Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa
File:                     0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa (raw, json)
Hash identifier:          gcXgGcAJJnrGn/EiohMd/umiy/t01lXp9Z7Z+fmupHY=
Subject key identifier:   C4:F3:46:DB:C2:65:21:25:43:20:36:09:DB:9E:99:74:3E:CC:18:FB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8AC52F6C0E24F867D1C703D8
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        192.29.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:2f:6c:0e:24:f8:67:d1:c7:03:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=793fca12-9574-42f7-81a7-6a9f0eb548f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:06:d3:96:bc:c2:e4:63:03:b8:83:46:b7:
                    9b:a2:8f:a2:51:ca:6c:99:e9:b7:45:5e:1e:30:42:
                    20:f6:f4:3d:71:21:0b:f5:29:5f:08:d0:82:5f:d2:
                    0e:90:82:ee:8a:03:7b:f5:4b:52:7d:e0:62:15:1f:
                    dd:ec:1e:10:d1:9a:60:ba:00:e7:b2:59:ac:6f:37:
                    26:89:68:b9:d4:a4:cf:51:40:6b:9e:e2:fd:c5:85:
                    a1:57:09:98:64:a5:49:b3:5c:25:de:48:84:b0:d8:
                    63:22:7c:10:c2:3f:97:e1:24:3a:6b:a8:28:42:52:
                    63:9a:a4:5d:37:3c:9e:74:b2:0b:4c:03:ad:37:06:
                    5e:c4:62:6c:33:37:f0:b0:8c:b6:57:69:c9:dc:91:
                    18:83:57:03:73:e5:00:8b:ea:3d:c7:02:43:90:72:
                    8d:8e:32:ab:ea:0f:dc:bf:56:3b:cc:7c:32:61:4f:
                    1c:4a:79:fb:62:90:9a:9b:07:f5:53:38:0e:c2:1e:
                    1a:96:79:1a:9a:f3:c8:60:9c:cb:df:4e:a7:9f:be:
                    f8:3c:9e:28:11:c3:92:04:3e:91:1d:88:d4:f0:b6:
                    79:9e:40:59:5f:f0:1f:72:0f:12:f2:21:2d:cb:a0:
                    5e:48:3e:04:e0:07:6a:08:53:78:b1:e8:fa:09:6e:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:46:DB:C2:65:21:25:43:20:36:09:DB:9E:99:74:3E:CC:18:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.29.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:56:60:bb:7b:a4:e1:1c:fc:69:f5:de:7f:5e:4c:43:68:
         ee:1e:36:e4:ed:1c:fd:09:3e:13:56:cb:a2:cb:01:eb:09:00:
         cb:56:7d:9b:67:60:95:f4:0d:f7:d2:f5:3d:5a:25:e0:09:23:
         c6:b5:c1:94:b4:73:bf:89:fa:53:c1:62:c3:9b:1a:e2:50:fe:
         68:0b:be:be:c4:d2:0b:91:a5:77:df:0b:63:1b:57:aa:c9:c8:
         f1:5d:c3:41:17:db:8b:c4:8d:40:1d:e4:94:18:33:26:42:83:
         6d:a2:9d:a7:27:61:be:ed:72:32:5c:8e:0d:8c:09:81:30:31:
         1c:22:24:44:70:ff:10:16:bf:e8:f3:6e:11:56:5b:fc:44:82:
         56:37:15:43:c7:50:a7:cb:8d:81:9a:3a:33:a3:28:24:2b:3e:
         ae:f7:37:02:b0:6b:51:94:fa:68:d5:b3:ef:a0:dc:82:fc:21:
         5e:f2:41:75:6f:0b:37:85:5d:86:04:4a:a2:59:ca:73:1b:68:
         50:6d:ef:2b:1c:ea:a4:6d:0e:23:ad:d9:5b:e9:ac:03:6d:1e:
         b6:5e:5f:df:99:d7:b3:80:69:10:90:47:87:7a:f9:2b:20:8c:
         a3:13:d0:9e:d7:a5:b8:3e:6c:2e:e9:db:37:06:05:8a:1a:23:
         6d:2f:52:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxS9sDiT4Z9HHA9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NzkzZmNhMTItOTU3NC00MmY3LTgxYTctNmE5ZjBlYjU0OGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlYG05a8wuRjA7iDRreboo+iUcpsmem3RV4e
MEIg9vQ9cSEL9SlfCNCCX9IOkILuigN79UtSfeBiFR/d7B4Q0ZpgugDnslmsbzcm
iWi51KTPUUBrnuL9xYWhVwmYZKVJs1wl3kiEsNhjInwQwj+X4SQ6a6goQlJjmqRd
NzyedLILTAOtNwZexGJsMzfwsIy2V2nJ3JEYg1cDc+UAi+o9xwJDkHKNjjKr6g/c
v1Y7zHwyYU8cSnn7YpCamwf1UzgOwh4alnkamvPIYJzL306nn774PJ4oEcOSBD6R
HYjU8LZ5nkBZX/Afcg8S8iEty6BeSD4E4AdqCFN4sej6CW63hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTzRtvCZSElQyA2CduemXQ+zBj7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDAxNjQzM2QtOGYxYy0z
NDFhLWE1ZWMtOWVmZDVjNmFlZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/8VmC7e6ThHPxp9d5/XkxDaO4eNuTtHP0JPhNWy6LLAesJAMtWfZtn
YJX0DffS9T1aJeAJI8a1wZS0c7+J+lPBYsObGuJQ/mgLvr7E0guRpXffC2MbV6rJ
yPFdw0EX24vEjUAd5JQYMyZCg22inacnYb7tcjJcjg2MCYEwMRwiJERw/xAWv+jz
bhFWW/xEglY3FUPHUKfLjYGaOjOjKCQrPq73NwKwa1GU+mjVs++g3IL8IV7yQXVv
CzeFXYYESqJZynMbaFBt7ysc6qRtDiOt2VvprANtHrZeX9+Z17OAaRCQR4d6+Ssg
jKMT0J7Xpbg+bC7p2zcGBYoaI20vUuA=
-----END CERTIFICATE-----
Generated at Wed May 13 05:28:18 2026 by rpki-client