Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa
File:                     9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa (raw, json)
Hash identifier:          ktV2N/a6WY+Ulu+sYycQ0Trc4LID2Cp8BuoD4mqjVDU=
Subject key identifier:   4C:BD:5E:C2:8E:13:3E:FD:01:B4:3F:D3:30:75:14:D5:D1:4F:36:79
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F4328584D5E1A5F9E2B36F6E0173C6C80
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14587
IP address blocks:        216.99.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5f:9e:2b:36:f6:e0:17:3c:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=3b93096f-7faf-4422-aa0f-029e4174e1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:7f:50:42:dc:3d:ca:4b:9f:ef:94:cd:7c:
                    82:50:eb:ef:04:7e:55:5b:c5:44:4d:d8:19:55:02:
                    2b:18:e4:b7:1d:54:0b:8b:50:a8:7c:17:d3:4c:ba:
                    22:f8:1d:c2:d9:54:16:c0:93:a2:98:70:6b:40:07:
                    d3:c1:12:7d:e0:cc:fc:47:78:af:33:08:52:d8:c9:
                    ff:6c:91:81:c2:6c:dd:84:c2:fd:9a:05:56:59:4e:
                    1b:e1:0b:e7:94:2c:89:1a:76:89:cd:d3:c7:9e:bd:
                    66:3d:d7:23:b9:5f:f6:92:d7:96:33:8a:12:3e:4e:
                    a5:44:07:b3:e7:96:da:d5:9e:a4:89:3b:5f:72:f6:
                    66:51:ed:47:d9:15:10:87:35:3e:0a:18:e1:06:fd:
                    f0:63:bb:b7:65:03:b3:52:1b:85:2a:70:31:75:57:
                    da:1b:18:65:8b:e0:32:d6:e8:29:ce:24:22:ba:5e:
                    d2:e3:94:53:31:10:01:80:4f:7d:ce:78:d7:eb:f1:
                    63:ef:43:84:4d:ce:1a:d1:87:2e:37:40:2b:cb:4f:
                    02:9b:86:17:23:c9:0f:fd:57:3e:c3:54:a8:01:7e:
                    16:c4:1d:09:6e:ef:1b:9f:f0:21:3e:6f:5b:b4:c5:
                    42:9c:3a:f1:f2:ce:15:8e:bc:86:e2:5c:20:8b:69:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:5E:C2:8E:13:3E:FD:01:B4:3F:D3:30:75:14:D5:D1:4F:36:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:3a:74:be:1b:fe:67:8d:5b:ee:d9:c3:e6:28:03:ff:07:
         46:2e:a3:db:67:2c:e4:31:04:1c:4f:13:9e:5e:b3:05:d0:8c:
         e6:41:8b:cc:26:68:95:15:56:d7:98:51:cd:27:e0:0e:3e:be:
         65:69:36:65:9f:1a:c8:38:59:cb:e2:e9:ac:e3:19:b9:40:d2:
         ad:e1:a3:a7:f8:f0:10:fa:7a:d1:90:2d:ad:05:76:f5:96:8a:
         a9:9b:73:c5:83:4e:e1:d0:8a:07:7f:47:f7:52:52:2f:03:72:
         00:1b:de:0d:e6:88:bd:bc:3d:79:a8:9a:bf:85:90:80:17:34:
         f4:f7:ac:a0:f5:07:e9:d8:ce:94:b6:a4:0d:37:4e:98:84:8b:
         d3:5a:3c:85:53:66:f0:0c:55:4e:28:4c:92:4e:44:9b:34:07:
         2a:92:7b:6e:a4:a2:66:e1:2f:57:59:33:10:d8:dc:a4:63:b7:
         36:9e:77:7c:90:20:87:08:4a:56:9b:e0:59:7f:ee:53:05:6c:
         df:7f:04:b0:d1:34:03:dd:35:a9:bf:89:66:e7:dd:91:14:16:
         5d:08:04:8b:60:ce:ae:ca:37:cd:4c:fb:85:07:ad:6b:3b:fb:
         b2:9a:a6:f2:40:41:4a:cc:e5:a7:cd:38:d3:78:60:f2:97:d9:
         af:d9:5c:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl+eKzb24Bc8bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3
MzU5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
M2I5MzA5NmYtN2ZhZi00NDIyLWFhMGYtMDI5ZTQxNzRlMWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yl/UELcPcpLn++UzXyCUOvvBH5VW8VETdgZ
VQIrGOS3HVQLi1CofBfTTLoi+B3C2VQWwJOimHBrQAfTwRJ94Mz8R3ivMwhS2Mn/
bJGBwmzdhML9mgVWWU4b4QvnlCyJGnaJzdPHnr1mPdcjuV/2kteWM4oSPk6lRAez
55ba1Z6kiTtfcvZmUe1H2RUQhzU+ChjhBv3wY7u3ZQOzUhuFKnAxdVfaGxhli+Ay
1ugpziQiul7S45RTMRABgE99znjX6/Fj70OETc4a0YcuN0Ary08Cm4YXI8kP/Vc+
w1SoAX4WxB0Jbu8bn/AhPm9btMVCnDrx8s4VjryG4lwgi2nCAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEy9XsKOEz79AbQ/0zB1FNXRTzZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw
NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvOWFjOGNjODAtMjY3OS0z
NmE0LTlkNWYtNzQyY2I3NjZlYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3
MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi
NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3
ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6QOnS+G/5njVvu2cPmKAP/B0Yuo9tnLOQxBBxPE55eswXQjOZBi8wm
aJUVVteYUc0n4A4+vmVpNmWfGsg4Wcvi6azjGblA0q3ho6f48BD6etGQLa0FdvWW
iqmbc8WDTuHQigd/R/dSUi8DcgAb3g3miL28PXmomr+FkIAXNPT3rKD1B+nYzpS2
pA03TpiEi9NaPIVTZvAMVU4oTJJORJs0ByqSe26kombhL1dZMxDY3KRjtzaed3yQ
IIcISlab4Fl/7lMFbN9/BLDRNAPdNam/iWbn3ZEUFl0IBItgzq7KN81M+4UHrWs7
+7KapvJAQUrM5afNONN4YPKX2a/ZXBM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:32:06 2026 by rpki-client