Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa
File:                     cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa (raw, json)
Hash identifier:          EOe6jGaNbBBGd4AtUDeWDCVz+9b+wUSfszNoD8rFvOo=
Subject key identifier:   63:99:7D:EF:23:6D:A4:F5:93:9B:54:2C:F0:83:21:3D:E3:AB:0A:4D
Certificate issuer:       /CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb
Certificate serial:       010D0C9F4328584D49724503F7F9C23C2BFB8580
Authority key identifier: 45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa
Signing time:             Wed 25 Mar 2026 15:25:49 +0000
ROA not before:           Wed 25 Mar 2026 15:25:49 +0000
ROA not after:            Tue 23 Jun 2026 15:25:49 +0000
asID:                     8075
IP address blocks:        216.99.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:72:45:03:f7:f9:c2:3c:2b:fb:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb
        Validity
            Not Before: Mar 25 15:25:49 2026 GMT
            Not After : Jun 23 15:25:49 2026 GMT
        Subject: CN=8442c199-c064-4578-8fa6-e72c32520015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:b2:82:1e:90:4a:c8:61:2a:7b:7e:34:b9:
                    f9:dd:3d:9e:1e:e6:ce:e6:66:a7:c7:cf:85:80:05:
                    fd:20:8c:48:eb:c7:3e:6d:76:a9:26:b0:95:c6:2e:
                    db:06:1c:49:12:18:6e:ea:8f:dd:a6:3e:ba:fe:cf:
                    5d:0f:d9:24:62:c5:e1:42:31:53:67:0b:39:8b:e5:
                    0c:1f:89:e3:42:15:a5:46:03:25:a2:f3:c7:87:b2:
                    06:4f:9e:fc:1d:1d:31:d7:00:6c:b0:30:d2:0c:b0:
                    6c:0f:82:06:e2:a5:07:85:23:22:fe:60:16:f3:9b:
                    78:24:fd:21:e8:1f:21:fc:a2:10:22:d1:9c:58:62:
                    b0:95:2e:02:14:45:e9:47:6c:08:f2:69:3e:e3:ab:
                    6d:e0:50:f5:e4:6a:18:63:dd:e2:c3:e3:f6:be:e6:
                    98:33:20:5c:47:99:d5:04:4f:7b:fb:00:2f:d4:09:
                    f4:cb:5c:df:88:94:7f:73:c2:30:5a:c8:d5:3a:4f:
                    8c:28:6d:4e:60:9a:a7:00:87:f8:5b:0c:6f:b6:a5:
                    3d:f7:e0:2c:0f:a7:2d:1e:58:15:25:0a:f4:bc:36:
                    52:e5:d8:18:4d:21:bb:8d:d2:c9:28:3b:73:6e:cd:
                    35:ab:87:92:02:c6:6d:bc:90:cb:62:81:e0:47:f8:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:7D:EF:23:6D:A4:F5:93:9B:54:2C:F0:83:21:3D:E3:AB:0A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl

            X509v3 Authority Key Identifier:
                keyid:45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:68:27:58:bb:c5:32:ad:a0:89:66:43:6b:31:e9:c2:58:
         80:98:4b:ce:fa:23:d3:09:8e:f4:fe:16:eb:64:6b:8d:d3:e8:
         b9:db:0a:d6:61:ee:ed:5f:d4:c6:00:47:0c:2e:0d:25:d5:2c:
         a7:b8:a0:af:95:02:4e:27:b8:27:90:06:6a:37:28:1f:47:bc:
         13:3c:61:74:29:18:74:3c:32:17:e3:77:fd:34:eb:7a:20:b0:
         d4:7d:cc:35:39:4f:ca:1c:78:1c:45:fd:9d:9a:1e:fd:99:e4:
         0e:4f:86:99:62:dd:5a:d9:a4:12:91:69:16:a2:ee:c8:a8:c2:
         63:28:2f:57:8a:b6:72:da:ab:fc:40:56:0c:bd:68:bf:64:0e:
         fa:3e:32:f7:55:88:af:04:4c:a0:28:39:7e:ec:78:b9:e9:d3:
         c3:b1:b5:13:cb:e7:92:28:60:10:11:01:36:5f:c1:e4:fd:1e:
         57:20:b8:1b:f2:e4:fc:1b:0b:26:b0:4c:d7:56:1b:8f:3b:53:
         64:db:cb:2f:de:1a:82:ef:b2:b7:bc:98:5a:81:08:55:23:cb:
         34:a9:9b:c7:f9:11:51:cd:b3:f1:3c:f4:9e:9d:81:0a:7e:c2:
         9d:ab:f3:c3:8c:20:bf:00:97:2e:0b:41:f0:09:c4:93:6b:0d:
         0b:b4:15:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JckUD9/nCPCv7hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmMzFiMTgtYTA0ZC00ZGIzLWEzYTUtYjc2ZWE0ZmU1
NmZiMB4XDTI2MDMyNTE1MjU0OVoXDTI2MDYyMzE1MjU0OVowLzEtMCsGA1UEAxMk
ODQ0MmMxOTktYzA2NC00NTc4LThmYTYtZTcyYzMyNTIwMDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnWygh6QSshhKnt+NLn53T2eHubO5manx8+F
gAX9IIxI68c+bXapJrCVxi7bBhxJEhhu6o/dpj66/s9dD9kkYsXhQjFTZws5i+UM
H4njQhWlRgMlovPHh7IGT578HR0x1wBssDDSDLBsD4IG4qUHhSMi/mAW85t4JP0h
6B8h/KIQItGcWGKwlS4CFEXpR2wI8mk+46tt4FD15GoYY93iw+P2vuaYMyBcR5nV
BE97+wAv1An0y1zfiJR/c8IwWsjVOk+MKG1OYJqnAIf4WwxvtqU99+AsD6ctHlgV
JQr0vDZS5dgYTSG7jdLJKDtzbs01q4eSAsZtvJDLYoHgR/ifXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOZfe8jbaT1k5tULPCDIT3jqwpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2Yz
MWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZlYTRmZTU2ZmIvY2ZmMGQ5NTItNTJlMy0z
ZmU1LTllYzEtOWNlNGFiNGUwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTNmMzFiMTgtYTA0ZC00ZGIzLWEz
YTUtYjc2ZWE0ZmU1NmZiLzEzZjMxYjE4LWEwNGQtNGRiMy1hM2E1LWI3NmVhNGZl
NTZmYi5jcmwwHwYDVR0jBBgwFoAURXfeRKTjTIqa8i4wy7PTy9Gax8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2YzMWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZl
YTRmZTU2ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GNEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABp3aCdYu8UyraCJZkNrMenCWICYS876I9MJjvT+Futka43T6LnbCtZh
7u1f1MYARwwuDSXVLKe4oK+VAk4nuCeQBmo3KB9HvBM8YXQpGHQ8Mhfjd/0063og
sNR9zDU5T8oceBxF/Z2aHv2Z5A5Phpli3VrZpBKRaRai7siowmMoL1eKtnLaq/xA
Vgy9aL9kDvo+MvdViK8ETKAoOX7seLnp08OxtRPL55IoYBARATZfweT9HlcguBvy
5PwbCyawTNdWG487U2Tbyy/eGoLvsre8mFqBCFUjyzSpm8f5EVHNs/E89J6dgQp+
wp2r88OMIL8Aly4LQfAJxJNrDQu0FR8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:45 2026 by rpki-client