5NPkt0srXz/MmYfuV
YeNDg3sN95SWAr8tTZHLdeRqF9dHUkbcYqCiSqL7x8yGAkD9iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8SiDXUzJKQpmXrzu8NM8wkZFIoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2
N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvMzE4YzUyMmQtY2UyMS0z
ZjgwLTlmNjQtYzQ0ODRhMWE1YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj
NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0
ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj
MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUMMd5nOVgciK1HjXBHiXi6z0tC4RhMtjg3IlfWeyjFsISTuG/FtFvb
i0eucc3x4o+jtHK0yyHzZdHWR8WirbollLuvG3FFhxvW+pujoppy3DFSPyeXnaE8
ZJXfAsfSyP1fxMX0I2l2vzmkCoKt2siNp7djF6C5D/vZRwTm/3kLDUIXoPlVELWx
cmkPa0pYtDgHpOqwnL+Kt9sYEo+RUwcEiZbqjGIQLAsjk6dfaftT4nfqI3FO5DLS
jie1RQjfICbjyBzfRlFC6bUvyB4/95aTQ2X9qCPW5zRjQfCWymrdcxe10at878E4
4t7r9AB9PgyY+ZcTLAiocKBnQ2Z4/cs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:17 2026 by rpki-client