Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa
File:                     63aee57f-ea1e-3244-9dc6-9d601b827d14.roa (raw, json)
Hash identifier:          eod6Mjaws3nC+KWdg64aI5Syzx7bGQSeW9jiyP0axWo=
Subject key identifier:   7D:6E:EC:CA:BD:3F:C7:A7:D8:38:18:D0:8D:A9:7A:32:25:0D:13:F8
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584D1707EFB20A54ACAC34E0D5E0
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     5650
IP address blocks:        207.180.16.0/24 maxlen: 24
                          207.180.17.0/24 maxlen: 24
                          207.180.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ef:b2:0a:54:ac:ac:34:e0:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=e2ed62a8-9a7f-4767-973b-6b09e43910fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:b4:e2:83:2c:3d:26:7c:56:d2:c0:bb:80:
                    52:60:a7:d3:0e:0a:9f:6b:58:d8:f1:18:e7:e7:6e:
                    17:64:ef:27:fd:1a:fc:ac:04:52:87:d4:fe:46:c7:
                    9b:64:9a:5f:c9:fd:64:31:82:ae:0f:76:71:2f:7b:
                    f7:41:b0:1a:ea:25:71:41:c6:ec:4f:fa:1d:13:58:
                    60:79:30:20:09:07:16:fc:96:c3:eb:91:3a:89:ec:
                    31:6d:29:68:29:bb:92:66:bb:80:cf:3e:85:6e:01:
                    b6:b4:8b:04:7f:da:ef:0b:db:c9:68:3a:da:7b:a1:
                    81:2d:18:b8:6f:a9:f4:e8:23:9e:0b:21:b7:97:a4:
                    ce:4e:57:40:3f:25:ca:e1:29:f3:71:70:00:fa:db:
                    1e:3d:31:a6:f3:90:be:d4:c5:e4:bb:00:ac:a6:81:
                    95:d3:f6:e2:e4:3c:a9:78:65:fc:11:49:b7:60:d2:
                    30:67:05:76:44:c1:56:6e:15:37:93:0a:0b:55:ad:
                    73:4b:9d:33:1b:06:8a:04:c6:c9:5c:5d:f1:d9:19:
                    ea:95:cc:8c:b2:eb:dd:20:b6:82:8e:dd:a8:82:46:
                    42:72:b2:b5:e9:51:b5:24:ab:f4:c2:b7:6b:0f:96:
                    12:c4:7b:0e:02:5c:03:6d:f0:3b:3e:25:81:09:0a:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:EC:CA:BD:3F:C7:A7:D8:38:18:D0:8D:A9:7A:32:25:0D:13:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.16.0-207.180.18.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:0e:75:04:43:5c:db:4d:dc:93:a5:be:c0:56:27:95:79:
         75:b3:7b:84:58:50:74:d1:f7:78:63:76:65:24:b0:17:db:b8:
         72:d5:ba:1d:c2:5c:cb:05:01:38:b5:aa:67:21:22:50:22:34:
         a2:ff:8e:29:57:c0:42:15:43:e2:44:f0:ee:65:63:14:2b:1c:
         ee:8f:ce:31:99:a4:c5:77:40:cd:f0:bb:44:2d:1f:2b:55:f8:
         51:af:5b:aa:81:2e:2c:c5:c6:47:35:7c:4b:46:e7:bd:df:30:
         44:7e:a1:5b:0d:14:50:72:78:44:17:4c:59:ee:b4:6c:f6:89:
         9e:59:29:58:cf:70:1a:d8:89:c1:71:66:04:ab:75:d7:fb:ec:
         a9:db:7b:78:1b:a5:56:d6:b0:cc:6d:8b:ab:c3:fe:d9:a0:ff:
         b4:2e:9d:24:dd:80:5b:a1:2f:a7:12:08:7e:47:55:88:71:8d:
         55:cf:45:2f:19:9b:3a:f6:eb:35:ab:be:0d:2e:a2:f0:e9:d7:
         d2:d5:7d:ce:e9:01:f6:ed:55:5e:1b:cf:ea:dd:44:1d:9d:43:
         54:86:39:ad:97:6c:22:b7:63:33:b3:8e:4b:58:fc:a1:20:52:
         4e:1e:81:70:9b:c4:a4:3d:ac:16:a6:a5:4c:42:78:e6:1d:2c:
         1a:a9:69:0b
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0XB++yClSsrDTg1eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
ZTJlZDYyYTgtOWE3Zi00NzY3LTk3M2ItNmIwOWU0MzkxMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiK04oMsPSZ8VtLAu4BSYKfTDgqfa1jY8Rjn
524XZO8n/Rr8rARSh9T+RsebZJpfyf1kMYKuD3ZxL3v3QbAa6iVxQcbsT/odE1hg
eTAgCQcW/JbD65E6iewxbSloKbuSZruAzz6FbgG2tIsEf9rvC9vJaDrae6GBLRi4
b6n06COeCyG3l6TOTldAPyXK4SnzcXAA+tsePTGm85C+1MXkuwCspoGV0/bi5Dyp
eGX8EUm3YNIwZwV2RMFWbhU3kwoLVa1zS50zGwaKBMbJXF3x2RnqlcyMsuvdILaC
jt2ogkZCcrK16VG1JKv0wrdrD5YSxHsOAlwDbfA7PiWBCQpFrwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH1u7Mq9P8en2DgY0I2pejIlDRP4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNjNhZWU1N2YtZWExZS0z
MjQ0LTlkYzYtOWQ2MDFiODI3ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATPtBAD
BADPtBIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAV54OdQRDXNtN3JOlvsBWJ5V5dbN7hFhQdNH3eGN2ZSSw
F9u4ctW6HcJcywUBOLWqZyEiUCI0ov+OKVfAQhVD4kTw7mVjFCsc7o/OMZmkxXdA
zfC7RC0fK1X4Ua9bqoEuLMXGRzV8S0bnvd8wRH6hWw0UUHJ4RBdMWe60bPaJnlkp
WM9wGtiJwXFmBKt11/vsqdt7eBulVtawzG2Lq8P+2aD/tC6dJN2AW6EvpxIIfkdV
iHGNVc9FLxmbOvbrNau+DS6i8OnX0tV9zukB9u1VXhvP6t1EHZ1DVIY5rZdsIrdj
M7OOS1j8oSBSTh6BcJvEpD2sFqalTEJ45h0sGqlpCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:23 2026 by rpki-client